last executing test programs: 21.30121108s ago: executing program 3 (id=1233): unshare(0x24020400) socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x6, 0xf7, &(0x7f0000000040)=""/247}, 0x94) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'gretap0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=@canfd={{0x2, 0x1, 0x1}, 0x7c, 0x25777745dee7ee38, 0x0, 0x0, "c6218660e36f3c3925cfb929713e85236105ac20ebf61a6ed1fcaaed2019e9c3dbceedbcc0e628406882633d4ac3f261cb682508cf7a9b2ce82e440638cc29fa"}, 0x48}, 0x118}, 0x0) 21.006512285s ago: executing program 3 (id=1239): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf", 0xc6) socket$kcm(0x2, 0x1, 0x84) (async) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x61, &(0x7f0000000e00)="0005d8a4ca71a74d19e83e665100", 0x0, 0x400060ff, 0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x61, &(0x7f0000000e00)="0005d8a4ca71a74d19e83e665100", 0x0, 0x400060ff, 0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0}, 0x50) 20.564356953s ago: executing program 3 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x60}}, 0x2) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x60}}, 0x2) 20.353183639s ago: executing program 3 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x2e}]}}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r2, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000380)) epoll_create(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1d}, {&(0x7f0000000400)='gH', 0x2}], 0x2}, 0x40080) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r4}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='freezer.self_freezing\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000640)={0xfffffffb, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@ifindex=r9, r2, 0x26, 0x3c, 0x0, @void, @void, @void, @value=r10}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x401, 0xd, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x66c7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x54}}, 0x0) 19.666854049s ago: executing program 3 (id=1259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async, rerun: 32) listen(r1, 0x0) (async, rerun: 32) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) (async) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) (async, rerun: 32) close(0x4) (rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x40, 0x1000}, 0x4) (async) getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000000040)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r4 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e0000001400028006000200300000000800040000095e"], 0x48}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async, rerun: 32) write$tun(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a00081"], 0x72) (async, rerun: 32) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x3, 0x2, 0x8, 0x4, 0x348d, 0x400000, 0x3}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r7) (rerun: 32) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r8, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r8, 0x19dc9e5e572be37a, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x20000090) 19.542361241s ago: executing program 3 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffba09f1aaaabb080045000014000000000089907800000000ff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206000000000000010000000000000405000100070000000900020073797a30000000000780080012c1c69972cea4f2ff8c3740000000060500150003000000050005000000000005000400000000000d000300686173687a8524a7f50000000000"], 0x5c}}, 0x40005) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x9}}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, 0x0, 0x40001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x94) r8 = socket$rxrpc(0x21, 0x2, 0xa) socket$caif_stream(0x25, 0x1, 0x4) poll(&(0x7f0000000180)=[{r8, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000240), 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8918, 0x0) r9 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 15.362313884s ago: executing program 4 (id=1308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x61) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 15.137588473s ago: executing program 4 (id=1310): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f06050000000000000000000700000105000100"], 0x1c}, 0x1, 0x0, 0x0, 0x44802}, 0x20000010) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="02004db90980ffff", 0x8) 14.958606649s ago: executing program 4 (id=1313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffe00}, 0x90) 14.926462392s ago: executing program 4 (id=1314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c00028008800400ef430000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket(0x2b, 0x80801, 0x1) sendmmsg(r2, 0x0, 0x0, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) close(0x3) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$can_raw(r5, &(0x7f00000002c0)={&(0x7f0000000140), 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x2, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "c58b8d224bef9eea"}, 0x10}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000}, 0x20) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x1) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) 12.978520519s ago: executing program 4 (id=1316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 12.787656923s ago: executing program 4 (id=1320): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfffffffffffffe87) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x14}}, 0x40) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x14}}, 0x40) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x10, 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="5fe4783c09502e14664b7831ca807e6ec7b39ab362d37c83473bdfc98befb4e93693698b3fe731e17e951afabc954855caee3a265eafafb876762205ffeb5bc2f66710ef5d82e9a79c2245329543ea8b0a9064cb", @ANYRESOCT=r1], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="5fe4783c09502e14664b7831ca807e6ec7b39ab362d37c83473bdfc98befb4e93693698b3fe731e17e951afabc954855caee3a265eafafb876762205ffeb5bc2f66710ef5d82e9a79c2245329543ea8b0a9064cb", @ANYRESOCT=r1], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0xfd0fd000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESHEX=r5, @ANYRES16=r3, @ANYRES32=r0, @ANYRESOCT, @ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r8, &(0x7f0000002840)=[{{0x0, 0xffffffffffffffe3, 0x0}}], 0x1, 0x4000840) listen(0xffffffffffffffff, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4) 4.383936277s ago: executing program 32 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffba09f1aaaabb080045000014000000000089907800000000ff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206000000000000010000000000000405000100070000000900020073797a30000000000780080012c1c69972cea4f2ff8c3740000000060500150003000000050005000000000005000400000000000d000300686173687a8524a7f50000000000"], 0x5c}}, 0x40005) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x9}}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, 0x0, 0x40001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x94) r8 = socket$rxrpc(0x21, 0x2, 0xa) socket$caif_stream(0x25, 0x1, 0x4) poll(&(0x7f0000000180)=[{r8, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000240), 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8918, 0x0) r9 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 2.933311291s ago: executing program 1 (id=1413): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) socket(0x1, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000110f0000000000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32, @ANYBLOB="08001f00", @ANYRES32], 0x54}}, 0x0) 2.306217294s ago: executing program 1 (id=1417): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000485d200ffa7f099759f182b913acf84a758af060b9c849d269d2c9eea0becd40dfc2e538b548bf56b670d362aeaad7995d2c77f47ee4ea3187db1b75c49f44e58d1e784b3a86701b2e2635c871c56c47278cc68b7557140f309218642782be7338b9cc13c", @ANYRESDEC], 0x48) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r1], 0xd8}, 0x1, 0x0, 0x0, 0x2000c8e4}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x101, 0x0, 0x3, 0xfffe, 0x0, 0x3, 0x0, 0x6}, 0x0, &(0x7f0000000400)={0x3ff, 0x1, 0xfffffffffffffffe, 0x6, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r2, r0, 0x6, 0xd) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0xfffffff8, &(0x7f0000000000)="0001000000000001", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="c9b10401d9c5c52c"], 0xc) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000003c0)="9516", 0x2}], 0x1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525723ee3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b7ff3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d3b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f00"/185, 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x10000000000000d6, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 1.836841649s ago: executing program 0 (id=1419): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x6a040000) socket(0x8, 0x3, 0x0) (async) r1 = socket(0x2, 0x3, 0xff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async) socket$kcm(0x2, 0x1, 0x84) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async) listen(r4, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r6 = socket$inet6(0xa, 0x5, 0x0) (async) r7 = accept(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000099f27e2ad67657d999cf86000000000000fdf5056ff976a5de96b8aef709cf4d874599e3b06ca2f99277db55189cf5aa5bd2efa71557a3c507ec8ceb6dbb45a32faaf073e6305a3d53e4160e1288788a830f779237bacbde94508e25ab1b566461086888294089fa7b62d7b798aef65ce9402a7dd1a03129c9205ba165d1b5059492ccbc9983311d94481a02fe5d378e902eb8bf2bc07d5dd7"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r6, @ANYRES32=r2, @ANYRES32=r0, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x24008801) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073"], 0x6c}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) (async) sendmmsg$inet_sctp(r8, &(0x7f0000000bc0), 0x0, 0x0) 1.718108422s ago: executing program 0 (id=1420): sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r5}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r11, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 1.322057362s ago: executing program 1 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) (async, rerun: 64) close(0x3) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x36, 0x0, &(0x7f0000000000)="e30080670000ec67838717bd86ddd5e91bac95b46d673f459dd48008b875d61d2bc505de08101356020000008ac94149db023f8146f0", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000007000000000000000300000000000000", @ANYRES32=r5, @ANYBLOB="000000000400"/28, @ANYRES32=r0, @ANYBLOB="000000000100"/28, @ANYRES32=r1, @ANYBLOB="00ee0afaffffff00fdff4999ba59f5beb01136c2ee7d9fb5c20000000000000000"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) (async, rerun: 64) r6 = socket(0x10, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x0, 0x51, @mcast2, @loopback={0x0, 0x460c6}, 0x7, 0x7, 0x1}}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c00)={0x360, r7, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @NL80211_ATTR_FRAME={0x30d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @from_mac=@broadcast, {0x7, 0x52}, @value=@ver_80211n={0x0, 0xcd5, 0x3, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x41e, @default, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x5}, {0x9}]}, @val={0x3, 0x1, 0x34}, @void, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x1, 0x30, 0x9}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x8}}, @void, [{0xdd, 0x5a, "ba47eeb7f0dbccdbe8025c4bdfb7c094dc785ba22e7b07c263f035e05e3e650eadc35641df14a554f2f45fcbabb220b469d620fb1c6e979151c2d1ba3afa8c917410d9975afbf4e9164ce0392d18575aef5b9d1a8623d6add738"}, {0xdd, 0x8, "84f6d9a52c5d0080"}, {0xdd, 0xdd, "eabc21e186773a3213a7a4c911c7a6605754ff30d93def714964d2f290b803d1154666c6b4d301c8cc793a247302b59c97e4207efee79aababa7f5ec87485774591bcd0017dfc9fa0756aea19de226a35ce62b5e0ad13f1ae9924617f1a76eaf707b2f3601b815359d25a8e89fc901001516436744d717034fc95c83e78f159e7a7cd842ad027e4923352c4b6a0a23e2521f950166fc2bb690fe69889b119f839d0415ab643d3478ea65bd7edc2590d6edf952524b2e0e4e1c9c6fb706b0cc8822c1c21e6ad122bf74db2f430c02ae3c3b8b9527f9344b8595d9ddfe8f"}, {0xdd, 0x3b, "72cdb5e7eb906f32ea1dabd3b30640728763af41cc8abc4af3ab8576210d548e310d230beaedd81e9c740cbbbd25444499dcef84e930f55b89041b"}, {0xdd, 0xdc, "6af80df454a16756e43de67b77887c61589f9c45a1dba1f658991634785e2f6f64ce5bfee85eb71b982492f9ed27503efcf30935904dc3e73cbcdb26c63366c4f959bd9cc65de58b10b39bac9ef9b947653455880fe812ce584dc0a0b8dd46746cf418e737745c9faa126624c1d5b7a178e55bffe408c8c47e890cded66588842333aa21e4efbda06e8a1822433dbab53233819877db0725fa9d9d5604c16a950644c4bef658ca8c36d120747d481dc69c26c454b671a9f5eb47597f88493053822e5b2a78b56d54d80f75c43d20ab9f99b6026fa78b2fca442a7ad9"}, {0xdd, 