last executing test programs: 2m12.256531491s ago: executing program 0 (id=3818): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x28, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/71, 0x902000, 0x1000, 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r2, 0x0) socket(0x2a, 0x803, 0xfffffffe) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20088084}, 0x20004040) 2m11.810923406s ago: executing program 0 (id=3812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x80c00) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'hsr0\x00', 0xd}) sendmmsg(r0, &(0x7f0000001040)=[{{&(0x7f0000000c00)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000280)}, {&(0x7f0000000c80)}, {&(0x7f0000000d40)}, {&(0x7f0000000300)="b5", 0x1}, {&(0x7f0000000f40)}], 0x5, &(0x7f0000004e00)=[{0x10, 0x109, 0x261}, {0x10, 0x29, 0x3}, {0x18, 0x117, 0x6, "20c4f1a95dd326"}, {0xeb8, 0x1, 0x64, "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"}, {0x38, 0xb9, 0x5, "b83704d37ae0a50fb392e9bf964ec84394707d7ea931748118a8bac0941de860199a5257"}], 0xf28}}], 0x1, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x35, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000009140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x200040d0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 2m10.807860041s ago: executing program 0 (id=3819): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="16cb487743757fac787478549b8b528bcfae3702743fba765dcee076127afafccb3bb4b012fbabcedf1d97381edc5b71d72eee3b1a817bc9e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @fwd={0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @union={0x6, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x5, 0x3, 0x800}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000400)=""/185, 0x5c, 0xb9, 0x1, 0x9}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ef1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000007000000850000005e0000009500000000002200ce08b200000000006dc77d2ac94403e569eb508f5a4cf6e491fd623aa5247e9163db0a732cc939c42bd8de054956e7d0316916a84f77c70c69293c5525725e9d6600e20084"], &(0x7f00000001c0)='syzkaller\x00', 0x401, 0xc9, &(0x7f0000000280)=""/201, 0x41000, 0x52, '\x00', 0x0, 0x1a, r3, 0x8, &(0x7f0000000540)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x3779, r2, 0x5, &(0x7f0000000640)=[r4, r2, r6], &(0x7f0000000680)=[{0x2, 0x1, 0x2, 0xb}, {0x3, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x5}, {0x3, 0x3, 0x6, 0x9}, {0x2, 0x3, 0x5, 0xc}], 0x10, 0x9}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) writev(r8, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) 2m10.25204432s ago: executing program 0 (id=3824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 2m10.127802017s ago: executing program 0 (id=3825): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd0, 0x1de6, 0x51, @ipv4={'\x00', '\xff\xff', @private=0x7ff}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x4, 0x7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000fc0)=ANY=[], 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044005) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 2m8.796487415s ago: executing program 0 (id=3829): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 2m8.504262031s ago: executing program 32 (id=3829): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 8.518994549s ago: executing program 1 (id=4375): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 7.508459714s ago: executing program 1 (id=4379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='veth0_to_hsr\x00', 0x10001, 0x5, 0x4}) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}], 0x2, 0x240080e4) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000076000907000000250702000000040000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x15}, 0x23f58e5b666a3f02) 6.580893183s ago: executing program 1 (id=4382): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r8, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r8, r7, 0x0, 0x10000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) write$cgroup_pid(r7, &(0x7f00000001c0)=r9, 0x12) 6.570784558s ago: executing program 5 (id=4383): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd0, 0x1de6, 0x51, @ipv4={'\x00', '\xff\xff', @private=0x7ff}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x4, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x1, 0x8000, 0xfffffffa, 0x510f, {{0x6, 0x4, 0x0, 0x14, 0x18, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @private=0xa010100, {[@noop]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000fc0)=ANY=[], 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044005) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 5.961584451s ago: executing program 5 (id=4385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000140)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x6, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 5.753894911s ago: executing program 1 (id=4386): r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00) close(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6a}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c014}, 0x20000404) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x104}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x0, 0xfffffffd, 0xffffffff}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048050) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r1, &(0x7f00000001c0)=r8, 0x12) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 5.749933991s ago: executing program 4 (id=4387): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) 5.455734933s ago: executing program 4 (id=4390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x40008c0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4090) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000040)={0x0, @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24}, 0x2400c090) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c0000006c0001002abd7000fefbdf", @ANYRES32=0x0, @ANYBLOB="9000010002000000140003006d6163766c616e300000000000000000180034"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000400000f0000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r6, 0x11}, 0x14) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x1}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r7, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044014) write$bt_hci(r5, &(0x7f0000000580)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"9a4a0b"}}}, 0x7) 5.271942566s ago: executing program 2 (id=4391): syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x7, 0x0, 0xfffffffd}, 0xc) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000004c0)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x2, {0x0, 0xff, 0x1}, 0xff}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a080001"], 0xc8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002100010026bd700002dcdf25ad40976f3a3f0500000004000480ccc35521818eadb998b17ebfcd1c174fd9329fcc82f3773359b7e0f4046e01383a5b14d0e1877b968aadffc5ae7737b6b3818c173d2e2298e4e610654c1d7c18eb46418356ccc8e5"], 0x18}}, 0x40000) 5.05145879s ago: executing program 4 (id=4392): r0 = socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0xbf, &(0x7f0000000400)=[{0x8, 0x1, 0x0, 0xb9c1}, {0x7, 0xc0, 0x89, 0x4}, {0x6, 0x6, 0x6, 0x8}, {0xb77f, 0x7, 0xff, 0x9}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) syz_open_procfs$namespace(0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) unshare(0x62040200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3c4253b91020000000000000", @ANYRES32=r6, @ANYBLOB="e3d91fc4b99bf71b256428aed73c509def97d5b98fc1ca6c3aa4d2617c16d45c9f1d4a1fdc68c58d2e5d9d2166ab343b5be9b5a7bd31e2c4a2c5654029266ebfc35606a746f69612cdde74", @ANYRES64=0x0], 0x20) listen(0xffffffffffffffff, 0xb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan1\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) 4.975058983s ago: executing program 2 (id=4393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='veth0_to_hsr\x00', 0x10001, 0x5, 0x4}) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x240080e4) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000076000907000000250702000000040000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x15}, 0x23f58e5b666a3f02) 4.847667068s ago: executing program 2 (id=4394): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) r2 = epoll_create1(0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f2, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa3f, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x8844) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000800)={0xa0000006}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 4.387588128s ago: executing program 5 (id=4395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd0, 0x1de6, 0x51, @ipv4={'\x00', '\xff\xff', @private=0x7ff}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x4, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x1, 0x8000, 0xfffffffa, 0x510f, {{0x6, 0x4, 0x0, 0x14, 0x18, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @private=0xa010100, {[@noop]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000fc0)=ANY=[], 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044005) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 4.326207788s ago: executing program 4 (id=4396): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r10) r11 = socket(0x840000000002, 0x3, 0x100) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r11, &(0x7f0000005240), 0x4000095, 0x0) 4.238431649s ago: executing program 3 (id=4397): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0), 0x0) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 3.827353292s ago: executing program 2 (id=4398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000", 0x18}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl(r1, 0x209, &(0x7f0000000540)="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") ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x4) 3.672847219s ago: executing program 5 (id=4399): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 2.905200143s ago: executing program 2 (id=4400): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0xa0000, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x70, 0x0, 0xa0c, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6, 0x1}, {0x0, 0x3}, {0x8, 0x6}, {0x7e, 0x7}], "c00b4f7168984363"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x3, 0x4}, {0xd7, 0x2}, {0x8, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0xac, 0x2}, {0xd}, {0x3, 0x2}, {0x20, 0x7}, {0x6f, 0x2}, {0x8, 0x4}, {}], "20572f23217c061c"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "2840c26f1d3ca129"}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x3c}}, 0x0) 2.366088114s ago: executing program 4 (id=4401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 1.949607099s ago: executing program 2 (id=4402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x6a040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0xff, 0x12}, 0x2c) socket$alg(0x26, 0x5, 0x0) 1.626075954s ago: executing program 3 (id=4403): syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x7, 0x0, 0xfffffffd}, 0xc) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000004c0)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x2, {0x0, 0xff, 0x1}, 0xff}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a080001"], 0xc8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002100010026bd700002dcdf25ad40976f3a3f0500000004000480ccc35521818eadb998b17ebfcd1c174fd9329fcc82f3773359b7e0f4046e01383a5b14d0e1877b968aadffc5ae7737b6b3818c173d2e2298e4e610654c1d7c18eb46418356ccc8e5"], 0x18}}, 0x40000) 1.483901514s ago: executing program 3 (id=4404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='veth0_to_hsr\x00', 0x10001, 0x5, 0x4}) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x240080e4) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000010000000000000000000000000400000000000e0ca211"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000076000907000000250702000000040000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x15}, 0x23f58e5b666a3f02) 1.38977026s ago: executing program 4 (id=4405): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2f, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800000, 0x22051, r1, 0x10000000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) shutdown(r0, 0x1) 1.376889394s ago: executing program 3 (id=4406): socket$nl_route(0x10, 0x3, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0), 0x2040, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x5) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) write(r1, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x100, 0x0, @dev}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000008c000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000140)=0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) write$tun(r5, &(0x7f0000000080)=ANY=[], 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1.194100051s ago: executing program 1 (id=4407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x5, 0x8, 0x1}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x23f679b6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfff}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0xff}, [@RTA_IP_PROTO={0x5, 0x1f, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x41814, 0x42121}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 954.367483ms ago: executing program 3 (id=4408): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 644.395018ms ago: executing program 5 (id=4409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd0, 0x1de6, 0x51, @ipv4={'\x00', '\xff\xff', @private=0x7ff}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x4, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x1, 0x8000, 0xfffffffa, 0x510f, {{0x6, 0x4, 0x0, 0x14, 0x18, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @private=0xa010100, {[@noop]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000fc0)=ANY=[], 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044005) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 141.352275ms ago: executing program 1 (id=4410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000", 0x18}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl(r1, 0x209, &(0x7f0000000540)="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") ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x4) 2.098722ms ago: executing program 5 (id=4411): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) r2 = epoll_create1(0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa3f, 0x16}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000800)={0xa0000006}) close(0x3) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x18, 0xa, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r8) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 0s ago: executing program 3 (id=4412): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) r2 = epoll_create1(0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f2, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa3f, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x8844) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000800)={0xa0000006}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): s `syz.3.3485'. [ 456.486388][T17094] wg1 speed is unknown, defaulting to 1000 [ 457.033232][T17120] pim6reg: entered allmulticast mode [ 457.041472][T17125] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 457.114106][T17131] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 457.307687][T17135] validate_nla: 4 callbacks suppressed [ 457.307703][T17135] netlink: 'syz.2.3490': attribute type 13 has an invalid length. [ 457.343439][T17135] netlink: 'syz.2.3490': attribute type 17 has an invalid length. [ 457.454125][T17135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.462529][T17135] 8021q: adding VLAN 0 to HW filter on device ` [ 457.474557][T17135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.079080][T17160] netlink: 'syz.2.3494': attribute type 11 has an invalid length. [ 458.096995][T17160] netlink: 'syz.2.3494': attribute type 11 has an invalid length. [ 458.142025][T17160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3494'. [ 458.173549][T17164] tipc: Enabling of bearer rejected, failed to enable media [ 458.306806][T17150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.719213][T17181] netlink: 'syz.2.3502': attribute type 13 