last executing test programs: 1m42.411853023s ago: executing program 0 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34097272"], 0xa) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1m41.430664461s ago: executing program 0 (id=559): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x4, 0x8, 0xd, 0x8300, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x15, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000401800b0001006e756d67656e0000240002980800030300000000080001400000000208"], 0x8c}}, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r4, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r10}, 0x18) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) write$cgroup_int(r12, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) 1m40.829814049s ago: executing program 2 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="10e12e8fd292ea54beef41a787c8fc3e0b915d564cb2a10ca6ec2c48dab99f8f0d9c90c20000", 0x26) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000019c0)="e94e6785facdeda4e9a789778edd8051746667861fcb55fc79f3dce63694e62c7129c14cad36728ec771c9b3ad8ff8bb3b3aef032adf92a73fccc368f7e4d07073ce68baace2fe4cd861eb3a2988ca9fd7f2705cfa224834816767e62ff51ae65db5ee09c76585f0722b13d592d9802d70802efe930242ca43280995f58a88253329a8f6edea76902bd788304505c89f7fcdf8ae99f9d7d90748f6ba6fe67f634fd01f4748a6cdf5e7b532b57d822b4b931229e2be3205408e37917aa6aa36391d5f2d55d44148932f2e849bb14e69fca4e3bcece4c70f56094e0c5e1e489fd63b691adb46cfb1234810341415f0cd066ef33a67b6ae1c87eff349aac90632539d0f3842ac7d8d101bfb58a8ac8c353b0be5b1e16bf560cf4a909d369a73da8c5627edce549e1e307377bb768da857d113a603f051769c9df45c64550ef7299271dd821421e60977f693942666cd79fb7c96899e57b56aa13dc3334dbe96879ba304d672f92548f3b5d7df7835d7307a6d47cb13afd113609f093cf527d64d29437d15eee3cf82ecb328e7beb0595f534d712154092ab45559c25dce68753ed7956c98dd8c432415c6e7f1b1444e7178afd18f506033d4a4c5feaf56c663cad615f7e04a009e53edcbc2d587e9f8edd184d9cf8cefb8a722510f4b037fc0eeb88e4e294c3bdcd2bc36e5a79e5b03d8f0fd363142d85bc0098a13b29e5dda20f20e1f22b10bdce593ea7d0ab6a88455d2acd4667d996b3e913923099ed01944efc2427f04fa09886c6e7c43120a023d9427d38a6b0be6a35b8e83491c5e472f2bb1bdbd39b6e3c8d8fd803529de9ea66155928aa56f4cec6654d3480ad9da35624ae41b836b455a5449c73ac22a3fe8fc020a8af63e4e21c1e791bd160d1c04a2a42e93784a225fdbd169bdea851f91886433813fcd7677c2b87791dfa280c9d322b52bcd3708778cb644fd8656321416c905c893ffd578a57c2ecd21a75e34cf2e9ddb56b6e62347cfd9d4413047903a5643f6734d42699715d457ca11721e21fa2cd0bd776548d2f9da40900848606d8587fdc24612b6d9042c9f1785db6628c11d7e79e9a550a8bfbcc82f218926b3043701e0e4111d73ca7bf7b061debe7231d9293abfe2ff6dbfbdbebbed3915e9d27f2f63cb0a6091ba7bda625aa9d978fe41aed03bbd0aeb6cc2985e0c2c4d9d1eeb2474e7d26ab7cc472afe2f11f243708ed43623fd5c0861ad7cf5970f154048fbc58678cb14a4e4e6fdd43605cb3e23efd9df955c7f9539a2074bbe65ee1748a81fe5efe6bf533836becce2afb20366e647a225d7ed6d554d9df7ac1b7c466aab548283a2a9b54fea91bb1ddeceb71aa078c1b847c92d7d5ba703f9d7d9a116f9b18a27ca47c3500ccffb187d70d3b86b31da43d02f1dc0fd92072471c66b931c81dae72bbaa19556a8a806471ff5d91e6489066a287cc1f6dee365f65416fa506edfacbd4a16a66e138f93eb603babe582027e38fee835a002e1a94eb0424c016619f26604517d0bc03e7bdbf2a437fbcb6a3f9ec6977762193665339ad6af2f84872cfcc794fe1e61f6392d1f5cbc409d3050cc655435d6fdd38385e39e18d70c6ea1618e962b6b4b4d0edbffd882c700bf900137832027f807d7739af211ad5be5c538b70d1983bf6693ed909fd406e1d5c8b7bfbdd36d5f9d6a88100895f08cb6ef123e41419d5877d1e17ec72b862fbfc7ddf6f37c8aacbcfb05dad0c2a596b610da09b0bf3b72b420fd797ed0aa72fcac87a6192c0ef7551baa06d50739abff50ba92e79451dc3588ed45e821bfe9b8e25fb871e592dcfedb1b5de9fba1b1635f7e10a4aa8f1785429ac582b4d5a725c6d0051af07ab043d62326b77ea259cf44e8cf14bd8d6a1353c770ab6f1dbedd7f3b39fe2bbd9cc986db49782b34be117cf578cbc417799f12cc5c5bf32ea96d2d7ca48650c74e827f5fe12393be2181416e4030d02c875eb242f815774211cb50a1ce4d53e926388723c5d157b12bcccaf193f2fffb8a53b0b0ec9834c07e96a2cf2323cfb2e1cc92e18baf8bf87ac9a7336f8c04fe6c8fae5ccc81976a26afb44c1aa0efbd93ef87e722c6c3f00da78bdc81dad9795fe2c1c644fdc09c842c138f704353c786311a0e14c226ef9061e36cdade4febdad904cdad6cbc4edcd1d73e27e835324988510534af9475416d5b8c14075b774efaddaad27889736369ab28ac8d005292105d1c3bdc7c665fceef0d945626bf76c8c147f7de23b07c9ca073058f1150958e85193303c7f1f7a60839dcce54d466a210a6d123968fbec47ba47239c1a2fadf9566e356ac610e562b77934bf56456e16edf9a8c0915c0a0b9405676d0d20d31ad62844416de5c043255f24c591427a21479c7fccd231c6b6a90880a551832ef874a879cc7b847aa926964224231a81af9b13d48f02828cb960d88a46302d2ef1492fae558a3d9c81042e2450b3a0aa1cb86bfa58ec3b09da9c360a202d28136565bb956ab1b814a64cb9d89c6122d191faaaee8c908c45919a22aae4cae89446114d5435d4805cbe3158068868daa1a6acfcc5f35c335094b517f9092073449ffb77b951e202a7444b5d96bc97207b30dd69a0c87ee620c559526c1641d159173c81cfe18ceafcd56325b99e1ed851d7cca0255c2b1aada05c1aac26131d342bd6e8fccc547f31d428c491dc8d8273d795ae9972b5386d427309183c5a6a72d049497192f62e50588885414033be661f91e0df461d5bbdb3f6b531d09f5deae7e5ef1f2318b359960e25b4c21cfb844bbe3a67aca7126742737f0b5ea90b42879dad5d00711a96a39d73d58d1eb6184310ca77227696e2969df90352f327391c590581757b98f7a8e3cb65f9e8c2631e742f4ee1629b2241a88ef6c3ba7dfbffbaa5a39e143d26c8c892f2facb83d38a12e966cad83f7b917feb56f26197c31028d968f50426ac1e6cc2c590af1eaf51044b53c32a34d3e03b4f82c324fa321c12299c1fb17504579307476ac3ef6195e2035d94df49f860c7e1a91cb2a76d723b17996cb041e056719c8063aaf2bb0ec90e7194029b19e46ef194a6f5be88459b53765fe8b2176e2bb87b7433b6f6874fc73bac9acff85798d18656499ca6b7b2d22d5e6597bc4151c3aa8f17097ee544f828782f050b13dd31c1cef1cae4dab9e3a52dcd8c851ebba82e619407122071467dee6c8b163aa904d0e2bdf1c0ee7b651be51836ea07f5b2be94a56d5880b8c8c263b7324f90a17460b78d07cad7c6edebba75dd4448e7eaa319ee4c2d87138f34a620a0f6979142e92317fa852ca9b13ee0f864b08fcfa43c0aa31ba47b8c132255300e01384466f2e2b8b284051c99a6058b4edb209a03dbf3f5f69c3cb6f0b62cac07069e8a3dec0243683582e3463922152c0839c8ce7a01f7545e1a7f010af59000e6956e7aa5b0d6ef82b676726053a6a9df5541f5ae2bd770ef65bf4c1be546098770c097debd558cce23091fb8b89797956b8d526fa53eab747367d82e58690338185bfdf9bd9c5b2555de31c47cf750d933d87f0e4f4175a28a8943666a563adef827d3d478cc06d76b69f2d9641cccd39ebfea5514a1141162cf5abb3930d5ead0cd27935de280553e6fc7fbeb2700c85dc666468da3014379122e9a92dcdd2fb7b7f3395c2520c3cb34608fa5b0c744840b76dff7d9203da5f720e3b577eb0b5e88c3073f31dc280d711d989dfe27b6f503aa60dbb52bd0f8345b7b0890ad8073af80d79671e1f646d26a9eca69c2cfcf317d28b78626e2487c4a01115180cd88151fc0dba9ba7476e3d7f60f2c4c1f5368340b54df764086f1ca358a887a9a1a94d4b8d326198cf18f5b6bdd5a4a611a8807f292acc712b02656a487f280086d4d366f224cac1daf8af144eeaa5959b9b4ec5194b05759ee545fd5c708014548257d1603fdd9bb3dddffa34f2c7da8fab09358083fb29e2732959f742405247c7046409ea157dbc434fca910d0fd273ca477a6ba5761759a3688402ae02214a59f8825385897dbfd6cb74c681f51fbeb5fe654dd5347414501a25efc20d6f1fd98ec698df9aa1ea90b1305fbfc61e2f1114767acac8a6ce0c643714fc03dc868797451edd37ff397e62015f0e5d4f6786e52aac5d29f7909d61700cf7b506a51121aa030a21b538c09ab2b097612108d2c512a63e75e35f09a063d361d3d8463ca6b16c407538b5d20a7dfb0c9639b241e70c8bed9c24643f2358807d450e8eb58741a360ad24a05f66f78b9b40ab9c13bb74856769ab68ca095f6e4ff80eec8246aad3874331dc060c4a37c70d756973dd3a8ed74dd3f7a89f9d4e958a3fe69828f50ad950dd59736eb5e270bc960a1cedfeb8f4a15db33ac634502241905833a9e3543058cb753dbfb05378bc955fd14add776adfb126540c3119292fe5a23bf345f10d43aa2bb37eb166bc90475b1d7edf10aa20b0cedf3c65c36c1e732b028a4954a2cf1b8cca8c23e9850889b9ecebff204ef26f915b670b2e2ce059cae6ba7aecfe6966aad7a65bcc186cfe465d7f2027960efb14abced50a2e48170995023805c401f5bb70e22a42b5dc432880e2b36dbefd85bbfb8abb0606e59e74ab4f6073a90d01928ae910fe1da94201a68712ba06ced2ab6500770da4a7182cee0fc92e210eb11aa64a6a523211ee456fc3fbf7caec4ca1f9aa64f3bf70ae1fb6bf6a6df0701debec5e5c73f33b9ce767175220d64b7be0bfddb6340b71426ade83df2382b57c55634e141ef5b8dc2ca6f9c32e5aa5f6b1ba3a1b21d38c1017b6a3aa1c5406928e054e4123e003be90ac7074c9ed36261e550c75f3a60ed70e5f8288ca2628dcf31da9ce72d23e913e727df6efcbba28bff54e8ed1eca653e2b16f3e84a9ccb2455ccf2d8d244c9e0ec84c075020737db6c4fc951ed9878bd8d4231800c237f88bc5db2e95d14d77281e0b7c02cd6bcf0220a8f726469262cabfc60091a4be37031dfce9c964554c2459d6fbbe9da09d9ef3faf507b4234f5423508b1ddbbb07924618b00f6fc6b0eaf100b608a3056ebaba0a1dcb250b572aeb21303c6c02a11eab76a67189f823f006c24a580914d45d0e45dfd9b902ca516ea8bbb2cdfbebdb46b7695174b70d55265208478d2e1e475fc3bd631704a55f7251cd4a718b82fdbd0472e22e48f583f4f032826a28fd3b2da39dd6ae1fea56b9a17b4d1acb90998c0aefe6af3c19f3fc5e3a7c6b83dc17ba52faf0b46396c5e755d12647962f667ea6a1068e8205252c8ee6a9635af207528ee957bc09eeda020e3e1494cb9f3135756351ae20e2a957b433c2207205d8c82b9f9bb344787ab367601fd2e9f89a8e43927c2fd04b4eb5bfe74f84144f926b292b16aabd2033dfd4c2fa28034a75444ec60d74b369acd34378222bd6cfb2611c23df5787cf45ec2a057b0998c1df9de44cd3a86833d80c9f8fee39f2be9da9667dac56286cce406735f3650ba65e471e43fc83fc0470d98162c181a0a751dbbec50df98de4fb65ef812a563e48c491ca15ef74054915226d489836be2c7ca822f83153dd68ac435f5d22f38813ea998a1790114a07516e0bc2519896ab4f77433ffb57f2a7f777dc81bc32e8d94066ce70f0a8908f3dbfaa842bcc3e48e9a09ac775939e99bcc8d7ab3baff6e9f85593b1c95b7b9a9a4b76d82b4bbae9f43eaa690960852f422bdf7e5aebfd662381969d71da4483ebf7a9572bd9fba8ede91d157e2382b2fcbef444901c3759ac6299b6506249cce97fe624e36ea6ba0f72da6da0", 0x1000}, {&(0x7f0000000340)="3ecfeb443a592462958e8fb1f42dcfafed50682dd2e6d99be287950b93650b32f39f0d3133ad70f6dc999230e202a34cc6a53c25d39403aa99593d26f81fd25027c1659e3d7c8832ed698ccd35d3a977d6fc1bf82430c4f903ceaf963afacb30353653a9b59ad8dcd7f24f93822a76ce6e6e8db76736c7e6222f7963d093db9c75fa29be8f4d8471f107e0", 0x8b}, {&(0x7f00000029c0)="6547ce4a7f230eeb502f3803233188f44df0028f8cf5f5b74f3c05ee137df6be89228eacfb5a1663ad31169cf36a60e945d2533cc6c4f2f6dc5376ff2d90194679792ca0665ceaddc71420757c8651d5710a6b41c8d09ec1096126938a24a40029a7df8ba49da7eb0f3eac3a4bf1735a5124cff8bd", 0x75}], 0x3, 0x0, 0x0, 0x40080}], 0x1, 0x20040800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) listen(r3, 0x1) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x12, r1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) 1m40.590747584s ago: executing program 2 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003a00)=@raw={'raw\x00', 0x8, 0x3, 0x12f8, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1228, 0xffffffff, 0xffffffff, 0x1228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0x0, 0xff000000, 0xffffffff], [0xffffff00, 0x0, 0xff000000], 'vlan1\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x0, 0x1, 0x4, 0x30}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1, 0xa2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xb9, 0x1, 0x3}}}, {{@uncond, 0x0, 0x10d8, 0x1108, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x6, {0x6}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x802, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1358) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000000)=""/120, 0x78, 0x40000004, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x890) 1m39.861957563s ago: executing program 0 (id=570): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002900)=@mangle={'mangle\x00', 0x11, 0x6, 0x720, 0x328, 0x0, 0x0, 0x440, 0x0, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfffc, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@loopback}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x3b}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @typedef, @fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2000000, 0x0, 0x6}]}, @ptr={0xc}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x0, 0x796}]}, @struct={0xf, 0x2, 0x0, 0x4, 0x0, 0xfffffffc, [{0xc, 0x2, 0xffffffff}, {0x3, 0x5, 0x9eb}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f, 0x30]}}, 0x0, 0xff}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x90, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x90}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002900)=@mangle={'mangle\x00', 0x11, 0x6, 0x720, 0x328, 0x0, 0x0, 0x440, 0x0, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfffc, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@loopback}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x3b}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x58}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @typedef, @fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2000000, 0x0, 0x6}]}, @ptr={0xc}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x0, 0x796}]}, @struct={0xf, 0x2, 0x0, 0x4, 0x0, 0xfffffffc, [{0xc, 0x2, 0xffffffff}, {0x3, 0x5, 0x9eb}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f, 0x30]}}, 0x0, 0xff}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", 0x0}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x90, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x90}}, 0x0) (async) 1m39.675315499s ago: executing program 2 (id=572): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead", 0x4}], 0x1, 0x0, 0x0, 0x40880}], 0x1, 0x4814) (async) sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead", 0x4}], 0x1, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 1m39.489637907s ago: executing program 0 (id=574): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r6, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0, 0x0, 0x8}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x9}}], 0xb0}, 0x24044094) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100706369001100020030082e303a30303a31302e3000000000080003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1m39.488930731s ago: executing program 2 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x3}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) connect(r0, &(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xb, 0xf4, 0x9, 0x19, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_x_filter={0x5, 0x1a, @in=@dev={0xac, 0x14, 0x14, 0x10}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1a, 0x10, 0xc}, @sadb_sa={0x2, 0x1, 0x4d5, 0x94, 0x7, 0xd8, 0x4, 0x80000000}, @sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}, @in={0x2, 0x4e20, @private=0xa010102}}]}, 0xc8}}, 0x0) 1m39.369634053s ago: executing program 2 (id=578): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) listen(r1, 0x80000003) 1m39.3579285s ago: executing program 0 (id=579): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x496d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x41, 0x7}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x2e, 0x731b2c64fa29e553, 0x0, 0x2e, 0x30]}}, &(0x7f0000001380)=""/161, 0x3c, 0xa1, 0x1, 0x8001}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x1000, &(0x7f0000000340)=""/4096, 0x41100, 0x57, '\x00', 0x0, @fallback=0x25, r4, 0x8, &(0x7f0000001480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x3, 0x4, 0x6, 0xfffffffc}, 0x10, 0x0, r1, 0x5, 0x0, &(0x7f0000001500)=[{0x1, 0x4, 0xf, 0x7}, {0x3, 0x1, 0x9, 0x8}, {0x2, 0x2, 0x3, 0x3}, {0x3, 0x5, 0x2, 0x6}, {0x0, 0x4, 0x4, 0x2}], 0x10, 0x1ff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="94dfc2f21c06cf0008000a00", @ANYRES32=r5, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m38.660941107s ago: executing program 2 (id=583): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="70c2cd58390ad91f2dabb30f7840f700f69f2e1405b398a8b0d9e7ae7d60e768e8f3ef5cf42ed38a3f716d62e313c073c8d082c944a1d45904f90c261783db8c3589ea6000ac17659c7f30939c8b3697212869d5a515ec52ad33e60958e78b4aad8dae4e26065bb695b6388d170aee7be1d27a993b446acdf3391b55dc55", 0x7e}], 0x1}, 0xc000) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x51}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000580)={0x1, 0x8, [@local, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @link_local, @random="07036f30504f", @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @broadcast]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r9, 0x0, 0x4004015) 1m38.659718846s ago: executing program 32 (id=583): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="70c2cd58390ad91f2dabb30f7840f700f69f2e1405b398a8b0d9e7ae7d60e768e8f3ef5cf42ed38a3f716d62e313c073c8d082c944a1d45904f90c261783db8c3589ea6000ac17659c7f30939c8b3697212869d5a515ec52ad33e60958e78b4aad8dae4e26065bb695b6388d170aee7be1d27a993b446acdf3391b55dc55", 0x7e}], 0x1}, 0xc000) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x51}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000580)={0x1, 0x8, [@local, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @link_local, @random="07036f30504f", @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @broadcast]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r9, 0x0, 0x4004015) 1m36.593781848s ago: executing program 0 (id=603): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9}}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x3, 0x2}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="012127bd5f7000fbdbdf4e148ff0f44c75bc01b4d59ed9c0ca25250000000e00010073696d0000000f0002006e000000000000", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x45a0, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x4}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x8eb8}, @IFLA_WEIGHT={0x8, 0xf, 0x2}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "f88b29b6c356e12a7beef8cfa756cd86"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x54, r9, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x60, 0x800) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 1m36.239342575s ago: executing program 33 (id=603): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9}}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x3, 0x2}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="012127bd5f7000fbdbdf4e148ff0f44c75bc01b4d59ed9c0ca25250000000e00010073696d0000000f0002006e000000000000", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x45a0, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x4}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x8eb8}, @IFLA_WEIGHT={0x8, 0xf, 0x2}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "f88b29b6c356e12a7beef8cfa756cd86"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x54, r9, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x60, 0x800) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 5.915974502s ago: executing program 5 (id=1487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x7a050200) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) listen(r1, 0x7fff) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 5.614739179s ago: executing program 5 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10802, 0x0) sendmsg$tipc(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="cf5447a5fb714ba4b0bdd5b86f60eff49223e3655b5c7a95e773e520408bcf0ebc44a03e4a2622ea6ba332d18b144a6fb3f427fd0c2aa9bf137574b50ffba470c41a4f760ea9d1965b33f428d9827b737258fd334b2b92f4d50d6b9632e825c81c79cd073cd450d6b1ce047239e4e5722b5f3b8abbe78bde2a2a51745f6f613205350ec4a101b231a800c2efd69c419933b089574ff8f1ff4bad9c4ca11e54dcac4c911704ec6c1731274ad3173a1f6ab0a4b1", 0xb3}], 0x1, &(0x7f0000000680)="4a294466f839fdfad4cfd01acfd0790ca5617158cc0aafd7fce1ee550647673d25a3cc9d03575976cef799aff7cfaa0b803a52bb3f68e51c9f9d395c78f9af067d5f78c3105af680de096e1dfa90f3ae42fe40b7074792f37a071ded8c1f6ec9f13388b510cd446d44f6c0ddb8d9e49f41031feee5b614ed8421b847f1f393e7d83c01290d23a20ea23a714c82158e9337b3fe0c58e2e38985d687544a4678239b5799c12026f8888795b62c49fb030177ac8c0d0f82848304af5244833ed5dd980fc4223164bbc17f3b430df28417c49de4cc34b2eef01f8493ee54bb2cea58cea512afab6ded4eacfec5", 0xeb, 0x10}, 0x4000) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x230, 0x1d8, 0x1d8, 0x230, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffffff, 0xff, 'batadv0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x7, {0xb}}}, @common=@icmp={{0x28}, {0x8, "1cdf", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7008, 0x4, [0x22, 0x38, 0x16, 0x35, 0x14, 0x8, 0x3, 0x8, 0x1f, 0x6, 0x2b, 0x1, 0xa, 0x22, 0x15, 0x23], 0x2, 0xb, 0x40000007}}}, {{@uncond, 0x3202, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x7, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) r9 = accept4(r1, &(0x7f00000007c0)=@in, &(0x7f0000000840)=0x80, 0x800) connect$pppl2tp(r9, &(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x2, 0x1, 0x2}}, 0x26) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2], [0x8, 0xb3, 0x5, 0x9, 0x6c]}}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000ecffffff8400000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095000010000000003ab2b4991dbd08ee10cd3b888a4c5c23c7a40d522d48b1778040b0a39758da1e2c4fbc921dd3582d52308016ed1baa791b88a67599e9ea91ac4d9a51923f494f908eaa60bf493c4196ad46ae2a74736340191c2ed7d813598143ba9360e39ee2646264fe80b4019a3b892ee861c105fbf9179dd4504e161f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) close(0xffffffffffffffff) 5.083738507s ago: executing program 5 (id=1496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000005000080850000007d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x20) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg(r3, &(0x7f00000004c0)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @multicast2}, 0x1, 0x2, 0x0, 0x3}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)="6038aa57223c8686141cce7358602e305ef2f0053a5ecb529656d77553faff2c145d1a270f5bb8138d7c17d739e872420ba643ff759bd4597e14f3ac138a7bda73e7f1ee1fc8d0e13bacbb3428403d06ca2756a7295ccbfe5d", 0x59}, {&(0x7f0000000180)="fb3115561f4660c45528488b86a945614fc152208b3f762bc32f552caf4f7a88", 0x20}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="680000000000000084000000000000004a8fb3f02e812d57ccf645ef586aecca6b7406465026830d01d8c94182263af0a4e9b4b86d5ac81e5226b82800502b79c468619329472248693120411359a6aea48da11c78824fc55cba7427f568467a21b09c9db0dfcdb869cf6c6091de085ffe3844214c12ec0a6913490000000000400000000000000006000020ff010000b798d772d88f18cccd748bad533255aa2fa8849c96ee1795f36ebd311016cd27ddc242e9dec82e88876fb2b1bb1c05b618000000000000000600000009"], 0xc0}, 0x75ec615ff8ea1d93) getsockname$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x4c0, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x48c, 0x2, [@TCA_FW_POLICE={0x488, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x8}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0xb, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x1, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x0, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x97, 0x8, 0xfffffffa, {0x14, 0x0, 0x6, 0x200, 0x1, 0x5}, {0x7d, 0x0, 0xfffc, 0x0, 0x21, 0x5}, 0x8, 0x5, 0x3}}]}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.736109951s ago: executing program 5 (id=1505): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000100001e8ffffffffffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x805, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x10f, 0x20, 0x0, 0x7f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 3.274581637s ago: executing program 4 (id=1509): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9", 0x8) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, 0x0, 0x24044195) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1000000000000000840000000800000018000000000000008400000002"], 0x28}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f00000003c0)={0x1f, 0x3, @any, 0xfff9}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061114c0000000000850000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000640)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x10008000}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000008400004803c0001800a0001006d6174636c0000002c0002800d000100636f6e6ead61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a3200000000140000001100010000000000000000000900000a0000000000"], 0x88}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$ppp(r7, &(0x7f00000004c0)="9b2ec04694fdc0db12a55b65093b1f7490232481ce3611984107b04b1c36e9221d3b0b8cc2ace8ee6ea31deec91f744450d9941528f9c8edbe97a4ca1f279d2aece69803e0b253c2c144709708879a12f2a35f5dde2b4b13f3cdf7ea61f17f700a6f1041d408aafeb798d647b295ce90cff04d0563b8572025418b7d37e8159c482fb7b58230f4d536a915388a78786401fab056a02dd30adb2a6fc8237683d6", 0xa0) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002400010325bd7000fcdfffff01000000c7a8e4fb902a53e7fc4eaee77886d461453392c6644ef9079d77a1ea146957b026c390202cd164ce7bb6d6e6d2b014e0217ff998557b53e2ea034c74cb5ed93d"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x1) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0) connect$can_bcm(r8, &(0x7f0000000080)={0x1e}, 0x10) recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)=""/42, 0x2a}], 0x1}, 0x8}], 0x1, 0x2160, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 3.120253489s ago: executing program 6 (id=1510): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x8) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@unspec, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000240)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, 0x0) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0136ff0101010052807f000000010d8b000000000efb02ff00f508f903"], 0x1d) r3 = socket(0x1d, 0x2, 0x6) unshare(0x26020480) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x306}, "0c7c6d2e14ca9b0a", "870b28009db3410e32c3287e76060f9b", "b1cbbc63", "85fac3697c03fa54"}, 0x28) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8, 0x6, 0x8, {{0x11, 0x4, 0x0, 0x7, 0x44, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0x13, 0x69, [@remote, @empty, @loopback, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x37, 0x1, 0x9, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x6}]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) r8 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r8, r7}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98fdffff10000100000004100000000000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000c748aa0b"], 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.039736598s ago: executing program 4 (id=1511): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000740)=""/263, 0xfffffffffffffe47, 0x40000022, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 2.887327208s ago: executing program 4 (id=1513): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB="01800004", @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076005d1a7ded86927d120000030000043d0000000800010002000000"], 0x20}}, 0x0) (async) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, 0x0, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000008000000270d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000030bc75cd839fd1d62b73000000000000000000000000000d00"/38], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) (async) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x3, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0x1, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) (async) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 2.686188604s ago: executing program 5 (id=1516): unshare(0x20000400) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095", @ANYBLOB="3d55e579bbb8752eb441c442cdab98d2e4284678370f0f7812869e10d396601709ffb2ca8a3be984b76c70f9b7ac8894c77aa5f9574e357893703c0e4b980051457613840bbc404829dce3720c931bf56e7d7bf597256544fc30ad97d6c78a264e7a8205a4b2100b7de4de6e8fbaf2928fd2af6dd41c7e6f918dba177ae104d0cc30dc6e0e474b6e2f8d2200790be338355b3751c720de780a7465792a84234333417e0194399c9ef99caf57eb2b8a90423c011116447b0f5e555bae642a962921f6cf801ea7cfe6136436d6597f915163c57fb7283c6eb8e46a9f8625a211de87dbbaa8617b8973bb267042757af59a513abc343b0cf5", @ANYRES64=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x4a919}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1d, 0x300, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, r6, 0x4, 0x4, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LINK_NETNSID={0x8, 0xa, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x70}, 0x800) 2.474102005s ago: executing program 5 (id=1520): socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/4, 0x4}], 0x4}, 0x2002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0xff7c, @remote, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e21, 0xbe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e23, @remote}], 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010203007f0000ab6500000000000000000000000000f9ff"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a4000000ae905000300020000000900020073797a310000000005000100070000007406ef595b885cedabed14949bb79fd19ceea15183fc7f3643c95c0cc0a5dca60f82237f1340e9ed3d1b07ab87aec3f4bdbd0ec21479f80d6f1a9525eab299d4128f3010604b1a80729ac77184c0da8c2a0d2deb1b23a90f2f9dbad198dfc294676cf97c1c67a2ffd1fba69e17662b9ba39e4661f96a0f2ec3bad3dfd8c51fbf8490d7f2b7"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000040601040000000000000002000000010900020073797a310000000005000100070000000500010007000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12, @ANYBLOB="7c5aa286e479f71eb8dd0489ed5cbf591f222622f4e1fbbe3c9d68656792e782bc20576efb0fc2f4771a3d10e84cbaf03f0e2e29394c78873b90f38e68ff006f3ad874f92f43f157a633a3414b82f8bf890c56ed2b5b36ac31267cc8b9c448950e08f4e6c83a089a01bb94b92613f37b5ad4e7b4bd304f"], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 2.157059162s ago: executing program 4 (id=1523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xa2ec9000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 2.155960628s ago: executing program 6 (id=1524): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0, 0x0, 0x8}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x9}}], 0xb0}, 0x24044094) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.096051364s ago: executing program 4 (id=1525): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x401, r1}, 0x38) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) unshare(0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.063836133s ago: executing program 1 (id=1526): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000008f0000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x9, 0x8, 0xffffffff, 0x4a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x50) r3 = socket(0x21, 0x4, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x40, 0x1, 0xd, 0x5, {{0x16, 0x4, 0x0, 0x1, 0x58, 0x64, 0x0, 0x4, 0x0, 0x0, @local, @remote, {[@rr={0x7, 0x1f, 0xa8, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast1, @broadcast, @loopback]}, @lsrr={0x83, 0xb, 0x12, [@remote, @empty]}, @rr={0x7, 0x7, 0xd4, [@broadcast]}, @generic={0x7, 0x11, "b106f75134ec750262294c0d563cd9"}]}}}}}) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x200, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x70482}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa3f94}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x829af}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4009004}, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000980)="fd682c73395be5ea714610d6fbb81ab23b51a0376e97bca81c0d21659b6a8f4a18a9e4da986db7494344e83f3ac676d24266da3146a2e91c78c5ac262278132802334f6d16f3956c7d5fe420bca51185021a8181bdbe02798f7c9890cce0d3f9b9ba09005b6445bce40eeef298941fde7fb633218a7fa86cb9efc0d809d619e3236b8db02f4ce72ba8da0a2c8e0e9339209027a721e26f69e3a65ff23dcd776b02b58b447dddaaf5bca6a1d233d0fbe14f752199bedc12ec196f81f63340e0fea44638c40018b39114ae899f4950a8e3bd125d7b49a38c789c8e61eb2935034140ee6774c648df9b780017fbc53a27a4a54f2ff9b6c907c0faa8f7719fa9a5ef2f6369d4e2783b69cc0befd7d5086cdeb2f4d089fc4619d0bd83038cce0c9f59935e47c730da4b03daaf2995fdce398cabde56b95e52938afe9ffa96cbf23bb415e4587ae578308f3b2a8a9f66a0fbdb286d0f034da6d3fff8b15e07eed4b890adbfd4b494d7789615cc9f247a76566c81ae78cc4bb2175babdb48db843f8ff90daba1612f8f2bf2e3ae2367423ecbbc9ca90c92f205aefde464a766f82bbba8cf0643f7cc66b1445626d572ec5202568c9540b108dd948f7a457c1e445e456e22e18ffa90fbd5d92f2ab48c8b40602c00bfb8c6f5a7bb657648dec386ef5810701fc1489a0234e066e34bf96aca9da8c051dbdd718fc4f514c6885d319c6631ac4eac724be5aa06c476f54c380d4b71866114da46e9cd21120341521525cde4f1d13e34369366d8b4abba855c18dea0fc337e8a7fbc56eb02fb2cc3983d1dc54280d7f2d479ca8f288ddfdf98f5ca2d3d8fc6cd55d44e2a9df8906e4a9436f84355e0495f3390454608875abf0887f4e14ef6424b508095a336323b8e0ac06e166688103902fc5aa0941a83a1fb11d160e7dde80418aba3b88fd546e05566cdefeb16238588712b5dc985640c09b0bec3508701b5cfdf40c0eeb7a152bf4bbc1096969b164d9a789e693714b2633cc5245502197938678ec8ef03bd63a42484978e70e712dcd3643f81746dd2192878a098c7e22a096c1886c6d688c6e1359f5e4b9558ba1c84809cb698bc2e2d7eb6a6cee76b4e5dd2c475466d298c180cefb8bf2615f3fa7ae1cf9ca28aa2bd088af74e4c88d7c20c02661596e4ba5f5a1e8e63a845d35e58ceeb19f7f2febfe2c315717a8dbbdc39c53820fe7f893ee5f991a663a946913e1a368dcf6677b673e9ed13dfdc8f78044ec84a9456665e621a532815271d97545a45cdcc2f09c7976c4d6d1fe763cd8dfbfa9b2be675ddaf26b6b961c26035a8e7ce422e3be6db318f3affef64c9588769ddbbd07338c5995e7d98051cd82e65f40d60133218a82ccd6a8962e14e2da94653e644bc53415d4971c6b731a8a52a4b3ceb5745fb2e60c02da42063ecc0dab8c9e7e76c988dc2f77fe48f9349db4dc23f5c38c3dac838c2349efd9d364eabffc618d4dc1a739ba09736c97766233601ee29d2f869ed440caf70851bbdaf5ff129ae602879fbce79aab897e68b0ca372e6b10f00ae58081a6f69411ad497546c947477298f65f08f12c2e3c67366e2fd3c2d6c368cd5b06c5ba681aa9213b2511d77dfe48b449b64ba2c481570f551b8f983cff16f44fe5e4ed1b395e3738257567290646d278dd9ed245ff3602e5cb588da7bc4dc400bedb67d86b797ae5f45df5fb179d01dd475e51b484e985a9ecd7165168f7cbfb97bad74db506d58c3092b3f9ba23cd8174333f39a9ce44a884ada6e69e6b86513be304eaebb4a5449e2da1232379b62fc4fac44c7a5eb5eec37814e4bf476494c864806e54563281c0eb1f6fe8b8226844859cb3a13ebd1c74968fe2d86405639c0f69a4f42b0ceb1fff1f1e7369d8e71dc9a1f5897f891139f739e1b3242a2746e11719bc1f0f7242a39bc3ad5e2e4f7666605c2fc365918f0222d30a5560d1b975df92e3124452a5844aa57f84f99c5682b81bb75a40df482edc00281a293cf92b307b41fd87cf8b8ce90678a51c9638dc2f61787f43b416e714e648e24", 0x5ad}], 0x1, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}}], 0x1, 0x880) 1.963604557s ago: executing program 6 (id=1527): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) connect$x25(r0, &(0x7f0000000080), 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}}, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000100)={0x39, "4359dadf0ce35335784119fba74a554efe3fb9323981c93911ca7142df2353296c55a9619d53bc4356b86f4e52a13d51587bbe4afaaca41da3c21e04ce75e109b40b3ffdea49f1a0a4d4a16fe911a103084f00fce1f1885267380e2c57600e2dbcb35945624cc9490ea4c3f5c4987c4a31c52aaeee630281dd320239b9737945"}) 1.85833838s ago: executing program 1 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="40000000100001042abd70000020000000000000", @ANYRES32=0x0, @ANYBLOB="c683060098540b00200012800e00010069703665727370616e0000000c00028006000200ff"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000211"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.857664008s ago: executing program 6 (id=1529): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) accept$unix(r3, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.720691003s ago: executing program 1 (id=1530): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x2, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x74e}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080c4}, 0x4000014) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8001}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x48000) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc090) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xef6f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000001) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r11, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000}, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) sendmmsg(r12, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[{0x100, 0x108, 0x2, "6bce0c79e0be2a10bcf4bc5bb07a724e538674b3e1e69bffeed333823c7c25b38f104185bf1d1de3dcf655573b8845adcfc6dcb04962b84d9f37e4e07a6a2bc351a9b71739c6e7bceb543a1d2d8f72ae5c4ce35a58c5314df9b4cee72414b330e8ddd1be0e500e5d1efc9fa89d5ff678f2b16900f6432b0bc363678fb05bc4eb3c713d3d7bf5292bf3f8f154b81f86a7efea90a18bbd06fd81651720c4ee05db6a31de3cf4e7f282430a4afb064aeb70166f112c4bdc113b8ccb51f9ea5095ea63640f5b98158a30d84f8fef6d44c99d7092125c615c765488b52fe0231fadc12cd3fa331cf379a5ad44c4fd92cf46"}, {0x70, 0x103, 0x4, "b6e0da352256795a10b273d0d3e3ca1b1bd9bdf67785a3732ec3dde0ded704e57c4a5b41f315851be3d1054f1145da11830a8e9b9afe94d358b5030b30c5927fe685012e175c2d53fd9a521dabc87f641e92e8a428e95e8318b491163e39"}, {0x1010, 0x109, 0x800, "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"}, {0x50, 0x114, 0x81, "040715d8ee61cc7f81f53e5dbc7242cca10a29e079277613ec7547b0b325d1d79f5a6faa249bedb370a446dd83fdefec0d05c5acaad6409f92"}], 0x11d0}}], 0x1, 0x20000010) (async) connect$pppl2tp(r10, &(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x0, 0x4, {0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3ff}}}, 0x3a) (async) sendmsg$kcm(r9, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="a13a1039155ca79f27d314c4240ccbe45b6924a522a8835bc4888104e6f69a7ffb21a001e377e0418097d8305852ad4d53c0f2cd26250642ffb09406", 0x3c}, {&(0x7f0000002c00)="7f2f3b3f78bf3907893c59fff028fea670b4736ad828f1073ad28a67255fca7a21ecb35d14167703cb82bf0dcbb991ba453a115326d79d7b6d425369e69ce8f036fef1594522df4b9dc5cd80a036e3eecd4b6dd5dbfb28ce7e778d475f5ee1514856ca510e4941a6b24d293c14b027d08c030a5802929e5ec21b2c8f2a6e0dede63662369595163a4c36b76c88b46b949cacd00d9b1303c698d06988c9dde625b6bf0831b7063925188959c3bf6de7ae9edac74e01b33fed730fecaeb0b1357522f7adbb50870fa27818d5761e2bae36263e6a0a66347dfd17b71f614f9e4f0c3947622a8cbff629c9dedbe14c13d2a88ff8", 0xf2}], 0x3}, 0x4000000) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), r10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x28, r13, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002ec0)={r3, 0x9, 0x7, 0x6}) ioctl$sock_bt_hidp_HIDPCONNADD(r14, 0x400448c8, &(0x7f0000002f80)={r8, r1, 0x40, 0x5f, &(0x7f0000002f00)="51fafb9f48c918d5249a916bbc46ff480e2f8652e91593b829364e7c78f5af3d4f06a01563da89eb4f3f4d31972d9eafb15ba010a30e8a64bf54d4dd75e7af57e39c5daa908b289aa7443e7c455d3bc2b9e0856efd2e058ee7e332bf6951f0", 0x80, 0x0, 0x68, 0x2, 0xc53, 0x1, 0x8, 'syz1\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000004) 1.551772358s ago: executing program 1 (id=1531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}, 0x1, 0x4000000}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r7], 0x448}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r9 = socket$kcm(0xa, 0x0, 0x3a) sendmsg$kcm(r9, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)="a0e231ac", 0x4}, {0x0}], 0x2}, 0x20000000) 1.304794709s ago: executing program 4 (id=1533): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000100)={{r2}, r3, 0x0, @unused=[0x0, 0x9, 0x8, 0x10], @devid}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001180)={0x5, 0x7, 0x7a, &(0x7f0000001100)=""/122}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x21, 0x8, 0x7, 0xfffffff8, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x5, 0x4, 0x2}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001400)={0x10001, 0x0}, 0x8) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001440)={0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x9, 0x11, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001300)='syzkaller\x00', 0x4, 0x72, &(0x7f0000001340)=""/114, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x3, 0x6, 0x7, 0x20a50}, 0x10, r5, r6, 0x0, 0x0, 0x0, 0x10, 0xa9}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000001540)=0x5, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001580)=0xa, &(0x7f00000015c0)=0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/49, 0x31, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xa0, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3f}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9d}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x50) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f00000017c0)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000018c0)={r2, &(0x7f0000001800)="c35ee58f775118ee3c7716082efc3bb3ab4d1e054906e379e95d61404491097569f968ef86c9e2b90deefc7d03619a43f707315f28f76acfaf1abc663e639694659c9ec29fcd", &(0x7f0000001880)=""/15, 