0x5e, "80e12974e3af8ff98c1e98c34f4eb3f128cfb87f66ee81494ffc85e1f3b6eccf637a3639f9a89a370ae55f32a90038872a34bbbbdfaf8f9cf3e7594ebf13d183704a6feb7c7ecef3f85047f4b44ffe82061c3b060fb9d0e2aef43e50effa"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x360}, 0x1, 0x0, 0x0, 0x6000140}, 0x4000000) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.26363972s ago: executing program 1 (id=1422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) unshare(0x22020600) r1 = socket(0x10, 0x3, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffff"], 0x0, 0x8, 0xffffffffffffff0d, 0x0, 0x41000}, 0x94) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) write(r1, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x4) close(0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000100)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$netlink(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 784.791956ms ago: executing program 0 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x63, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xff, 0xffffffffffffffff, 0x7, 0x6}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000003bac7a06515a37870000a600000000000000950000000000000094b4d279f063b09229274f20b74e03702a2fc7d2303f33d6f722e32181e5c0549c2edb7fe4c75fceabc438c0a1640043b0516a60401e6051c49c4ca4161046a0ac54e2b4a035ac6bde2f8c7d061930fa1d0110c4daedf0867dfc7a26eab4f66c3352a3dc731bf5a487d9cb6aaf1f3e32cf6f99cd52192f9e1aee94590f3fed343ad293737cc04a3053858dba53212770ac880206811337a16385"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 686.331985ms ago: executing program 2 (id=1424): syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 611.066594ms ago: executing program 2 (id=1425): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000046146224280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40) 539.372063ms ago: executing program 0 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@null={0x40, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x26, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfe3, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x2, 0x3, 0x3, 0x2, 0xfffffffffffffff0, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="ea0080670000ec67078717bd88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="ea0080670000ec67078717bd88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000180000100002000000ff02fd090020000008100500ac14141a08001e0004000000"], 0x2c}}, 0x44000) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000180000100002000000ff02fd090020000008100500ac14141a08001e0004000000"], 0x2c}}, 0x44000) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 449.181989ms ago: executing program 2 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0xfffffd91, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}}, 0x32) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_newneigh={0x54, 0x1c, 0x200, 0x70bd26, 0x25dfdbfb, {0x1c, 0x0, 0x0, r5, 0x20, 0xa4, 0x3}, [@NDA_VLAN={0x6, 0x5, 0x2}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0x2c}, @NDA_SRC_VNI={0x8, 0xb, 0x200}, @NDA_PROTOCOL={0x5, 0xc, 0x5}, @NDA_SRC_VNI={0x8}]}, 0x54}}, 0x4000000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f00000004c0)=0xe8) sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000500)={0x1e8, 0x29, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x3, 0x0, 0x0, @uid=r6}, @nested={0x1cd, 0x43, 0x0, 0x1, [@nested={0x4, 0x7f}, @generic="da3f8135578bbb2a6af5369f3658e765b07e214b0e3dcc539d742faa00d55ec49845d99a50b8fd8d58dab3c85a3fd5b9c483f611b691cef44cc51c7ec6f208ee69cd4331513e90a7c149c13202", @generic="a964950f65e2ef3d54dea3d235edab4e2df65858888235a9549e05a892b40b590778ea45026402ab357aec76c2bcd9d9fc56d3b052e16d1888a6129db0a94ecc87c304008f491bd7cf4ea6a9cdb3d6650208607f86504b71e50bae230dbd407964cc82efd26d5607a7b4e06fd849a100d7bb3748da5912aa97fc241b1c579d62aeff8975a3e2b499a5c6b68fc1aa174415bf9e0dc8b172f1193eede735d81f014963ce7c625ed4797b936bc490395b791b5076ff7a75796b6c002cb8", @typed={0x8, 0xc7, 0x0, 0x0, @u32=0x6}, @generic="82afac74b176f66bb527ac16773b1f2dcb59d7ede8ee024b21919433d66b70ff29f68cf56ac47ffe43f1995351f1652cd5898132784d739431cdd847aafdb07fd0e293420130ce0764fef64fa2cc6e6d3b2b0ca7908de462dff5aa4a6175c313079af5671deb14a60394312d64f541cd712a56d5fa06a2da0d369c73b8dadc882c916670b05ce15d18113257574b8272488720982b94a67400b6c08f215367b1f6b541b5f4251c82e8fb63bc18ef96aec14e90a0"]}]}, 0x1e8}, {&(0x7f0000000700)={0x1218, 0x1b, 0x800, 0x70bd26, 0x25dfdbff, "", [@nested={0x11aa, 0xf, 0x0, 0x1, [@generic="5cd9fe622eb0f9ee26ba0cc3b1e15c4405f6462e20870c7228500fd0c06944a479e29a0382d1", @nested={0x4, 0x10a}, @generic="5b32c761ecf78f737fd914c509b4943c51ac6deb3102e69e135a066dd7ff2f6a58a38b40a12c31e7612c143d5ce342aa336725c0ad5a7bd2cbde2060959fa4fdb264d355133a1147078be40a34e968982a3934800326f9ba24be2bc45c69b03125c987391bcdc384ffc368e67dbc50640c102f832f623f7197917356ae053a84304dffdda68542dacbd00a56427f32ac1c926acbe828cb51f7f81944602a9f09f9abb73c961445695e142ffeb988db785521", @typed={0xa, 0x149, 0x0, 0x0, @str='wlan0\x00'}, @generic="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", @generic, @generic="12088f2788f12e317ee5d9bf99313630993d593cdd5a90707e632408196a320d349fbabcc7aa2170359efdabafac2bbf712df9ed527f35908d42fcf4ea598fb38ebe9c892318bb91955d223b79ef4a822bbbb9c3206bffc3053debac6fd7afa6390b8fb741e6998d1eb3877024df9457f110b102e5690f1c0f2640d3d75c2fdd5048d11d0b149a569a055233443e4237e4d8c7b97a5cb6f24c3bfb587c388c29891c159dcee87c7bd4d69f175c792283ec437f2ff06b8c16cd1c", @nested={0x4, 0xa6}]}, @generic="0dbbb35d3f3fdc8470ed24dd06a092b7bcf4dde86d73d8c88f826f53b61b4817dbf8c95089a4bb82935b24d87287aebb6a6b783bbc2694a8df886fba943f52d243336b71e71fc3250d4681d1e9ac61dae94c83c522eaae074903"]}, 0x1218}, {&(0x7f0000001940)={0x18, 0x3c, 0x400, 0x70bd26, 0x25dfdbfc, "", [@typed={0x6, 0x92, 0x0, 0x0, @str='*\x00'}]}, 0x18}, {&(0x7f0000001980)={0x1240, 0x3d, 0x300, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@empty}, @generic="ce0d7956f910a4b89e329e60fd3e2b3fd2afaefcf998", @typed={0x8, 0xb1, 0x0, 0x0, @uid=0xee00}, @generic="f9617ec8799d18f9a16c3ead8c762dabd306a00a810406e4ff1c02c2452d0afb3b4250d9d5cc8390083b8805ebe9b079a2a7e63eb3c148975c2cfebacecea440144c6e1102d60a4c4e3feebeddf858c3924dbbf7ff21548bb7d4cc6fd1586aa6a97c6d1f35e43c95e532bbf03ad15d7bb5e2729b4fdbb915ecb08ba51460cf6eda6d97aed1e35d402ae3b1c52838bd6c3e7a7c45cb71ab115fbe681ca40e39218d2e27e71e571a", @generic="86bfb870a4fdaaad09c9b508717c9d479b5badac8c55586179a20db0e7a77ce0bb097d8addd20d25d879e93f9d5205978b64cd8f84329a6f5dc10715969ac8d059c333be1f79a42e1d31d9b8b35b888dd85fe3fee7b3439a4d0e5425e6ceb43458853ea9517accd8f6d6ba8a4e1bdf0a7b5abdb2b7018230367d5ac9d524f014b6595c4b803d3f7a8588bead933d0a65f27a5227e409f5db340fc7cfd7e56645a9798ea46dbb9d8e6ef2fe4555393cb9cc058cf92e217777ba415af88bdd8e18c141982c65265a07bcadfbba5429b9c2385c82f18e51599d4fe573186a3b854066a6ee2c3cc8372bf63b", @generic="b86403553873e4a228e47a37a2d9745033811953a86e76526c8cfe1546aa446561b4efd433219259f0816fcff378bd5274de207df2c67fce2534c192821f88569396e84551829c0c490bce7903a3b7c6c933601a0be107abde74c77bac4b12ab8ff35609e48e72cf9b4b3d4ae8491978a06773bc21c731", @generic="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"]}, 0x1240}, {&(0x7f0000002bc0)={0x1a4, 0x19, 0x1, 0x70bd25, 0x25dfdbfc, "", [@nested={0x193, 0xd7, 0x0, 0x1, [@nested={0x4, 0x2}, @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x2}, @generic="10e72700c28487b1a99ff653907cee4d5f4f1f15482b802cd7068adf7fe1cca92ff1c99531c4f4919e6c104d49de847a89cfe5373be151170fd61a6bba59fe83d730987c2f1103f4bd0a54fc83247a3765581b3c020737204de503cb20b5ba2e5cd1f122ac46512feb0b7a1f8407d2b080aca3d28b718dbb9ef8c24f068557afb344150703aba64191075c6579dc7d516dcc3ab55b7b9996f284e70d826d2c7ea6e8", @generic="dc92324ca4303c320ae43d472db526fc061331be2e8762445374dbea0676a762067277745d024df1002d955f68b596bbda", @typed={0x8, 0x1a, 0x0, 0x0, @fd=r4}, @generic="b9ecd6f23d50b0139d26160a7b2ecb16fa60d924764d2e39c31655d3e11dc34c2b8bcf59de2042123243609904c447d7c8f1ccb5c2768b7e08961d83952fe5c0501cc6feb5434eab3a785efdfb25b98cba930f2628743501ba399f569bbe54a5753311ec7bcba5acd47bbab13319e10b5570c9ae6b9576e7f7c8c47d3f4a79214546c4e48a90fa1b758cde7e8b558d5d34f93a4e63963826b7960bba8bdca2f016ac2f6df98f5366"]}]}, 0x1a4}], 0x5, 0x0, 0x0, 0xc000}, 0x4004c44) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000002e40)=""/95, &(0x7f0000002ec0)=0x5f) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000002f00), 0x2, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002f40)={@private1, 0xc9b, 0x2, 0xfe, 0x0, 0x7f, 0x1}, &(0x7f0000002f80)=0x20) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000002fc0)) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000003000)={0x2, 0x0, 0x2, 0x9, 0x9, 0x0, [{0x9, 0x1, 0x1ff, '\x00', 0x1000}, {0xd, 0x0, 0x1, '\x00', 0x80}, {0x4, 0x1, 0xb45f, '\x00', 0x201}, {0x9, 0x60dc, 0x2}, {0x1, 0x3, 0x5, '\x00', 0x2100}, {0x7, 0x9, 0x0, '\x00', 0x5}, {0x80000001, 0xc, 0x7ff, '\x00', 0x1200}, {0xffffffffffffff81, 0x6, 0x7, '\x00', 0x1204}, {0xc, 0x2, 0x5, '\x00', 0x400}]}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r9, &(0x7f0000003240)="007b910e27d39e3324abf5aa8cdbc8230784", 0x12, 0x8000, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000003280)={r0, 0x100000001, 0x5ac8, 0x1}) ioctl$SIOCGETSGCNT(r10, 0x89e1, &(0x7f00000032c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x3a}}) sendmsg$nl_route_sched_retired(r4, &(0x7f00000044c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004480)={&(0x7f0000003340)=@delchain={0x1130, 0x65, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xe, 0xf}, {0x1ffe0, 0xfff3}}, [@f_rsvp={{0x9}, {0xccc, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x2, 0x2000}, {0x56, 0x0, 0x4c53}, 0x16, 0x25, 0x9}}, @TCA_RSVP_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010100}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xf, 0x7, 0x6, 0x5, 0x3, 0x10, 0x8, 0x4a8, 0x7fff, 0x0, 0xa, 0x9, 0x4, 0xfffffff7, 0x1, 0xaa1d, 0x6, 0x3, 0x7, 0x3b3a, 0x8, 0xf20, 0x2, 0xffff0000, 0x200, 0x8, 0x0, 0x9, 0x6, 0x8, 0x9, 0x10, 0x8, 0x81, 0x7, 0xe, 0xfffffe01, 0x29c0, 0x5, 0x480000, 0x8e7, 0x8001, 0x43a, 0x2d3ec115, 0x6, 0x5, 0xf4f, 0x6, 0x23bbf186, 0x9, 0x7ff, 0x2973, 0x1, 0xa176, 0xfffffffa, 0xff, 0xffff, 0x80000, 0x1c4e000, 0x3, 0x8, 0x101, 0x81, 0x1, 0x6d13, 0x0, 0x6, 0xf4, 0xf2, 0x4, 0x1, 0x9e, 0x2, 0x1, 0x47f9, 0x4, 0x200000, 0x6, 0x3b, 0xd, 0x4, 0x1, 0x7, 0xf, 0x5, 0x2, 0x10, 0xc5e, 0x6, 0xf4, 0x52, 0xcf2d, 0xffffff0e, 0x3, 0x3, 0x200, 0x800, 0x8, 0x7ff, 0x0, 0xfffffff7, 0xfffffffd, 0x9, 0x4, 0x80, 0x7fffffff, 0x3, 0x731, 0xffffa6f5, 0x7, 0x3, 0xff, 0x6, 0x4, 0x7fff, 0xdad, 0x7, 0x9, 0x1, 0x3, 0x5, 0x1, 0x5, 0x5, 0xfff, 0xfffffff9, 0x7, 0x401, 0x5, 0x6, 0x9, 0x0, 0x9, 0x8, 0x5, 0x3, 0x80000001, 0x7, 0xffffffff, 0x8, 0x8001, 0x9, 0x5, 0x9, 0x1, 0xffffff00, 0xfffffffb, 0x4, 0x7, 0xb48, 0x8, 0x3, 0x3, 0xffff, 0xf2cd, 0x9, 0x401, 0x5, 0x4, 0x200, 0x7, 0x5, 0x8, 0x5, 0xf2, 0x100, 0x6, 0x4, 0x10001, 0x7f, 0x4, 0x2, 0xa, 0x1000, 0x5, 0x1, 0x1ff, 0x6, 0x10000, 0xb8, 0x2, 0x2, 0x1, 0x3be6, 0x4, 0xffffff01, 0x401, 0x2, 0x2, 0x9, 0x3, 0x6, 0x1, 0x8, 0x4, 0x2, 0x8, 0xd3, 0x9, 0x4, 0x7, 0x6, 0x2100000, 0x7, 0x5, 0x0, 0x1000, 0x2e, 0x2, 0x23c8, 0x5, 0xaf, 0xffffffff, 0x7, 0x7, 0x5, 0x0, 0x6, 0x8, 0x7, 0x1, 0xe, 0x2, 0xfffffff8, 0xa, 0xf, 0x1000, 0x3, 0x80000000, 0x46, 0x800, 0x3, 0x4, 0x6, 0x40, 0x2, 0x2, 0x8, 0x1, 0x6, 0x5, 0x61a8, 0x7ff, 0x0, 0x6, 0xe4d, 0x3, 0x7, 0x8, 0x4, 0x9, 0x200, 0x3, 0xee2, 0x40]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x400, 0x7, 0xfffffff7, 0x3, 0x5, 0x81, 0x3, 0xbb39, 0x2, 0x6, 0x40c, 0xb71, 0x101, 0x401, 0x5, 0x6, 0x3, 0xe0, 0x2, 0x2, 0xc, 0x8001, 0x5, 0x6, 0x6, 0x9, 0x5, 0x2, 0x30000000, 0xffffff81, 0x2, 0x5, 0x6, 0x6, 0x7, 0x1, 0xffff, 0x8001, 0x2, 0x4, 0x8, 0x7, 0x1, 0x0, 0xa3, 0x6, 0x0, 0x2, 0x3, 0x8, 0x7, 0x4353, 0x35a, 0xb, 0x1, 0x5, 0x3, 0xffff, 0x60, 0x7, 0x3, 0x3ff, 0x79b4, 0x9, 0xa, 0x0, 0xb, 0x2, 0x7ff, 0x5, 0x0, 0x80000000, 0x3, 0x243, 0xfffffff8, 0x4, 0x8, 0x10000, 0x9, 0xa37, 0x7, 0xd167cafa, 0x8b, 0x3f, 0x2, 0x400, 0x1, 0x0, 0x3, 0x4, 0x8f, 0x4, 0x8, 0x3, 0xb6e4, 0xf6c7, 0x1, 0xebd, 0xd70, 0x80000000, 0x4, 0x1, 0x3, 0x5, 0x3, 0x9, 0x6, 0xfffffff0, 0x5, 0x6, 0xbfb, 0x3ff, 0x0, 0x401, 0x7f, 0x0, 0xfffffffc, 0xede, 0x9, 0x800, 0x2, 0x2, 0x6f, 0x400, 0x7, 0x8, 0x9, 0x7ff, 0x8, 0x7fffffff, 0x10, 0xffffffa1, 0xa66, 0x5, 0x7ff, 0x4d2fe8de, 0x9, 0xb2, 0x401, 0x401, 0xffff, 0x1, 0xb, 0x4, 0xe, 0x9, 0x606c, 0x80000000, 0xff, 0xfffffffd, 0xfffffff7, 0x4d, 0x0, 0x3, 0x0, 0x0, 0x2, 0xc197, 0x68020a60, 0x0, 0x9, 0x3749, 0x0, 0xe, 0x6, 0xf5c, 0x20000, 0x7f, 0x1, 0x8, 0x0, 0x9, 0x9, 0x5, 0x401, 0xffffffff, 0x4, 0x800, 0xfff, 0x401, 0xdf9, 0x2b36, 0x8, 0xed, 0xa, 0xeb, 0x1698, 0x62b5918, 0x1, 0xb5d, 0xffffffff, 0x4, 0xffffffff, 0x7fff, 0xe73, 0x0, 0x8b29, 0xffff, 0xc4, 0x1000, 0x35b7, 0xe06e, 0x2, 0x5, 0xde, 0x7, 0x3, 0x3, 0x0, 0x8, 0x3, 0xc, 0x200000, 0x8, 0x6817, 0x7, 0x800000, 0xac0, 0x7ff, 0xe33, 0xfffffffb, 0x10001, 0x9, 0x0, 0x400, 0x9af, 0x6, 0x2, 0x0, 0xbf, 0x7, 0x8, 0xa, 0x87, 0x6, 0x0, 0x0, 0x3, 0x9, 0x2, 0x7fff, 0x200, 0x9, 0x5, 0x3, 0x8, 0x9, 0x4, 0x6150, 0x1, 0x0, 0x1, 0x2, 0x8000, 0x6]}]}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010101}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7f, 