has an invalid length. [ 458.748123][T17181] netlink: 'syz.2.3502': attribute type 17 has an invalid length. [ 458.757605][T17183] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 458.785966][T17181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.837711][T17187] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 458.849467][T17186] netlink: 'syz.1.3504': attribute type 13 has an invalid length. [ 458.933821][T17186] netlink: 'syz.1.3504': attribute type 17 has an invalid length. [ 458.963041][T17186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.872332][T17245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.021280][T17247] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 461.040719][T17250] netlink: 'syz.3.3517': attribute type 13 has an invalid length. [ 461.068685][T17250] netlink: 'syz.3.3517': attribute type 17 has an invalid length. [ 461.169364][T17250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.540925][T17268] syzkaller0: left promiscuous mode [ 461.546429][T17268] syzkaller0: left allmulticast mode [ 461.833837][T17277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3523'. [ 461.950215][T17277] nbd: socks must be embedded in a SOCK_ITEM attr [ 461.978361][T17282] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 462.074859][T17282] 8021q: adding VLAN 0 to HW filter on device bond10 [ 462.108254][T17285] bond10: (slave ip6gretap2): making interface the new active one [ 462.135065][T17285] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 462.258673][T17282] veth21: entered promiscuous mode [ 462.295638][T17282] bond10: (slave veth21): Enslaving as an active interface with a down link [ 462.341554][T17285] erspan0: entered allmulticast mode [ 462.387903][T17285] bond10: (slave erspan0): Enslaving as an active interface with an up link [ 462.559619][T17282] bond10: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 462.689632][T17305] netlink: 'syz.2.3526': attribute type 1 has an invalid length. [ 463.076673][T17311] wg1 speed is unknown, defaulting to 1000 [ 463.351196][T17318] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.544427][T17325] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 463.798279][T17332] wg1 speed is unknown, defaulting to 1000 [ 463.886048][T17335] netlink: 'syz.3.3535': attribute type 13 has an invalid length. [ 463.950490][T17339] netlink: 'syz.2.3533': attribute type 10 has an invalid length. [ 463.980098][T17335] netlink: 'syz.3.3535': attribute type 17 has an invalid length. [ 464.098366][T17339] 8021q: adding VLAN 0 to HW filter on device ` [ 464.108161][T17339] bond0: (slave `): Enslaving as an active interface with an up link [ 464.362974][T17335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.408318][T17347] wg1 speed is unknown, defaulting to 1000 [ 464.966869][T17365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3542'. [ 465.127747][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 465.139267][T17367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.147583][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 465.175509][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 465.188189][T17367] eql: remember to turn off Van-Jacobson compression on your slave devices [ 465.198589][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 465.208259][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 465.228305][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 465.252948][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 465.263084][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 465.294299][T17367] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 465.466352][T17384] bond0: (slave `): Releasing backup interface [ 465.475791][T17384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.515671][T17386] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 465.527473][T17386] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.577763][T17382] wg1 speed is unknown, defaulting to 1000 [ 465.591010][T17370] wg1 speed is unknown, defaulting to 1000 [ 465.617129][T17386] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 465.627219][T17386] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.675595][T17377] wg1 speed is unknown, defaulting to 1000 [ 465.765936][T17386] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 465.778090][T17386] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.911548][T17386] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 465.941858][T17386] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 466.333149][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 466.348174][ T50] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.385216][T17406] wg1 speed is unknown, defaulting to 1000 [ 466.391153][ T5928] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 466.401875][ T5928] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.450253][ T5928] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 466.459696][ T5928] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.503281][ T5928] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 466.512728][ T5928] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.544061][T17409] netlink: 'syz.3.3552': attribute type 13 has an invalid length. [ 466.576403][T17409] netlink: 'syz.3.3552': attribute type 17 has an invalid length. [ 466.620399][T17409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.793144][T17418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 466.970462][T17428] netlink: 'syz.2.3558': attribute type 3 has an invalid length. [ 467.070405][T17436] __nla_validate_parse: 1 callbacks suppressed [ 467.070422][T17436] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3555'. [ 467.117548][T17420] wg1 speed is unknown, defaulting to 1000 [ 467.141653][T17424] wg1 speed is unknown, defaulting to 1000 [ 467.205454][T17439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 467.539539][T17449] syzkaller0: entered promiscuous mode [ 467.554666][T17449] syzkaller0: entered allmulticast mode [ 467.745348][T17456] wg1 speed is unknown, defaulting to 1000 [ 468.203039][T17473] netlink: 'syz.1.3568': attribute type 27 has an invalid length. [ 468.267253][T17462] wg1 speed is unknown, defaulting to 1000 [ 468.501474][T17470] syzkaller0: entered promiscuous mode [ 468.532163][T17470] syzkaller0: entered allmulticast mode [ 469.286364][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3572'. [ 469.465144][T17518] netlink: 'syz.0.3576': attribute type 13 has an invalid length. [ 469.473131][T17518] netlink: 'syz.0.3576': attribute type 17 has an invalid length. [ 470.640145][T17518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.470962][T17528] pim6reg: entered allmulticast mode [ 472.518311][T17542] syzkaller0: left promiscuous mode [ 472.523553][T17542] syzkaller0: left allmulticast mode [ 472.600069][T17548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.672707][T17550] syzkaller0: entered promiscuous mode [ 472.692068][T17550] syzkaller0: entered allmulticast mode [ 472.786921][T17550] tipc: Enabled bearer , priority 0 [ 472.819048][T17549] tipc: Resetting bearer [ 472.881442][T17549] tipc: Disabling bearer [ 472.932624][T17567] netlink: 'syz.3.3589': attribute type 13 has an invalid length. [ 472.938197][T17558] wg1 speed is unknown, defaulting to 1000 [ 472.940643][T17567] netlink: 'syz.3.3589': attribute type 17 has an invalid length. [ 472.987082][T17567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.162714][T17576] netlink: 'syz.3.3592': attribute type 3 has an invalid length. [ 473.184467][T17576] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3592'. [ 473.214466][T17576] nbd: couldn't find a device at index 0 [ 473.299713][T17581] wg1 speed is unknown, defaulting to 1000 [ 473.468124][T17588] pim6reg: entered allmulticast mode [ 473.937245][T17601] siw: device registration error -23 [ 474.044648][T17600] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3599'. [ 474.677485][T17616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.930598][T17623] wg1 speed is unknown, defaulting to 1000 [ 475.243129][T17640] netlink: 'syz.1.3610': attribute type 10 has an invalid length. [ 475.253637][T17640] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3610'. [ 475.259893][T17644] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 475.427510][T17638] wg1 speed is unknown, defaulting to 1000 [ 475.489092][T17651] wg1 speed is unknown, defaulting to 1000 [ 476.238431][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3618'. [ 476.370916][T17674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.378340][T17674] IPv6: NLM_F_CREATE should be set when creating new route [ 476.385627][T17674] IPv6: NLM_F_CREATE should be set when creating new route [ 476.411656][T17675] netlink: 'syz.1.3616': attribute type 11 has an invalid length. [ 476.427696][T17675] netlink: 'syz.1.3616': attribute type 11 has an invalid length. [ 476.445740][T17671] bond10: entered promiscuous mode [ 476.455951][T17671] 8021q: adding VLAN 0 to HW filter on device bond10 [ 476.463091][T17675] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3616'. [ 476.472779][T17674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.565081][T17671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.607988][T17671] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3618'. [ 476.618992][T17673] 8021q: adding VLAN 0 to HW filter on device bond10 [ 476.664858][T17673] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 476.694808][T17673] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 476.740957][T17674] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 476.775406][T17662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.778425][T17674] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 476.822126][T17679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 477.413349][T17705] syzkaller0: entered promiscuous mode [ 477.419403][T17705] syzkaller0: entered allmulticast mode [ 477.462217][T17707] wg1 speed is unknown, defaulting to 1000 [ 477.541322][T17713] netlink: 'syz.2.3626': attribute type 39 has an invalid length. [ 477.786306][T17720] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 477.804891][T17693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.886020][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3627'. [ 478.285406][T17731] tipc: Enabled bearer , priority 0 [ 478.300119][T17731] syzkaller0: entered promiscuous mode [ 478.315923][T17731] syzkaller0: entered allmulticast mode [ 478.407034][T17731] tipc: Resetting bearer [ 478.418350][T17730] tipc: Resetting bearer [ 478.438371][T17730] tipc: Disabling bearer [ 478.464907][T17739] wg1 speed is unknown, defaulting to 1000 [ 479.769462][T17788] wg1 speed is unknown, defaulting to 1000 [ 479.864104][T17789] wg1 speed is unknown, defaulting to 1000 [ 479.901785][T17795] netlink: 'syz.3.3646': attribute type 10 has an invalid length. [ 479.965445][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'. [ 479.993023][T17795] 8021q: adding VLAN 0 to HW filter on device ` [ 480.013401][T17795] bond0: (slave `): Enslaving as an active interface with an up link [ 480.048056][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3647'. [ 480.116901][T17791] wg1 speed is unknown, defaulting to 1000 [ 480.382850][T17818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3649'. [ 480.416249][T17818] nbd: socks must be embedded in a SOCK_ITEM attr [ 480.540933][T17821] wg1 speed is unknown, defaulting to 1000 [ 480.881330][T17827] wg1 speed is unknown, defaulting to 1000 [ 481.452698][T17853] bridge8: entered allmulticast mode [ 481.470910][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3658'. [ 481.476190][T17853] dvmrp1: entered allmulticast mode [ 481.621295][T17855] Bluetooth: MGMT ver 1.23 [ 481.773655][T17864] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3661'. [ 481.928908][T17870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3662'. [ 482.109228][T17868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3662'. [ 482.297648][T17848] bridge8: left allmulticast mode [ 482.440330][T17874] wg1 speed is unknown, defaulting to 1000 [ 482.641779][T17890] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3665'. [ 482.680329][T17890] nbd: couldn't find a device at index 0 [ 483.086435][T17904] tipc: Enabled bearer , priority 0 [ 483.127368][T17904] syzkaller0: entered promiscuous mode [ 483.147398][T17904] syzkaller0: entered allmulticast mode [ 483.216390][T17904] tipc: Resetting bearer [ 483.238446][T17900] tipc: Resetting bearer [ 483.255218][T17900] tipc: Disabling bearer [ 483.458230][T17921] vxcan1: entered allmulticast mode [ 483.464523][T17921] vxcan1: left allmulticast mode [ 483.469779][T17921] pim6reg: left allmulticast mode [ 484.075895][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3680'. [ 484.599273][T17938] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.608687][T17938] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.648632][T17945] vlan7: entered promiscuous mode [ 484.659386][T17945] bond0: entered promiscuous mode [ 484.690586][T17938] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.031991][T17963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.064279][T17964] netlink: 'syz.1.3681': attribute type 1 has an invalid length. [ 485.287815][T17967] syzkaller0: entered promiscuous mode [ 485.298740][T17967] syzkaller0: entered allmulticast mode [ 485.334918][T17938] infiniband syz2: set down [ 485.341720][T17938] infiniband syz2: added ip6_vti0 [ 485.348612][T17938] syz2: rxe_create_cq: returned err = -12 [ 485.355067][T17938] infiniband syz2: Couldn't create ib_mad CQ [ 485.557173][T17938] infiniband syz2: Couldn't open port 1 [ 485.580192][T16409] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.618553][T17938] RDS/IB: syz2: added [ 485.622898][T17938] smc: adding ib device syz2 with port count 1 [ 485.629801][T17938] smc: ib device syz2 port 1 has no pnetid [ 485.636334][T16409] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.649526][T17938] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.780980][T17976] netlink: 'syz.4.3687': attribute type 39 has an invalid length. [ 486.128669][T17987] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.219931][T17992] netlink: 'syz.3.3692': attribute type 13 has an invalid length. [ 486.224131][T17983] wg1 speed is unknown, defaulting to 1000 [ 486.234934][T17938] ip6_vti0 speed is unknown, defaulting to 1000 [ 486.242672][T17992] netlink: 'syz.3.3692': attribute type 17 has an invalid length. [ 486.316126][T17992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.501300][T18001] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 486.542582][T18003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3695'. [ 486.712499][T18009] syzkaller0: entered promiscuous mode [ 486.727300][T18009] syzkaller0: entered allmulticast mode [ 486.778963][T17938] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.178208][T18024] netlink: 'syz.1.3699': attribute type 13 has an invalid length. [ 488.186354][T18024] netlink: 'syz.1.3699': attribute type 17 has an invalid length. [ 488.225893][T18018] bridge0: port 3(dummy0) entered disabled state [ 488.284572][T17983] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.357328][T18024] erspan0: left allmulticast mode [ 488.397122][T18024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.593562][T18036] tipc: New replicast peer: 255.255.255.255 [ 488.615768][T18036] tipc: Enabled bearer , priority 10 [ 488.639189][T17938] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.645644][T18036] netlink: 'syz.1.3702': attribute type 11 has an invalid length. [ 488.664209][T18036] netlink: 'syz.1.3702': attribute type 11 has an invalid length. [ 488.672027][T18036] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3702'. [ 488.998299][T18036] bridge10: entered promiscuous mode [ 489.020861][T18036] bridge10: entered allmulticast mode [ 489.402475][T17938] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.541524][T18046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3704'. [ 489.736971][T18048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3704'. [ 490.045443][T18051] IPVS: Scheduler module ip_vs_sip not found [ 490.528160][T18064] syzkaller0: entered promiscuous mode [ 490.528275][T18066] netlink: 'syz.1.3709': attribute type 13 has an invalid length. [ 490.541532][T18064] syzkaller0: entered allmulticast mode [ 