0x4}, 0x20) r10 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001900), 0x800) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000001940)=@req={0x4, 0x7, 0x9, 0x17}, 0x10) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r11, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x10, 0x3f5, 0x200, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x80) getpeername$packet(r10, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001ac0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000001b00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5c, r12}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001b40)={'bridge0\x00', 0x1}) pipe(&(0x7f0000001b80)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r13, 0x111, 0x2, 0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000001bc0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff, 0x8, 0x7, 0x400, 0x26465bbf, 0x2000010, r12}) socket$packet(0x11, 0x2, 0x300) 1.206152246s ago: executing program 3 (id=1534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20800008}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) 1.058390571s ago: executing program 6 (id=1535): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c04", 0x1d) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000ec0)={'veth0_vlan\x00', 0x6}) (async, rerun: 64) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (rerun: 64) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) r3 = socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000000), 0x0, 0x488d0) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async, rerun: 32) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) shutdown(r5, 0x1) (rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.055406128s ago: executing program 3 (id=1536): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001400020029bd7000b1970000000000000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x33d3948374ee73f4}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4040011}, 0xc000) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c7465720000000000000000100000000000000000000000000000000000020000000000000000000000000000000000000000000000000000006c2d71a9b6e7a8deaa2b0000"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090025bd7000000000000400000008001a80"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000880)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000001200)={0x60000010}) r7 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1a000, r7, &(0x7f00000002c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806000186dd06100008aaaaaaaaaaaafc020000000000000000000000000000bbbbbbbbbbbb00000000000000000000000000000001f2041c7040d0d0b02d6d026b40b5ee9a6f51fcfdaf4cb8908d766938cb8338f9f7ef8bbbc91794712b1094603907f0cf49cf6a5da60cbf42746e21aeaa97eaec"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1fffffffffffffcd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000900000000000000002020702500000000002020207b0af8ff00000200bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095", @ANYRESDEC, @ANYRES16, @ANYRES64=r8], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r11}, 0x10) socket(0x11, 0xa, 0x5) socket(0x2, 0x80805, 0x0) 913.309164ms ago: executing program 1 (id=1537): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0, 0x0, 0x8}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x9}}], 0xb0}, 0x24044094) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 780.053973ms ago: executing program 1 (id=1538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0xa6a, 0x6361, 0x805, 0x9, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008050}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) connect$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000)=0x9e, 0x4) listen(r8, 0xda90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r8, 0x0, 0x0, 0x0) 566.501453ms ago: executing program 3 (id=1539): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000001c0), &(0x7f0000000280)='%pB \x00'}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r5, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x96, &(0x7f0000000400)=""/150, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, r0, 0x1], 0x0, 0x10, 0xf98}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x96, &(0x7f0000000400)=""/150, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, r0, 0x1], 0x0, 0x10, 0xf98}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r0, r6}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r0, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x5, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x10, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x400c010) 426.563846ms ago: executing program 3 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1015, &(0x7f0000002500)=""/4117, 0x0, 0x2a}, 0x94) 321.119942ms ago: executing program 3 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000240)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000600a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 84.279148ms ago: executing program 3 (id=1542): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc4106(aegis128-aesni))\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000), &(0x7f00000002c0)=0x8) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=1543): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x90) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001900010026bd7000000000000a000000fd04000b0000000005001400030000001800168014000100010000000000000038000400054006000c00090008"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) (async) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 07ffcc8d7ec78 [ 108.758842][ T7099] [ 109.327172][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 109.393710][ T7122] netem: unknown loss type 0 [ 109.437329][ T7122] netem: change failed [ 109.974152][ T7148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.260'. [ 110.067184][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 110.146488][ T7154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.196389][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.215242][ T7153] bond1: (slave bond0): Enslaving as an active interface with an up link [ 110.224882][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 110.233985][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 110.540582][ T7162] bond1 (unregistering): (slave bond0): Releasing backup interface [ 110.556667][ T7162] bond1 (unregistering): Released all slaves [ 111.036748][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 111.040972][ T7205] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.061127][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 111.093834][ T7208] FAULT_INJECTION: forcing a failure. [ 111.093834][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 111.128325][ T7208] CPU: 1 UID: 0 PID: 7208 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT(full) [ 111.128348][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.128358][ T7208] Call Trace: [ 111.128364][ T7208] [ 111.128371][ T7208] dump_stack_lvl+0x189/0x250 [ 111.128395][ T7208] ? __pfx____ratelimit+0x10/0x10 [ 111.128417][ T7208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.128436][ T7208] ? __pfx__printk+0x10/0x10 [ 111.128450][ T7208] ? __sock_sendmsg+0x21c/0x270 [ 111.128471][ T7208] ? do_syscall_64+0xfa/0xfa0 [ 111.128502][ T7208] should_fail_ex+0x414/0x560 [ 111.128529][ T7208] should_failslab+0xa8/0x100 [ 111.128548][ T7208] kmem_cache_alloc_noprof+0x74/0x6e0 [ 111.128571][ T7208] ? skb_clone+0x212/0x3a0 [ 111.128595][ T7208] skb_clone+0x212/0x3a0 [ 111.128631][ T7208] __netlink_deliver_tap+0x404/0x850 [ 111.128663][ T7208] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.128682][ T7208] netlink_deliver_tap+0x19c/0x1b0 [ 111.128701][ T7208] netlink_sendskb+0x68/0x140 [ 111.128727][ T7208] netlink_unicast+0x397/0x9e0 [ 111.128755][ T7208] ? __asan_memcpy+0x40/0x70 [ 111.128782][ T7208] ? __pfx_netlink_unicast+0x10/0x10 [ 111.128814][ T7208] netlink_rcv_skb+0x28c/0x470 [ 111.128832][ T7208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.128850][ T7208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.128879][ T7208] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.128903][ T7208] netlink_unicast+0x82f/0x9e0 [ 111.128934][ T7208] ? __pfx_netlink_unicast+0x10/0x10 [ 111.128960][ T7208] ? netlink_sendmsg+0x642/0xb30 [ 111.128975][ T7208] ? skb_put+0x11b/0x210 [ 111.128996][ T7208] netlink_sendmsg+0x805/0xb30 [ 111.129024][ T7208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.129044][ T7208] ? aa_sock_msg_perm+0xf1/0x1d0 [ 111.129069][ T7208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.129084][ T7208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.129102][ T7208] __sock_sendmsg+0x21c/0x270 [ 111.129127][ T7208] ____sys_sendmsg+0x505/0x830 [ 111.129153][ T7208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.129184][ T7208] ? import_iovec+0x74/0xa0 [ 111.129208][ T7208] ___sys_sendmsg+0x21f/0x2a0 [ 111.129229][ T7208] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.129295][ T7208] ? __fget_files+0x2a/0x420 [ 111.129311][ T7208] ? __fget_files+0x3a0/0x420 [ 111.129338][ T7208] __x64_sys_sendmsg+0x19b/0x260 [ 111.129359][ T7208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.129388][ T7208] ? __pfx_ksys_write+0x10/0x10 [ 111.129415][ T7208] ? do_syscall_64+0xbe/0xfa0 [ 111.129441][ T7208] do_syscall_64+0xfa/0xfa0 [ 111.129463][ T7208] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.129486][ T7208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.129502][ T7208] ? clear_bhb_loop+0x60/0xb0 [ 111.129522][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.129538][ T7208] RIP: 0033:0x7f1088d8f6c9 [ 111.129553][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.129566][ T7208] RSP: 002b:00007f1089d05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.129585][ T7208] RAX: ffffffffffffffda RBX: 00007f1088fe5fa0 RCX: 00007f1088d8f6c9 [ 111.129597][ T7208] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 111.129608][ T7208] RBP: 00007f1089d05090 R08: 0000000000000000 R09: 0000000000000000 [ 111.129618][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.129628][ T7208] R13: 00007f1088fe6038 R14: 00007f1088fe5fa0 R15: 00007ffe635da4a8 [ 111.129658][ T7208] [ 111.304797][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 111.571272][ T7210] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.767056][ T7219] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.282'. [ 111.787223][ T7219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.282'. [ 112.017887][ T7231] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 112.029442][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 112.086753][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.109036][ T7231] bond0: (slave team0): Enslaving as an active interface with an up link [ 112.150176][ T7233] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 112.158973][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 112.187515][ T7234] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 112.210994][ T7234] dvmrp1: linktype set to 774 [ 112.371530][ T7237] vxcan4: entered allmulticast mode [ 112.673908][ T7244] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.840107][ T7257] ip6gretap1: entered allmulticast mode [ 112.853428][ T7257] bridge0: port 3(ip6gretap1) entered blocking state [ 112.863784][ T7257] bridge0: port 3(ip6gretap1) entered disabled state [ 112.878493][ T7257] ip6gretap1: entered promiscuous mode [ 112.969022][ T7262] FAULT_INJECTION: forcing a failure. [ 112.969022][ T7262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.023699][ T7262] CPU: 0 UID: 0 PID: 7262 Comm: syz.2.291 Not tainted syzkaller #0 PREEMPT(full) [ 113.023721][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.023731][ T7262] Call Trace: [ 113.023738][ T7262] [ 113.023745][ T7262] dump_stack_lvl+0x189/0x250 [ 113.023771][ T7262] ? __pfx____ratelimit+0x10/0x10 [ 113.023794][ T7262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.023816][ T7262] ? __pfx__printk+0x10/0x10 [ 113.023846][ T7262] should_fail_ex+0x414/0x560 [ 113.023876][ T7262] _copy_to_user+0x31/0xb0 [ 113.023900][ T7262] simple_read_from_buffer+0xe1/0x170 [ 113.023929][ T7262] proc_fail_nth_read+0x1b3/0x220 [ 113.023954][ T7262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.023979][ T7262] ? rw_verify_area+0x2a6/0x4d0 [ 113.023999][ T7262] ? __lock_acquire+0xab9/0xd20 [ 113.024015][ T7262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.024037][ T7262] vfs_read+0x200/0xa30 [ 113.024057][ T7262] ? fdget_pos+0x247/0x320 [ 113.024077][ T7262] ? __pfx___mutex_lock+0x10/0x10 [ 113.024093][ T7262] ? __pfx_vfs_read+0x10/0x10 [ 113.024115][ T7262] ? __fget_files+0x2a/0x420 [ 113.024135][ T7262] ? __fget_files+0x3a0/0x420 [ 113.024150][ T7262] ? __fget_files+0x2a/0x420 [ 113.024174][ T7262] ksys_read+0x145/0x250 [ 113.024199][ T7262] ? __pfx_ksys_read+0x10/0x10 [ 113.024224][ T7262] ? do_syscall_64+0xbe/0xfa0 [ 113.024251][ T7262] do_syscall_64+0xfa/0xfa0 [ 113.024271][ T7262] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.024294][ T7262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.024310][ T7262] ? clear_bhb_loop+0x60/0xb0 [ 113.024337][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.024353][ T7262] RIP: 0033:0x7fb16358e0dc [ 113.024368][ T7262] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.024381][ T7262] RSP: 002b:00007fb16433e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.024399][ T7262] RAX: ffffffffffffffda RBX: 00007fb1637e5fa0 RCX: 00007fb16358e0dc [ 113.024411][ T7262] RDX: 000000000000000f RSI: 00007fb16433e0a0 RDI: 0000000000000004 [ 113.024420][ T7262] RBP: 00007fb16433e090 R08: 0000000000000000 R09: 0000000000000000 [ 113.024430][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.024439][ T7262] R13: 00007fb1637e6038 R14: 00007fb1637e5fa0 R15: 00007ffd5056e7e8 [ 113.024471][ T7262] [ 113.617554][ T7239] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.767037][ T7275] bridge_slave_1: left allmulticast mode [ 113.794657][ T7275] bridge_slave_1: left promiscuous mode [ 113.800454][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.840107][ T7275] bridge_slave_0: left allmulticast mode [ 113.856226][ T7275] bridge_slave_0: left promiscuous mode [ 113.861278][ T7281] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 113.866169][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.364000][ T7294] netlink: 'syz.2.301': attribute type 64 has an invalid length. [ 114.992393][ T7309] __nla_validate_parse: 10 callbacks suppressed [ 114.992410][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 115.065576][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 115.098857][ T7318] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 115.175444][ T7318] team1: entered promiscuous mode [ 115.180636][ T7318] team1: entered allmulticast mode [ 115.211535][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 115.212989][ T7323] ip6_vti0 speed is unknown, defaulting to 1000 [ 115.514674][ T7340] tipc: New replicast peer: 255.255.255.255 [ 115.527270][ T7340] tipc: Enabled bearer , priority 10 [ 115.545648][ T7340] netlink: 'syz.4.313': attribute type 11 has an invalid length. [ 115.561250][ T7340] netlink: 'syz.4.313': attribute type 11 has an invalid length. [ 115.572767][ T7340] netlink: 224 bytes leftover after parsing attributes in process `syz.4.313'. [ 115.658293][ T7344] bridge2: entered promiscuous mode [ 115.663656][ T7344] bridge2: entered allmulticast mode [ 116.128437][ T7367] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 116.171148][ T7362] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 116.329763][ T7362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.370876][ T7370] bond1: (slave ip6gretap1): making interface the new active one [ 116.410014][ T7370] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 116.524700][ T5938] tipc: Node number set to 2506918272 [ 116.552614][ T7375] veth3: entered promiscuous mode [ 116.578875][ T7375] bond1: (slave veth3): Enslaving as an active interface with a down link [ 116.607815][ T7362] erspan0: entered allmulticast mode [ 116.637627][ T7362] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 116.671317][ T7388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 117.141724][ T7395] batadv0: entered promiscuous mode [ 117.153692][ T7395] vlan2: entered promiscuous mode [ 117.250714][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 117.306583][ T7409] team0: Device is already in use. [ 117.511480][ T7411] syzkaller0: entered promiscuous mode [ 117.552075][ T7411] syzkaller0: entered allmulticast mode [ 117.611942][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 118.014800][ T7434] ip6_vti0 speed is unknown, defaulting to 1000 [ 118.242929][ T7444] bond2: (slave bond_slave_1): Device is not our slave [ 118.296500][ T7444] bond2: option active_slave: invalid value (bond_slave_1) [ 118.407126][ T7444] bond2 (unregistering): Released all slaves [ 118.676569][ T7464] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 118.975024][ T7466] tipc: Enabling of bearer rejected, failed to enable media [ 119.001071][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 119.121652][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 119.142975][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 119.323311][ T7483] ip6gretap1: left promiscuous mode [ 119.343763][ T7483] bridge0: port 3(ip6gretap1) entered disabled state [ 119.412476][ T7483] bridge_slave_1: left allmulticast mode [ 119.483697][ T7483] bridge_slave_1: left promiscuous mode [ 119.573820][ T7483] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.595749][ T7483] bridge_slave_0: left allmulticast mode [ 119.601420][ T7483] bridge_slave_0: left promiscuous mode [ 119.638128][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.181753][ T7514] bridge_slave_1: entered promiscuous mode [ 120.313806][ T7523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'. [ 120.519758][ T7525] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 120.593020][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.350'. [ 121.147470][ T199] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.169009][ T199] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.208589][ T199] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.353662][ T199] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.472847][ T7553] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.083310][ T7580] syzkaller0: entered promiscuous mode [ 122.089164][ T7580] syzkaller0: entered allmulticast mode [ 122.099573][ T7582] raw_sendmsg: syz.1.365 forgot to set AF_INET. Fix it! [ 122.106102][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 122.115663][ T7580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.364'. [ 122.125094][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 122.490505][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 122.512270][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 122.759736][ T7599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.370'. [ 122.769116][ T7600] netlink: 'syz.4.370': attribute type 21 has an invalid length. [ 123.196089][ T7620] syzkaller0: entered promiscuous mode [ 123.201599][ T7620] syzkaller0: entered allmulticast mode [ 123.220181][ T7616] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 123.247004][ T7616] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 123.417905][ T7628] netlink: 1 bytes leftover after parsing attributes in process `syz.2.377'. [ 123.506288][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 123.920961][ T7650] netlink: 'syz.0.381': attribute type 10 has an invalid length. [ 123.943573][ T7650] batadv_slave_1: entered promiscuous mode [ 123.949639][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.983594][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.092407][ T7624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.778534][ T7680] ip6_vti0 speed is unknown, defaulting to 1000 [ 125.761025][ T7713] netlink: 'syz.2.398': attribute type 16 has an invalid length. [ 126.009569][ T7721] __nla_validate_parse: 8 callbacks suppressed [ 126.009586][ T7721] netlink: 96 bytes leftover after parsing attributes in process `syz.0.401'. [ 126.027849][ T7720] netlink: 96 bytes leftover after parsing attributes in process `syz.0.401'. [ 126.197592][ T7725] netlink: 'syz.2.402': attribute type 3 has an invalid length. [ 126.205897][ T7725] netlink: 'syz.2.402': attribute type 3 has an invalid length. [ 126.605667][ T7737] ip6_vti0 speed is unknown, defaulting to 1000 [ 126.657152][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 127.517715][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 127.554172][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 127.779535][ T7768] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 128.382562][ T7777] netlink: 'syz.4.417': attribute type 3 has an invalid length. [ 128.415952][ T7777] netlink: 'syz.4.417': attribute type 3 has an invalid length. [ 128.455741][ T7779] netlink: 'syz.4.417': attribute type 3 has an invalid length. [ 128.468294][ T7779] netlink: 'syz.4.417': attribute type 3 has an invalid length. [ 128.486731][ T7782] tipc: Started in network mode [ 128.491889][ T7782] tipc: Node identity ae717597b42d, cluster identity 4711 [ 128.499994][ T7782] tipc: Enabled bearer , priority 0 [ 128.578574][ T7775] tipc: Resetting bearer [ 128.681562][ T7792] dummy0: entered promiscuous mode [ 128.693848][ T7792] macsec1: entered promiscuous mode [ 128.699718][ T7792] macsec1: entered allmulticast mode [ 128.714886][ T7792] dummy0: entered allmulticast mode [ 128.745751][ T7792] dummy0: left allmulticast mode [ 128.751574][ T7792] dummy0: left promiscuous mode [ 129.033121][ T7802] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.065064][ T7804] netlink: 1 bytes leftover after parsing attributes in process `syz.2.426'. [ 129.153320][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 129.173897][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.428'. [ 129.243785][ T7817] netlink: 14 bytes leftover after parsing attributes in process `syz.0.429'. [ 129.273092][ T7815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.340586][ T7815] bond0: (slave bond2): Enslaving as an active interface with an up link [ 129.388587][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.429'. [ 129.553066][ T7817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.573357][ T7817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.596490][ T7817] bond0 (unregistering): (slave bond2): Releasing backup interface [ 129.603659][ T24] tipc: Node number set to 442267031 [ 129.622278][ T7817] bond0 (unregistering): Released all slaves [ 129.729339][ T7837] Bluetooth: MGMT ver 1.23 [ 130.139331][ T7863] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 130.339993][ T7875] netlink: 'syz.1.440': attribute type 6 has an invalid length. [ 130.357485][ T7876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.364968][ T7876] IPv6: NLM_F_CREATE should be set when creating new route [ 130.807621][ T7898] netlink: 'syz.0.446': attribute type 13 has an invalid length. [ 130.825976][ T7898] netlink: 'syz.0.446': attribute type 17 has an invalid length. [ 130.875462][ T7898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.913823][ T5897] ip6_vti0 speed is unknown, defaulting to 1000 [ 130.920105][ T5897] syz2: Port: 1 Link ACTIVE [ 130.964127][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.225601][ T7912] bond1: entered promiscuous mode [ 131.230668][ T7912] bond1: entered allmulticast mode [ 131.426772][ T7912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.542585][ T7925] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.762846][ T7941] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 131.878542][ T7941] __nla_validate_parse: 4 callbacks suppressed [ 131.878559][ T7941] netlink: 88 bytes leftover after parsing attributes in process `syz.0.457'. [ 132.116031][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 132.256971][ T5897] IPVS: starting estimator thread 0... [ 132.259261][ T7949] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.262910][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'. [ 132.315311][ T30] audit: type=1800 audit(1762677791.379:2): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.458" name="blkio.bfq.time_recursive" dev="tmpfs" ino=461 res=0 errno=0 [ 132.365882][ T7958] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 132.404285][ T7956] IPVS: using max 31 ests per chain, 74400 per kthread [ 132.454968][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 132.602272][ T7958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.744520][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.752456][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.995566][ T7978] netlink: 'syz.4.464': attribute type 13 has an invalid length. [ 133.004296][ T7978] netlink: 'syz.4.464': attribute type 17 has an invalid length. [ 133.079805][ T7995] netlink: 128 bytes leftover after parsing attributes in process `syz.2.466'. [ 133.146830][ T7993] netlink: 412 bytes leftover after parsing attributes in process `syz.0.467'. [ 133.223014][ T7993] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.467'. [ 133.279230][ T8003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.466'. [ 133.361077][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 133.458335][ T7978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.491170][ T8010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.468'. [ 133.515877][ T7978] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.579621][ T7978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.701418][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.753945][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.769857][ T7997] ip6_vti0 speed is unknown, defaulting to 1000 [ 134.074156][ T8023] xt_TCPMSS: Only works on TCP SYN packets [ 134.317554][ T5938] IPVS: starting estimator thread 0... [ 134.457608][ T8030] IPVS: using max 35 ests per chain, 84000 per kthread [ 134.970597][ T8049] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.671323][ T8080] netlink: 'syz.2.479': attribute type 13 has an invalid length. [ 135.692737][ T8080] netlink: 'syz.2.479': attribute type 17 has an invalid length. [ 135.751708][ T8080] erspan0: left allmulticast mode [ 135.881497][ T8080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.898571][ T8080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.962282][ T8072] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.718439][ T8103] netlink: 'syz.2.483': attribute type 10 has an invalid length. [ 137.540760][ T8128] ip6_vti0 speed is unknown, defaulting to 1000 [ 137.753268][ T8134] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 137.761491][ T8134] __nla_validate_parse: 3 callbacks suppressed [ 137.761506][ T8134] netlink: 224 bytes leftover after parsing attributes in process `syz.4.491'. [ 138.117196][ T8151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.496'. [ 138.440702][ T8165] syz_tun: entered allmulticast mode [ 138.447014][ T8159] syz.3.498 (8159) used greatest stack depth: 16952 bytes left [ 138.516396][ T8165] syz_tun: left allmulticast mode [ 138.542386][ T8165] dvmrp1: entered allmulticast mode [ 138.553714][ T8169] tc_dump_action: action bad kind [ 138.575191][ T8170] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 138.692921][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 138.756517][ T8177] tipc: New replicast peer: 255.255.255.255 [ 138.775972][ T8177] tipc: Enabled bearer , priority 10 [ 138.783193][ T8178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.502'. [ 138.800762][ T8178] netlink: 34 bytes leftover after parsing attributes in process `syz.2.502'. [ 138.810769][ T8177] netlink: 'syz.3.504': attribute type 11 has an invalid length. [ 138.839188][ T8177] netlink: 'syz.3.504': attribute type 11 has an invalid length. [ 138.876035][ T8177] netlink: 224 bytes leftover after parsing attributes in process `syz.3.504'. [ 139.242156][ T8193] bridge2: entered promiscuous mode [ 139.247673][ T8193] bridge2: entered allmulticast mode [ 139.256113][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 139.268207][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 139.281156][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 139.293140][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 139.310444][ T8196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.343088][ T8147] infiniband !yz!: set active [ 139.363640][ T8147] infiniband !yz!: added team_slave_0 [ 139.370211][ T8147] !yz!: rxe_create_cq: returned err = -12 [ 139.401788][ T8147] infiniband !yz!: Couldn't create ib_mad CQ [ 139.413302][ T8147] infiniband !yz!: Couldn't open port 1 [ 139.629841][ T8147] RDS/IB: !yz!: added [ 139.640473][ T8147] smc: adding ib device !yz! with port count 1 [ 139.681110][ T8147] smc: ib device !yz! port 1 has no pnetid [ 139.754551][ T8208] macsec1: entered allmulticast mode [ 139.776045][ T8208] macsec0: entered allmulticast mode [ 139.791641][ T8208] veth1_macvtap: entered allmulticast mode [ 140.072216][ T8231] netlink: 'syz.3.514': attribute type 83 has an invalid length. [ 140.073110][ T8230] netlink: 'syz.2.515': attribute type 2 has an invalid length. [ 140.634202][ T8248] netlink: zone id is out of range [ 140.639442][ T8248] netlink: zone id is out of range [ 140.663694][ T8248] netlink: zone id is out of range [ 140.668832][ T8248] netlink: zone id is out of range [ 140.707796][ T8248] netlink: zone id is out of range [ 140.722815][ T8248] netlink: zone id is out of range [ 140.755408][ T8248] netlink: zone id is out of range [ 140.773660][ T8248] netlink: zone id is out of range [ 140.785198][ T8248] netlink: zone id is out of range [ 141.161409][ T8277] netlink: 'syz.3.522': attribute type 8 has an invalid length. [ 141.299072][ T8285] syz_tun: entered allmulticast mode [ 141.445645][ T8285] syz_tun: left allmulticast mode [ 141.460573][ T8285] Bluetooth: MGMT ver 1.23 [ 141.720279][ T8298] ipvlan0: entered promiscuous mode [ 141.737772][ T8298] ipvlan0: left promiscuous mode [ 142.147635][ T8309] tipc: Enabling of bearer rejected, failed to enable media [ 142.700938][ T8331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.739640][ T8331] bond0: (slave bond4): Enslaving as an active interface with an up link [ 142.872641][ T8344] bond2: entered promiscuous mode [ 142.904998][ T8344] bond2: entered allmulticast mode [ 142.925196][ T8344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.098196][ T8351] __nla_validate_parse: 20 callbacks suppressed [ 143.098213][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.537'. [ 143.113889][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.537'. [ 143.132736][ T8351] netlink: 180 bytes leftover after parsing attributes in process `syz.3.537'. [ 143.587926][ T8368] smc: removing ib device syz2 [ 143.658965][ T8374] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 143.679787][ T8374] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 143.772053][ T8374] xt_TCPMSS: Only works on TCP SYN packets [ 143.977504][ T8376] geneve2: entered promiscuous mode [ 144.004465][ T8376] geneve2: entered allmulticast mode [ 144.070586][ T8389] sit0: entered promiscuous mode [ 144.089555][ T8389] netlink: 'syz.4.544': attribute type 1 has an invalid length. [ 144.118887][ T8389] netlink: 1 bytes leftover after parsing attributes in process `syz.4.544'. [ 145.142350][ T8414] netlink: 'syz.2.553': attribute type 23 has an invalid length. [ 145.606049][ T8424] sit1: entered promiscuous mode [ 146.014574][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 146.115965][ T8444] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 146.458923][ T8438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.715688][ T8438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.892150][ T8438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.946830][ T8455] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 147.016823][ T8438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.222435][ T3555] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.275912][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.329086][ T68] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.362073][ T68] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.551898][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 147.584253][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 147.657615][ T8489] x_tables: duplicate underflow at hook 4 [ 147.718004][ T8489] vlan2: entered promiscuous mode [ 147.723070][ T8489] geneve1: entered promiscuous mode [ 147.754820][ T8489] vlan2: entered allmulticast mode [ 147.764430][ T8489] geneve1: entered allmulticast mode [ 148.587010][ T8530] GUP no longer grows the stack in syz.1.586 (8530): 200000003000-20000000a000 (200000001000) [ 148.597697][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.1.586 Not tainted syzkaller #0 PREEMPT(full) [ 148.597721][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.597732][ T8530] Call Trace: [ 148.597739][ T8530] [ 148.597747][ T8530] dump_stack_lvl+0x189/0x250 [ 148.597781][ T8530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.597804][ T8530] ? __pfx__printk+0x10/0x10 [ 148.597820][ T8530] ? find_vma+0xe7/0x160 [ 148.597856][ T8530] __get_user_pages+0x2470/0x2a00 [ 148.597905][ T8530] ? __gup_longterm_locked+0xc63/0x1660 [ 148.597927][ T8530] ? down_read_killable+0x1d1/0x350 [ 148.597962][ T8530] __gup_longterm_locked+0xde4/0x1660 [ 148.597991][ T8530] ? try_grab_folio_fast+0x1bf/0x6a0 [ 148.598025][ T8530] ? gup_fast_fallback+0x1b86/0x22d0 [ 148.598050][ T8530] gup_fast_fallback+0x1d65/0x22d0 [ 148.598112][ T8530] ? __pfx_gup_fast_fallback+0x10/0x10 [ 148.598131][ T8530] ? __mutex_lock+0x335/0x1350 [ 148.598158][ T8530] ? is_valid_gup_args+0x11f/0x200 [ 148.598182][ T8530] ? get_user_pages_fast+0x4d/0xb0 [ 148.598205][ T8530] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 148.598236][ T8530] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 148.598254][ T8530] ? wait_for_space+0x248/0x2d0 [ 148.598274][ T8530] iov_iter_get_pages2+0x5e/0xa0 [ 148.598300][ T8530] __se_sys_vmsplice+0x548/0x10d0 [ 148.598328][ T8530] ? futex_private_hash_put+0x4b/0x280 [ 148.598357][ T8530] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 148.598378][ T8530] ? __pfx_futex_wake+0x10/0x10 [ 148.598458][ T8530] ? do_syscall_64+0xbe/0xfa0 [ 148.598486][ T8530] do_syscall_64+0xfa/0xfa0 [ 148.598509][ T8530] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.598531][ T8530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.598548][ T8530] ? clear_bhb_loop+0x60/0xb0 [ 148.598569][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.598585][ T8530] RIP: 0033:0x7f1088d8f6c9 [ 148.598601][ T8530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.598615][ T8530] RSP: 002b:00007f1089d05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 148.598634][ T8530] RAX: ffffffffffffffda RBX: 00007f1088fe5fa0 RCX: 00007f1088d8f6c9 [ 148.598647][ T8530] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 148.598657][ T8530] RBP: 00007f1088e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.598668][ T8530] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 148.598678][ T8530] R13: 00007f1088fe6038 R14: 00007f1088fe5fa0 R15: 00007ffe635da4a8 [ 148.598710][ T8530] [ 149.515565][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.523890][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.533830][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.542799][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.554138][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.582271][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 149.726631][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 150.807203][ T8603] netlink: 'syz.1.600': attribute type 12 has an invalid length. [ 150.815003][ T8603] netlink: 'syz.1.600': attribute type 29 has an invalid length. [ 150.822721][ T8603] netlink: 148 bytes leftover after parsing attributes in process `syz.1.600'. [ 150.831793][ T8603] netlink: 'syz.1.600': attribute type 2 has an invalid length. [ 150.841736][ T8603] netlink: 'syz.1.600': attribute type 3 has an invalid length. [ 150.883609][ T8603] netlink: 7 bytes leftover after parsing attributes in process `syz.1.600'. [ 150.975194][ T68] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.009182][ T8555] chnl_net:caif_netlink_parms(): no params data found [ 151.089862][ T68] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.193058][ T68] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.203192][ T8620] net_ratelimit: 6 callbacks suppressed [ 151.203207][ T8620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.226335][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.254378][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.267715][ T8555] bridge_slave_0: entered allmulticast mode [ 151.290610][ T8555] bridge_slave_0: entered promiscuous mode [ 151.333348][ T68] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.376733][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.390443][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.400033][ T8555] bridge_slave_1: entered allmulticast mode [ 151.412227][ T8555] bridge_slave_1: entered promiscuous mode [ 151.591701][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.602783][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.612282][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.625273][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.632900][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.643304][ T8555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.668570][ T8631] gretap1: entered promiscuous mode [ 151.688883][ T5828] Bluetooth: hci0: command tx timeout [ 151.718643][ T8555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.842724][ T8555] team0: Port device team_slave_0 added [ 151.897066][ T8555] team0: Port device team_slave_1 added [ 151.977282][ T8649] netlink: 'syz.1.614': attribute type 12 has an invalid length. [ 151.988000][ T8649] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 151.995976][ T8649] netlink: 148 bytes leftover after parsing attributes in process `syz.1.614'. [ 152.009297][ T8649] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 152.018165][ T8649] netlink: 'syz.1.614': attribute type 3 has an invalid length. [ 152.028605][ T8649] netlink: 7 bytes leftover after parsing attributes in process `syz.1.614'. [ 152.065236][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.072191][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.132339][ T8555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.175015][ T8653] syz_tun: entered allmulticast mode [ 152.186127][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.193084][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.273596][ T8555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.314038][ T68] tipc: Resetting bearer [ 152.727353][ T68] tipc: Disabling bearer [ 152.771146][ T68] bond1 (unregistering): Released all slaves [ 152.836330][ T68] bond2 (unregistering): Released all slaves [ 152.848526][ T8653] syz_tun: left allmulticast mode [ 152.938292][ T8682] netlink: 'syz.4.619': attribute type 2 has an invalid length. [ 152.946127][ T8682] netlink: 60 bytes leftover after parsing attributes in process `syz.4.619'. [ 152.952921][ T8669] ip6tnl2: entered allmulticast mode [ 152.998347][ T68] tipc: Left network mode [ 153.028785][ T8555] hsr_slave_0: entered promiscuous mode [ 153.040441][ T8555] hsr_slave_1: entered promiscuous mode [ 153.048123][ T8555] debugfs: 'hsr0' already exists in 'hsr' [ 153.053959][ T8555] Cannot create hsr debugfs directory [ 153.070154][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 153.079048][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 153.088251][ T8689] netlink: 'syz.1.620': attribute type 14 has an invalid length. [ 153.496346][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 153.684436][ T5828] Bluetooth: hci2: command tx timeout [ 153.764713][ T5828] Bluetooth: hci0: command tx timeout [ 154.037956][ T8722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.077931][ T8726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.092623][ T8726] bond3: (slave batadv1): making interface the new active one [ 154.101584][ T8726] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 154.278006][ T8728] bond3 (unregistering): (slave batadv1): Releasing active interface [ 154.290270][ T8728] bond3 (unregistering): Released all slaves [ 154.616233][ T8743] team0: Port device dummy0 added [ 154.630820][ T8744] team0: Port device dummy0 removed [ 154.652258][ T8744] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 154.728433][ T68] hsr_slave_0: left promiscuous mode [ 154.762854][ T68] hsr_slave_1: left promiscuous mode [ 154.769263][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.780720][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.812980][ T68] veth1_macvtap: left promiscuous mode [ 154.818988][ T68] veth0_macvtap: left promiscuous mode [ 154.825136][ T68] veth1_vlan: left promiscuous mode [ 155.277818][ T68] team0 (unregistering): Port device team_slave_1 removed [ 155.307054][ T68] team0 (unregistering): Port device team_slave_0 removed [ 155.315748][ T44] smc: removing ib device !yz! [ 155.765909][ T5828] Bluetooth: hci2: command tx timeout [ 155.843955][ T52] Bluetooth: hci0: command tx timeout [ 156.129476][ T8633] chnl_net:caif_netlink_parms(): no params data found [ 156.376799][ T8791] validate_nla: 3 callbacks suppressed [ 156.376815][ T8791] netlink: 'syz.3.639': attribute type 12 has an invalid length. [ 156.393790][ T8791] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 156.429112][ T8791] __nla_validate_parse: 2 callbacks suppressed [ 156.429127][ T8791] netlink: 148 bytes leftover after parsing attributes in process `syz.3.639'. [ 156.468812][ T8791] netlink: 'syz.3.639': attribute type 2 has an invalid length. [ 156.487023][ T8791] netlink: 'syz.3.639': attribute type 3 has an invalid length. [ 156.503778][ T8791] netlink: 7 bytes leftover after parsing attributes in process `syz.3.639'. [ 157.355336][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.365734][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.373075][ T8633] bridge_slave_0: entered allmulticast mode [ 157.461150][ T8633] bridge_slave_0: entered promiscuous mode [ 157.473730][ T8555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.566577][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.583384][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.591720][ T8633] bridge_slave_1: entered allmulticast mode [ 157.601548][ T8633] bridge_slave_1: entered promiscuous mode [ 157.657171][ T8555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.845559][ T52] Bluetooth: hci2: command tx timeout [ 157.864855][ T8555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.923665][ T52] Bluetooth: hci0: command tx timeout [ 157.937402][ T8834] syzkaller1: entered promiscuous mode [ 157.942924][ T8834] syzkaller1: entered allmulticast mode [ 157.966305][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.994308][ T8555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.012114][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.281124][ T8633] team0: Port device team_slave_0 added [ 158.347142][ T68] IPVS: stop unused estimator thread 0... [ 158.357138][ T8633] team0: Port device team_slave_1 added [ 158.518797][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.544151][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.609731][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.649031][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.663783][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.705558][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.717099][ T8872] netlink: 44 bytes leftover after parsing attributes in process `syz.3.652'. [ 158.867792][ T8892] netlink: 428 bytes leftover after parsing attributes in process `syz.4.657'. [ 158.933990][ T8892] netlink: 104 bytes leftover after parsing attributes in process `syz.4.657'. [ 158.949196][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.989230][ T8633] hsr_slave_0: entered promiscuous mode [ 158.999370][ T8894] netlink: 'syz.3.658': attribute type 13 has an invalid length. [ 159.014464][ T8633] hsr_slave_1: entered promiscuous mode [ 159.028545][ T8894] netlink: 'syz.3.658': attribute type 17 has an invalid length. [ 159.082475][ T8894] erspan0: left allmulticast mode [ 159.182401][ T8894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.301762][ T8555] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.318423][ T8898] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 159.438897][ T8900] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 159.465005][ T8900] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 159.477143][ T8900] bond2: (slave vcan1): making interface the new active one [ 159.485868][ T8900] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 159.502660][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.510143][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.546455][ T8898] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 159.562156][ T8898] bond2: (slave vcan2): Enslaving as a backup interface with an up link [ 159.617251][ T8900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.703167][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.710436][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.857358][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 159.868567][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'. [ 159.934498][ T52] Bluetooth: hci2: command tx timeout [ 160.013003][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 160.022139][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 160.175734][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.669'. [ 160.270121][ T8931] syzkaller1: entered promiscuous mode [ 160.276210][ T8931] syzkaller1: entered allmulticast mode [ 160.350432][ T8633] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.381349][ T8633] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.404190][ T8633] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.420415][ T8633] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.653138][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.681168][ T8633] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.749453][ T8633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.760828][ T8633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.793840][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.800988][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.819127][ T12] wlan0: Trigger new scan to find an IBSS to join [ 160.827915][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.835086][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.986859][ T8555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.267549][ T8969] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 161.406852][ T8969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.478887][ T8977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.504755][ T8977] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 161.526411][ T8977] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 161.689566][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.755778][ T8555] veth0_vlan: entered promiscuous mode [ 161.789007][ T8555] veth1_vlan: entered promiscuous mode [ 161.890106][ T8555] veth0_macvtap: entered promiscuous mode [ 161.919648][ T8555] veth1_macvtap: entered promiscuous mode [ 161.981141][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.007291][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.040657][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.083963][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.113310][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.122308][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.176885][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 162.217555][ T9009] veth1_to_hsr: entered promiscuous mode [ 162.254372][ T9009] macvtap1: entered promiscuous mode [ 162.266587][ T9009] macvtap1: entered allmulticast mode [ 162.272251][ T9009] veth1_to_hsr: entered allmulticast mode [ 162.367870][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.394009][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.475372][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.500616][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.607343][ T8633] veth0_vlan: entered promiscuous mode [ 162.621096][ T8633] veth1_vlan: entered promiscuous mode [ 162.791928][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.819909][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.830284][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.845041][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.852068][ T8633] veth0_macvtap: entered promiscuous mode [ 162.868207][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.877852][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.888035][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.897496][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.907454][ T9029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.993116][ T8633] veth1_macvtap: entered promiscuous mode [ 163.044398][ T9042] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 163.065224][ T9033] tipc: Enabled bearer , priority 0 [ 163.087536][ T9040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.110720][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.177469][ T9045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.185800][ T9045] bond0: (slave bond3): Enslaving as an active interface with an up link [ 163.195671][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.298005][ T9049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.308724][ T9049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.319243][ T9049] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 163.329241][ T9049] bond0 (unregistering): (slave bond3): Releasing backup interface [ 163.340868][ T9049] bond0 (unregistering): Released all slaves [ 163.375585][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.415061][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.446783][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.467298][ T199] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.617540][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.639937][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.668431][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.679060][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.764145][ T12] wlan0: Trigger new scan to find an IBSS to join [ 164.206356][ T9089] nbd0: detected capacity change from 0 to 127 [ 164.258145][ T52] block nbd0: Receive control failed (result -32) [ 164.271881][ T5829] block nbd0: Dead connection, failed to find a fallback [ 164.288426][ T5829] block nbd0: shutting down sockets [ 164.295271][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.306638][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.314797][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.325263][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 164.333727][ T5829] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.342843][ T5829] Buffer I/O error on dev nbd0, logical block 2, async page read [ 164.367160][ T5829] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.385087][ T5829] Buffer I/O error on dev nbd0, logical block 3, async page read [ 164.400965][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.499304][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.528420][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.551371][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 164.560178][ T5829] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.585165][ T5829] Buffer I/O error on dev nbd0, logical block 2, async page read [ 164.596186][ T5829] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.615924][ T5829] Buffer I/O error on dev nbd0, logical block 3, async page read [ 164.624461][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.690623][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.753048][ T9119] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 164.843981][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.853182][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 164.891842][ T5829] ldm_validate_partition_table(): Disk read failed. [ 164.901575][ T5829] Dev nbd0: unable to read RDB block 0 [ 164.911719][ T5829] nbd0: unable to read partition table [ 164.942687][ T5829] ldm_validate_partition_table(): Disk read failed. [ 164.980981][ T5829] Dev nbd0: unable to read RDB block 0 [ 165.012900][ T5829] nbd0: unable to read partition table [ 165.175327][ T9128] syzkaller0: entered promiscuous mode [ 165.180917][ T9128] syzkaller0: entered allmulticast mode [ 165.356629][ T9134] tipc: Enabling of bearer rejected, failed to enable media [ 165.506944][ T9136] sctp: [Deprecated]: syz.5.716 (pid 9136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.506944][ T9136] Use struct sctp_sack_info instead [ 165.750742][ T9152] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.881869][ T9159] netlink: 'syz.5.722': attribute type 12 has an invalid length. [ 165.918722][ T9159] netlink: 'syz.5.722': attribute type 29 has an invalid length. [ 165.958840][ T9159] netlink: 'syz.5.722': attribute type 2 has an invalid length. [ 166.023680][ T9159] netlink: 'syz.5.722': attribute type 3 has an invalid length. [ 166.197114][ T9181] netlink: 'syz.4.729': attribute type 21 has an invalid length. [ 166.262175][ T9181] netlink: 'syz.4.729': attribute type 5 has an invalid length. [ 166.402428][ T9190] bridge_slave_1: left allmulticast mode [ 166.413130][ T9190] bridge_slave_1: left promiscuous mode [ 166.420133][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.441162][ T9190] bridge_slave_0: left allmulticast mode [ 166.446954][ T5938] hid-generic 0005:0458:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 166.462093][ T9190] bridge_slave_0: left promiscuous mode [ 166.468066][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.729619][ T68] wlan0: Trigger new scan to find an IBSS to join [ 166.986848][ T9224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.368348][ T9245] __nla_validate_parse: 47 callbacks suppressed [ 167.368365][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.745'. [ 167.421117][ T9247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.474229][ T9245] netlink: 'syz.5.745': attribute type 29 has an invalid length. [ 167.496243][ T9251] bridge_slave_0: left allmulticast mode [ 167.502175][ T9251] bridge_slave_0: left promiscuous mode [ 167.508704][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.544199][ T9251] bridge_slave_1: left allmulticast mode [ 167.549882][ T9251] bridge_slave_1: left promiscuous mode [ 167.575959][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.627037][ T9251] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 167.637229][ T9251] team0: Port device team_slave_0 removed [ 167.653224][ T9251] team0: Failed to send options change via netlink (err -105) [ 167.663626][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.673353][ T9251] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 167.687066][ T9251] team0: Port device team_slave_1 removed [ 167.693857][ T9251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.701646][ T9251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.712069][ T9251] bridge0: port 3(batadv_slave_1) entered disabled state [ 167.739020][ T9251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.846409][ T9249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.847867][ T9260] netlink: 36 bytes leftover after parsing attributes in process `syz.4.749'. [ 167.891150][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 168.024661][ T9258] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 168.038464][ T9258] bond4 (unregistering): Released all slaves [ 168.064338][ T9264] netlink: 'syz.1.750': attribute type 19 has an invalid length. [ 168.089333][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 168.102688][ T9264] netlink: 'syz.1.750': attribute type 19 has an invalid length. [ 168.114908][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 168.866219][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 168.921351][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 168.931743][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 168.955332][ T9295] netlink: 3 bytes leftover after parsing attributes in process `syz.5.760'. [ 169.037025][ T9297] veth3: entered promiscuous mode [ 169.059481][ T9295] batadv1: entered promiscuous mode [ 169.066489][ T9295] batadv1: entered allmulticast mode [ 169.198349][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.762'. [ 169.812937][ T9330] netlink: 'syz.5.769': attribute type 5 has an invalid length. [ 169.828995][ T9331] bond0: entered promiscuous mode [ 169.838441][ T9331] bond_slave_0: entered promiscuous mode [ 169.853720][ T9331] bond_slave_1: entered promiscuous mode [ 169.870019][ T9331] bridge0: port 3(bond0) entered blocking state [ 169.889939][ T9331] bridge0: port 3(bond0) entered disabled state [ 169.910211][ T9331] bond0: entered allmulticast mode [ 169.923547][ T9331] bond_slave_0: entered allmulticast mode [ 169.946180][ T9331] bond_slave_1: entered allmulticast mode [ 169.966279][ T9335] ip6t_rpfilter: unknown options [ 169.976721][ T9331] bridge0: port 3(bond0) entered blocking state [ 169.983127][ T9331] bridge0: port 3(bond0) entered forwarding state [ 170.484601][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 171.095503][ T9363] vlan2: entered promiscuous mode [ 171.118006][ T9363] bond0: entered promiscuous mode [ 171.141028][ T9363] bond_slave_0: entered promiscuous mode [ 171.157324][ T9363] bond_slave_1: entered promiscuous mode [ 171.408479][ T9380] IPv6: addrconf: prefix option has invalid lifetime [ 171.415493][ T9380] IPv6: addrconf: prefix option has invalid lifetime [ 172.002282][ T9409] validate_nla: 1 callbacks suppressed [ 172.002300][ T9409] netlink: 'syz.5.786': attribute type 12 has an invalid length. [ 172.027232][ T9409] netlink: 'syz.5.786': attribute type 29 has an invalid length. [ 172.040470][ T9409] netlink: 'syz.5.786': attribute type 2 has an invalid length. [ 172.064966][ T9409] netlink: 'syz.5.786': attribute type 3 has an invalid length. [ 172.501106][ T9443] netlink: 'syz.3.794': attribute type 1 has an invalid length. [ 172.566141][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 172.706263][ T9445] Bluetooth: MGMT ver 1.23 [ 172.711155][ T9455] __nla_validate_parse: 5 callbacks suppressed [ 172.711169][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.5.797'. [ 172.780471][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.797'. [ 172.905152][ T9454] batadv1: entered promiscuous mode [ 173.284667][ T9480] netlink: 36 bytes leftover after parsing attributes in process `syz.5.800'. [ 173.303351][ T9486] netlink: 'syz.6.801': attribute type 12 has an invalid length. [ 173.321310][ T9486] netlink: 'syz.6.801': attribute type 29 has an invalid length. [ 173.439327][ T9486] netlink: 148 bytes leftover after parsing attributes in process `syz.6.801'. [ 173.462121][ T9486] netlink: 'syz.6.801': attribute type 2 has an invalid length. [ 173.526702][ T9486] netlink: 'syz.6.801': attribute type 3 has an invalid length. [ 173.566099][ T9486] netlink: 7 bytes leftover after parsing attributes in process `syz.6.801'. [ 173.967978][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.808'. [ 173.983324][ T9509] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 174.051475][ T9521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.116765][ T9528] IPVS: length: 209 != 24 [ 174.388020][ T9521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.279303][ T9577] netlink: 'syz.5.818': attribute type 12 has an invalid length. [ 175.293070][ T9577] netlink: 148 bytes leftover after parsing attributes in process `syz.5.818'. [ 175.305050][ T9577] netlink: 7 bytes leftover after parsing attributes in process `syz.5.818'. [ 175.494162][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.819'. [ 175.507135][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.819'. [ 176.159897][ T9599] bond1: invalid ARP target 0.0.0.0 specified for addition [ 176.167627][ T9599] bond1: option arp_ip_target: invalid value (0) [ 176.188918][ T9599] bond1 (unregistering): Released all slaves [ 177.470308][ T9670] validate_nla: 11 callbacks suppressed [ 177.470325][ T9670] netlink: 'syz.6.837': attribute type 11 has an invalid length. [ 177.765010][ T9686] __nla_validate_parse: 6 callbacks suppressed [ 177.765027][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.837'. [ 177.980437][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 178.021507][ T9699] nbd: socks must be embedded in a SOCK_ITEM attr [ 178.233860][ T9702] block nbd1: Unsupported socket: should be TCP or UNIX. [ 178.348827][ T9708] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.465241][ T9708] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.760795][ T9708] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.837611][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.848'. [ 178.862531][ T9708] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.909349][ T9725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.978417][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 179.016903][ T9727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.028073][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 179.105434][ T3555] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.157139][ T3555] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.194895][ T44] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.210876][ T52] Bluetooth: hci0: command tx timeout [ 179.244547][ T68] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.477530][ T9748] netlink: 'syz.6.855': attribute type 12 has an invalid length. [ 179.485493][ T9748] netlink: 'syz.6.855': attribute type 29 has an invalid length. [ 179.493349][ T9748] netlink: 148 bytes leftover after parsing attributes in process `syz.6.855'. [ 179.503140][ T9748] netlink: 'syz.6.855': attribute type 2 has an invalid length. [ 179.510969][ T9748] netlink: 'syz.6.855': attribute type 3 has an invalid length. [ 179.519266][ T9748] netlink: 7 bytes leftover after parsing attributes in process `syz.6.855'. [ 179.535662][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.858'. [ 179.765970][ T9759] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 179.799035][ T9759] netlink: 52 bytes leftover after parsing attributes in process `syz.6.860'. [ 180.094951][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.864'. [ 180.204291][ T9784] lo: entered promiscuous mode [ 180.210085][ T9784] tunl0: entered promiscuous mode [ 180.215964][ T9784] gre0: entered promiscuous mode [ 180.221657][ T9784] gretap0: entered promiscuous mode [ 180.227947][ T9784] erspan0: entered promiscuous mode [ 180.235839][ T9784] ip_vti0: entered promiscuous mode [ 180.241723][ T9784] ip6_vti0: entered promiscuous mode [ 180.250804][ T9784] sit0: entered promiscuous mode [ 180.256806][ T9784] ip6tnl0: entered promiscuous mode [ 180.262551][ T9784] ip6gre0: entered promiscuous mode [ 180.268996][ T9784] syz_tun: entered promiscuous mode [ 180.275034][ T9784] ip6gretap0: entered promiscuous mode [ 180.282186][ T9784] bridge0: entered promiscuous mode [ 180.289853][ T9784] vcan0: entered promiscuous mode [ 180.297101][ T9784] team0: entered promiscuous mode [ 180.302182][ T9784] team_slave_0: entered promiscuous mode [ 180.309599][ T9784] team_slave_1: entered promiscuous mode [ 180.317480][ T9784] dummy0: entered promiscuous mode [ 180.326665][ T9784] nlmon0: entered promiscuous mode [ 180.352307][ T9784] caif0: entered promiscuous mode [ 180.358709][ T9784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.783683][ T9812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.953261][ T9822] Cannot find add_set index 0 as target [ 181.114777][ T9827] netlink: 'syz.3.875': attribute type 83 has an invalid length. [ 181.664176][ T9836] veth3: entered promiscuous mode [ 181.772067][ T9838] lo: entered promiscuous mode [ 181.842246][ T9838] tunl0: entered promiscuous mode [ 181.962609][ T9838] gre0: entered promiscuous mode [ 181.972712][ T9838] gretap0: entered promiscuous mode [ 182.013349][ T9838] erspan0: entered promiscuous mode [ 182.042611][ T9838] ip_vti0: entered promiscuous mode [ 182.048751][ T9838] ip6_vti0: entered promiscuous mode [ 182.077928][ T9838] ip6tnl0: entered promiscuous mode [ 182.114285][ T9838] ip6gre0: entered promiscuous mode [ 182.156649][ T9838] syz_tun: entered promiscuous mode [ 182.182809][ T9838] ip6gretap0: entered promiscuous mode [ 182.211521][ T9838] vcan0: entered promiscuous mode [ 182.228948][ T9838] bond0: entered promiscuous mode [ 182.247339][ T9838] team0: entered promiscuous mode [ 182.264845][ T9838] dummy0: entered promiscuous mode [ 182.280614][ T9838] nlmon0: entered promiscuous mode [ 182.303932][ T9838] caif0: entered promiscuous mode [ 182.326699][ T9838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.883923][ T9879] __nla_validate_parse: 2 callbacks suppressed [ 182.883940][ T9879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.887'. [ 183.033952][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 183.055699][ T9885] syzkaller0: entered promiscuous mode [ 183.061216][ T9885] syzkaller0: entered allmulticast mode [ 183.709157][ T9915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.893'. [ 184.091809][ T9929] tipc: Failed to remove unknown binding: 66,1,1/2506918272:4079969584/4079969586 [ 184.168315][ T9929] tipc: Failed to remove unknown binding: 66,1,1/2506918272:4079969584/4079969586 [ 184.188303][ T9929] tipc: Failed to remove unknown binding: 66,1,1/2506918272:4079969584/4079969586 [ 184.284884][ T9943] netlink: 'syz.5.898': attribute type 4 has an invalid length. [ 184.303174][ T9943] netlink: 'syz.5.898': attribute type 4 has an invalid length. [ 185.482924][T10008] netlink: 76 bytes leftover after parsing attributes in process `syz.1.915'. [ 185.582238][T10011] netlink: 'syz.5.917': attribute type 1 has an invalid length. [ 185.710339][T10011] bond1: entered promiscuous mode [ 185.716380][T10011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.750547][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 185.837181][T10016] bond1: (slave veth5): making interface the new active one [ 185.846809][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 185.848916][T10016] veth5: entered promiscuous mode [ 185.861932][T10016] bond1: (slave veth5): Enslaving as an active interface with an up link [ 186.193073][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.6.925'. [ 186.233097][T10050] netlink: 'syz.1.926': attribute type 21 has an invalid length. [ 186.244620][T10050] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 186.279713][T10050] netlink: 144 bytes leftover after parsing attributes in process `syz.1.926'. [ 186.453203][T10054] netlink: 'syz.5.927': attribute type 3 has an invalid length. [ 186.546508][T10063] : renamed from bond_slave_0 [ 186.697732][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 186.753756][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.933'. [ 187.311546][T10107] netlink: 'syz.3.942': attribute type 13 has an invalid length. [ 187.387231][T10103] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 187.511756][T10107] batman_adv: batadv0: Interface deactivated: dummy0 [ 187.659163][T10107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.675365][T10107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.819431][T10107] veth1_macvtap: left allmulticast mode [ 187.871251][T10107] macsec0: left allmulticast mode [ 187.881231][T10107] tipc: Resetting bearer [ 187.892210][T10107] veth1_to_hsr: left allmulticast mode [ 188.016847][ T3539] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.025615][ T3539] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.098646][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.117341][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.314657][T10119] __nla_validate_parse: 2 callbacks suppressed [ 188.314674][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 188.331890][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 188.390561][T10119] tipc: Enabling of bearer rejected, already enabled [ 188.452467][T10121] syzkaller0: entered promiscuous mode [ 188.482282][T10121] syzkaller0: entered allmulticast mode [ 188.702996][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 188.808323][T10131] netlink: 20 bytes leftover after parsing attributes in process `syz.6.947'. [ 189.092436][ T6457] udevd[6457]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 189.135685][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 189.156932][T10141] tipc: Enabled bearer , priority 0 [ 189.211903][T10141] bond0: option updelay: invalid value (18446744071562067969) [ 189.220476][T10141] bond0: option updelay: allowed values 0 - 2147483647 [ 189.235517][T10141] bond0 (unregistering): Released all slaves [ 189.330273][T10142] syzkaller0: entered promiscuous mode [ 189.343938][T10142] syzkaller0: entered allmulticast mode [ 189.353106][T10142] tipc: Resetting bearer [ 189.365925][T10155] tipc: Resetting bearer [ 189.408210][T10158] bond1: option miimon: invalid value (18446744073709551607) [ 189.416584][T10158] bond1: option miimon: allowed values 0 - 2147483647 [ 189.435781][T10158] bond1 (unregistering): Released all slaves [ 189.790103][T10137] tipc: Resetting bearer [ 190.041022][T10183] netlink: 'syz.5.962': attribute type 3 has an invalid length. [ 190.216731][ T876] tipc: Node number set to 676673793 [ 191.329890][T10137] tipc: Disabling bearer [ 191.449695][ T876] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x1 [ 191.463070][ T876] hid-generic 0005:0C45:1012.0002: ignoring exceeding usage max [ 191.472138][ T876] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x4 [ 191.479971][ T876] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x5 [ 191.487706][ T876] hid-generic 0005:0C45:1012.0002: reserved main item tag 0xd [ 191.496160][ T876] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 31/146 [ 191.514228][ T876] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22 [ 191.625168][T10212] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.654730][T10219] netlink: 156 bytes leftover after parsing attributes in process `syz.1.970'. [ 191.748624][T10212] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.850994][T10212] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.937711][T10212] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.968024][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 192.041827][ T199] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.095124][ T9968] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.117757][ T9968] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.141041][ T199] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.183194][ T30] audit: type=1800 audit(1762677851.249:3): pid=10220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.972" name="cgroup.controllers" dev="tmpfs" ino=1090 res=0 errno=0 [ 192.254743][T10240] netlink: 'syz.1.977': attribute type 4 has an invalid length. [ 192.287559][T10240] netlink: 'syz.1.977': attribute type 4 has an invalid length. [ 192.342960][T10242] xt_HMARK: proto mask must be zero with L3 mode [ 192.489978][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 192.541189][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 192.541715][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.981'. [ 192.551676][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 192.593978][T10247] bond5: entered promiscuous mode [ 192.599379][T10247] bond5: entered allmulticast mode [ 192.847851][T10267] tipc: Started in network mode [ 192.858035][T10267] tipc: Node identity 5643633da73b, cluster identity 4711 [ 192.887775][T10267] tipc: Enabled bearer , priority 0 [ 192.927265][T10269] syzkaller0: entered promiscuous mode [ 192.984711][T10269] syzkaller0: entered allmulticast mode [ 193.201284][T10267] tipc: Resetting bearer [ 193.233232][T10267] tipc: Disabling bearer [ 193.396583][T10293] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20006 [ 193.657618][T10301] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 193.670279][T10301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.001595][T10311] netlink: 32 bytes leftover after parsing attributes in process `syz.6.998'. [ 194.020531][T10316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.030575][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.6.998'. [ 194.187841][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.194817][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.207955][ T1301] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 194.391191][T10324] netlink: 'syz.6.1003': attribute type 12 has an invalid length. [ 194.759816][T10344] netlink: 'syz.4.1004': attribute type 12 has an invalid length. [ 194.980019][T10349] vxcan5: entered allmulticast mode [ 195.102905][T10350] vxcan5: entered allmulticast mode [ 195.151121][T10359] syzkaller0: entered promiscuous mode [ 195.163676][T10359] syzkaller0: entered allmulticast mode [ 195.248728][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 195.318984][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 195.392802][T10371] netlink: 'syz.3.1013': attribute type 4 has an invalid length. [ 195.535160][T10389] netlink: 'syz.6.1017': attribute type 12 has an invalid length. [ 195.544464][T10389] netlink: 'syz.6.1017': attribute type 29 has an invalid length. [ 195.558630][T10389] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1017'. [ 195.587238][T10389] netlink: 'syz.6.1017': attribute type 2 has an invalid length. [ 195.607834][T10396] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 195.613647][T10389] netlink: 'syz.6.1017': attribute type 3 has an invalid length. [ 195.624498][T10395] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 195.632717][T10389] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1017'. [ 195.666372][T10399] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1020'. [ 195.775566][T10402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.844344][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 196.243647][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 196.250882][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 199.925041][ T3539] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 204.444175][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 204.453077][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 204.518614][T10439] netlink: 'syz.3.1034': attribute type 11 has an invalid length. [ 205.136734][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1046'. [ 205.221294][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1046'. [ 205.260221][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 205.271620][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 205.281463][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 205.292282][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 205.301880][T10482] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1046'. [ 205.322959][T10484] geneve2: entered promiscuous mode [ 205.396913][T10486] sctp: [Deprecated]: syz.4.1049 (pid 10486) Use of int in max_burst socket option. [ 205.396913][T10486] Use struct sctp_assoc_value instead [ 205.492042][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1051'. [ 205.585893][T10492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.588775][T10499] netlink: 'syz.1.1050': attribute type 7 has an invalid length. [ 205.804447][T10508] Bluetooth: MGMT ver 1.23 [ 206.142757][T10530] netlink: 'syz.4.1062': attribute type 6 has an invalid length. [ 206.151759][T10530] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 206.195138][T10530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.656925][T10553] syzkaller1: entered promiscuous mode [ 206.662607][T10553] syzkaller1: entered allmulticast mode [ 206.857866][T10557] ipvlan2: entered promiscuous mode [ 206.864509][T10557] bridge0: port 1(ipvlan2) entered blocking state [ 206.871038][T10557] bridge0: port 1(ipvlan2) entered disabled state [ 206.878988][T10557] ipvlan2: entered allmulticast mode [ 206.885245][T10557] bridge0: entered allmulticast mode [ 206.907278][T10557] ipvlan2: left allmulticast mode [ 206.912418][T10557] bridge0: left allmulticast mode [ 207.006924][T10560] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.160481][T10560] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.278346][T10560] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.420977][T10560] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.722212][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.766734][ T9968] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.895135][T10603] nbd: nbd64 already in use [ 207.901501][T10442] block nbd64: NBD_DISCONNECT [ 207.945833][ T68] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.144640][ T3555] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.170341][T10505] udevd[10505]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 208.219446][T10612] tipc: Enabling of bearer rejected, already enabled [ 208.292029][T10612] tipc: Resetting bearer [ 208.454210][T10627] netlink: 'syz.3.1085': attribute type 10 has an invalid length. [ 209.172996][T10666] sctp: [Deprecated]: syz.5.1095 (pid 10666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.172996][T10666] Use struct sctp_sack_info instead [ 209.258844][T10669] netlink: 'syz.4.1096': attribute type 1 has an invalid length. [ 209.335927][T10674] syzkaller0: entered promiscuous mode [ 209.341440][T10674] syzkaller0: entered allmulticast mode [ 209.400802][T10674] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 209.551587][T10690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.620024][T10690] __nla_validate_parse: 24 callbacks suppressed [ 209.620042][T10690] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1103'. [ 210.155779][T10717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.156826][T10715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1108'. [ 210.517637][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1111'. [ 210.531402][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1111'. [ 210.604444][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1111'. [ 210.900282][T10735] batman_adv: batadv0: Adding interface: vlan2 [ 210.923827][T10735] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.986039][T10735] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 211.532855][T10770] bond0: (slave gre0): Error: Device type is different from other slaves [ 212.101457][T10779] tipc: Enabled bearer , priority 0 [ 212.126340][T10791] dvmrp0: entered allmulticast mode [ 212.269346][T10800] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 