0x7fff, 0xf73}, {0x1, 0x7bd, 0x6f9dfbdc}, 0x2e, 0x3}}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1000}]}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x20000000, 0x3, 0x80000001, 0xfffffffe, {0x8, 0x1, 0x3, 0xf, 0x7, 0x5f}, {0x0, 0x1, 0x4, 0x7, 0x81, 0x40}, 0x9, 0x3, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x6, 0x5, 0x15, 0x7fff, 0x100, 0x3, 0x2, 0x8, 0x1, 0x30000, 0x78, 0xffffffff, 0xffffffa7, 0x9, 0x4, 0x5b, 0x800, 0x117e, 0xe, 0x3, 0x3, 0xfffffffb, 0x6dd, 0xffffffff, 0x3, 0x3, 0x1, 0x7f, 0x400, 0x0, 0x0, 0x4, 0x8, 0x8, 0x1, 0xff, 0x800, 0x1, 0x1, 0x5, 0x0, 0x8, 0x8, 0x7, 0x80, 0x8, 0xfffffffa, 0x5394, 0x3, 0xb8, 0x2, 0x6, 0x8, 0x52, 0x1, 0x9, 0x76, 0x0, 0xdab9, 0x1, 0x3ff, 0xc9e3, 0x5, 0xe7, 0x4, 0x7ff, 0x5, 0x7, 0x3, 0x5, 0x8, 0x1, 0x2, 0x6, 0x7, 0xffffffff, 0x5, 0x9, 0x3, 0x1, 0x6, 0x80000000, 0x615, 0x633, 0x7fffffff, 0x8, 0x9, 0x10, 0x2, 0x7, 0x401, 0x6, 0x6ef, 0xf, 0x5702, 0x8, 0x8, 0x9, 0x9f, 0x7fffffff, 0x3, 0x400, 0x3, 0x3, 0x0, 0x12, 0x4, 0x3, 0xfffffeff, 0x1, 0x7, 0x1, 0x4, 0x1900, 0x2, 0x7, 0x5, 0x200, 0x5, 0x1ff, 0x8, 0xa6, 0x2a, 0x7f, 0x24f, 0x1, 0x1ff, 0x4, 0x981, 0x1, 0xfff, 0x6, 0x80000001, 0x4, 0x3, 0x6, 0xef3, 0x5a6, 0x2, 0x81, 0xb7c, 0x0, 0xffffffff, 0x7d3, 0x4000, 0x2, 0x8c1a, 0x3, 0x4, 0x10000, 0x9, 0x6, 0x22f2, 0x4, 0x9, 0x1, 0xc, 0x9, 0x1, 0x9a96, 0x1, 0x0, 0xc948, 0x9, 0x2, 0x1000, 0x5, 0x7, 0x6, 0x101, 0x0, 0x3, 0x4, 0x2, 0x3, 0x0, 0x7ff, 0xe, 0x5, 0x5, 0x7, 0x7f, 0x3, 0x0, 0x3, 0xff, 0x6, 0x2, 0xcc8f, 0x8, 0x0, 0x7b, 0x2, 0x9, 0x8, 0x8, 0x1, 0x8, 0x0, 0xffffffff, 0x0, 0x1, 0xfffffffa, 0xf, 0x5, 0xc, 0x4, 0x6, 0x96, 0x3, 0x81, 0x2, 0x2, 0x4, 0x8, 0x0, 0x3ff, 0x4, 0x8c, 0x8, 0x1, 0x0, 0x6, 0x3, 0x6, 0xffffffff, 0x0, 0x4, 0x6, 0x0, 0x3, 0x40, 0x0, 0x7fffffff, 0x200, 0x7ff, 0x10000, 0xe, 0xfffffff8, 0xfff, 0x6, 0x7, 0x35c, 0x4, 0x4, 0x5, 0xbad9, 0x5, 0x0, 0x3ff, 0x5, 0x4, 0xd0, 0x401, 0x3]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0x10}}]}}, @f_rsvp6={{0xa}, {0x3c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xf}}, @TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0xfff2}}]}}, @f_tcindex={{0xc}, {0x3e0, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x8820}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x4941}, @TCA_TCINDEX_ACT={0x3cc, 0x7, [@m_ife={0x114, 0x20, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x100}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffd}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x7ff}]}]}, {0xbb, 0x6, "254828c38984ecfd3bb70f457ebaf6d755d0a026aaf7186bf4f84ccb19aacf60a80c9455d4c6f550620b7a5b48d4f551b73fbb1471053233ed2c4c00f8e0500d5d144bc14b28d44b206536c6e0dc0cf23726bc7571aa5ac30b253d788ad6e63790a902f0c107228b5c6365b9f0501fbd2d572541d0b3c86a33386aa203771e999b09107bc8f97fcac764601c9c87e488a450e68e5bbd89bd2765a1804e9262b152d637485cbd7f90225518e570ed77e08802e10c6346a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x1ec, 0x11, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0x0, 0x8, 0xf1, 0x5d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0x5, 0x4, 0x8, 0xfffffff2}, @private=0xa010100, @remote, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdf2a, 0x0, 0x5, 0xffffffff, 0xfffffffb}, @local, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x0, 0x9, 0x7}, @multicast2, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0xffffffffffffffff, 0x83, 0xff8a}, @rand_addr=0x64010101, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7, 0xffffffffffffffff, 0x5, 0x4}, @rand_addr=0x64010101, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xe8, 0x20000000, 0x7fff, 0x1}, @private=0xa010100, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9000, 0x900, 0x7, 0x5}, @multicast1, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc4b, 0x5, 0x5, 0x10, 0x9}, @multicast2, @empty}}]}, {0x5c, 0x6, "1b89e45dd9dae4a0d6e0e64ae110e76d5a20855b2815321c97c65736bc9b529e833045708f25f35722794cb17f0aaa2ea5e13d5901c626b73764bd457b19841c96bc2d77648324d234fae1b9f084c52eb66ad33539c309ef"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xc8, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xd9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x90, 0x7, 0xc3}, 0xc}}]}, {0x5c, 0x6, "200e70348e8a9a751079f8f589da49f23b4c55d74ef4f96ae9579a457d3e1884cb9e3c4756cff7e770791296c8894d503c45523c5bb0ab2eed6a842f0c28581e9ce3d6cc3f00b35f4910ace880d084ecf7145023a69b97a6"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}]}]}}]}, 0x1130}, 0x1, 0x0, 0x0, 0x40}, 0x3) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000004540), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000004580)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000004640)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004600)={&(0x7f00000045c0)={0x3c, r11, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x90) socket(0x10, 0x6, 0x7ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004700)={{r10, 0xffffffffffffffff}, &(0x7f0000004680), &(0x7f00000046c0)=r10}, 0x20) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004900), 0x4) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004980)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x3, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004a80)={0x6, 0x1c, &(0x7f0000004740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x97}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @call={0x85, 0x0, 0x0, 0x49}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004840)='syzkaller\x00', 0x8, 0x58, &(0x7f0000004880)=""/88, 0x41100, 0x40, '\x00', 0x0, 0x25, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004940)={0x1, 0xa, 0x3, 0xf7a3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000004a00)=[r10, r10, r10, r10, r15], &(0x7f0000004a40)=[{0x2, 0x2, 0x3, 0xa}, {0x2, 0x4, 0xb, 0xb}, {0x1, 0x3, 0x6, 0xc}, {0x3, 0x4, 0xc, 0x7}], 0x10, 0x80000000}, 0x94) 329.67526ms ago: executing program 2 (id=1428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000c000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x98, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x76, 0x0, @opaque="84b539f5c61a0bd7f5ccb0cd824a9466b90ec38a1e8ba5abac0fac01ee4f31614a697991ae4a2384b717236c8f1a2447462d4e3ea6228fa0539402b3c582a9e2db3c3a3076b50644f5b3ca648689d5c037bcd5a4b0f8ee12a20e8f6688871b25dc4f004121915c2307ea3e5e16fd"}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000010000000000000001fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9c920700100000001400030064756d6d7930000000000000000000001c0016801800018014000a00ff00000000000000060000000000000008000d0004000000"], 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x4040080) 304.380532ms ago: executing program 1 (id=1429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x301}, 0x90) 242.095173ms ago: executing program 0 (id=1430): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x20, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000090000000076b389bef1ab000000000000000000d4c40e00"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000000006e2840000001b000000b7000000000017002d13e09e01000000094e00010000000018290000", @ANYRES32=r1, @ANYBLOB="00000000010000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000600000000b80000000000009508000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000600000000b80000000000009508000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) recvmmsg$unix(r8, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1}}], 0x1, 0x10000, 0x0) (async) recvmmsg$unix(r8, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1}}], 0x1, 0x10000, 0x0) getsockopt$sock_int(r6, 0x1, 0x26, &(0x7f0000000080), &(0x7f0000000200)=0x4) 145.94529ms ago: executing program 0 (id=1431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x8, 0x2, 0xa000, 0x3}, 0x10) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB='\b\x00\t\x00&I'], 0x24}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x1fc, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa84a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xb471, @mcast2, 0x4f}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "21f2d68771b809b6088e9108bf807914b525dff6ff67a5223d91a0152f7f15"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "18157056914a0528b64c8b3d412f2f8552a52937610ab28c0977d5d90db8e0e8"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8d1d8488ec996a432898e2b107e1c88bcf5fba77ce39"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000000}, 0x40880) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x525000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 110.196093ms ago: executing program 2 (id=1432): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x894}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) accept4(r1, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000000)=0x80, 0x400) 26.438765ms ago: executing program 1 (id=1433): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r0, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa30000008001b"], 0x11c}}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000000000000001000000000000080000000000030000000000000000000000000000000000000000000000000000002b00000002"], 0x23c}}, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r0, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa30000008001b"], 0x11c}}, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000000000000001000000000000080000000000030000000000000000000000000000000000000000000000000000002b00000002"], 0x23c}}, 0x0) (async) 0s ago: executing program 2 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000001a40)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000001a40)='syzkaller\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={r6}, &(0x7f0000000280)=0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18) unshare(0x22020600) listen(r9, 0xc8) (async) listen(r9, 0xc8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x48, 0x7, 0xc, 0x4, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x2c, r15, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48845}, 0x4040000) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r15, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r15, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) kernel console output (not intermixed with test programs): bridge_slave_0: entered allmulticast mode [ 99.799860][ T5846] bridge_slave_0: entered promiscuous mode [ 99.857340][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.865509][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.873825][ T5846] bridge_slave_1: entered allmulticast mode [ 99.882364][ T5846] bridge_slave_1: entered promiscuous mode [ 99.975896][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.995604][ T5853] team0: Port device team_slave_0 added [ 100.003205][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.011964][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.019939][ T5859] bridge_slave_0: entered allmulticast mode [ 100.027751][ T5859] bridge_slave_0: entered promiscuous mode [ 100.038599][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.053362][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.066274][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.108198][ T5853] team0: Port device team_slave_1 added [ 100.132191][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.139692][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.147694][ T5859] bridge_slave_1: entered allmulticast mode [ 100.156607][ T5859] bridge_slave_1: entered promiscuous mode [ 100.195186][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.202450][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.211511][ T5845] bridge_slave_0: entered allmulticast mode [ 100.220135][ T5845] bridge_slave_0: entered promiscuous mode [ 100.259875][ T5851] Bluetooth: hci0: command tx timeout [ 100.312139][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.320052][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.327668][ T5845] bridge_slave_1: entered allmulticast mode [ 100.336144][ T5845] bridge_slave_1: entered promiscuous mode [ 100.340893][ T5851] Bluetooth: hci2: command tx timeout [ 100.342436][ T5852] Bluetooth: hci1: command tx timeout [ 100.354271][ T5857] Bluetooth: hci3: command tx timeout [ 100.373804][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.381641][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.410062][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.424850][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.429617][ T5857] Bluetooth: hci4: command tx timeout [ 100.434445][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.465563][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.480867][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.494403][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.505875][ T5846] team0: Port device team_slave_0 added [ 100.514833][ T5850] team0: Port device team_slave_0 added [ 100.560780][ T5846] team0: Port device team_slave_1 added [ 100.585562][ T5850] team0: Port device team_slave_1 added [ 