490.549348][T18066] netlink: 'syz.1.3709': attribute type 17 has an invalid length. [ 490.571799][T18066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.579332][T18068] netlink: 'syz.0.3712': attribute type 13 has an invalid length. [ 490.595455][T18068] netlink: 'syz.0.3712': attribute type 17 has an invalid length. [ 490.626613][T18068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.804219][T18077] netlink: 'syz.1.3713': attribute type 33 has an invalid length. [ 490.829300][T18077] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3713'. [ 490.934536][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3713'. [ 491.025667][T18083] wg1 speed is unknown, defaulting to 1000 [ 491.033417][T18083] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.078601][T18088] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3716'. [ 491.293116][T18087] wg1 speed is unknown, defaulting to 1000 [ 491.380222][T18099] wg1 speed is unknown, defaulting to 1000 [ 491.497574][T18087] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.829052][T18099] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.964696][T18115] syzkaller0: entered promiscuous mode [ 491.970241][T18115] syzkaller0: entered allmulticast mode [ 492.023892][T18118] netlink: 'syz.4.3723': attribute type 10 has an invalid length. [ 492.031807][T18118] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3723'. [ 492.350811][T18125] netlink: 'syz.3.3725': attribute type 13 has an invalid length. [ 492.389216][T18125] netlink: 'syz.3.3725': attribute type 17 has an invalid length. [ 492.442358][T18128] netlink: 'syz.0.3726': attribute type 13 has an invalid length. [ 492.450621][T18128] netlink: 'syz.0.3726': attribute type 17 has an invalid length. [ 492.492185][T18125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.502869][T18125] 8021q: adding VLAN 0 to HW filter on device ` [ 492.512206][T18125] bridge0: port 3(dummy0) entered blocking state [ 492.518704][T18125] bridge0: port 3(dummy0) entered forwarding state [ 492.530383][T18125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.563004][T18128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.872317][T18139] pimreg: entered allmulticast mode [ 492.918854][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3729'. [ 492.955185][T18136] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 492.987142][T18138] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3727'. [ 493.054279][T18138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.115849][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3731'. [ 493.464457][T18158] syzkaller0: entered promiscuous mode [ 493.483672][T18158] syzkaller0: entered allmulticast mode [ 493.855525][T18168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.056038][T18176] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 494.512226][ T5928] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.522128][ T5928] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.538418][T18189] syzkaller0: entered promiscuous mode [ 494.543977][T18189] syzkaller0: entered allmulticast mode [ 494.576976][ T5928] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.595604][ T5928] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.646009][T18201] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 494.700888][T18204] netlink: 'syz.4.3751': attribute type 11 has an invalid length. [ 494.711030][T18204] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3751'. [ 494.839224][T18209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.881675][T18213] syzkaller0: entered promiscuous mode [ 494.890348][T18213] syzkaller0: entered allmulticast mode [ 495.045774][T18218] wg1 speed is unknown, defaulting to 1000 [ 495.062802][T18218] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.042950][T18246] wg1 speed is unknown, defaulting to 1000 [ 496.052135][T18246] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.107977][T18254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3762'. [ 496.217288][T18257] syzkaller0: entered promiscuous mode [ 496.227250][T18257] syzkaller0: entered allmulticast mode [ 496.692868][T18267] bridge8: entered allmulticast mode [ 496.747917][T18266] bridge8: left allmulticast mode [ 496.762599][T18276] validate_nla: 5 callbacks suppressed [ 496.762614][T18276] netlink: 'syz.2.3769': attribute type 13 has an invalid length. [ 496.778093][T18276] netlink: 'syz.2.3769': attribute type 17 has an invalid length. [ 496.816751][T18276] 8021q: adding VLAN 0 to HW filter on device ` [ 496.878003][T18276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.901508][T16409] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.913976][T16409] syz2: Port: 1 Link ACTIVE [ 496.921970][T16409] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.138206][T18285] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 497.187857][T18285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3773'. [ 497.255440][T18285] netlink: 'syz.2.3773': attribute type 10 has an invalid length. [ 497.394938][T18285] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 497.410181][T18285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.418259][T18285] bond0: (slave wlan1): Opening slave failed [ 497.491718][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.549542][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.581663][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.603046][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.615219][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.625219][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.634592][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.644370][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.655880][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 497.670846][T18295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.706832][T18301] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 497.728187][T18310] syzkaller1: entered promiscuous mode [ 497.733903][T18310] syzkaller1: entered allmulticast mode [ 497.797913][T18298] wg1 speed is unknown, defaulting to 1000 [ 497.870537][T18298] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.922101][T18316] netlink: 'syz.1.3783': attribute type 13 has an invalid length. [ 497.941859][T18316] netlink: 'syz.1.3783': attribute type 17 has an invalid length. [ 498.060033][T18316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.075739][T18316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.140440][T18319] tipc: Enabled bearer , priority 0 [ 498.148886][T18319] syzkaller0: entered promiscuous mode [ 498.176054][T18319] syzkaller0: entered allmulticast mode [ 498.252013][T18319] tipc: Resetting bearer [ 498.419715][T18318] tipc: Resetting bearer [ 498.446843][T18318] tipc: Disabling bearer [ 498.531361][T18330] syzkaller0: left promiscuous mode [ 498.545315][T18330] syzkaller0: left allmulticast mode [ 498.801976][T18342] wg1 speed is unknown, defaulting to 1000 [ 498.822750][T18342] ip6_vti0 speed is unknown, defaulting to 1000 [ 498.932210][T18351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.406298][T18359] netlink: 'syz.4.3795': attribute type 13 has an invalid length. [ 499.414733][T18359] netlink: 'syz.4.3795': attribute type 17 has an invalid length. [ 499.458194][T18359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.515678][T18364] netlink: 'syz.2.3796': attribute type 13 has an invalid length. [ 499.523609][T18364] netlink: 'syz.2.3796': attribute type 17 has an invalid length. [ 499.541215][T18364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.551528][T18364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.827795][T18366] wg1 speed is unknown, defaulting to 1000 [ 499.851678][T18366] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.144042][T18383] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 500.175514][T18383] xt_TCPMSS: Only works on TCP SYN packets [ 500.332117][T18385] netlink: 'syz.1.3802': attribute type 2 has an invalid length. [ 500.412810][T18385] : entered promiscuous mode [ 500.505611][T18381] siw: device registration error -23 [ 501.636263][T18402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.278349][T18416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 502.324891][T18411] __nla_validate_parse: 17 callbacks suppressed [ 502.324909][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 502.341674][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 502.416456][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 502.434012][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 502.454029][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 502.463386][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 502.483049][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 502.524354][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 502.550144][T18411] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 502.590843][T18422] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 502.697650][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3812'. [ 502.708105][T18419] wg1 speed is unknown, defaulting to 1000 [ 502.718091][T18419] ip6_vti0 speed is unknown, defaulting to 1000 [ 502.960431][T18432] lo speed is unknown, defaulting to 1000 [ 502.984170][T18432] lo speed is unknown, defaulting to 1000 [ 502.997181][T18432] lo speed is unknown, defaulting to 1000 [ 503.048098][T18432] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 503.137335][T18442] validate_nla: 2 callbacks suppressed [ 503.137352][T18442] netlink: 'syz.2.3815': attribute type 39 has an invalid length. [ 503.174088][T18432] lo speed is unknown, defaulting to 1000 [ 503.218945][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 503.231956][T18432] lo speed is unknown, defaulting to 1000 [ 503.442055][T18432] lo speed is unknown, defaulting to 1000 [ 503.467351][T18432] lo speed is unknown, defaulting to 1000 [ 503.502050][T18432] lo speed is unknown, defaulting to 1000 [ 503.570583][T18432] lo speed is unknown, defaulting to 1000 [ 503.979176][T18468] netlink: 'syz.1.3820': attribute type 10 has an invalid length. [ 505.452574][T18458] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 505.466305][T18463] bond10: (slave erspan0): Releasing active interface [ 505.473077][T18463] ip6gretap2: entered promiscuous mode [ 505.481502][T18463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 505.508274][T18468] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 505.516701][T18468] bond0: (slave wlan1): refused to change device type [ 505.584386][T18483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.800853][T18484] wg1 speed is unknown, defaulting to 1000 [ 505.825868][T18484] ip6_vti0 speed is unknown, defaulting to 1000 [ 506.028531][T18498] warn_alloc: 3 callbacks suppressed [ 506.028547][T18498] syz.2.3833: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 506.071431][T18498] CPU: 1 UID: 0 PID: 18498 Comm: syz.2.3833 Not tainted syzkaller #0 PREEMPT(full) [ 506.071457][T18498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 506.071475][T18498] Call Trace: [ 506.071483][T18498] [ 506.071492][T18498] dump_stack_lvl+0x189/0x250 [ 506.071526][T18498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.071550][T18498] ? __pfx__printk+0x10/0x10 [ 506.071575][T18498] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 506.071601][T18498] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 506.071627][T18498] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 506.071654][T18498] warn_alloc+0x214/0x310 [ 506.071680][T18498] ? stack_depot_save_flags+0x40/0x860 [ 506.071711][T18498] ? __pfx_warn_alloc+0x10/0x10 [ 506.071738][T18498] ? kasan_save_track+0x3e/0x80 [ 506.071762][T18498] ? __kasan_kmalloc+0x93/0xb0 [ 506.071787][T18498] ? xsk_setsockopt+0x4dc/0x8d0 [ 506.071808][T18498] ? do_sock_setsockopt+0x17c/0x1b0 [ 506.071826][T18498] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 506.071842][T18498] ? do_syscall_64+0xfa/0xfa0 [ 506.071866][T18498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.071894][T18498] __vmalloc_node_range_noprof+0x125/0x12d0 [ 506.071946][T18498] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 506.071973][T18498] ? __kasan_kmalloc+0x93/0xb0 [ 506.072005][T18498] vmalloc_user_noprof+0xad/0xf0 [ 506.072029][T18498] ? xskq_create+0xbf/0x170 [ 506.072054][T18498] xskq_create+0xbf/0x170 [ 506.072080][T18498] xsk_init_queue+0xb0/0x110 [ 506.072107][T18498] xsk_setsockopt+0x4dc/0x8d0 [ 506.072133][T18498] ? __pfx_xsk_setsockopt+0x10/0x10 [ 506.072159][T18498] ? __pfx_aa_sk_perm+0x10/0x10 [ 506.072185][T18498] ? aa_sock_opt_perm+0xff/0x1b0 [ 506.072214][T18498] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 506.072232][T18498] ? __pfx_xsk_setsockopt+0x10/0x10 [ 506.072256][T18498] do_sock_setsockopt+0x17c/0x1b0 [ 506.072281][T18498] __x64_sys_setsockopt+0x13f/0x1b0 [ 506.072306][T18498] do_syscall_64+0xfa/0xfa0 [ 506.072329][T18498] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.072353][T18498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.072371][T18498] ? clear_bhb_loop+0x60/0xb0 [ 506.072393][T18498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.072415][T18498] RIP: 0033:0x7f00ef38f6c9 [ 506.072435][T18498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.072451][T18498] RSP: 002b:00007f00f016b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 506.072471][T18498] RAX: ffffffffffffffda RBX: 00007f00ef5e5fa0 RCX: 00007f00ef38f6c9 [ 506.072485][T18498] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 506.072496][T18498] RBP: 00007f00ef411f91 R08: 0000000000000004 R09: 0000000000000000 [ 506.072508][T18498] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.072519][T18498] R13: 00007f00ef5e6038 R14: 00007f00ef5e5fa0 R15: 00007ffeeb01a568 [ 506.072553][T18498] [ 506.134509][T18498] Mem-Info: [ 506.278085][T18484] lo speed is unknown, defaulting to 1000 [ 506.311080][T18498] active_anon:4692 inactive_anon:0 isolated_anon:0 [ 506.311080][T18498] active_file:3342 inactive_file:40048 isolated_file:0 [ 506.311080][T18498] unevictable:768 dirty:250 writeback:0 [ 506.311080][T18498] slab_reclaimable:11949 slab_unreclaimable:187178 [ 506.311080][T18498] mapped:28268 shmem:1360 pagetables:1017 [ 506.311080][T18498] sec_pagetables:0 bounce:0 [ 506.311080][T18498] kernel_misc_reclaimable:0 [ 506.311080][T18498] free:1239356 free_pcp:14037 free_cma:0 [ 506.421083][T18498] Node 0 active_anon:18768kB inactive_anon:0kB active_file:13368kB inactive_file:159992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121272kB dirty:1000kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13316kB pagetables:4004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 506.429095][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.454319][T18498] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 506.493384][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.501395][T18498] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.532487][T18498] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 506.538735][T18498] Node 0 DMA32 free:1047576kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18768kB inactive_anon:0kB active_file:13368kB inactive_file:159992kB unevictable:1536kB writepending:1000kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:37216kB local_pcp:17004kB free_cma:0kB [ 506.580828][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.590401][T18498] lowmem_reserve[]: 0 0 0 0 0 [ 506.598347][T18498] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.600223][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.636968][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.659495][T18498] lowmem_reserve[]: 0 0 0 0 0 [ 506.664572][T18498] Node 1 Normal free:3887388kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20536kB local_pcp:9772kB free_cma:0kB [ 506.685833][T18502] wg1 speed is unknown, defaulting to 1000 [ 506.704169][T18498] lowmem_reserve[]: 0 0 0 0 0 [ 506.709042][T18498] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 506.712719][T18502] ip6_vti0 speed is unknown, defaulting to 1000 [ 506.729207][T18498] Node 0 DMA32: 806*4kB (UME) 552*8kB (UME) 361*16kB (UME) 230*32kB (UME) 99*64kB (UME) 87*128kB (UME) 91*256kB (UM) 58*512kB (UME) 27*1024kB (UE) 6*2048kB (UM) 224*4096kB (UM) = 1048680kB [ 506.750385][T18498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 506.764091][T18498] Node 1 Normal: 135*4kB (UE) 30*8kB (UME) 27*16kB (UME) 