212.282329][T10802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1127'. [ 212.874151][T10827] tipc: Enabled bearer , priority 0 [ 212.891338][T10834] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 212.898229][ T24] IPVS: starting estimator thread 0... [ 212.912377][T10820] tipc: Resetting bearer [ 212.920960][T10833] delete_channel: no stack [ 213.003726][T10836] IPVS: using max 29 ests per chain, 69600 per kthread [ 213.090634][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1136'. [ 213.214600][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 213.224973][T10848] openvswitch: netlink: Missing key (keys=40, expected=80) [ 213.376421][T10856] tipc: Started in network mode [ 213.381338][T10856] tipc: Node identity 3635ef9eba74, cluster identity 4711 [ 213.390589][T10856] tipc: Enabled bearer , priority 0 [ 213.455192][T10818] tipc: Disabling bearer [ 213.706280][T10870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1142'. [ 213.828507][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1143'. [ 214.152982][T10851] tipc: Disabling bearer [ 214.210712][T10889] sctp: [Deprecated]: syz.4.1147 (pid 10889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.210712][T10889] Use struct sctp_sack_info instead [ 214.253993][T10889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.639481][T10913] netlink: 'syz.6.1153': attribute type 4 has an invalid length. [ 214.747845][T10915] __nla_validate_parse: 2 callbacks suppressed [ 214.747863][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 214.850018][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1157'. [ 214.865069][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 214.939618][T10921] bond6: option primary_reselect: invalid value (255) [ 214.965870][T10921] bond6 (unregistering): Released all slaves [ 215.303344][T10953] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 215.455306][T10957] geneve2: entered promiscuous mode [ 215.478310][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1165'. [ 215.526536][T10960] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1166'. [ 215.597389][T10964] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1168'. [ 215.664156][T10964] vlan3: entered promiscuous mode [ 215.876940][T10981] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1173'. [ 215.887549][T10982] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1171'. [ 216.302656][T11007] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1182'. [ 216.356949][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1184'. [ 216.472375][T11018] netlink: 'syz.6.1185': attribute type 1 has an invalid length. [ 216.515807][T11018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.570449][T11018] bond2: (slave veth3): Enslaving as an active interface with a down link [ 216.715503][T11029] dvmrp0: entered allmulticast mode [ 216.725168][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 216.985236][T11042] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 217.000613][T11042] tipc: Enabling of bearer rejected, failed to enable media [ 217.020667][T11042] bridge1: entered promiscuous mode [ 217.026241][T11042] bridge1: entered allmulticast mode [ 217.040734][T11042] team0: Port device bridge1 added [ 217.255777][T11051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.331180][T11061] FAULT_INJECTION: forcing a failure. [ 217.331180][T11061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.369009][T11061] CPU: 1 UID: 0 PID: 11061 Comm: syz.1.1199 Not tainted syzkaller #0 PREEMPT(full) [ 217.369034][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.369045][T11061] Call Trace: [ 217.369051][T11061] [ 217.369059][T11061] dump_stack_lvl+0x189/0x250 [ 217.369096][T11061] ? __pfx____ratelimit+0x10/0x10 [ 217.369120][T11061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.369147][T11061] ? __pfx__printk+0x10/0x10 [ 217.369166][T11061] ? __might_fault+0xb0/0x130 [ 217.369199][T11061] should_fail_ex+0x414/0x560 [ 217.369228][T11061] _copy_from_user+0x2d/0xb0 [ 217.369250][T11061] ___sys_sendmsg+0x158/0x2a0 [ 217.369273][T11061] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.369328][T11061] ? __fget_files+0x2a/0x420 [ 217.369344][T11061] ? __fget_files+0x3a0/0x420 [ 217.369370][T11061] __x64_sys_sendmsg+0x19b/0x260 [ 217.369392][T11061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.369421][T11061] ? __pfx_ksys_write+0x10/0x10 [ 217.369447][T11061] ? do_syscall_64+0xbe/0xfa0 [ 217.369474][T11061] do_syscall_64+0xfa/0xfa0 [ 217.369496][T11061] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.369519][T11061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.369536][T11061] ? clear_bhb_loop+0x60/0xb0 [ 217.369556][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.369573][T11061] RIP: 0033:0x7f1088d8f6c9 [ 217.369596][T11061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.369610][T11061] RSP: 002b:00007f1089d05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.369635][T11061] RAX: ffffffffffffffda RBX: 00007f1088fe5fa0 RCX: 00007f1088d8f6c9 [ 217.369648][T11061] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 217.369659][T11061] RBP: 00007f1089d05090 R08: 0000000000000000 R09: 0000000000000000 [ 217.369669][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.369680][T11061] R13: 00007f1088fe6038 R14: 00007f1088fe5fa0 R15: 00007ffe635da4a8 [ 217.369710][T11061] [ 218.007840][T11078] tap0: tun_chr_ioctl cmd 1074025678 [ 218.040027][T11078] tap0: group set to 0 [ 218.070460][T11078] 8021q: VLANs not supported on ip_vti0 [ 218.833301][T11106] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.989002][T11109] x_tables: duplicate underflow at hook 1 [ 219.678691][T11136] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 219.798791][T11140] bond1: (slave erspan0): Releasing active interface [ 219.807545][T11140] ip6gretap1: entered promiscuous mode [ 219.819108][T11140] bond0: (slave team0): Releasing backup interface [ 219.848230][T11140] batman_adv: batadv0: Removing interface: dummy0 [ 219.876890][T11140] bond0: (slave bond_slave_0): Releasing backup interface [ 219.928043][T11147] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.935258][T11140] bond0: (slave bond_slave_1): Releasing backup interface [ 219.971002][T11140] team0: Port device team_slave_0 removed [ 219.978767][T11140] team0: Port device team_slave_1 removed [ 219.997599][T11140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.024819][T11140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.046971][T11140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.135778][T11136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.208706][T11160] openvswitch: netlink: Message has 4 unknown bytes. [ 220.235686][T11144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.251765][T11144] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 220.295464][T11144] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 220.392405][T11146] veth7: entered promiscuous mode [ 220.401193][T11146] bond0: (slave veth7): Enslaving as an active interface with a down link [ 220.422417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.460979][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.556120][T11172] __nla_validate_parse: 13 callbacks suppressed [ 220.556136][T11172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1223'. [ 220.615858][T11168] syz.3.1224: vmalloc error: size 3674112, failed to allocated page array size 7176, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 220.635212][T11168] CPU: 1 UID: 0 PID: 11168 Comm: syz.3.1224 Not tainted syzkaller #0 PREEMPT(full) [ 220.635236][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.635246][T11168] Call Trace: [ 220.635253][T11168] [ 220.635261][T11168] dump_stack_lvl+0x189/0x250 [ 220.635290][T11168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.635310][T11168] ? __pfx__printk+0x10/0x10 [ 220.635327][T11168] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 220.635349][T11168] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 220.635370][T11168] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 220.635394][T11168] warn_alloc+0x214/0x310 [ 220.635423][T11168] ? __pfx_warn_alloc+0x10/0x10 [ 220.635455][T11168] ? __get_vm_area_node+0x28f/0x300 [ 220.635477][T11168] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 220.635497][T11168] __vmalloc_node_range_noprof+0x690/0x12d0 [ 220.635523][T11168] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 220.635557][T11168] ? css_rstat_updated+0x23a/0x4f0 [ 220.635578][T11168] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.635602][T11168] ? xfd_validate_state+0x6d/0x150 [ 220.635633][T11168] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 220.635648][T11168] __vmalloc_noprof+0xb1/0xf0 [ 220.635668][T11168] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 220.635689][T11168] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 220.635711][T11168] bpf_prog_alloc+0x3c/0x1a0 [ 220.635730][T11168] bpf_prog_load+0x735/0x19e0 [ 220.635759][T11168] ? __pfx_bpf_prog_load+0x10/0x10 [ 220.635797][T11168] ? bpf_lsm_bpf+0x9/0x20 [ 220.635816][T11168] ? security_bpf+0x7e/0x300 [ 220.635839][T11168] __sys_bpf+0x507/0x860 [ 220.635858][T11168] ? __pfx___sys_bpf+0x10/0x10 [ 220.635894][T11168] ? rcu_is_watching+0x15/0xb0 [ 220.635921][T11168] __x64_sys_bpf+0x7c/0x90 [ 220.635946][T11168] do_syscall_64+0xfa/0xfa0 [ 220.635971][T11168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.635987][T11168] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.636004][T11168] ? clear_bhb_loop+0x60/0xb0 [ 220.636025][T11168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.636042][T11168] RIP: 0033:0x7fd2d698f6c9 [ 220.636058][T11168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.636070][T11168] RSP: 002b:00007fd2d7764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.636087][T11168] RAX: ffffffffffffffda RBX: 00007fd2d6be6090 RCX: 00007fd2d698f6c9 [ 220.636099][T11168] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 220.636110][T11168] RBP: 00007fd2d6a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.636121][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.636132][T11168] R13: 00007fd2d6be6128 R14: 00007fd2d6be6090 R15: 00007ffeb4454a98 [ 220.636163][T11168] [ 220.636542][T11168] Mem-Info: [ 220.916541][T11168] active_anon:10982 inactive_anon:0 isolated_anon:0 [ 220.916541][T11168] active_file:3336 inactive_file:39973 isolated_file:0 [ 220.916541][T11168] unevictable:768 dirty:150 writeback:0 [ 220.916541][T11168] slab_reclaimable:11771 slab_unreclaimable:143910 [ 220.916541][T11168] mapped:36913 shmem:4230 pagetables:1053 [ 220.916541][T11168] sec_pagetables:0 bounce:0 [ 220.916541][T11168] kernel_misc_reclaimable:0 [ 220.916541][T11168] free:1265294 free_pcp:23265 free_cma:0 [ 220.971096][T11168] Node 0 active_anon:43916kB inactive_anon:0kB active_file:13344kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149128kB dirty:568kB writeback:0kB shmem:15452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12804kB pagetables:4008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.004113][T11168] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.037024][T11168] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.068923][T11168] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 221.110097][T11168] Node 0 DMA32 free:1155048kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43816kB inactive_anon:0kB active_file:13344kB inactive_file:159688kB unevictable:1536kB writepending:568kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:74636kB local_pcp:19960kB free_cma:0kB [ 221.145730][T11168] lowmem_reserve[]: 0 0 0 0 0 [ 221.150488][T11168] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.180564][T11168] lowmem_reserve[]: 0 0 0 0 0 [ 221.192412][T11168] Node 1 Normal free:3890640kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18692kB local_pcp:6112kB free_cma:0kB [ 221.226289][T11168] lowmem_reserve[]: 0 0 0 0 0 [ 221.275963][T11168] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 221.292166][T11188] netlink: 'syz.6.1228': attribute type 10 has an invalid length. [ 221.304952][T11168] Node 0 DMA32: 678*4kB (UM) 452*8kB (U) 147*16kB (UE) 548*32kB (UE) 121*64kB (UE) 56*128kB (UM) 47*256kB [ 221.315318][T11188] team0: left promiscuous mode [ 221.333142][T11168] (UM) 34*512kB (U) 27*1024kB (UME) 2*2048kB (U) 257*4096kB (UM) = 1154984kB [ 221.344856][T11188] team_slave_0: left promiscuous mode [ 221.350452][T11188] team_slave_1: left promiscuous mode [ 221.359360][T11168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 221.379365][T11189] netlink: 'syz.6.1228': attribute type 1 has an invalid length. [ 221.393384][T11188] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.406709][T11188] team0: entered promiscuous mode [ 221.411782][T11188] team_slave_0: entered promiscuous mode [ 221.426055][T11188] team_slave_1: entered promiscuous mode [ 221.432304][T11188] team0: entered allmulticast mode [ 221.437669][T11188] team_slave_0: entered allmulticast mode [ 221.445910][T11188] team_slave_1: entered allmulticast mode [ 221.447324][T11168] Node 1 Normal: 190*4kB (UME) 49*8kB (UME) 29*16kB (UME) 112*32kB (UME) 30*64kB (UME) 10*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890640kB [ 221.452480][T11188] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.480014][T11168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.490323][T11168] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.534263][T11168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.593784][T11168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.603327][T11168] 47553 total pagecache pages [ 221.635352][T11168] 0 pages in swap cache [ 221.639552][T11168] Free swap = 124996kB [ 221.657356][T11168] Total swap = 124996kB [ 221.661549][T11168] 2097051 pages RAM [ 221.686000][T11168] 0 pages HighMem/MovableOnly [ 221.690717][T11168] 424126 pages reserved [ 221.706971][T11168] 0 pages cma reserved [ 221.712049][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1232'. [ 222.168568][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 222.429680][T11233] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 222.578076][T11233] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 222.589344][T11233] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 222.700917][T11235] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 222.825917][T11240] netlink: 'syz.5.1241': attribute type 4 has an invalid length. [ 223.064075][T11256] netlink: 'syz.5.1244': attribute type 10 has an invalid length. [ 223.128126][T11256] team0: Cannot enslave team device to itself [ 223.144642][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1244'. [ 223.157332][T11262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.184505][T11262] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 223.202518][T11262] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1246'. [ 223.418519][T11275] netlink: 'syz.4.1249': attribute type 11 has an invalid length. [ 223.523020][T11275] tipc: Enabling of bearer rejected, already enabled [ 223.592326][T11283] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1252'. [ 223.626098][T11283] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1252'. [ 223.641165][T11283] netlink: 'syz.6.1252': attribute type 5 has an invalid length. [ 223.650280][T11283] netlink: 'syz.6.1252': attribute type 6 has an invalid length. [ 223.658462][T11283] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1252'. [ 223.661565][T11295] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1251'. [ 223.751528][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1251'. [ 223.805474][ T5146] Bluetooth: hci2: link tx timeout [ 223.811058][ T5146] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.825771][ T5828] Bluetooth: hci2: link tx timeout [ 223.830920][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.843654][ T5828] Bluetooth: hci2: link tx timeout [ 223.850751][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.858759][ T5828] Bluetooth: hci2: link tx timeout [ 223.864131][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.871856][ T5828] Bluetooth: hci2: link tx timeout [ 223.877084][ T5828] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.989698][T11312] veth0_vlan: left promiscuous mode [ 223.999341][T11312] veth0_vlan: entered promiscuous mode [ 224.210151][T11320] vlan3: entered promiscuous mode [ 224.216862][T11320] geneve1: entered promiscuous mode [ 224.224929][T11320] vlan3: entered allmulticast mode [ 224.230171][T11320] geneve1: entered allmulticast mode [ 224.524593][T11334] netlink: 'syz.4.1266': attribute type 29 has an invalid length. [ 225.100278][T11380] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.183042][T11388] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.636422][T11407] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 225.666602][T11413] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 225.806502][T11417] __nla_validate_parse: 13 callbacks suppressed [ 225.806519][T11417] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1291'. [ 225.844013][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 225.940401][T11424] Cannot find set identified by id 0 to match [ 226.110332][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 226.195083][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 226.204910][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 226.229417][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 226.323256][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1302'. [ 226.371410][ T30] audit: type=1804 audit(1762677885.439:4): pid=11457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1301" name="memory.events" dev="tmpfs" ino=636 res=1 errno=0 [ 226.392621][ T30] audit: type=1800 audit(1762677885.439:5): pid=11457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1301" name="memory.events" dev="tmpfs" ino=636 res=0 errno=0 [ 226.434877][T11455] bond0: left allmulticast mode [ 226.440320][T11455] bond_slave_0: left allmulticast mode [ 226.445935][T11455] bond_slave_1: left allmulticast mode [ 226.451514][T11455] team0: left allmulticast mode [ 226.462481][T11455] team_slave_0: left allmulticast mode [ 226.468795][T11455] team_slave_1: left allmulticast mode [ 226.474851][T11455] bridge0: port 3(bond0) entered disabled state [ 226.503246][T11455] bond0: (slave team0): Releasing backup interface [ 226.516088][T11455] team0: left promiscuous mode [ 226.521356][T11455] team_slave_0: left promiscuous mode [ 226.527433][T11455] team_slave_1: left promiscuous mode [ 226.537624][T11455] bridge_slave_0: left allmulticast mode [ 226.543370][T11455] bridge_slave_0: left promiscuous mode [ 226.549372][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.559648][T11455] bridge_slave_1: left allmulticast mode [ 226.566051][T11455] bridge_slave_1: left promiscuous mode [ 226.571972][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.582891][T11455] bond0: (slave bond_slave_0): Releasing backup interface [ 226.591096][T11455] bond_slave_0: left promiscuous mode [ 226.599497][T11455] bond0: (slave bond_slave_1): Releasing backup interface [ 226.610808][T11455] bond_slave_1: left promiscuous mode [ 226.621551][T11455] team0: Port device team_slave_0 removed [ 226.630962][T11455] team0: Port device team_slave_1 removed [ 226.637439][T11455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.645143][T11455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.654013][T11455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.661488][T11455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.674041][T11455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.042780][T11487] x_tables: duplicate entry at hook 1 [ 227.327828][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 227.363235][T11502] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.412170][T11502] netlink: 'syz.3.1313': attribute