100.595703][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.610100][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.654479][ T5859] team0: Port device team_slave_0 added [ 100.664764][ T5859] team0: Port device team_slave_1 added [ 100.735498][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.743413][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.772518][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.828647][ T5845] team0: Port device team_slave_0 added [ 100.844619][ T5853] hsr_slave_0: entered promiscuous mode [ 100.852840][ T5853] hsr_slave_1: entered promiscuous mode [ 100.860674][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.867822][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.895493][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.922228][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.930197][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.958224][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.972472][ T5845] team0: Port device team_slave_1 added [ 101.005302][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.013192][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.041182][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.054185][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.062695][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.091426][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.132710][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.140154][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.167763][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.197514][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.205266][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.232758][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.274695][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.282348][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.309909][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.352179][ T5846] hsr_slave_0: entered promiscuous mode [ 101.360582][ T5846] hsr_slave_1: entered promiscuous mode [ 101.367516][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 101.374224][ T5846] Cannot create hsr debugfs directory [ 101.491238][ T5859] hsr_slave_0: entered promiscuous mode [ 101.498384][ T5859] hsr_slave_1: entered promiscuous mode [ 101.505872][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 101.512306][ T5859] Cannot create hsr debugfs directory [ 101.584198][ T5850] hsr_slave_0: entered promiscuous mode [ 101.591360][ T5850] hsr_slave_1: entered promiscuous mode [ 101.597599][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 101.604502][ T5850] Cannot create hsr debugfs directory [ 101.622165][ T5845] hsr_slave_0: entered promiscuous mode [ 101.629210][ T5845] hsr_slave_1: entered promiscuous mode [ 101.635893][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 101.642102][ T5845] Cannot create hsr debugfs directory [ 102.142424][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.187817][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.236729][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.271210][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.331348][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.341046][ T5857] Bluetooth: hci0: command tx timeout [ 102.357940][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.376862][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.388766][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.419971][ T5857] Bluetooth: hci2: command tx timeout [ 102.425791][ T5857] Bluetooth: hci3: command tx timeout [ 102.431959][ T5852] Bluetooth: hci1: command tx timeout [ 102.499607][ T5857] Bluetooth: hci4: command tx timeout [ 102.530203][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.543639][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.572723][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.585100][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.684444][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.697081][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.734189][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.751879][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.773608][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.843705][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.869910][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.885204][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.921638][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.945176][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.981462][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.989090][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.019551][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.055829][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.063233][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.107258][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.152752][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.160248][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.195748][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.203295][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.257132][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.366539][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.398308][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.413218][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.420526][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.498117][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.522812][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.530596][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.582813][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.633789][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.641193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.692337][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.699934][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.721738][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.747199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.754594][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.804868][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.812318][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.876386][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.073037][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.094433][ T5853] veth0_vlan: entered promiscuous mode [ 104.133127][ T5853] veth1_vlan: entered promiscuous mode [ 104.356899][ T5846] veth0_vlan: entered promiscuous mode [ 104.408215][ T5846] veth1_vlan: entered promiscuous mode [ 104.420383][ T5857] Bluetooth: hci0: command tx timeout [ 104.442123][ T5853] veth0_macvtap: entered promiscuous mode [ 104.488594][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.502430][ T5857] Bluetooth: hci3: command tx timeout [ 104.508045][ T5857] Bluetooth: hci1: command tx timeout [ 104.514432][ T5852] Bluetooth: hci2: command tx timeout [ 104.524680][ T5853] veth1_macvtap: entered promiscuous mode [ 104.580865][ T5857] Bluetooth: hci4: command tx timeout [ 104.599902][ T5846] veth0_macvtap: entered promiscuous mode [ 104.641584][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.670641][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.692344][ T5846] veth1_macvtap: entered promiscuous mode [ 104.705408][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.745981][ T3514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.758570][ T3514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.782232][ T3514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.793696][ T3514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.807915][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.886465][ T5850] veth0_vlan: entered promiscuous mode [ 104.903903][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.940585][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.987717][ T1132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.998038][ T1132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.011238][ T1132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.050459][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.071956][ T5859] veth0_vlan: entered promiscuous mode [ 105.103630][ T5850] veth1_vlan: entered promiscuous mode [ 105.147386][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.178005][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.197494][ T5859] veth1_vlan: entered promiscuous mode [ 105.243919][ T5850] veth0_macvtap: entered promiscuous mode [ 105.265628][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.295355][ T5850] veth1_macvtap: entered promiscuous mode [ 105.298824][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.439516][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.470978][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.488634][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.492244][ T5859] veth0_macvtap: entered promiscuous mode [ 105.535796][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.544821][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.547104][ T5859] veth1_macvtap: entered promiscuous mode [ 105.591431][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.627991][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.647691][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.667874][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.687578][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.709492][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.727603][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.741975][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.786570][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.814529][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.859912][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.887682][ T5845] veth0_vlan: entered promiscuous mode [ 105.897445][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.903986][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 106.174832][ T5845] veth1_vlan: entered promiscuous mode [ 106.393128][ T5964] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 106.447434][ T5964] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 106.470440][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.478672][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.502546][ T5857] Bluetooth: hci0: command tx timeout [ 106.579454][ T5852] Bluetooth: hci1: command tx timeout [ 106.579742][ T5851] Bluetooth: hci2: command tx timeout [ 106.585689][ T5857] Bluetooth: hci3: command tx timeout [ 106.607594][ T5956] syz.0.1 (5956) used greatest stack depth: 17864 bytes left [ 106.624586][ T5845] veth0_macvtap: entered promiscuous mode [ 106.647608][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.658492][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.666647][ T5857] Bluetooth: hci4: command tx timeout [ 106.676051][ T5845] veth1_macvtap: entered promiscuous mode [ 106.876557][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.901028][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.916299][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.945427][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.955157][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.984874][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.036868][ T3514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.082130][ T3514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.095454][ T3514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.160763][ T3514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.346419][ T5978] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 107.437418][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 107.799235][ T5976] IPVS: length: 148 != 24 [ 107.859929][ T5978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.490190][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.501384][ T5988] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.9'. [ 108.520233][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.082608][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.104772][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.367646][ T6010] Zero length message leads to an empty skb [ 109.505833][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 109.649822][ T6010] netlink: 'syz.4.5': attribute type 13 has an invalid length. [ 109.921129][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 109.953392][ T6028] netlink: 'syz.0.14': attribute type 11 has an invalid length. [ 110.161697][ T6018] gretap0: entered promiscuous mode [ 110.640393][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.649691][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.790766][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.806908][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.005173][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.030423][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.517651][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.568497][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.462972][ T6052] infiniband syz1: set active [ 112.481694][ T6052] infiniband syz1: added veth1_to_bond [ 112.503261][ T6052] syz1: rxe_create_cq: returned err = -12 [ 112.532341][ T6052] infiniband syz1: Couldn't create ib_mad CQ [ 112.547497][ T6052] infiniband syz1: Couldn't open port 1 [ 112.604275][ T6074] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.25'. [ 112.712114][ T6052] RDS/IB: syz1: added [ 112.741987][ T6052] smc: adding ib device syz1 with port count 1 [ 112.764163][ T6052] smc: ib device syz1 port 1 has pnetid [ 113.081221][ T6081] netlink: 'syz.0.27': attribute type 15 has an invalid length. [ 113.162015][ T6084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.318658][ T6085] netlink: 'syz.0.27': attribute type 12 has an invalid length. [ 113.326975][ T6085] netlink: 'syz.0.27': attribute type 29 has an invalid length. [ 113.374582][ T6085] netlink: 148 bytes leftover after parsing attributes in process `syz.0.27'. [ 113.417423][ T6085] netlink: 51 bytes leftover after parsing attributes in process `syz.0.27'. [ 113.653614][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 113.731069][ T6093] netlink: 4608 bytes leftover after parsing attributes in process `syz.2.29'. [ 113.797465][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 113.905651][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 113.964081][ T6096] team0: entered promiscuous mode [ 113.982517][ T6096] team_slave_0: entered promiscuous mode [ 114.001082][ T6096] team_slave_1: entered promiscuous mode [ 114.043562][ T6096] bond0: entered promiscuous mode [ 114.068110][ T6096] bond_slave_0: entered promiscuous mode [ 114.088562][ T6096] bond_slave_1: entered promiscuous mode [ 114.111458][ T6096] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 114.147500][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 114.306725][ T6108] netlink: 68 bytes leftover after parsing attributes in process `syz.0.34'. [ 114.368177][ T6109] netlink: 'syz.4.30': attribute type 1 has an invalid length. [ 114.378544][ T6109] netlink: 'syz.4.30': attribute type 2 has an invalid length. [ 114.553268][ T6114] syzkaller0: entered promiscuous mode [ 114.579003][ T6114] syzkaller0: entered allmulticast mode [ 114.612720][ T6114] tipc: Started in network mode [ 114.617991][ T6114] tipc: Node identity 0adc6e20ccd4, cluster identity 4711 [ 114.658373][ T6114] tipc: Enabled bearer , priority 0 [ 114.679842][ T6116] pim6reg1: entered promiscuous mode [ 114.702390][ T6116] pim6reg1: entered allmulticast mode [ 114.762730][ T6113] tipc: Resetting bearer [ 114.800397][ T6113] tipc: Disabling bearer [ 115.034735][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 115.286570][ T6139] gretap0: entered promiscuous mode [ 115.345387][ T6138] wireguard0: entered promiscuous mode [ 115.354948][ T6138] wireguard0: entered allmulticast mode [ 115.377366][ T6142] sctp: [Deprecated]: syz.2.44 (pid 6142) Use of int in max_burst socket option deprecated. [ 115.377366][ T6142] Use struct sctp_assoc_value instead [ 115.763493][ T6150] netlink: 'syz.1.46': attribute type 4 has an invalid length. [ 115.822511][ T6152] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.874268][ T6154] netlink: 'syz.2.48': attribute type 6 has an invalid length. [ 115.923630][ T6152] netlink: 'syz.2.48': attribute type 6 has an invalid length. [ 116.273847][ T6156] netlink: 'syz.1.50': attribute type 7 has an invalid length. [ 116.282416][ T6156] netlink: 'syz.1.50': attribute type 8 has an invalid length. [ 116.295238][ T6156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.137440][ T6209] ipvlan2: entered promiscuous mode [ 118.151793][ T6209] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 118.380151][ T6214] __nla_validate_parse: 6 callbacks suppressed [ 118.380173][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 118.418674][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.443322][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.457750][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.466525][ T6212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.637416][ T6221] netlink: 44 bytes leftover after parsing attributes in process `syz.3.66'. [ 118.667592][ T6217] validate_nla: 4 callbacks suppressed [ 118.667611][ T6217] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 118.893280][ T6223] raw_sendmsg: syz.1.67 forgot to set AF_INET. Fix it! [ 119.457990][ T6234] tipc: Started in network mode [ 119.465914][ T6234] tipc: Node identity c6b11509e129, cluster identity 4711 [ 119.478417][ T6234] tipc: Enabled bearer , priority 0 [ 119.521657][ T6234] syzkaller0: entered promiscuous mode [ 119.527254][ T6234] syzkaller0: entered allmulticast mode [ 119.578221][ T6234] tipc: Resetting bearer [ 119.663011][ T6233] tipc: Resetting bearer [ 119.690050][ T6233] tipc: Disabling bearer [ 120.083881][ T6241] macsec2: entered promiscuous mode [ 120.095341][ T6241] macsec2: entered allmulticast mode [ 120.573127][ T6255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.75'. [ 120.590137][ T5857] Bluetooth: hci4: command tx timeout [ 121.738837][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 121.748446][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 121.843143][ T6311] netlink: 'syz.3.91': attribute type 64 has an invalid length. [ 121.853998][ T6311] netlink: 'syz.3.91': attribute type 10 has an invalid length. [ 121.951096][ T6311] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.964839][ T6319] netlink: 'syz.0.92': attribute type 23 has an invalid length. [ 122.205125][ T6328] Illegal XDP return value 4294967274 on prog (id 31) dev N/A, expect packet loss! [ 122.262251][ T6333] netlink: 248 bytes leftover after parsing attributes in process `syz.0.96'. [ 122.355574][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.4.93'. [ 122.596770][ T6345] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 122.618320][ T6345] macvtap1: entered allmulticast mode [ 122.676191][ T6345] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 122.789720][ T6345] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 122.810678][ T6345] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 122.825265][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 123.420843][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 124.267998][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 124.558070][ T6429] tipc: Enabled bearer , priority 0 [ 124.589191][ T6430] syzkaller0: entered promiscuous mode [ 124.612555][ T6430] syzkaller0: entered allmulticast mode [ 124.792392][ T6430] tipc: Resetting bearer [ 125.169486][ T6430] tipc: Disabling bearer [ 125.440470][ T6448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.922797][ T6489] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 125.962042][ T6493] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 126.197348][ T6489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.293445][ T6486] bond1: (slave veth3): Enslaving as an active interface with a down link [ 126.457790][ T6486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.738284][ T6531] netlink: 'syz.3.136': attribute type 1 has an invalid length. [ 126.763793][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 126.812748][ T6528] netlink: 'syz.2.133': attribute type 13 has an invalid length. [ 126.865453][ T6528] netlink: 'syz.2.133': attribute type 17 has an invalid length. [ 127.154475][ T6545] netlink: 240 bytes leftover after parsing attributes in process `syz.0.137'. [ 127.178870][ T6528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.361771][ T6544] v: renamed from dummy0 (while UP) [ 127.961369][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 128.033439][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 128.782512][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 128.855371][ T30] audit: type=1800 audit(1754551833.610:2): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.148" name="memory.events" dev="tmpfs" ino=136 res=0 errno=0 [ 128.864760][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 128.972023][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 129.022301][ T6615] netlink: 'syz.4.151': attribute type 12 has an invalid length. [ 129.063271][ T6615] netlink: 'syz.4.151': attribute type 14 has an invalid length. [ 129.386659][ T6626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.153'. [ 129.489672][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 129.547349][ T6639] tipc: Enabling of bearer rejected, failed to enable media [ 129.653038][ T6639] tipc: Enabling of bearer rejected, failed to enable media [ 130.104577][ T6656] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 130.147275][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 130.283903][ T5966] IPVS: starting estimator thread 0... [ 130.419139][ T6667] IPVS: using max 26 ests per chain, 62400 per kthread [ 130.679461][ T6674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.162'. [ 130.691071][ T59] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 131.372697][ T6688] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 131.402284][ T6688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.164'. [ 131.420153][ T6688] netlink: 'syz.1.164': attribute type 2 has an invalid length. [ 131.428275][ T6688] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 131.475556][ T6688] netlink: 2 bytes leftover after parsing attributes in process `syz.1.164'. [ 131.535338][ T6712] netlink: 56 bytes leftover after parsing attributes in process `syz.4.166'. [ 134.234678][ T6790] warning: `syz.1.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.383850][ T6799] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 134.477342][ T6801] macvlan1: entered promiscuous mode [ 134.586600][ T6799] __nla_validate_parse: 4 callbacks suppressed [ 134.586619][ T6799] netlink: 15 bytes leftover after parsing attributes in process `syz.3.184'. [ 134.636901][ T6801] macvlan1: left promiscuous mode [ 135.732045][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 135.755085][ T6844] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 135.770634][ T6838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.192'. [ 135.781191][ T6838] netlink: 260 bytes leftover after parsing attributes in process `syz.2.192'. [ 135.801262][ T6844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.260290][ T6861] sctp: [Deprecated]: syz.2.198 (pid 6861) Use of int in maxseg socket option. [ 136.260290][ T6861] Use struct sctp_assoc_value instead [ 136.378660][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 136.635682][ T6875] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 136.877905][ T6880] bond2: (slave gretap1): making interface the new active one [ 136.925221][ T6880] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 137.362576][ T6901] nr0: tun_chr_ioctl cmd 1074025681 [ 137.527628][ T6910] Bluetooth: MGMT ver 1.23 [ 137.547995][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 137.776948][ T6912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.990379][ T6920] openvswitch: netlink: Missing valid actions attribute. [ 138.012763][ T6920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.110789][ T5920] IPVS: starting estimator thread 0... [ 138.220018][ T6924] IPVS: using max 27 ests per chain, 64800 per kthread [ 138.346022][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.353199][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.059212][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'. [ 139.122520][ T6940] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 139.623030][ T5857] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 139.637029][ T5857] Bluetooth: hci2: command 0x0401 tx timeout [ 139.667603][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 139.724136][ T6962] vlan2: entered promiscuous mode [ 139.730660][ T6962] veth0: entered promiscuous mode [ 140.182431][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 140.192189][ T5966] IPVS: starting estimator thread 0... [ 140.289131][ T6984] IPVS: using max 32 ests per chain, 76800 per kthread [ 140.659829][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.235'. [ 140.686795][ T7006] netlink: 560 bytes leftover after parsing attributes in process `syz.4.235'. [ 140.747613][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'. [ 140.768017][ T7010] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 140.801596][ T7010] netlink: 'syz.2.237': attribute type 2 has an invalid length. [ 140.848387][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.237'. [ 141.061165][ T7025] netlink: 248 bytes leftover after parsing attributes in process `syz.0.244'. [ 141.098368][ T7023] netlink: 300 bytes leftover after parsing attributes in process `syz.2.243'. [ 141.138023][ T7026] netlink: 300 bytes leftover after parsing attributes in process `syz.2.243'. [ 141.335737][ T7039] Bluetooth: MGMT ver 1.23 [ 141.483363][ T7044] netlink: 53 bytes leftover after parsing attributes in process `syz.0.249'. [ 141.709182][ T7048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.753889][ T7057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.772781][ T7057] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 141.792456][ T7048] bridge_slave_0: left allmulticast mode [ 141.798356][ T7048] bridge_slave_0: left promiscuous mode [ 141.811968][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.829526][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 141.952470][ T7048] bridge_slave_1: left allmulticast mode [ 141.964459][ T7048] bridge_slave_1: left promiscuous mode [ 141.984832][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.017267][ T7048] bond0: (slave bond_slave_0): Releasing backup interface [ 142.033092][ T7073] netlink: 'syz.2.255': attribute type 64 has an invalid length. [ 142.060226][ T7048] bond0: (slave bond_slave_1): Releasing backup interface [ 142.093430][ T7048] team0: Port device team_slave_0 removed [ 142.119919][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.137535][ T7048] team0: Port device team_slave_1 removed [ 142.152194][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.173547][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.196730][ T7048] bond1: (slave macvlan2): Removing an active aggregator [ 142.216195][ T7048] bond1: (slave macvlan2): Releasing backup interface [ 142.785308][ T7088] ipvlan0: mtu less than device minimum [ 142.960548][ T7103] netlink: 'syz.1.260': attribute type 21 has an invalid length. [ 143.080303][ T7112] netlink: 'syz.4.264': attribute type 4 has an invalid length. [ 143.400142][ T7124] IPv6: NLM_F_REPLACE set, but no existing node found! [ 143.723711][ T7134] tipc: Enabling of bearer rejected, failed to enable media [ 144.074160][ T5857] Bluetooth: hci4: link tx timeout [ 144.083021][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.671353][ T7179] __nla_validate_parse: 6 callbacks suppressed [ 144.671373][ T7179] netlink: 64 bytes leftover after parsing attributes in process `syz.1.278'. [ 144.975418][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.281'. [ 145.025376][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.280'. [ 145.342847][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 145.445301][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 145.460976][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.470197][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.486768][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.509753][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.775982][ T7188] infiniband syz0: set down [ 145.813329][ T7188] infiniband syz0: added ipvlan1 [ 145.827240][ T7188] syz0: rxe_create_cq: returned err = -12 [ 145.853993][ T7188] infiniband syz0: Couldn't create ib_mad CQ [ 145.863678][ T7188] infiniband syz0: Couldn't open port 1 [ 145.982123][ T7188] RDS/IB: syz0: added [ 145.992151][ T7188] smc: adding ib device syz0 with port count 1 [ 146.011757][ T7188] smc: ib device syz0 port 1 has pnetid [ 146.102711][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 146.263849][ T7217] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 146.676495][ T7224] bridge0: port 3(ipvlan3) entered blocking state [ 146.683607][ T7224] bridge0: port 3(ipvlan3) entered disabled state [ 146.694804][ T7224] ipvlan3: entered allmulticast mode [ 146.695027][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 146.708941][ T7224] bridge0: entered allmulticast mode [ 146.721982][ T7224] ipvlan3: left allmulticast mode [ 146.727274][ T7224] bridge0: left allmulticast mode [ 146.787692][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.796816][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.439812][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 147.510419][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 147.871918][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.294'. [ 147.894347][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.902514][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.504995][ T7274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.530357][ T7274] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 148.924690][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.304'. [ 148.969340][ T7287] netlink: 'syz.4.303': attribute type 4 has an invalid length. [ 149.040749][ T7295] netlink: 'syz.0.304': attribute type 9 has an invalid length. [ 149.149340][ T7300] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 150.169377][ T7322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.788339][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 151.680219][ T7359] sctp: [Deprecated]: syz.0.319 (pid 7359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.680219][ T7359] Use struct sctp_sack_info instead [ 151.850668][ T7363] netlink: 'syz.4.321': attribute type 4 has an invalid length. [ 151.961207][ T7363] netlink: 'syz.4.321': attribute type 4 has an invalid length. [ 152.149449][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 152.313998][ T7381] tipc: Started in network mode [ 152.339779][ T7381] tipc: Node identity c, cluster identity 4711 [ 152.346361][ T7381] tipc: Node number set to 12 [ 152.414457][ T7386] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 152.448872][ T7386] bridge1: entered allmulticast mode [ 152.469254][ T7390] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 153.290184][ T7417] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 153.321599][ T7417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.335'. [ 153.444774][ T7417] dummy0: entered promiscuous mode [ 153.455329][ T7417] dummy0: entered allmulticast mode [ 153.464740][ T7417] bridge0: port 1(dummy0) entered blocking state [ 153.478042][ T7417] bridge0: port 1(dummy0) entered disabled state [ 153.503934][ T7417] bridge0: port 1(dummy0) entered blocking state [ 153.510725][ T7417] bridge0: port 1(dummy0) entered forwarding state [ 153.625417][ T7421] netlink: 'syz.3.338': attribute type 4 has an invalid length. [ 153.867018][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 153.932039][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 154.215451][ T7449] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 154.370529][ T7449] batman_adv: batadv0: Adding interface: ip6gretap1 [ 154.398920][ T7449] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.470025][ T7449] batman_adv: batadv0: Interface activated: ip6gretap1 [ 154.575097][ T7456] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 154.588937][ T7461] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 154.602314][ T7461] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 154.621516][ T7461] netlink: 1180 bytes leftover after parsing attributes in process `syz.3.349'. [ 154.684776][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 154.919428][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.353'. [ 154.984116][ T7475] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 155.006175][ T7475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'. [ 155.105018][ T7480] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 155.856488][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 156.660577][ T7554] sctp: [Deprecated]: syz.3.371 (pid 7554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.660577][ T7554] Use struct sctp_sack_info instead [ 156.703785][ T7556] netlink: 'syz.0.372': attribute type 22 has an invalid length. [ 156.720182][ T7556] netlink: 'syz.0.372': attribute type 2 has an invalid length. [ 156.755915][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 156.796253][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 156.834646][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 156.835932][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 156.896353][ T7518] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.924751][ T7518] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.962031][ T7518] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.010833][ T7518] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.322346][ T7581] syzkaller1: entered promiscuous mode [ 157.338258][ T7581] syzkaller1: entered allmulticast mode [ 157.530311][ T7586] openvswitch: netlink: Flow actions attr not present in new flow. [ 157.550854][ T7586] trusted_key: syz.3.379 sent an empty control message without MSG_MORE. [ 158.597351][ T7617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.609725][ T7617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.772358][ T7617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.799050][ T7617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.001266][ T7617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.045271][ T7617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.211613][ T7617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.255993][ T7617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.295670][ T7630] netlink: 256 bytes leftover after parsing attributes in process `syz.4.386'. [ 159.632394][ T7520] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.668988][ T7520] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.723936][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.745398][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.802901][ T7520] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.832154][ T7520] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.025542][ T7520] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.058227][ T7520] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.450247][ T7682] tipc: Cannot configure node identity twice [ 161.833061][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 162.323928][ T7722] netlink: 'syz.1.404': attribute type 9 has an invalid length. [ 162.349121][ T7722] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.404'. [ 162.685514][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.849767][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 162.985861][ T7748] bridge_slave_0: left allmulticast mode [ 162.992678][ T7748] bridge_slave_0: left promiscuous mode [ 163.009369][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.081066][ T7748] bridge_slave_1: left allmulticast mode [ 163.098091][ T7748] bridge_slave_1: left promiscuous mode [ 163.124090][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.216542][ T7748] bond0: (slave bond_slave_0): Releasing backup interface [ 163.272020][ T7748] bond0: (slave bond_slave_1): Releasing backup interface [ 163.373165][ T7748] team0: Port device team_slave_0 removed [ 163.402150][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 163.437353][ T7748] team0: Port device team_slave_1 removed [ 163.761448][ T7758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.797033][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.415'. [ 163.901247][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.908818][ T7770] bridge0: port 2(bridge_slave_1) entered listening state [ 163.916468][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.923937][ T7770] bridge0: port 1(bridge_slave_0) entered listening state [ 163.963350][ T7770] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 164.066028][ T7758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.117804][ T7785] netlink: 'syz.1.415': attribute type 3 has an invalid length. [ 164.282797][ T7758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.356234][ T7795] sctp: [Deprecated]: syz.1.420 (pid 7795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.356234][ T7795] Use struct sctp_sack_info instead [ 164.502250][ T7758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.693661][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 164.720453][ T7805] openvswitch: netlink: Flow key attr not present in new flow. [ 164.743267][ T7807] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 164.755005][ T7807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.846439][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.899090][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.943002][ T6388] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.975833][ T6388] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.407822][ T7824] bridge0: port 3(macsec0) entered blocking state [ 165.415833][ T7824] bridge0: port 3(macsec0) entered disabled state [ 165.429960][ T7824] macsec0: entered allmulticast mode [ 165.435637][ T7824] veth1_macvtap: entered allmulticast mode [ 165.447066][ T7824] macsec0: entered promiscuous mode [ 165.468046][ T7827] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 166.030283][ T7845] netlink: 64 bytes leftover after parsing attributes in process `syz.3.432'. [ 166.210548][ T7856] netlink: 'syz.4.435': attribute type 12 has an invalid length. [ 166.276028][ T7847] syz.0.433: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.361317][ T7847] CPU: 1 UID: 0 PID: 7847 Comm: syz.0.433 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 