71*32kB (UME) 18*64kB (UME) 6*128kB (UME) 4*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887388kB [ 506.818037][T18498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.827872][T18498] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 506.901625][T18498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.911467][T18498] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 506.924705][T18502] lo speed is unknown, defaulting to 1000 [ 506.929799][T18498] 44747 total pagecache pages [ 506.939290][T18498] 0 pages in swap cache [ 506.943526][T18498] Free swap = 124996kB [ 506.948140][T18498] Total swap = 124996kB [ 506.953815][T18498] 2097051 pages RAM [ 506.957699][T18498] 0 pages HighMem/MovableOnly [ 506.962457][T18498] 424126 pages reserved [ 506.966796][T18498] 0 pages cma reserved [ 507.782796][T18502] chnl_net:caif_netlink_parms(): no params data found [ 507.936310][T18528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.050812][T18532] netlink: 'syz.4.3840': attribute type 10 has an invalid length. [ 508.109032][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.123085][T18532] netlink: 'syz.4.3840': attribute type 1 has an invalid length. [ 508.126637][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.153590][T18502] bridge_slave_0: entered allmulticast mode [ 508.203890][T18502] bridge_slave_0: entered promiscuous mode [ 508.228587][T18543] __nla_validate_parse: 15 callbacks suppressed [ 508.228602][T18543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3841'. [ 508.286850][T18547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3842'. [ 508.736667][ T5841] Bluetooth: hci2: command tx timeout [ 509.609026][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.616324][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.623445][T18502] bridge_slave_1: entered allmulticast mode [ 509.630515][T18502] bridge_slave_1: entered promiscuous mode [ 509.753346][T18502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.820131][T18502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.856952][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3844'. [ 510.804383][ T5841] Bluetooth: hci2: command tx timeout [ 511.257100][T18502] team0: Port device team_slave_0 added [ 511.269362][T18502] team0: Port device team_slave_1 added [ 511.291002][T18571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3847'. [ 511.342257][T18571] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3847'. [ 511.374631][T18502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.381591][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.429020][T18502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.440589][T18573] wg1 speed is unknown, defaulting to 1000 [ 511.442267][T18502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.454037][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.480352][T18502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.523962][T18573] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.612474][T18577] wg1 speed is unknown, defaulting to 1000 [ 512.884223][ T5841] Bluetooth: hci2: command tx timeout [ 514.022793][T18577] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.037514][T18573] lo speed is unknown, defaulting to 1000 [ 514.061919][T18593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 514.122030][T18502] hsr_slave_0: entered promiscuous mode [ 514.137102][T18502] hsr_slave_1: entered promiscuous mode [ 514.153878][T18502] debugfs: 'hsr0' already exists in 'hsr' [ 514.159637][T18502] Cannot create hsr debugfs directory [ 514.465712][T18610] wg1 speed is unknown, defaulting to 1000 [ 514.465742][T18577] lo speed is unknown, defaulting to 1000 [ 514.513314][T18610] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.748087][T18502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 514.761673][T18502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 514.773547][T18502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 514.793541][T18502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 514.852500][T18612] wg1 speed is unknown, defaulting to 1000 [ 514.904661][T18612] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.971159][ T5841] Bluetooth: hci2: command tx timeout [ 515.026142][T18502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.192877][T18502] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.210907][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.218061][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.227653][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.234817][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.342453][T18610] lo speed is unknown, defaulting to 1000 [ 515.381943][T18612] lo speed is unknown, defaulting to 1000 [ 515.801542][T18502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.310237][T18653] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 516.436575][T16409] lo speed is unknown, defaulting to 1000 [ 516.511427][T18661] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 518.351973][T18502] veth0_vlan: entered promiscuous mode [ 518.385310][T18502] veth1_vlan: entered promiscuous mode [ 518.454873][T18502] veth0_macvtap: entered promiscuous mode [ 518.477527][T18502] veth1_macvtap: entered promiscuous mode [ 518.538798][T18502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.598704][T18502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.686890][T18674] wg1 speed is unknown, defaulting to 1000 [ 518.697623][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.712946][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.400399][T18674] ip6_vti0 speed is unknown, defaulting to 1000 [ 520.401084][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.436162][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.634123][ T6210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.657849][ T6210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.724284][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.735745][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.757095][T18715] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 520.856143][T18719] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 520.920167][T18674] lo speed is unknown, defaulting to 1000 [ 521.009077][T18726] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 521.139181][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3878'. [ 521.751899][T18738] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3878'. [ 521.880615][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 521.948584][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3880'. [ 523.001046][T18748] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 523.061143][T18748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3882'. [ 523.116793][T18748] netlink: 'syz.3.3882': attribute type 10 has an invalid length. [ 523.132668][T18754] pim6reg: entered allmulticast mode [ 523.139976][T18748] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 523.169938][T18670] mpoa:mpoad_close: () going down [ 523.190238][T18757] netlink: 'syz.4.3885': attribute type 39 has an invalid length. [ 523.222819][T18755] wg1 speed is unknown, defaulting to 1000 [ 523.246257][T18755] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.271940][T18762] netlink: 'syz.3.3887': attribute type 13 has an invalid length. [ 523.280066][T18762] netlink: 'syz.3.3887': attribute type 17 has an invalid length. [ 523.331423][T18762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.530605][T18768] syz_tun: entered allmulticast mode [ 523.549841][T18755] lo speed is unknown, defaulting to 1000 [ 523.553586][T18764] syz_tun: left allmulticast mode [ 523.645001][T18766] IPVS: Scheduler module ip_vs_sip not found [ 523.797682][T18766] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 523.810250][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 523.818319][T18781] syz_tun: entered allmulticast mode [ 523.850253][T18781] syz_tun: left allmulticast mode [ 524.198179][T18797] netlink: 'syz.2.3895': attribute type 13 has an invalid length. [ 524.206486][T18797] netlink: 'syz.2.3895': attribute type 17 has an invalid length. [ 524.234387][T18799] netlink: 'syz.1.3899': attribute type 39 has an invalid length. [ 524.243404][T18797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.375348][T18790] wg1 speed is unknown, defaulting to 1000 [ 524.384647][T18797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.392232][T18790] ip6_vti0 speed is unknown, defaulting to 1000 [ 524.632845][T18811] wg1 speed is unknown, defaulting to 1000 [ 524.686115][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3903'. [ 524.697078][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3903'. [ 524.717461][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3903'. [ 524.756774][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3903'. [ 524.781630][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3903'. [ 524.823292][T18817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.864349][T18820] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 524.878491][T18790] lo speed is unknown, defaulting to 1000 [ 524.894768][T18820] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 524.912891][T18811] ip6_vti0 speed is unknown, defaulting to 1000 [ 524.944281][T18820] netlink: 'syz.3.3904': attribute type 10 has an invalid length. [ 524.949917][T18818] wg1 speed is unknown, defaulting to 1000 [ 524.962984][T18820] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 525.239635][T18818] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.239642][T18811] lo speed is unknown, defaulting to 1000 [ 525.405492][T18822] wg1 speed is unknown, defaulting to 1000 [ 525.605063][T16389] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.605194][T18818] lo speed is unknown, defaulting to 1000 [ 525.616095][T16389] syz2: Port: 1 Link DOWN [ 525.617765][T18822] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.642479][T16389] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.843897][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 525.886078][T18822] lo speed is unknown, defaulting to 1000 [ 525.907036][T18839] wg1 speed is unknown, defaulting to 1000 [ 525.931633][T18839] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.303336][T18839] lo speed is unknown, defaulting to 1000 [ 526.310343][T18842] wg1 speed is unknown, defaulting to 1000 [ 526.349311][T18842] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.934359][T18842] lo speed is unknown, defaulting to 1000 [ 527.111808][T18854] __nla_validate_parse: 14 callbacks suppressed [ 527.111826][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3912'. [ 527.642431][T18861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.961626][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3915'. [ 528.078617][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3915'. [ 528.109066][T18871] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.167559][T18871] bridge_slave_1 (unregistering): left allmulticast mode [ 528.175061][T18871] bridge_slave_1 (unregistering): left promiscuous mode [ 528.182292][T18871] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.475834][T18899] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3922'. [ 529.993571][T18884] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3919'. [ 530.275130][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3926'. [ 530.421861][T18917] wg1 speed is unknown, defaulting to 1000 [ 530.460746][T18917] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.733405][T18935] wg1 speed is unknown, defaulting to 1000 [ 530.846260][T18944] bridge0: port 3(dummy0) entered disabled state [ 530.889353][T18935] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.893867][T18917] lo speed is unknown, defaulting to 1000 [ 530.922753][T16407] lo speed is unknown, defaulting to 1000 [ 530.937489][T16407] syz1: Port: 1 Link DOWN [ 533.331653][T18976] netlink: 'syz.3.3939': attribute type 4 has an invalid length. [ 533.342136][T18935] lo speed is unknown, defaulting to 1000 [ 533.421707][T18974] netlink: 'syz.3.3939': attribute type 12 has an invalid length. [ 533.457703][T18961] wg1 speed is unknown, defaulting to 1000 [ 533.478232][T18961] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.655437][T18986] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3940'. [ 534.688031][T18961] lo speed is unknown, defaulting to 1000 [ 534.808159][T18989] wg1 speed is unknown, defaulting to 1000 [ 534.851682][T18989] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.910585][T19007] x_tables: duplicate underflow at hook 4 [ 534.991364][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3944'. [ 535.080494][T19007] syz_tun (unregistering): left allmulticast mode [ 535.541296][T18989] lo speed is unknown, defaulting to 1000 [ 536.720603][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3950'. [ 536.786738][T19043] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3952'. [ 537.074495][T19055] wg1 speed is unknown, defaulting to 1000 [ 537.093245][T19055] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.245952][T19063] batadv_slave_0: entered promiscuous mode [ 537.254189][T19063] batman_adv: batadv0: Adding interface: macsec1 [ 537.261076][T19063] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.363360][T19063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.425468][T19063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.446002][T19063] batman_adv: batadv0: Interface activated: macsec1 [ 537.637044][T19075] tipc: Failed to remove unknown binding: 66,1,1/4:1321836828/1321836830 [ 537.691090][T19055] lo speed is unknown, defaulting to 1000 [ 537.724114][T19075] tipc: Failed to remove unknown binding: 66,1,1/4:1321836828/1321836830 [ 537.767476][T19075] tipc: Failed to remove unknown binding: 66,1,1/4:1321836828/1321836830 [ 538.260905][T19090] wg1 speed is unknown, defaulting to 1000 [ 538.280763][T19090] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.288226][T19091] wg1 speed is unknown, defaulting to 1000 [ 538.425522][T19096] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3963'. [ 538.620466][T19090] lo speed is unknown, defaulting to 1000 [ 538.621205][T19091] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.713864][T19104] pimreg: entered allmulticast mode [ 538.732084][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3965'. [ 538.871639][T19110] netlink: 'syz.5.3966': attribute type 39 has an invalid length. [ 539.094129][T19091] lo speed is unknown, defaulting to 1000 [ 539.169598][T19112] wg1 speed is unknown, defaulting to 1000 [ 539.232905][T19112] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.323081][T19125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 539.343875][T19125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 539.975483][T19128] wg1 speed is unknown, defaulting to 1000 [ 540.528721][T19128] ip6_vti0 speed is unknown, defaulting to 1000 [ 540.574060][T19152] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 540.793064][T19128] lo speed is unknown, defaulting to 1000 [ 540.808233][T19112] lo speed is unknown, defaulting to 1000 [ 540.808966][T19159] wg1 speed is unknown, defaulting to 1000 [ 540.920037][T19159] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.197422][T19162] netlink: 'syz.1.3979': attribute type 1 has an invalid length. [ 541.297766][T19164] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 541.324693][T19164] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 541.371491][T19162] bond11: (slave gretap1): making interface the new active one [ 541.380912][T19162] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 541.416076][T19165] macvlan0: entered promiscuous mode [ 541.421392][T19165] macvlan0: entered allmulticast mode [ 541.428486][T19165] bond11: entered promiscuous mode [ 541.433970][T19165] gretap1: entered promiscuous mode [ 541.440271][T19165] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 541.452360][T19165] bond11: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 541.468692][T19165] bond11: left promiscuous mode [ 541.482657][T19165] gretap1: left promiscuous mode [ 541.520490][T19159] lo speed is unknown, defaulting to 1000 [ 541.545254][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 541.555653][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 541.572078][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 541.591806][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 