type 5 has an invalid length. [ 227.463708][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 227.487009][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 227.752304][T11516] IPVS: set_ctl: invalid protocol: 0 172.30.1.7:20000 [ 227.907035][T11525] syzkaller0: entered promiscuous mode [ 227.925420][T11525] syzkaller0: entered allmulticast mode [ 228.051032][T11530] syzkaller0: entered promiscuous mode [ 228.057282][T11530] syzkaller0: entered allmulticast mode [ 228.141321][T11534] syzkaller0: Caught tx_queue_len zero misconfig [ 228.282069][T11547] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 228.284234][T11542] pimreg3: entered allmulticast mode [ 228.660636][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1331'. [ 229.317095][T11577] netlink: 'syz.4.1336': attribute type 9 has an invalid length. [ 229.326532][T11577] netlink: 'syz.4.1336': attribute type 6 has an invalid length. [ 229.683165][T11595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.891636][T11609] netlink: 'syz.4.1340': attribute type 10 has an invalid length. [ 229.963803][T11609] team0: left promiscuous mode [ 229.974548][T11609] team0: Cannot enslave team device to itself [ 230.289064][T11635] netlink: 'syz.4.1349': attribute type 3 has an invalid length. [ 230.414876][T11635] netlink: 'syz.4.1349': attribute type 3 has an invalid length. [ 230.687436][T11651] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 231.178788][T11667] __nla_validate_parse: 4 callbacks suppressed [ 231.178804][T11667] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1360'. [ 231.204045][T11667] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1360'. [ 231.286547][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 231.406667][T11674] ieee802154 phy1 wpan1: encryption failed: -22 [ 231.438275][T11674] ieee802154 phy1 wpan1: encryption failed: -22 [ 231.711302][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 231.849519][T11698] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1363'. [ 231.860805][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1367'. [ 232.020319][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'. [ 232.056622][T11714] gretap1: entered promiscuous mode [ 232.061895][T11714] gretap1: entered allmulticast mode [ 232.086565][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 232.341076][T11726] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 232.952991][T11757] 8021q: VLANs not supported on gre0 [ 233.110237][T11738] syz.4.1376: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.190901][T11764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1380'. [ 233.205656][T11738] CPU: 0 UID: 0 PID: 11738 Comm: syz.4.1376 Not tainted syzkaller #0 PREEMPT(full) [ 233.205681][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.205691][T11738] Call Trace: [ 233.205699][T11738] [ 233.205706][T11738] dump_stack_lvl+0x189/0x250 [ 233.205738][T11738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.205761][T11738] ? __pfx__printk+0x10/0x10 [ 233.205786][T11738] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.205809][T11738] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.205833][T11738] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 233.205859][T11738] warn_alloc+0x214/0x310 [ 233.205889][T11738] ? __pfx_warn_alloc+0x10/0x10 [ 233.205923][T11738] ? __get_vm_area_node+0x28f/0x300 [ 233.205946][T11738] ? nf_tables_newset+0x1330/0x2540 [ 233.205972][T11738] __vmalloc_node_range_noprof+0x690/0x12d0 [ 233.206028][T11738] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.206051][T11738] ? nf_tables_newset+0x1330/0x2540 [ 233.206076][T11738] ? rcu_is_watching+0x15/0xb0 [ 233.206096][T11738] ? nf_tables_newset+0x1330/0x2540 [ 233.206118][T11738] __kvmalloc_node_noprof+0x674/0x910 [ 233.206143][T11738] ? nf_tables_newset+0x1330/0x2540 [ 233.206167][T11738] ? nft_set_lookup+0x128/0x150 [ 233.206189][T11738] ? nft_hash_privsize+0x2f/0xf0 [ 233.206211][T11738] nf_tables_newset+0x1330/0x2540 [ 233.206246][T11738] ? __pfx_nf_tables_newset+0x10/0x10 [ 233.206290][T11738] ? __nla_parse+0x40/0x60 [ 233.206314][T11738] nfnetlink_rcv+0x11d9/0x2590 [ 233.206375][T11738] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 233.206417][T11738] ? ref_tracker_free+0x63a/0x7d0 [ 233.206465][T11738] ? __netlink_deliver_tap+0x807/0x850 [ 233.206483][T11738] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.206518][T11738] netlink_unicast+0x82f/0x9e0 [ 233.206552][T11738] ? __pfx_netlink_unicast+0x10/0x10 [ 233.206579][T11738] ? netlink_sendmsg+0x642/0xb30 [ 233.206595][T11738] ? skb_put+0x11b/0x210 [ 233.206616][T11738] netlink_sendmsg+0x805/0xb30 [ 233.206639][T11738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.206655][T11738] ? aa_sock_msg_perm+0xf1/0x1d0 [ 233.206676][T11738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.206688][T11738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.206702][T11738] __sock_sendmsg+0x21c/0x270 [ 233.206723][T11738] ____sys_sendmsg+0x505/0x830 [ 233.206742][T11738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.206768][T11738] ? import_iovec+0x74/0xa0 [ 233.206787][T11738] ___sys_sendmsg+0x21f/0x2a0 [ 233.206803][T11738] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.206846][T11738] ? __fget_files+0x2a/0x420 [ 233.206858][T11738] ? __fget_files+0x3a0/0x420 [ 233.206878][T11738] __x64_sys_sendmsg+0x19b/0x260 [ 233.206895][T11738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.206922][T11738] ? do_syscall_64+0xbe/0xfa0 [ 233.206944][T11738] do_syscall_64+0xfa/0xfa0 [ 233.206960][T11738] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.206979][T11738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.206992][T11738] ? clear_bhb_loop+0x60/0xb0 [ 233.207008][T11738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.207020][T11738] RIP: 0033:0x7fdb23b8f6c9 [ 233.207033][T11738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.207044][T11738] RSP: 002b:00007fdb249fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.207059][T11738] RAX: ffffffffffffffda RBX: 00007fdb23de5fa0 RCX: 00007fdb23b8f6c9 [ 233.207069][T11738] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 233.207077][T11738] RBP: 00007fdb23c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.207085][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.207093][T11738] R13: 00007fdb23de6038 R14: 00007fdb23de5fa0 R15: 00007ffcc8d7ec78 [ 233.207117][T11738] [ 233.207126][T11738] Mem-Info: [ 233.403280][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 233.469695][T11777] tipc: Failed to remove unknown binding: 66,1,1/676673793:2935827435/2935827437 [ 233.482282][T11738] active_anon:8018 inactive_anon:0 isolated_anon:0 [ 233.482282][T11738] active_file:3336 inactive_file:39977 isolated_file:0 [ 233.482282][T11738] unevictable:768 dirty:143 writeback:0 [ 233.482282][T11738] slab_reclaimable:11848 slab_unreclaimable:143190 [ 233.482282][T11738] mapped:29320 shmem:1374 pagetables:1091 [ 233.482282][T11738] sec_pagetables:0 bounce:0 [ 233.482282][T11738] kernel_misc_reclaimable:0 [ 233.482282][T11738] free:1272897 free_pcp:17446 free_cma:0 [ 233.506768][T11777] tipc: Failed to remove unknown binding: 66,1,1/676673793:2935827435/2935827437 [ 233.570412][T11738] Node 0 active_anon:34172kB inactive_anon:0kB active_file:13344kB inactive_file:159704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119380kB dirty:572kB writeback:0kB shmem:6060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12588kB pagetables:3908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.666357][T11777] tipc: Failed to remove unknown binding: 66,1,1/676673793:2935827435/2935827437 [ 233.704477][T11738] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.770183][T11738] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.869505][T11738] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 233.875637][T11738] Node 0 DMA32 free:1183160kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39120kB inactive_anon:0kB active_file:13344kB inactive_file:159704kB unevictable:1536kB writepending:572kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:46788kB local_pcp:17924kB free_cma:0kB [ 233.969131][T11738] lowmem_reserve[]: 0 0 0 0 0 [ 233.983801][T11738] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.061989][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'. [ 234.102509][T11738] lowmem_reserve[]: 0 0 0 0 0 [ 234.133832][T11738] Node 1 Normal free:3891180kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18148kB local_pcp:12580kB free_cma:0kB [ 234.214967][T11738] lowmem_reserve[]: 0 0 0 0 0 [ 234.230073][T11738] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.245953][T11738] Node 0 DMA32: 519*4kB (UME) 567*8kB (UME) 121*16kB (ME) 825*32kB (UME) 216*64kB (UME) 84*128kB (UM) 65*256kB (UME) 43*512kB (UME) 35*1024kB (UM) 2*2048kB (UM) 254*4096kB (UM) = 1178500kB [ 234.271285][T11800] bond3: option ad_actor_sys_prio: invalid value (0) [ 234.276283][T11738] Node 0 [ 234.279371][T11800] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 234.283627][T11738] Normal: [ 234.292320][T11800] bond3 (unregistering): Released all slaves [ 234.292506][T11738] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 234.324369][T11738] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 29*16kB (UME) 129*32kB (UME) 30*64kB (UME) 10*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891180kB [ 234.347213][T11738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.360212][T11738] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.369601][T11738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.423631][T11738] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.432968][T11738] 47542 total pagecache pages [ 234.505193][T11738] 0 pages in swap cache [ 234.534054][T11738] Free swap = 124996kB [ 234.538260][T11738] Total swap = 124996kB [ 234.542425][T11738] 2097051 pages RAM [ 234.607728][T11738] 0 pages HighMem/MovableOnly [ 234.612624][T11738] 424126 pages reserved [ 234.634917][T11738] 0 pages cma reserved [ 235.659178][T11866] team0: entered promiscuous mode [ 235.688179][T11866] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.718153][T11866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.204473][T11898] __nla_validate_parse: 5 callbacks suppressed [ 236.204490][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1414'. [ 236.282521][T11902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 236.443074][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1418'. [ 236.476460][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1418'. [ 236.570544][T11913] syzkaller0: entered promiscuous mode [ 236.577829][T11913] syzkaller0: entered allmulticast mode [ 236.679683][T11913] tipc: Enabled bearer , priority 0 [ 236.706221][T11924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.730621][T11912] tipc: Resetting bearer [ 236.770770][T11912] tipc: Disabling bearer [ 237.137440][T11947] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1428'. [ 237.178303][T11947] sctp: [Deprecated]: syz.6.1428 (pid 11947) Use of int in max_burst socket option deprecated. [ 237.178303][T11947] Use struct sctp_assoc_value instead [ 237.191729][T11946] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1428'. [ 237.221949][T11950] sctp: [Deprecated]: syz.6.1428 (pid 11950) Use of int in max_burst socket option deprecated. [ 237.221949][T11950] Use struct sctp_assoc_value instead [ 237.249575][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 237.322251][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1432'. [ 237.370238][T11946] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1428'. [ 237.380956][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 237.522625][T11967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1433'. [ 237.536409][T11964] netlink: 'syz.4.1433': attribute type 2 has an invalid length. [ 237.547548][T11966] nbd: couldn't find a device at index 65546 [ 238.630698][T12024] syzkaller0: entered promiscuous mode [ 238.637611][T12024] syzkaller0: entered allmulticast mode [ 239.014816][T12048] tipc: Enabling of bearer rejected, already enabled [ 239.158642][T12053] netlink: 'syz.5.1457': attribute type 12 has an invalid length. [ 239.166640][T12053] netlink: 'syz.5.1457': attribute type 29 has an invalid length. [ 240.574831][T12120] netlink: 'syz.1.1475': attribute type 10 has an invalid length. [ 241.277884][T12144] __nla_validate_parse: 9 callbacks suppressed [ 241.277900][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1482'. [ 241.433156][T12150] netlink: 'syz.4.1486': attribute type 4 has an invalid length. [ 241.606896][T12150] bond6 (unregistering): Released all slaves [ 241.714993][T12160] pim6reg1: entered promiscuous mode [ 241.733648][T12160] pim6reg1: entered allmulticast mode [ 241.939303][T12170] batman_adv: batadv0: Adding interface: ipvlan3 [ 241.965079][T12159] delete_channel: no stack [ 241.976112][T12170] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.036734][T12170] batman_adv: batadv0: Interface activated: ipvlan3 [ 242.304535][T12188] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 242.327914][T12188] bond5 (unregistering): Released all slaves [ 242.562916][T12194] netlink: 'syz.3.1497': attribute type 62 has an invalid length. [ 242.959342][T12211] syzkaller1: entered promiscuous mode [ 242.978340][T12211] syzkaller1: entered allmulticast mode [ 243.022867][T12213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1501'. [ 243.045542][T12213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1501'. [ 244.201764][T12242] netlink: 408 bytes leftover after parsing attributes in process `syz.6.1508'. [ 244.788572][T12272] openvswitch: netlink: Flow actions attr not present in new flow. [ 245.118304][T12288] bridge0: port 3(batadv1) entered blocking state [ 245.147056][T12288] bridge0: port 3(batadv1) entered disabled state [ 245.161229][T12288] batadv1: entered allmulticast mode [ 245.233082][T12288] batadv1: entered promiscuous mode [ 245.254182][T12290] macsec1: entered promiscuous mode [ 245.272846][T12290] macsec1: entered allmulticast mode [ 245.613790][ T44] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 245.623386][ T44] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 245.716713][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1529'. [ 245.842139][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1529'. [ 245.886533][T12308] tipc: Enabled bearer , priority 0 [ 245.894175][T12308] syzkaller0: entered promiscuous mode [ 245.899742][T12308] syzkaller0: entered allmulticast mode [ 245.929301][T12308] tipc: Resetting bearer [ 245.941708][T12308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.975613][T12307] tipc: Resetting bearer [ 246.121161][T12307] tipc: Disabling bearer [ 246.376200][T12335] veth0_vlan: mtu less than device minimum [ 246.389893][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 246.438339][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 246.767449][T12344] tipc: Enabled bearer , priority 0 [ 246.782197][T12344] syzkaller0: entered promiscuous mode [ 246.801349][T12344] syzkaller0: entered allmulticast mode [ 246.864863][T12344] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1538'. [ 246.892551][T12344] tipc: Resetting bearer [ 247.512013][T12359] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1543'. [ 247.523702][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 247.556201][T12343] slab net_namespace start ffff888031b44a80 pointer offset 4344 size 9280 [ 247.565272][T12343] list_del corruption. prev->next should be ffff888046f13c88, but was ffff888032627108. (prev=ffff888031b45b78) [ 247.577568][T12343] ------------[ cut here ]------------ [ 247.583039][T12343] kernel BUG at lib/list_debug.c:64! [ 247.588417][T12343] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 247.594690][T12343] CPU: 0 UID: 0 PID: 12343 Comm: syz.1.1538 Not tainted syzkaller #0 PREEMPT(full) [ 247.604105][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.614173][T12343] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 247.621220][T12343] Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d [ 247.640831][T12343] RSP: 0018:ffffc90002ee7ad8 EFLAGS: 00010246 [ 247.646910][T12343] RAX: 000000000000006d RBX: ffff888046f13c88 RCX: 6c863f15d1f87f00 [ 247.654897][T12343] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000 [ 247.662868][T12343] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 247.670839][T12343] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff11006368b6f [ 247.678811][T12343] R13: dffffc0000000000 R14: ffff888031b45b78 R15: ffff888031b45b78 [ 247.686784][T12343] FS: 0000555561b23500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 247.695721][T12343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.702313][T12343] CR2: 000000000000fff3 CR3: 0000000074dbe000 CR4: 00000000003526f0 [ 247.710296][T12343] Call Trace: [ 247.713574][T12343] [ 247.716505][T12343] sctp_destroy_sock+0xb4/0x370 [ 247.721360][T12343] ? sk_common_release+0x69/0x310 [ 247.726401][T12343] ? __pfx_sctp_destroy_sock+0x10/0x10 [ 247.731859][T12343] sk_common_release+0x75/0x310 [ 247.736721][T12343] sctp_close+0x77e/0x900 [ 247.741055][T12343] ? __pfx_sctp_close+0x10/0x10 [ 247.745907][T12343] ? down_write+0x162/0x1f0 [ 247.750411][T12343] ? __pfx_down_write+0x10/0x10 [ 247.755263][T12343] ? ip_mc_drop_socket+0x25a/0x270 [ 247.760381][T12343] inet_release+0x144/0x190 [ 247.764889][T12343] sock_close+0xc3/0x240 [ 247.769136][T12343] ? __pfx_sock_close+0x10/0x10 [ 247.773993][T12343] __fput+0x44c/0xa70 [ 247.777980][T12343] task_work_run+0x1d4/0x260 [ 247.782575][T12343] ? __pfx_task_work_run+0x10/0x10 [ 247.787690][T12343] ? exit_to_user_mode_loop+0x40/0x130 [ 247.793321][T12343] exit_to_user_mode_loop+0xe9/0x130 [ 247.798606][T12343] do_syscall_64+0x2bd/0xfa0 [ 247.803206][T12343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.809270][T12343] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.815423][T12343] ? clear_bhb_loop+0x60/0xb0 [ 247.820101][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.825992][T12343] RIP: 0033:0x7f1088d8f6c9 [ 247.830403][T12343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.850016][T12343] RSP: 002b:00007ffe635da608 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 247.858608][T12343] RAX: 0000000000000000 RBX: 00007f1088fe7da0 RCX: 00007f1088d8f6c9 [ 247.866580][T12343] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 247.874550][T12343] RBP: 00007f1088fe7da0 R08: 00000000000001d0 R09: 0000001c635da8ff [ 247.882519][T12343] R10: 00007f1088fe7cb0 R11: 0000000000000246 R12: 000000000003c6cb [ 247.890488][T12343] R13: 00007f1088fe6180 R14: ffffffffffffffff R15: 00007ffe635da720 [ 247.898468][T12343] [ 247.901483][T12343] Modules linked in: [ 247.905525][T12343] ---[ end trace 0000000000000000 ]--- [ 247.910976][T12343] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 247.918035][T12343] Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d [ 247.937671][T12343] RSP: 0018:ffffc90002ee7ad8 EFLAGS: 00010246 [ 247.943772][T12343] RAX: 000000000000006d RBX: ffff888046f13c88 RCX: 6c863f15d1f87f00 [ 247.951748][T12343] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000 [ 247.959750][T12343] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 247.967752][T12343] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff11006368b6f [ 247.975754][T12343] R13: dffffc0000000000 R14: ffff888031b45b78 R15: ffff888031b45b78 [ 247.983748][T12343] FS: 0000555561b23500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 247.992680][T12343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.999292][T12343] CR2: 000000000000fff3 CR3: 0000000074dbe000 CR4: 00000000003526f0 [ 248.007294][T12343] Kernel panic - not syncing: Fatal exception in interrupt [ 248.014735][T12343] Kernel Offset: disabled [ 248.019042][T12343] Rebooting in 86400 seconds..