541.606936][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 541.625478][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 541.644393][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 541.660179][T19167] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.696380][T19167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.916032][T19169] wg1 speed is unknown, defaulting to 1000 [ 541.992525][T19169] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.992662][T19172] wg1 speed is unknown, defaulting to 1000 [ 542.028323][T19173] wg1 speed is unknown, defaulting to 1000 [ 542.314587][T19172] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.563057][T19186] netlink: 'syz.3.3985': attribute type 12 has an invalid length. [ 542.583140][T19186] netlink: 'syz.3.3985': attribute type 4 has an invalid length. [ 542.666385][T19169] lo speed is unknown, defaulting to 1000 [ 542.674045][T19172] lo speed is unknown, defaulting to 1000 [ 542.688834][T19173] ip6_vti0 speed is unknown, defaulting to 1000 [ 543.088556][T19173] lo speed is unknown, defaulting to 1000 [ 544.019625][T19208] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 544.194801][T19217] wg1 speed is unknown, defaulting to 1000 [ 544.218302][T19217] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.280762][T19224] __nla_validate_parse: 9 callbacks suppressed [ 544.280779][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3995'. [ 544.348845][T19224] bridge_slave_0: left allmulticast mode [ 544.373109][T19224] bridge_slave_0: left promiscuous mode [ 544.432010][T19224] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.851482][T19235] wg1 speed is unknown, defaulting to 1000 [ 544.922428][T19236] wg1 speed is unknown, defaulting to 1000 [ 544.941249][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 544.988038][T19225] wg1 speed is unknown, defaulting to 1000 [ 545.197581][T19242] batman_adv: batadv0: Interface deactivated: macvtap2 [ 545.250975][T19242] batman_adv: batadv0: Removing interface: macvtap2 [ 545.349496][T19235] ip6_vti0 speed is unknown, defaulting to 1000 [ 545.356409][T19217] lo speed is unknown, defaulting to 1000 [ 545.610371][T19251] wg1 speed is unknown, defaulting to 1000 [ 545.648594][T19254] IPVS: Scheduler module ip_vs_sip not found [ 545.775912][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 545.778554][T19236] ip6_vti0 speed is unknown, defaulting to 1000 [ 545.942990][ T30] audit: type=1800 audit(1762825979.562:14): pid=19262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4002" name="memory.events" dev="tmpfs" ino=4348 res=0 errno=0 [ 546.007287][T19225] ip6_vti0 speed is unknown, defaulting to 1000 [ 546.189358][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4004'. [ 546.198515][T19267] netlink: 'syz.5.4004': attribute type 30 has an invalid length. [ 546.217765][ T1164] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.229067][ T1164] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.245372][ T1164] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.266804][ T1164] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.319788][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 546.329674][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 546.338935][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 546.348429][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 546.357771][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 546.367051][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 546.378654][T19269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.394166][T19251] ip6_vti0 speed is unknown, defaulting to 1000 [ 546.474822][T19273] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 548.001500][T19251] lo speed is unknown, defaulting to 1000 [ 548.033509][T19236] lo speed is unknown, defaulting to 1000 [ 548.081441][T19235] lo speed is unknown, defaulting to 1000 [ 548.190600][T19225] lo speed is unknown, defaulting to 1000 [ 548.401182][T19285] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 548.715607][T19303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.851196][T19301] wg1 speed is unknown, defaulting to 1000 [ 548.865087][T19301] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.327097][T19306] netlink: 'syz.4.4013': attribute type 16 has an invalid length. [ 549.335355][T19306] netlink: 'syz.4.4013': attribute type 17 has an invalid length. [ 549.797287][T19306] tipc: Resetting bearer [ 549.954345][T19301] lo speed is unknown, defaulting to 1000 [ 549.962943][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 549.988058][ T12] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.012679][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 550.044033][ T12] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.092123][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 550.109994][ T12] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.118849][T19324] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 550.139457][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 550.149856][ T12] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.416905][T19337] netlink: 'syz.5.4020': attribute type 13 has an invalid length. [ 550.440025][T19337] netlink: 'syz.5.4020': attribute type 17 has an invalid length. [ 550.617102][T19337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.677549][T19348] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 551.008297][T19285] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 552.487744][T19369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.573360][T19380] wg1 speed is unknown, defaulting to 1000 [ 552.615763][T19380] ip6_vti0 speed is unknown, defaulting to 1000 [ 552.626256][T19385] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 552.735250][T19392] netlink: 'syz.5.4032': attribute type 2 has an invalid length. [ 552.785101][T19392] netlink: 'syz.5.4032': attribute type 2 has an invalid length. [ 552.876875][T19392] wg1 speed is unknown, defaulting to 1000 [ 553.261188][T19392] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.274733][T19380] lo speed is unknown, defaulting to 1000 [ 553.920361][T19392] lo speed is unknown, defaulting to 1000 [ 554.758097][T19456] wg1 speed is unknown, defaulting to 1000 [ 554.789422][T19456] ip6_vti0 speed is unknown, defaulting to 1000 [ 555.156533][T19456] lo speed is unknown, defaulting to 1000 [ 555.504275][T19493] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 555.555667][T19493] bond10 (unregistering): Released all slaves [ 555.655173][T19508] __nla_validate_parse: 26 callbacks suppressed [ 555.655190][T19508] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4047'. [ 555.976059][T19496] wg1 speed is unknown, defaulting to 1000 [ 556.007271][T19496] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.668828][T19496] lo speed is unknown, defaulting to 1000 [ 556.790034][T19522] wg1 speed is unknown, defaulting to 1000 [ 556.868957][T19522] ip6_vti0 speed is unknown, defaulting to 1000 [ 557.263198][T19551] wg1 speed is unknown, defaulting to 1000 [ 557.323972][T19522] lo speed is unknown, defaulting to 1000 [ 557.337141][T19551] ip6_vti0 speed is unknown, defaulting to 1000 [ 557.583368][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4057'. [ 558.015359][T19551] lo speed is unknown, defaulting to 1000 [ 558.169250][T19569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4060'. [ 558.201687][T19567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.234153][T19567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.312682][T19567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.323132][T19567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.365137][ T1211] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 558.379040][ T1211] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 558.462284][T19567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.486547][T19567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.619404][T19567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.630659][T19567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.787733][ T36] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.814328][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.865732][ T36] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.884058][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.924696][ T36] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.932895][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.935276][T19584] wg1 speed is unknown, defaulting to 1000 [ 558.975736][T19584] ip6_vti0 speed is unknown, defaulting to 1000 [ 559.019283][ T36] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.028100][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.239884][T19601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4067'. [ 559.353860][T19285] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 559.418879][T19606] wg1 speed is unknown, defaulting to 1000 [ 559.448581][T19606] ip6_vti0 speed is unknown, defaulting to 1000 [ 559.457893][T19584] lo speed is unknown, defaulting to 1000 [ 559.972602][T19620] netlink: 'syz.1.4070': attribute type 39 has an invalid length. [ 560.000323][T19606] lo speed is unknown, defaulting to 1000 [ 560.208490][T19617] syzkaller0: entered promiscuous mode [ 560.214815][T19617] syzkaller0: entered allmulticast mode [ 560.241236][T19617] sctp: [Deprecated]: syz.5.4069 (pid 19617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.241236][T19617] Use struct sctp_sack_info instead [ 560.515616][T19635] netlink: 'syz.2.4071': attribute type 4 has an invalid length. [ 560.550699][T19631] bridge: RTM_NEWNEIGH with invalid ether address [ 560.562299][T19630] netlink: 'syz.2.4071': attribute type 12 has an invalid length. [ 560.669720][T19639] veth0: entered promiscuous mode [ 560.682610][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'. [ 560.718722][T19639] veth0 (unregistering): left promiscuous mode [ 560.845694][T19646] wg1 speed is unknown, defaulting to 1000 [ 560.860156][T19646] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.071659][T19652] netlink: 'syz.3.4077': attribute type 16 has an invalid length. [ 561.081268][T19652] netlink: 'syz.3.4077': attribute type 17 has an invalid length. [ 561.258327][T19652] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4077'. [ 561.364115][T19646] lo speed is unknown, defaulting to 1000 [ 561.753197][T19676] netlink: 'syz.3.4079': attribute type 4 has an invalid length. [ 561.807131][T19678] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4081'. [ 561.817713][T19678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.610092][T19705] wg1 speed is unknown, defaulting to 1000 [ 562.618723][T19708] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 562.651383][T19710] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 562.704989][T19705] ip6_vti0 speed is unknown, defaulting to 1000 [ 563.004788][T19721] netlink: 'syz.5.4091': attribute type 4 has an invalid length. [ 563.067434][T19716] netlink: 'syz.5.4091': attribute type 12 has an invalid length. [ 563.208057][T19705] lo speed is unknown, defaulting to 1000 [ 564.082539][T19741] dvmrp1: entered allmulticast mode [ 564.325267][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 564.337956][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 564.348476][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 564.351195][T19758] netlink: 'syz.3.4101': attribute type 13 has an invalid length. [ 564.366789][T19758] netlink: 'syz.3.4101': attribute type 17 has an invalid length. [ 564.368684][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 564.385536][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 564.396013][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 564.406385][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 564.424384][T19752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.434186][T19752] 8021q: adding VLAN 0 to HW filter on device ` [ 564.442205][T19752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.507527][T19758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.516254][T19758] 8021q: adding VLAN 0 to HW filter on device ` [ 564.522142][T19763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.525840][T19758] bridge0: port 3(dummy0) entered blocking state [ 564.538743][T19758] bridge0: port 3(dummy0) entered forwarding state [ 564.551092][T19758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.553011][T19763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.576962][T16389] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.583226][T16389] syz2: Port: 1 Link ACTIVE [ 564.595700][ T5895] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.604308][ T1211] lo speed is unknown, defaulting to 1000 [ 564.610044][ T1211] syz1: Port: 1 Link ACTIVE [ 564.625438][T19759] wg1 speed is unknown, defaulting to 1000 [ 564.637410][T19759] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.734493][ T5838] Bluetooth: hci0: command tx timeout [ 564.743141][T19760] wg1 speed is unknown, defaulting to 1000 [ 565.038360][T19781] wg1 speed is unknown, defaulting to 1000 [ 565.296939][T19759] lo speed is unknown, defaulting to 1000 [ 565.297953][T19760] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.682506][T19781] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.940509][T19760] lo speed is unknown, defaulting to 1000 [ 565.968388][T19781] lo speed is unknown, defaulting to 1000 [ 566.678703][T19818] bridge: RTM_NEWNEIGH with invalid ether address [ 566.963231][T19829] __nla_validate_parse: 8 callbacks suppressed [ 566.973400][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4113'. [ 567.642291][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.658505][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.668484][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.678589][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.689990][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.700859][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.713879][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.728057][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.738295][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 567.752790][T19843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.761122][T19843] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.772833][T19843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.869625][T19851] wg1 speed is unknown, defaulting to 1000 [ 567.892787][T19851] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.958880][T19859] wg1 speed is unknown, defaulting to 1000 [ 568.228158][T19851] lo speed is unknown, defaulting to 1000 [ 568.228369][T19859] ip6_vti0 speed is unknown, defaulting to 1000 [ 568.500079][T19874] syz_tun: entered allmulticast mode [ 568.522219][T19874] dvmrp1: entered allmulticast mode [ 568.534569][T19873] syz_tun: left allmulticast mode [ 568.536542][T19879] IPVS: length: 185 != 8 [ 569.543976][T19859] lo speed is unknown, defaulting to 1000 [ 569.818560][T19879] syz.4.4127: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 569.841853][T19879] CPU: 0 UID: 0 PID: 19879 Comm: syz.4.4127 Not tainted syzkaller #0 PREEMPT(full) [ 569.841879][T19879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.841890][T19879] Call Trace: [ 569.841898][T19879] [ 569.841906][T19879] dump_stack_lvl+0x189/0x250 [ 569.841943][T19879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.841967][T19879] ? __pfx__printk+0x10/0x10 [ 569.841986][T19879] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 569.842011][T19879] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 569.842037][T19879] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 569.842065][T19879] warn_alloc+0x214/0x310 [ 569.842098][T19879] ? __pfx_warn_alloc+0x10/0x10 [ 569.842135][T19879] ? __get_vm_area_node+0x28f/0x300 [ 569.842161][T19879] ? hash_netport4_resize+0x235/0x1b60 [ 569.842190][T19879] __vmalloc_node_range_noprof+0x690/0x12d0 [ 569.842216][T19879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.842258][T19879] ? alloc_pages_mpol+0x3cd/0x4a0 [ 569.842279][T19879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 569.842309][T19879] ? rcu_is_watching+0x15/0xb0 [ 569.842331][T19879] ? hash_netport4_resize+0x235/0x1b60 [ 569.842353][T19879] __kvmalloc_node_noprof+0x674/0x910 [ 569.842380][T19879] ? hash_netport4_resize+0x235/0x1b60 [ 569.842414][T19879] hash_netport4_resize+0x235/0x1b60 [ 569.842437][T19879] ? hash_netport4_uadt+0xc97/0xf30 [ 569.842467][T19879] ? __pfx_hash_netport4_add+0x10/0x10 [ 569.842490][T19879] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 569.842525][T19879] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 569.842557][T19879] call_ad+0x44e/0xb00 [ 569.842592][T19879] ? __pfx_call_ad+0x10/0x10 [ 569.842626][T19879] ? __nla_parse+0x40/0x60 [ 569.842652][T19879] ip_set_ad+0x791/0x930 [ 569.842680][T19879] ? __pfx_ip_set_ad+0x10/0x10 [ 569.842740][T19879] nfnetlink_rcv_msg+0xb4d/0x1130 [ 569.842768][T19879] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 569.842815][T19879] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 569.842839][T19879] ? kmem_cache_free+0x19b/0x690 [ 569.842917][T19879] netlink_rcv_skb+0x208/0x470 [ 569.842938][T19879] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 569.842967][T19879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.842999][T19879] ? bpf_lsm_capable+0x9/0x20 [ 569.843020][T19879] ? security_capable+0x7e/0x2e0 [ 569.843053][T19879] nfnetlink_rcv+0x282/0x2590 [ 569.843081][T19879] ? __dev_queue_xmit+0x284/0x3740 [ 569.843104][T19879] ? __dev_queue_xmit+0x1bfb/0x3740 [ 569.843143][T19879] ? __dev_queue_xmit+0x284/0x3740 [ 569.843176][T19879] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 569.843220][T19879] ? ref_tracker_free+0x63a/0x7d0 [ 569.843239][T19879] ? __asan_memcpy+0x40/0x70 [ 569.843262][T19879] ? __pfx_ref_tracker_free+0x10/0x10 [ 569.843298][T19879] ? skb_clone+0x246/0x3a0 [ 569.843323][T19879] ? __netlink_deliver_tap+0x807/0x850 [ 569.843342][T19879] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.843368][T19879] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.843396][T19879] netlink_unicast+0x82f/0x9e0 [ 569.843432][T19879] ? __pfx_netlink_unicast+0x10/0x10 [ 569.843462][T19879] ? netlink_sendmsg+0x642/0xb30 [ 569.843479][T19879] ? skb_put+0x11b/0x210 [ 569.843502][T19879] netlink_sendmsg+0x805/0xb30 [ 569.843533][T19879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.843557][T19879] ? aa_sock_msg_perm+0xf1/0x1d0 [ 569.843590][T19879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.843608][T19879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.843629][T19879] __sock_sendmsg+0x21c/0x270 [ 569.843658][T19879] ____sys_sendmsg+0x505/0x830 [ 569.843684][T19879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.843713][T19879] ? import_iovec+0x74/0xa0 [ 569.843737][T19879] ___sys_sendmsg+0x21f/0x2a0 [ 569.843760][T19879] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.843815][T19879] ? __fget_files+0x2a/0x420 [ 569.843831][T19879] ? __fget_files+0x3a0/0x420 [ 569.843860][T19879] __x64_sys_sendmsg+0x19b/0x260 [ 569.843883][T19879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.843922][T19879] ? do_syscall_64+0xbe/0xfa0 [ 569.843952][T19879] do_syscall_64+0xfa/0xfa0 [ 569.843976][T19879] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.843998][T19879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.844015][T19879] ? clear_bhb_loop+0x60/0xb0 [ 569.844037][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.844051][T19879] RIP: 0033:0x7f556538f6c9 [ 569.844067][T19879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.844083][T19879] RSP: 002b:00007f5566223038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.844102][T19879] RAX: ffffffffffffffda RBX: 00007f55655e5fa0 RCX: 00007f556538f6c9 [ 569.844117][T19879] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 000000000000000c [ 569.844127][T19879] RBP: 00007f5565411f91 R08: 0000000000000000 R09: 0000000000000000 [ 569.844138][T19879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.844149][T19879] R13: 00007f55655e6038 R14: 00007f55655e5fa0 R15: 00007fffb50ea5f8 [ 569.844183][T19879] [ 570.351062][T19919] wg1 speed is unknown, defaulting to 1000 [ 570.365577][T19919] ip6_vti0 speed is unknown, defaulting to 1000 [ 570.369256][T19879] Mem-Info: [ 570.375276][T19879] active_anon:4762 inactive_anon:0 isolated_anon:0 [ 570.375276][T19879] active_file:3342 inactive_file:40077 isolated_file:0 [ 570.375276][T19879] unevictable:768 dirty:369 writeback:0 [ 570.375276][T19879] slab_reclaimable:12076 slab_unreclaimable:244821 [ 570.375276][T19879] mapped:31357 shmem:1360 pagetables:1139 [ 570.375276][T19879] sec_pagetables:0 bounce:0 [ 570.375276][T19879] kernel_misc_reclaimable:0 [ 570.375276][T19879] free:1175609 free_pcp:15257 free_cma:0 [ 570.421040][T19879] Node 0 active_anon:19048kB inactive_anon:0kB active_file:13368kB inactive_file:160108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125428kB dirty:1476kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13880kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 570.461885][T19879] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 570.492208][T19879] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 570.528495][T19879] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 570.557080][T19879] Node 0 DMA32 free:799688kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19048kB inactive_anon:0kB active_file:13368kB inactive_file:160108kB unevictable:1536kB writepending:1476kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:41336kB local_pcp:22168kB free_cma:0kB [ 570.636224][T19931] xt_limit: Overflow, try lower: 271964/0 [ 570.642295][T19879] lowmem_reserve[]: 0 0 0 0 0 [ 570.649192][T19879] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 570.679107][T19879] lowmem_reserve[]: 0 0 0 0 0 [ 570.683890][T19879] Node 1 Normal free:3887388kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20548kB local_pcp:10772kB free_cma:0kB [ 570.716808][T19879] lowmem_reserve[]: 0 0 0 0 0 [ 570.721540][T19879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 570.734620][T19879] Node 0 DMA32: 924*4kB (ME) 529*8kB (UM) 523*16kB (UME) 572*32kB (UME) 156*64kB (UME) 65*128kB (UME) 50*256kB (UME) 33*512kB (UME) 32*1024kB (UE) 4*2048kB (UM) 165*4096kB (UM) = 799400kB [ 570.754131][T19879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 570.765781][T19879] Node 1 Normal: 135*4kB (UE) 30*8kB (UME) 27*16kB (UME) 71*32kB (UME) 18*64kB (UME) 6*128kB (UME) 4*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887388kB [ 570.784234][T19879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 570.793802][T19879] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 570.803221][T19879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 570.812999][T19879] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 570.822572][T19879] 45741 total pagecache pages [ 570.827543][T19879] 0 pages in swap cache [ 570.831693][T19879] Free swap = 124996kB [ 570.835998][T19879] Total swap = 124996kB [ 570.840149][T19879] 2097051 pages RAM [ 570.844062][T19879] 0 pages HighMem/MovableOnly [ 570.849137][T19879] 424126 pages reserved [ 570.853284][T19879] 0 pages cma reserved [ 571.062432][T19940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.082041][T19919] lo speed is unknown, defaulting to 1000 [ 571.235269][T19940] wg1 speed is unknown, defaulting to 1000 [ 571.259649][T19940] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.975211][T19940] lo speed is unknown, defaulting to 1000 [ 573.427457][T19970] netlink: 'syz.3.4143': attribute type 1 has an invalid length. [ 573.503270][T19973] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 573.514710][T19973] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 574.096008][T19991] netlink: 'syz.4.4146': attribute type 3 has an invalid length. [ 574.343430][T20002] __nla_validate_parse: 28 callbacks suppressed [ 574.343449][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.366877][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.382312][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.392936][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.393227][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 574.417097][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.426448][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.436000][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.447209][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.457388][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 574.472436][T20002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.544960][T20005] wg1 speed is unknown, defaulting to 1000 [ 574.558851][T20005] ip6_vti0 speed is unknown, defaulting to 1000 [ 574.689675][T20014] wg1 speed is unknown, defaulting to 1000 [ 574.774273][T20017] netlink: 'syz.3.4152': attribute type 1 has an invalid length. [ 574.823009][ T30] audit: type=1800 audit(1762826008.442:15): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4150" name="memory.events" dev="tmpfs" ino=4292 res=0 errno=0 [ 574.907989][T20019] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 574.947550][T20019] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 574.971946][T20005] lo speed is unknown, defaulting to 1000 [ 574.979071][T20014] ip6_vti0 speed is unknown, defaulting to 1000 [ 575.015633][T20017] macvlan3: entered promiscuous mode [ 575.057012][T20017] macvlan3: entered allmulticast mode [ 575.076826][T20017] bond12: entered promiscuous mode [ 575.091878][T20017] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 575.107328][T20017] bond12: left promiscuous mode [ 575.242189][T20025] netlink: 'syz.1.4154': attribute type 3 has an invalid length. [ 575.296529][T20014] lo speed is unknown, defaulting to 1000 [ 575.300167][T20025] dvmrp6: left allmulticast mode [ 575.309540][T20025] pimreg: left allmulticast mode [ 575.365952][T20033] siw: device registration error -23 [ 575.423887][T20034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.511872][T20033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.661403][T20029] wg1 speed is unknown, defaulting to 1000 [ 575.713542][T20029] ip6_vti0 speed is unknown, defaulting to 1000 [ 576.115596][T20049] Cannot find set identified by id 65534 to match [ 576.168038][T20029] lo speed is unknown, defaulting to 1000 [ 577.333615][T20095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.521736][T20103] wg1 speed is unknown, defaulting to 1000 [ 577.552934][T20103] ip6_vti0 speed is unknown, defaulting to 1000 [ 577.656105][T20111] netlink: 'syz.5.4171': attribute type 1 has an invalid length. [ 577.860638][T20116] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 577.871873][T20116] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 577.910572][T20111] macvlan3: entered promiscuous mode [ 577.916807][T20111] macvlan3: entered allmulticast mode [ 577.923039][T20111] bond1: entered promiscuous mode [ 577.934381][T20111] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 577.986011][T20111] bond1: left promiscuous mode [ 578.038871][T20117] wg1 speed is unknown, defaulting to 1000 [ 578.160706][T20103] lo speed is unknown, defaulting to 1000 [ 578.165569][T20117] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.538377][T20135] wg1 speed is unknown, defaulting to 1000 [ 578.803066][T20135] ip6_vti0 speed is unknown, defaulting to 1000 [ 579.261269][T20135] lo speed is unknown, defaulting to 1000 [ 579.338675][T20117] lo speed is unknown, defaulting to 1000 [ 579.889220][T20152] __nla_validate_parse: 37 callbacks suppressed [ 579.889238][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4177'. [ 580.124403][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 580.147901][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 580.184824][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 580.207158][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 580.224078][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 580.250093][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 580.259942][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 580.271329][T20164] netlink: 'syz.4.4180': attribute type 2 has an invalid length. [ 580.281122][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 580.291107][T20154] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 580.478069][T20158] wg1 speed is unknown, defaulting to 1000 [ 580.487610][T20158] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.373955][T20158] lo speed is unknown, defaulting to 1000 [ 582.030186][T20210] wg1 speed is unknown, defaulting to 1000 [ 582.042971][T20210] ip6_vti0 speed is unknown, defaulting to 1000 [ 582.314016][T20226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4188'. [ 582.385351][T20210] lo speed is unknown, defaulting to 1000 [ 582.595412][T20230] netlink: 'syz.4.4189': attribute type 5 has an invalid length. [ 582.700258][T20230] geneve3: entered promiscuous mode [ 582.705733][T20230] geneve3: entered allmulticast mode [ 582.783926][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 582.803404][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 582.815041][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 582.827807][T20223] wg1 speed is unknown, defaulting to 1000 [ 582.837616][T20223] ip6_vti0 speed is unknown, defaulting to 1000 [ 582.838048][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 583.335223][T20239] pim6reg: entered allmulticast mode [ 583.408963][T20223] lo speed is unknown, defaulting to 1000 [ 583.788734][T20242] wg1 speed is unknown, defaulting to 1000 [ 583.805794][T20242] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.280350][T20242] lo speed is unknown, defaulting to 1000 [ 584.403170][T20255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.669393][T20251] wg1 speed is unknown, defaulting to 1000 [ 584.679929][T20251] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.997094][T20267] __nla_validate_parse: 19 callbacks suppressed [ 584.997113][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 585.033366][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 585.046685][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 585.065710][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 585.090015][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 585.103501][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 585.135532][T20275] netlink: 'syz.3.4199': attribute type 8 has an invalid length. [ 585.153957][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 585.175277][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 585.214269][T20267] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 585.238987][T20251] lo speed is unknown, defaulting to 1000 [ 585.291044][T20275] wg1 speed is unknown, defaulting to 1000 [ 585.401424][T20275] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.408337][T20274] wg1 speed is unknown, defaulting to 1000 [ 585.441933][T20272] wg1 speed is unknown, defaulting to 1000 [ 585.755610][T20283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4200'. [ 585.812762][T20274] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.067705][T20272] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.375906][T20272] lo speed is unknown, defaulting to 1000 [ 586.394799][T20274] lo speed is unknown, defaulting to 1000 [ 586.533874][T20275] lo speed is unknown, defaulting to 1000 [ 586.578584][T20299] wg1 speed is unknown, defaulting to 1000 [ 586.673285][T20299] ip6_vti0 speed is unknown, defaulting to 1000 [ 587.064933][T20299] lo speed is unknown, defaulting to 1000 [ 588.214446][T20331] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4207'. [ 588.501188][T20329] wg1 speed is unknown, defaulting to 1000 [ 588.509245][T20329] ip6_vti0 speed is unknown, defaulting to 1000 [ 588.789123][T20345] wg1 speed is unknown, defaulting to 1000 [ 588.825900][T20345] ip6_vti0 speed is unknown, defaulting to 1000 [ 588.833352][T20329] lo speed is unknown, defaulting to 1000 [ 589.819266][T20359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.310312][T20345] lo speed is unknown, defaulting to 1000 [ 590.322960][T20356] wg1 speed is unknown, defaulting to 1000 [ 590.349553][T20356] ip6_vti0 speed is unknown, defaulting to 1000 [ 590.369852][T20367] netlink: 'syz.2.4216': attribute type 13 has an invalid length. [ 590.384982][T20367] netlink: 'syz.2.4216': attribute type 17 has an invalid length. [ 590.481200][T20367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.686678][T20368] wg1 speed is unknown, defaulting to 1000 [ 590.737200][T20356] lo speed is unknown, defaulting to 1000 [ 590.751314][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.765768][T20368] ip6_vti0 speed is unknown, defaulting to 1000 [ 590.801439][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.833517][T20389] __nla_validate_parse: 18 callbacks suppressed [ 591.833536][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 591.849605][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 591.869451][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 591.915869][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 591.944722][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 591.974891][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 592.007155][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 592.028319][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4221'. [ 592.038534][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 592.095306][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 592.213874][T20389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.261675][T20368] lo speed is unknown, defaulting to 1000 [ 592.337928][T20402] netlink: 'syz.1.4221': attribute type 3 has an invalid length. [ 592.406277][T20402] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 592.441700][T20396] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 592.547912][T20390] wg1 speed is unknown, defaulting to 1000 [ 592.600028][T20390] ip6_vti0 speed is unknown, defaulting to 1000 [ 592.650194][T20408] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 592.924097][T20413] netlink: 'syz.5.4225': attribute type 1 has an invalid length. [ 592.943101][T20390] lo speed is unknown, defaulting to 1000 [ 593.390858][T20415] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 593.417666][T20415] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 593.473028][T20416] bond2: (slave gretap1): making interface the new active one [ 593.484245][T20416] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 593.569179][T20416] syz.5.4225 (20416) used greatest stack depth: 17368 bytes left [ 593.730479][T20423] netlink: 'syz.5.4227': attribute type 16 has an invalid length. [ 593.743861][T20423] netlink: 'syz.5.4227': attribute type 17 has an invalid length. [ 593.796977][T20424] IPv6: NLM_F_REPLACE set, but no existing node found! [ 593.969693][T20423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.983675][T20423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.182041][T20423] batman_adv: batadv0: Interface deactivated: macsec1 [ 594.254210][T20434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.293333][ T5928] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.323843][ T5928] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.357680][ T5928] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.385586][ T5928] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.405863][ T5928] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.421631][ T5928] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.442513][ T5928] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.467642][ T5928] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.478073][T20445] netlink: 'syz.1.4230': attribute type 1 has an invalid length. [ 594.489738][T20444] netlink: 'syz.5.4232': attribute type 3 has an invalid length. [ 594.604970][T20449] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 594.616264][T20449] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 594.715320][T20449] macvlan0: entered promiscuous mode [ 594.720761][T20449] macvlan0: entered allmulticast mode [ 594.729079][T20449] bond12: entered promiscuous mode [ 594.735613][T20449] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 594.761977][T20449] bond12: left promiscuous mode [ 596.379276][T20458] wg1 speed is unknown, defaulting to 1000 [ 596.393145][T20468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.418634][T20458] ip6_vti0 speed is unknown, defaulting to 1000 [ 596.438182][T20470] wg1 speed is unknown, defaulting to 1000 [ 596.456204][T20459] wg1 speed is unknown, defaulting to 1000 [ 596.555364][T20481] netlink: 'syz.4.4240': attribute type 6 has an invalid length. [ 596.705558][T20477] 8021q: adding VLAN 0 to HW filter on device bond7 [ 596.746037][T20477] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 596.754746][T20477] bond7: (slave macvlan3): Enslaving as an active interface with an up link [ 596.783290][T20470] ip6_vti0 speed is unknown, defaulting to 1000 [ 596.790936][T20458] lo speed is unknown, defaulting to 1000 [ 597.072683][T20459] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.080040][T20470] lo speed is unknown, defaulting to 1000 [ 597.554224][T20459] lo speed is unknown, defaulting to 1000 [ 597.703788][T20502] wg1 speed is unknown, defaulting to 1000 [ 597.750673][T20502] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.274865][T20520] netlink: 'syz.1.4250': attribute type 4 has an invalid length. [ 598.317740][T20520] __nla_validate_parse: 27 callbacks suppressed [ 598.317757][T20520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4250'. [ 598.389068][T20524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4252'. [ 598.412082][T20502] lo speed is unknown, defaulting to 1000 [ 598.944136][T20526] wg1 speed is unknown, defaulting to 1000 [ 600.260636][T20526] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.591244][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 600.636149][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 600.672403][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 600.699503][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 600.731227][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 600.785413][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 600.827696][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 600.878993][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 600.925824][T20558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.953356][T20558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.970557][T20547] wg1 speed is unknown, defaulting to 1000 [ 600.977174][T20526] lo speed is unknown, defaulting to 1000 [ 601.004960][T20547] ip6_vti0 speed is unknown, defaulting to 1000 [ 601.005034][T20549] wg1 speed is unknown, defaulting to 1000 [ 601.070878][T20560] wg1 speed is unknown, defaulting to 1000 [ 601.431585][T20549] ip6_vti0 speed is unknown, defaulting to 1000 [ 601.751499][T20560] ip6_vti0 speed is unknown, defaulting to 1000 [ 601.971713][T20573] wg1 speed is unknown, defaulting to 1000 [ 601.978346][T20549] lo speed is unknown, defaulting to 1000 [ 601.985941][T20573] ip6_vti0 speed is unknown, defaulting to 1000 [ 602.048578][T20547] lo speed is unknown, defaulting to 1000 [ 602.130203][T20560] lo speed is unknown, defaulting to 1000 [ 602.307198][T20573] lo speed is unknown, defaulting to 1000 [ 603.175143][T20586] netlink: 'syz.2.4264': attribute type 5 has an invalid length. [ 603.205694][T20586] geneve4: entered promiscuous mode [ 603.210993][T20586] geneve4: entered allmulticast mode [ 603.218119][T19285] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 603.389285][T19285] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 603.407436][T19285] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 603.416043][T19285] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 603.837362][T20603] __nla_validate_parse: 7 callbacks suppressed [ 603.837380][T20603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4271'. [ 603.863955][T20598] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4270'. [ 603.877449][T20598] netlink: 'syz.4.4270': attribute type 29 has an invalid length. [ 603.965414][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4271'. [ 604.006539][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4273'. [ 604.079209][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4273'. [ 604.129461][T20616] wg1 speed is unknown, defaulting to 1000 [ 604.137689][T20616] ip6_vti0 speed is unknown, defaulting to 1000 [ 604.481073][T20623] wg1 speed is unknown, defaulting to 1000 [ 604.938590][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4276'. [ 604.958183][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4276'. [ 604.993422][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4276'. [ 605.088604][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4276'. [ 605.134746][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4276'. [ 605.158741][T20633] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 605.206767][T20616] lo speed is unknown, defaulting to 1000 [ 605.277752][T20623] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.328725][T20638] wg1 speed is unknown, defaulting to 1000 [ 605.639642][T20638] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.854758][T20623] lo speed is unknown, defaulting to 1000 [ 605.903610][T20638] lo speed is unknown, defaulting to 1000 [ 606.249461][T20646] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 606.484966][T20657] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 606.632808][T20659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 606.864815][T20668] ipvlan2: entered promiscuous mode [ 606.881843][T20668] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 607.294809][T20686] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 607.309240][T20686] ip6t_rpfilter: unknown options [ 607.381863][T20683] netlink: 'syz.4.4287': attribute type 4 has an invalid length. [ 608.501951][T20724] wg1 speed is unknown, defaulting to 1000 [ 608.520967][T20728] netlink: 'syz.5.4296': attribute type 8 has an invalid length. [ 608.555648][T20724] ip6_vti0 speed is unknown, defaulting to 1000 [ 608.616206][T20728] wg1 speed is unknown, defaulting to 1000 [ 609.125440][T20728] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.132750][T20724] lo speed is unknown, defaulting to 1000 [ 609.272180][T20745] wg1 speed is unknown, defaulting to 1000 [ 609.602350][T20752] __nla_validate_parse: 8 callbacks suppressed [ 609.602367][T20752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4302'. [ 609.647255][T20728] lo speed is unknown, defaulting to 1000 [ 609.647292][T20745] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.675503][T20756] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 609.752053][T20758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4304'. [ 610.114571][T20760] wg1 speed is unknown, defaulting to 1000 [ 610.114640][T20745] lo speed is unknown, defaulting to 1000 [ 610.197534][T20758] wg1 speed is unknown, defaulting to 1000 [ 610.204415][T20760] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.259668][T20764] wg1 speed is unknown, defaulting to 1000 [ 610.474908][T20760] lo speed is unknown, defaulting to 1000 [ 610.490543][T20758] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.777071][T20764] ip6_vti0 speed is unknown, defaulting to 1000 [ 611.925527][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 612.190498][T20764] lo speed is unknown, defaulting to 1000 [ 612.211735][T20758] lo speed is unknown, defaulting to 1000 [ 612.378612][T20779] netlink: 'syz.4.4307': attribute type 1 has an invalid length. [ 612.461929][T20787] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 612.484186][T20795] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4307'. [ 612.543576][T20792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 612.572679][T20791] netlink: 'syz.2.4308': attribute type 10 has an invalid length. [ 612.601246][T20793] gretap2: entered allmulticast mode [ 612.611059][T20793] bond10: (slave gretap2): making interface the new active one [ 612.619636][T20793] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 612.686810][T20791] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 612.712218][T20791] bond0: (slave wlan1): refused to change device type [ 613.244442][T20801] wg1 speed is unknown, defaulting to 1000 [ 613.274353][T20801] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.435469][T20809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.493395][T20809] netlink: 'syz.5.4312': attribute type 5 has an invalid length. [ 613.507533][T20809] netlink: 'syz.5.4312': attribute type 3 has an invalid length. [ 613.626201][T20802] wg1 speed is unknown, defaulting to 1000 [ 613.653160][T20801] lo speed is unknown, defaulting to 1000 [ 613.684536][T20802] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.755347][T20818] netlink: 'syz.5.4314': attribute type 13 has an invalid length. [ 613.765007][T20818] netlink: 'syz.5.4314': attribute type 17 has an invalid length. [ 613.881455][T20821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4315'. [ 613.950973][T20818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.960117][T20818] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.975419][T20818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.411466][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4318'. [ 614.505285][T20802] lo speed is unknown, defaulting to 1000 [ 615.026340][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4320'. [ 615.718924][T20857] geneve3: entered promiscuous mode [ 615.752563][T19285] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 59623 - 0 [ 615.771495][T19285] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 59623 - 0 [ 615.823091][T19285] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 59623 - 0 [ 615.837596][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 615.847066][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 615.863141][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 615.872500][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 615.882191][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 615.891690][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 615.901509][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 615.912277][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 615.922261][T20864] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 615.941243][T19285] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 59623 - 0 [ 615.981401][T20868] wg1 speed is unknown, defaulting to 1000 [ 616.000304][T20868] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.450686][T20868] lo speed is unknown, defaulting to 1000 [ 616.680614][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4329'. [ 616.716002][T20883] netlink: 'syz.3.4330': attribute type 1 has an invalid length. [ 617.036844][T20888] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 617.060370][T20888] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 617.126390][T20883] macvlan3: entered promiscuous mode [ 617.131929][T20883] macvlan3: entered allmulticast mode [ 617.138367][T20883] bond13: entered promiscuous mode [ 617.145010][T20883] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 617.156637][T20883] bond13: left promiscuous mode [ 617.272471][T20901] batadv_slave_0: mtu less than device minimum [ 617.489621][T20905] wg1 speed is unknown, defaulting to 1000 [ 617.520273][T20905] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.690339][T20915] wg1 speed is unknown, defaulting to 1000 [ 619.028657][T20905] lo speed is unknown, defaulting to 1000 [ 619.028672][T20915] ip6_vti0 speed is unknown, defaulting to 1000 [ 619.386042][T20934] veth0: entered promiscuous mode [ 619.444525][T20931] wg1 speed is unknown, defaulting to 1000 [ 619.553662][T20934] netlink: 'syz.5.4339': attribute type 16 has an invalid length. [ 619.567936][T20934] netlink: 'syz.5.4339': attribute type 17 has an invalid length. [ 619.676773][T20934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.701456][T20915] lo speed is unknown, defaulting to 1000 [ 619.715193][T20931] ip6_vti0 speed is unknown, defaulting to 1000 [ 619.811249][T20946] bridge: RTM_NEWNEIGH with invalid ether address [ 620.148693][T20952] syzkaller0: entered promiscuous mode [ 620.154518][T20952] syzkaller0: entered allmulticast mode [ 620.161994][T20934] veth0: left promiscuous mode [ 620.210331][T20931] lo speed is unknown, defaulting to 1000 [ 620.326882][T20954] netlink: 'syz.1.4344': attribute type 1 has an invalid length. [ 620.334995][T20954] netlink: 'syz.1.4344': attribute type 3 has an invalid length. [ 620.342837][T20954] netlink: 'syz.1.4344': attribute type 2 has an invalid length. [ 620.361754][T20954] netlink: 'syz.1.4344': attribute type 3 has an invalid length. [ 620.370175][T20954] __nla_validate_parse: 3 callbacks suppressed [ 620.370192][T20954] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4344'. [ 620.747804][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4346'. [ 620.760445][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 620.773198][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 620.783218][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 620.793444][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 620.814435][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 620.827388][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 620.841777][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 620.857475][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 620.872203][T20965] netlink: 'syz.4.4346': attribute type 2 has an invalid length. [ 621.199924][T20966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.362129][T20970] wg1 speed is unknown, defaulting to 1000 [ 621.419158][T20970] ip6_vti0 speed is unknown, defaulting to 1000 [ 622.262928][T20998] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 622.458047][T20970] lo speed is unknown, defaulting to 1000 [ 622.765952][T21012] bridge: RTM_NEWNEIGH with invalid ether address [ 623.148424][T21023] wg1 speed is unknown, defaulting to 1000 [ 623.166745][T21023] ip6_vti0 speed is unknown, defaulting to 1000 [ 623.362059][T21036] syz.5.4356 (21036) used obsolete PPPIOCDETACH ioctl [ 623.761922][T21023] lo speed is unknown, defaulting to 1000 [ 624.009028][T21049] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 624.293137][T21057] netlink: 'syz.2.4364': attribute type 1 has an invalid length. [ 624.433363][T21059] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 624.452651][T21059] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 624.596399][T21069] bridge: RTM_NEWNEIGH with invalid ether address [ 624.731000][T21077] wg1 speed is unknown, defaulting to 1000 [ 624.758731][T21077] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.300503][T21092] netlink: 'syz.1.4370': attribute type 4 has an invalid length. [ 625.315097][T21093] lo: entered promiscuous mode [ 625.325677][T21093] tunl0: entered promiscuous mode [ 625.331297][T21093] gre0: entered promiscuous mode [ 625.338098][T21093] gretap0: entered promiscuous mode [ 625.354481][T21093] ip_vti0: entered promiscuous mode [ 625.363396][T21093] ip6_vti0: entered promiscuous mode [ 625.370498][T21093] sit0: entered promiscuous mode [ 625.380554][T21093] ip6tnl0: entered promiscuous mode [ 625.424505][T21093] ip6gre0: entered promiscuous mode [ 625.430188][T21093] ip6gretap0: entered promiscuous mode [ 625.475360][T21093] bond0: entered promiscuous mode [ 625.480425][T21093] bond_slave_0: entered promiscuous mode [ 625.504904][T21093] `: entered promiscuous mode [ 625.509709][T21093] team_slave_1: entered promiscuous mode [ 625.527095][T21093] nlmon0: entered promiscuous mode [ 625.554252][T21093] caif0: entered promiscuous mode [ 625.559306][T21093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.736476][T21077] lo speed is unknown, defaulting to 1000 [ 625.939706][T21111] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 627.187291][T21128] netlink: 'syz.4.4380': attribute type 1 has an invalid length. [ 627.758619][T21129] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 627.769938][T21129] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 627.848045][T21138] __nla_validate_parse: 8 callbacks suppressed [ 627.848069][T21138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4383'. [ 628.023163][T21138] bridge: RTM_NEWNEIGH with invalid ether address [ 628.531359][T21153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4385'. [ 628.629443][T21153] nbd: socks must be embedded in a SOCK_ITEM attr [ 629.000550][T21170] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4390'. [ 629.512655][T21181] wg1 speed is unknown, defaulting to 1000 [ 629.522380][T21185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 629.535255][T21181] ip6_vti0 speed is unknown, defaulting to 1000 [ 629.787099][T21181] lo speed is unknown, defaulting to 1000 [ 629.926499][T21189] pim6reg1: entered promiscuous mode [ 629.931824][T21189] pim6reg1: entered allmulticast mode [ 630.028257][T21194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4395'. [ 630.140510][T21198] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 630.265015][T21194] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 630.638397][T21216] wg1 speed is unknown, defaulting to 1000 [ 630.821845][T21216] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.133794][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 631.336045][T21228] wg1 speed is unknown, defaulting to 1000 [ 631.773078][T21228] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.826985][T21216] lo speed is unknown, defaulting to 1000 [ 632.478995][T21228] lo speed is unknown, defaulting to 1000 [ 632.492872][T21245] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 632.571186][T21245] wg1 speed is unknown, defaulting to 1000 [ 632.649165][T21245] ip6_vti0 speed is unknown, defaulting to 1000 [ 632.750782][T21246] wg1 speed is unknown, defaulting to 1000 [ 633.115221][T21257] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 633.140068][T21246] ip6_vti0 speed is unknown, defaulting to 1000 [ 633.492300][T21266] bond0: (slave rose0): Error: Device can not be enslaved while up [ 633.835128][T21271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4409'. [ 633.851878][T21246] lo speed is unknown, defaulting to 1000 [ 633.903345][T21245] lo speed is unknown, defaulting to 1000 [ 633.999572][T21273] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 634.483872][ C0] ------------[ cut here ]------------ [ 634.490679][ C0] ODEBUG: free active (active state 0) object: ffff8880554b3c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 634.504171][ C0] WARNING: CPU: 0 PID: 21286 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 634.513795][ C0] Modules linked in: [ 634.517991][ C0] CPU: 0 UID: 0 PID: 21286 Comm: syz.3.4412 Not tainted syzkaller #0 PREEMPT(full) [ 634.527441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 634.534064][T21285] pim6reg1: entered promiscuous mode [ 634.537564][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 634.548603][ C0] Code: 4c 89 ff e8 67 e4 92 fd 4d 8b 0f 48 c7 c7 00 11 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 1a 49 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 17 3f ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 634.553007][T21285] pim6reg1: entered allmulticast mode [ 634.568255][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 634.568281][ C0] RAX: b805f94501c9c500 RBX: dffffc0000000000 RCX: ffff8880668f9e40 [ 634.568296][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 634.568310][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 634.603680][ C0] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffffffff8a396860 [ 634.611693][ C0] R13: ffffffff8bbf1280 R14: ffff8880554b3c90 R15: ffffffff8b6cf7a0 [ 634.619698][ C0] FS: 00007fa07fbd56c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 634.628660][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.635293][ C0] CR2: 00007fa07fbd4f98 CR3: 000000003d1c6000 CR4: 00000000003526f0 [ 634.643284][ C0] Call Trace: [ 634.646687][ C0] [ 634.649556][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 634.655177][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 634.660322][ C0] kfree+0x115/0x6d0 [ 634.664266][ C0] rose_timer_expiry+0x4cb/0x600 [ 634.669220][ C0] ? call_timer_fn+0x155/0x5f0 [ 634.674037][ C0] call_timer_fn+0x17e/0x5f0 [ 634.678659][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 634.684165][ C0] ? call_timer_fn+0xbe/0x5f0 [ 634.688854][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 634.694021][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.699234][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.704476][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 634.709957][ C0] __run_timer_base+0x61a/0x860 [ 634.714872][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 634.720260][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 634.726564][ C0] run_timer_softirq+0xb7/0x180 [ 634.731437][ C0] handle_softirqs+0x286/0x870 [ 634.736251][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 634.741036][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 634.746381][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 634.751597][ C0] __irq_exit_rcu+0xca/0x1f0 [ 634.756232][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 634.761450][ C0] irq_exit_rcu+0x9/0x30 [ 634.765751][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 634.771401][ C0] [ 634.774364][ C0] [ 634.777300][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 634.783287][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 634.788611][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab fc d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 634.808256][ C0] RSP: 0018:ffffc900055efc70 EFLAGS: 00000206 [ 634.814862][ C0] RAX: b805f94501c9c500 RBX: 0000000000000000 RCX: b805f94501c9c500 [ 634.822848][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f5b87 RDI: ffffffff8bbf0760 [ 634.830856][ C0] RBP: ffffffff823d18d4 R08: 0000000000000000 R09: ffffffff823d18d4 [ 634.838869][ C0] R10: ffff88806ad77cf8 R11: 0000000000000000 R12: 0000000000000000 [ 634.846880][ C0] R13: ffff88804d421858 R14: 0000000000000001 R15: 0000000000000246 [ 634.854891][ C0] ? d_instantiate+0x64/0xa0 [ 634.859505][ C0] ? d_instantiate+0x64/0xa0 [ 634.864150][ C0] ? __asan_memset+0x22/0x50 [ 634.868763][ C0] ? __d_alloc+0x529/0x7a0 [ 634.873192][ C0] _raw_spin_lock+0x2e/0x40 [ 634.877750][ C0] ? d_instantiate+0x64/0xa0 [ 634.882363][ C0] d_instantiate+0x64/0xa0 [ 634.886819][ C0] alloc_file_pseudo+0xf6/0x210 [ 634.891691][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 634.897194][ C0] ? alloc_fd+0x64c/0x6c0 [ 634.901527][ C0] sock_alloc_file+0xb8/0x2e0 [ 634.906204][ C0] ? __sys_socket+0x12c/0x1b0 [ 634.910869][ C0] __sys_socket+0x13d/0x1b0 [ 634.915374][ C0] __x64_sys_socket+0x7a/0x90 [ 634.920036][ C0] do_syscall_64+0xfa/0xfa0 [ 634.924541][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.929721][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.935780][ C0] ? clear_bhb_loop+0x60/0xb0 [ 634.940438][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.947020][ C0] RIP: 0033:0x7fa08198f6c9 [ 634.951416][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.971032][ C0] RSP: 002b:00007fa07fbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 634.979472][ C0] RAX: ffffffffffffffda RBX: 00007fa081be6090 RCX: 00007fa08198f6c9 [ 634.987467][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 634.995441][ C0] RBP: 00007fa081a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 635.003391][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.011357][ C0] R13: 00007fa081be6128 R14: 00007fa081be6090 R15: 00007fff6f862d18 [ 635.019339][ C0] [ 635.022349][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 635.029603][ C0] CPU: 0 UID: 0 PID: 21286 Comm: syz.3.4412 Not tainted syzkaller #0 PREEMPT(full) [ 635.038945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 635.048975][ C0] Call Trace: [ 635.052233][ C0] [ 635.055056][ C0] dump_stack_lvl+0x99/0x250 [ 635.059627][ C0] ? __asan_memcpy+0x40/0x70 [ 635.064196][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.069380][ C0] ? __pfx__printk+0x10/0x10 [ 635.073955][ C0] vpanic+0x237/0x6d0 [ 635.077926][ C0] ? __pfx_vpanic+0x10/0x10 [ 635.082411][ C0] panic+0xb9/0xc0 [ 635.086108][ C0] ? __pfx_panic+0x10/0x10 [ 635.090512][ C0] __warn+0x31b/0x4b0 [ 635.094471][ C0] ? debug_print_object+0x16b/0x1e0 [ 635.099655][ C0] ? debug_print_object+0x16b/0x1e0 [ 635.104828][ C0] report_bug+0x2be/0x4f0 [ 635.109137][ C0] ? debug_print_object+0x16b/0x1e0 [ 635.114313][ C0] ? debug_print_object+0x16b/0x1e0 [ 635.119496][ C0] ? debug_print_object+0x16d/0x1e0 [ 635.124673][ C0] handle_bug+0x84/0x160 [ 635.128892][ C0] exc_invalid_op+0x1a/0x50 [ 635.133369][ C0] asm_exc_invalid_op+0x1a/0x20 [ 635.138194][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 635.143984][ C0] Code: 4c 89 ff e8 67 e4 92 fd 4d 8b 0f 48 c7 c7 00 11 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 1a 49 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 17 3f ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 635.163570][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 635.169614][ C0] RAX: b805f94501c9c500 RBX: dffffc0000000000 RCX: ffff8880668f9e40 [ 635.177563][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 635.185514][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 635.193461][ C0] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffffffff8a396860 [ 635.201407][ C0] R13: ffffffff8bbf1280 R14: ffff8880554b3c90 R15: ffffffff8b6cf7a0 [ 635.209380][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 635.215006][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 635.220542][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 635.225634][ C0] kfree+0x115/0x6d0 [ 635.229510][ C0] rose_timer_expiry+0x4cb/0x600 [ 635.234428][ C0] ? call_timer_fn+0x155/0x5f0 [ 635.239177][ C0] call_timer_fn+0x17e/0x5f0 [ 635.243742][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 635.249196][ C0] ? call_timer_fn+0xbe/0x5f0 [ 635.253850][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 635.258946][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.264125][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.269314][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 635.274752][ C0] __run_timer_base+0x61a/0x860 [ 635.279592][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 635.284942][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 635.291170][ C0] run_timer_softirq+0xb7/0x180 [ 635.295999][ C0] handle_softirqs+0x286/0x870 [ 635.300742][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 635.305482][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 635.310831][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 635.316006][ C0] __irq_exit_rcu+0xca/0x1f0 [ 635.320571][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 635.325750][ C0] irq_exit_rcu+0x9/0x30 [ 635.329967][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 635.335581][ C0] [ 635.338487][ C0] [ 635.341392][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.347347][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 635.352608][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab fc d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 635.372187][ C0] RSP: 0018:ffffc900055efc70 EFLAGS: 00000206 [ 635.378234][ C0] RAX: b805f94501c9c500 RBX: 0000000000000000 RCX: b805f94501c9c500 [ 635.386185][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f5b87 RDI: ffffffff8bbf0760 [ 635.394132][ C0] RBP: ffffffff823d18d4 R08: 0000000000000000 R09: ffffffff823d18d4 [ 635.402101][ C0] R10: ffff88806ad77cf8 R11: 0000000000000000 R12: 0000000000000000 [ 635.410048][ C0] R13: ffff88804d421858 R14: 0000000000000001 R15: 0000000000000246 [ 635.418010][ C0] ? d_instantiate+0x64/0xa0 [ 635.422595][ C0] ? d_instantiate+0x64/0xa0 [ 635.427180][ C0] ? __asan_memset+0x22/0x50 [ 635.431755][ C0] ? __d_alloc+0x529/0x7a0 [ 635.436147][ C0] _raw_spin_lock+0x2e/0x40 [ 635.440629][ C0] ? d_instantiate+0x64/0xa0 [ 635.445196][ C0] d_instantiate+0x64/0xa0 [ 635.449595][ C0] alloc_file_pseudo+0xf6/0x210 [ 635.454430][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 635.459883][ C0] ? alloc_fd+0x64c/0x6c0 [ 635.464208][ C0] sock_alloc_file+0xb8/0x2e0 [ 635.468878][ C0] ? __sys_socket+0x12c/0x1b0 [ 635.473542][ C0] __sys_socket+0x13d/0x1b0 [ 635.478039][ C0] __x64_sys_socket+0x7a/0x90 [ 635.482699][ C0] do_syscall_64+0xfa/0xfa0 [ 635.487195][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.492389][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.498444][ C0] ? clear_bhb_loop+0x60/0xb0 [ 635.503103][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.508977][ C0] RIP: 0033:0x7fa08198f6c9 [ 635.513373][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.532959][ C0] RSP: 002b:00007fa07fbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 635.541447][ C0] RAX: ffffffffffffffda RBX: 00007fa081be6090 RCX: 00007fa08198f6c9 [ 635.549399][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 635.557349][ C0] RBP: 00007fa081a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 635.565297][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.573243][ C0] R13: 00007fa081be6128 R14: 00007fa081be6090 R15: 00007fff6f862d18 [ 635.581208][ C0] [ 635.584461][ C0] Kernel Offset: disabled [ 635.588766][ C0] Rebooting in 86400 seconds..