166.361351][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.361372][ T7847] Call Trace: [ 166.361381][ T7847] [ 166.361395][ T7847] dump_stack_lvl+0x189/0x250 [ 166.361440][ T7847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.361464][ T7847] ? __pfx__printk+0x10/0x10 [ 166.361493][ T7847] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.361518][ T7847] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.361546][ T7847] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 166.361582][ T7847] warn_alloc+0x214/0x310 [ 166.361605][ T7847] ? stack_depot_save_flags+0x40/0x900 [ 166.361631][ T7847] ? __pfx_warn_alloc+0x10/0x10 [ 166.361656][ T7847] ? kasan_save_track+0x4f/0x80 [ 166.361687][ T7847] ? xskq_create+0x56/0x170 [ 166.361715][ T7847] ? xsk_init_queue+0xb0/0x110 [ 166.361741][ T7847] ? xsk_setsockopt+0x4dc/0x8d0 [ 166.361766][ T7847] ? do_sock_setsockopt+0x17c/0x1b0 [ 166.361786][ T7847] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 166.361805][ T7847] ? do_syscall_64+0xfa/0x3b0 [ 166.361836][ T7847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.361867][ T7847] __vmalloc_node_range_noprof+0x125/0x12f0 [ 166.361925][ T7847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.361954][ T7847] ? __kasan_kmalloc+0x93/0xb0 [ 166.361990][ T7847] vmalloc_user_noprof+0xad/0xf0 [ 166.362012][ T7847] ? xskq_create+0xbf/0x170 [ 166.362042][ T7847] xskq_create+0xbf/0x170 [ 166.362076][ T7847] xsk_init_queue+0xb0/0x110 [ 166.362108][ T7847] xsk_setsockopt+0x4dc/0x8d0 [ 166.362140][ T7847] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.362168][ T7847] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.362201][ T7847] ? aa_sock_opt_perm+0x74/0x110 [ 166.362233][ T7847] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 166.362262][ T7847] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.362292][ T7847] do_sock_setsockopt+0x17c/0x1b0 [ 166.362319][ T7847] __x64_sys_setsockopt+0x13f/0x1b0 [ 166.362348][ T7847] do_syscall_64+0xfa/0x3b0 [ 166.362379][ T7847] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.362409][ T7847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.362430][ T7847] ? clear_bhb_loop+0x60/0xb0 [ 166.362457][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.362477][ T7847] RIP: 0033:0x7f64c118ebe9 [ 166.362506][ T7847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.362525][ T7847] RSP: 002b:00007f64c20db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.362550][ T7847] RAX: ffffffffffffffda RBX: 00007f64c13b5fa0 RCX: 00007f64c118ebe9 [ 166.362573][ T7847] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 166.362586][ T7847] RBP: 00007f64c1211e19 R08: 0000000000000004 R09: 0000000000000000 [ 166.362599][ T7847] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.362613][ T7847] R13: 00007f64c13b6038 R14: 00007f64c13b5fa0 R15: 00007fff010cee68 [ 166.362649][ T7847] [ 166.682041][ T7847] Mem-Info: [ 166.685285][ T7847] active_anon:5447 inactive_anon:0 isolated_anon:0 [ 166.685285][ T7847] active_file:1422 inactive_file:39854 isolated_file:0 [ 166.685285][ T7847] unevictable:768 dirty:175 writeback:0 [ 166.685285][ T7847] slab_reclaimable:10911 slab_unreclaimable:142464 [ 166.685285][ T7847] mapped:31529 shmem:1367 pagetables:1238 [ 166.685285][ T7847] sec_pagetables:0 bounce:0 [ 166.685285][ T7847] kernel_misc_reclaimable:0 [ 166.685285][ T7847] free:1282256 free_pcp:17245 free_cma:0 [ 166.755675][ T7847] Node 0 active_anon:21588kB inactive_anon:0kB active_file:5688kB inactive_file:159212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126016kB dirty:700kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12756kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.828498][ T7847] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.912459][ T7847] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.978265][ T7847] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 166.984257][ T7847] Node 0 DMA32 free:1216728kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21540kB inactive_anon:0kB active_file:5688kB inactive_file:157404kB unevictable:1536kB writepending:300kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:47632kB local_pcp:27960kB free_cma:0kB [ 167.017193][ T7847] lowmem_reserve[]: 0 0 1 1 1 [ 167.025475][ T7847] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 167.139935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.148592][ T7847] lowmem_reserve[]: 0 0 0 0 0 [ 167.153795][ T7847] Node 1 Normal free:3897148kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21412kB local_pcp:11168kB free_cma:0kB [ 167.186743][ T7847] lowmem_reserve[]: 0 0 0 0 0 [ 167.195962][ T7847] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.217279][ T7847] Node 0 DMA32: 592*4kB (UM) 223*8kB (UME) 38*16kB (UM) 163*32kB (UM) 114*64kB (UME) 47*128kB (UM) 27*256kB (UME) 13*512kB (UM) 10*1024kB (UME) 7*2048kB (ME) 282*4096kB (M) = 1216504kB [ 167.237499][ T7847] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 167.253036][ T7847] Node 1 Normal: 191*4kB (UME) 60*8kB (UME) 42*16kB (UME) 94*32kB (UME) 34*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (ME) 5*1024kB (UME) 1*2048kB (U) 947*4096kB (M) = 3897148kB [ 167.283728][ T7847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.294666][ T7847] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.307862][ T7847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.318496][ T7847] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.336436][ T7847] 42642 total pagecache pages [ 167.341917][ T7847] 0 pages in swap cache [ 167.346244][ T7847] Free swap = 124996kB [ 167.354367][ T7847] Total swap = 124996kB [ 167.359321][ T7847] 2097051 pages RAM [ 167.363182][ T7847] 0 pages HighMem/MovableOnly [ 167.368226][ T7847] 424872 pages reserved [ 167.373624][ T7847] 0 pages cma reserved [ 167.667306][ T5900] IPVS: starting estimator thread 0... [ 167.783574][ T7881] IPVS: using max 29 ests per chain, 69600 per kthread [ 167.825018][ T7885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.439'. [ 167.900089][ T7883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.439'. [ 168.155817][ T7890] bridge_slave_0: left allmulticast mode [ 168.179562][ T7890] bridge_slave_0: left promiscuous mode [ 168.190911][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.238267][ T7890] bridge_slave_1: left allmulticast mode [ 168.244451][ T7890] bridge_slave_1: left promiscuous mode [ 168.254096][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.295209][ T7890] bond0: (slave bond_slave_0): Releasing backup interface [ 168.356417][ T7890] bond0: (slave bond_slave_1): Releasing backup interface [ 168.383395][ T7890] team0: Port device team_slave_0 removed [ 168.397238][ T7890] team0: Port device team_slave_1 removed [ 168.417975][ T7890] bond1: (slave veth3): Releasing active interface [ 168.447578][ T7894] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 168.679013][ T7905] syz_tun: entered allmulticast mode [ 168.700758][ T7904] dvmrp1: entered allmulticast mode [ 168.730216][ T7903] syz_tun: left allmulticast mode [ 169.042640][ T7916] netlink: 'syz.0.446': attribute type 11 has an invalid length. [ 169.066483][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.0.446'. [ 169.934521][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'. [ 170.435914][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'. [ 170.456517][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'. [ 171.231341][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 171.330585][ T7975] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.814901][ T7996] netlink: 620 bytes leftover after parsing attributes in process `syz.1.463'. [ 171.918314][ T7997] netlink: 64 bytes leftover after parsing attributes in process `syz.3.462'. [ 172.063997][ T7997] @: renamed from bond_slave_0 (while UP) [ 172.652408][ T8013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.466'. [ 172.768793][ T8015] netlink: 'syz.4.467': attribute type 10 has an invalid length. [ 172.782611][ T8015] team0: Port device geneve0 added [ 172.791334][ T6388] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.807763][ T6388] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.831052][ T6388] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.849559][ T6388] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.194445][ T8031] Bluetooth: MGMT ver 1.23 [ 173.257571][ T8034] __nla_validate_parse: 2 callbacks suppressed [ 173.257592][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 173.508101][ T8038] bond1: entered promiscuous mode [ 173.518856][ T8038] bond1: entered allmulticast mode [ 173.525326][ T8038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.686059][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 173.839008][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 174.045593][ T8050] netlink: 252 bytes leftover after parsing attributes in process `syz.2.477'. [ 174.362746][ T8058] tipc: Started in network mode [ 174.375332][ T8058] tipc: Node identity 7a81b41eba5a, cluster identity 4711 [ 174.412330][ T8058] tipc: Enabled bearer , priority 0 [ 174.611023][ T8059] syzkaller0: entered promiscuous mode [ 174.636901][ T8059] syzkaller0: entered allmulticast mode [ 174.659860][ T8059] tipc: Resetting bearer [ 174.821468][ T8059] tipc: Resetting bearer [ 175.415584][ T2150] tipc: Node number set to 3235623966 [ 176.618130][ T8059] tipc: Disabling bearer [ 176.654170][ T8079] syzkaller0: entered promiscuous mode [ 176.660342][ T8079] syzkaller0: entered allmulticast mode [ 176.783642][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'. [ 177.075707][ T8109] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 177.818502][ T8127] syzkaller0: entered promiscuous mode [ 177.869250][ T8127] syzkaller0: entered allmulticast mode [ 181.148076][ T8157] tipc: Enabled bearer , priority 0 [ 181.175626][ T8156] syzkaller0: entered promiscuous mode [ 181.189694][ T8156] syzkaller0: entered allmulticast mode [ 181.302262][ T8157] tipc: Resetting bearer [ 181.317789][ T8162] bond0: entered promiscuous mode [ 181.325171][ T8162] bond0: left promiscuous mode [ 181.392538][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 181.403975][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 181.449946][ T8155] tipc: Resetting bearer [ 181.485211][ T8155] tipc: Disabling bearer [ 181.561490][ T8163] bond0: entered promiscuous mode [ 181.583271][ T8163] @: entered promiscuous mode [ 181.593604][ T8163] bond_slave_1: entered promiscuous mode [ 181.609265][ T8163] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 181.631664][ T8163] gretap0: entered promiscuous mode [ 181.646624][ T8163] debugfs: 'hsr1' already exists in 'hsr' [ 181.665126][ T8177] netlink: 'syz.0.497': attribute type 142 has an invalid length. [ 181.676161][ T8163] Cannot create hsr debugfs directory [ 181.810676][ T8177] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 181.855078][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'. [ 181.929451][ T8191] netlink: 64 bytes leftover after parsing attributes in process `syz.4.498'. [ 181.975238][ T8196] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 182.008532][ T8183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.019853][ T8191] @: renamed from bond_slave_0 [ 182.070264][ T8196] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 182.096115][ T8196] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.327915][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 183.081291][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 183.134400][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 183.225471][ T8237] gtp0: entered promiscuous mode [ 183.250699][ T8237] gtp0: entered allmulticast mode [ 183.366662][ T8244] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 183.396600][ T8244] macsec1: entered promiscuous mode [ 183.414038][ T8244] macsec1: entered allmulticast mode [ 183.429887][ T8244] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 183.710798][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 183.773323][ T8251] lo: entered allmulticast mode [ 183.783152][ T8251] lo: left allmulticast mode [ 184.628537][ T8266] bridge_slave_0: left allmulticast mode [ 184.642691][ T8266] bridge_slave_0: left promiscuous mode [ 184.652340][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.676324][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 184.687556][ T8270] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20001 [ 184.695171][ T8269] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20001 [ 184.707816][ T8266] bridge_slave_1: left allmulticast mode [ 184.718230][ T8266] bridge_slave_1: left promiscuous mode [ 184.752541][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.793141][ T8266] bond0: (slave bond_slave_0): Releasing backup interface [ 184.802511][ T8266] bond_slave_0: left promiscuous mode [ 184.826005][ T8266] bond0: (slave bond_slave_1): Releasing backup interface [ 184.842045][ T8266] bond_slave_1: left promiscuous mode [ 184.866537][ T8266] team_slave_0: left promiscuous mode [ 184.885908][ T8266] team0: Port device team_slave_0 removed [ 184.914163][ T8266] team_slave_1: left promiscuous mode [ 184.937003][ T8266] team0: Port device team_slave_1 removed [ 184.953965][ T8266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.963725][ T8266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.973531][ T8266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.984279][ T8266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.003635][ T8266] macsec0: left allmulticast mode [ 185.009761][ T8266] veth1_macvtap: left allmulticast mode [ 185.015454][ T8266] macsec0: left promiscuous mode [ 185.031243][ T8266] bridge0: port 3(macsec0) entered disabled state [ 185.046401][ T8266] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 185.057048][ T8266] batman_adv: batadv0: Removing interface: ip6gretap1 [ 185.570017][ T8287] syzkaller0: entered promiscuous mode [ 185.575843][ T8287] syzkaller0: entered allmulticast mode [ 185.669440][ T30] audit: type=1107 audit(1754551890.420:3): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='HBM#L8Py Ta0k[>Ke5>LOKCfȇ@weiix]hcOtV J]jq=VFAlaX,e̩Vd߀|R:YTE]zsb\k*ğ0ףf! g' [ 186.131096][ T8308] IPVS: stopping backup sync thread 8309 ... [ 186.132310][ T8309] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 186.347785][ T8315] vlan2: entered allmulticast mode [ 186.368950][ T8315] vlan0: entered allmulticast mode [ 186.396168][ T8315] veth0_vlan: entered allmulticast mode [ 187.315768][ T8331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.532'. [ 187.355901][ T8331] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 187.455518][ T8331] team0: Device ipvlan1 failed to register rx_handler [ 188.172272][ T8356] netlink: 64 bytes leftover after parsing attributes in process `syz.0.535'. [ 188.299454][ T8356] @: renamed from bond_slave_0 [ 188.327873][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 188.806364][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 188.829538][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 188.846499][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 189.066221][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.546'. [ 189.521123][ T8410] netlink: 'syz.4.551': attribute type 11 has an invalid length. [ 189.544007][ T8410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.551'. [ 189.852135][ T8417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.145788][ T8417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.798105][ T8417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.069402][ T8417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.278344][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.302548][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 191.312019][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 191.377792][ T8459] gretap0: entered promiscuous mode [ 191.401321][ T8459] batadv_slave_1: entered promiscuous mode [ 191.420851][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.459435][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.534412][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.558004][ T8467] netlink: 'syz.0.566': attribute type 9 has an invalid length. [ 191.769746][ T8476] netlink: 'syz.0.569': attribute type 13 has an invalid length. [ 191.777949][ T8476] netlink: 'syz.0.569': attribute type 11 has an invalid length. [ 192.156749][ T8497] netlink: 'syz.1.574': attribute type 10 has an invalid length. [ 192.222244][ T8492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.249637][ T8497] dummy0: entered promiscuous mode [ 192.256896][ T8497] bridge0: port 1(dummy0) entered blocking state [ 192.267903][ T8497] bridge0: port 1(dummy0) entered disabled state [ 192.286690][ T8497] dummy0: entered allmulticast mode [ 192.296563][ T8497] bridge0: port 1(dummy0) entered blocking state [ 192.303474][ T8497] bridge0: port 1(dummy0) entered forwarding state [ 192.365780][ T8492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.653923][ T8509] __nla_validate_parse: 7 callbacks suppressed [ 192.653946][ T8509] netlink: 64 bytes leftover after parsing attributes in process `syz.2.576'. [ 192.681106][ T8492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.850570][ T8516] netlink: 84 bytes leftover after parsing attributes in process `syz.3.577'. [ 192.883170][ T8509] @: renamed from bond_slave_0 [ 192.994313][ T8492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.054558][ T8520] netlink: zone id is out of range [ 193.060820][ T8520] netlink: zone id is out of range [ 193.069445][ T8520] tipc: Enabling of bearer rejected, failed to enable media [ 193.314797][ T7509] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.366199][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.489077][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.549999][ T7509] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.803093][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.582'. [ 193.974919][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 194.272520][ T8558] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 194.647419][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.590'. [ 194.878040][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'. [ 194.912872][ T8576] netlink: 312 bytes leftover after parsing attributes in process `syz.4.592'. [ 195.782025][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'. [ 195.847363][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 196.033919][ T8626] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 196.554734][ T8640] tipc: Enabled bearer , priority 0 [ 196.575496][ T8640] syzkaller0: entered promiscuous mode [ 196.608951][ T8640] syzkaller0: entered allmulticast mode [ 196.710707][ T8640] tipc: Resetting bearer [ 196.722267][ T8644] tipc: Enabled bearer , priority 0 [ 196.732049][ T8639] tipc: Resetting bearer [ 196.746441][ T8639] tipc: Disabling bearer [ 196.756641][ T8644] syzkaller0: entered promiscuous mode [ 196.764558][ T8644] syzkaller0: entered allmulticast mode [ 196.834829][ T8648] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 196.950773][ T8643] tipc: Resetting bearer [ 197.016236][ T8658] netlink: 68 bytes leftover after parsing attributes in process `syz.4.614'. [ 197.030561][ T8643] tipc: Disabling bearer [ 197.139032][ T8659] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 197.542833][ T8680] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 197.695356][ T8680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.757186][ T8681] bond2: (slave gretap1): making interface the new active one [ 197.768389][ T8681] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 197.820114][ T8694] __nla_validate_parse: 2 callbacks suppressed [ 197.820133][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'. [ 197.870008][ T8697] netlink: 64 bytes leftover after parsing attributes in process `syz.2.626'. [ 197.893862][ T8694] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 197.961568][ T8694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.625'. [ 197.987490][ T8704] netlink: 'syz.3.628': attribute type 13 has an invalid length. [ 198.029439][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.628'. [ 198.063471][ T8704] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 198.179672][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.627'. [ 198.208412][ T8706] team0: Port device syz_tun added [ 198.288242][ T8712] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 198.391790][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 198.497375][ T8712] bond3: entered promiscuous mode [ 198.503144][ T8712] bond3: entered allmulticast mode [ 198.512304][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 198.521504][ T8709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.629'. [ 198.537274][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 198.572976][ T8718] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 198.636782][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 199.783823][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.028288][ T8793] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 200.365334][ T8811] netlink: 'syz.2.653': attribute type 3 has an invalid length. [ 201.219847][ T8843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.254395][ T8843] bond2: entered promiscuous mode [ 201.282538][ T8843] bond0: (slave bond2): Enslaving as an active interface with an up link [ 201.635399][ T8867] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 201.680547][ T8867] netlink: 'syz.4.664': attribute type 3 has an invalid length. [ 201.689274][ T8870] netlink: 'syz.4.664': attribute type 21 has an invalid length. [ 201.723779][ T8867] NCSI netlink: No device for ifindex 246 [ 201.990181][ T8881] IPVS: Scheduler module ip_vs_sip not found [ 202.002540][ T8881] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.354939][ T8905] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18) [ 202.366067][ T8906] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 202.596274][ T8908] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 202.631968][ T8913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.650016][ T7509] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 202.955583][ T8906] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 202.966588][ T8906] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 202.988197][ T8906] bond4 (unregistering): Released all slaves [ 203.385674][ T8938] bond0: (slave bond2): Releasing backup interface [ 203.403881][ T8938] bond2: left promiscuous mode [ 203.517984][ T8950] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.570816][ T8955] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 203.590150][ T8955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.637057][ T8961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 203.860619][ T8972] __nla_validate_parse: 11 callbacks suppressed [ 203.860639][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 203.926821][ T8972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.016723][ T8980] netlink: 44 bytes leftover after parsing attributes in process `syz.4.691'. [ 204.152353][ T8996] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 204.193088][ T8996] bond4: entered promiscuous mode [ 204.207176][ T8996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.229602][ T8994] netlink: 3 bytes leftover after parsing attributes in process `syz.3.693'. [ 204.260753][ T8994] batadv1: entered promiscuous mode [ 204.266198][ T8994] batadv1: entered allmulticast mode [ 204.273986][ T8994] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 204.284754][ T8994] bond4: (slave batadv1): making interface the new active one [ 204.293458][ T8994] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 204.368618][ T9001] netlink: 'syz.4.695': attribute type 2 has an invalid length. [ 204.381607][ T9001] netlink: 119 bytes leftover after parsing attributes in process `syz.4.695'. [ 204.410832][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.697'. [ 204.572060][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 204.760853][ T9028] netlink: 96 bytes leftover after parsing attributes in process `syz.3.704'. [ 204.782607][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.705'. [ 204.906184][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.707'. [ 205.083930][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 205.151349][ T9043] nftables ruleset with unbound set [ 205.193505][ T9045] netlink: 'syz.1.711': attribute type 4 has an invalid length. [ 205.286515][ T9047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.304770][ T9047] tipc: Enabled bearer , priority 0 [ 205.336596][ T9052] bridge0: port 1(vlan2) entered blocking state [ 205.347001][ T9052] bridge0: port 1(vlan2) entered disabled state [ 205.358529][ T9052] vlan2: entered allmulticast mode [ 205.367646][ T9052] bridge0: entered allmulticast mode [ 205.377019][ T9052] vlan2: left allmulticast mode [ 205.391974][ T9052] bridge0: left allmulticast mode [ 205.415384][ T9047] syzkaller0: entered promiscuous mode [ 205.424659][ T9047] syzkaller0: entered allmulticast mode [ 205.432362][ T9049] tipc: Enabling of bearer rejected, failed to enable media [ 205.507455][ T9047] tipc: Resetting bearer [ 205.585025][ T9046] tipc: Resetting bearer [ 205.676682][ T9046] tipc: Disabling bearer [ 205.964393][ T9097] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 207.180243][ T9162] FAULT_INJECTION: forcing a failure. [ 207.180243][ T9162] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 207.198863][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.1.747 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 207.198895][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.198908][ T9162] Call Trace: [ 207.198916][ T9162] [ 207.198926][ T9162] dump_stack_lvl+0x189/0x250 [ 207.198954][ T9162] ? __pfx____ratelimit+0x10/0x10 [ 207.198985][ T9162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.199007][ T9162] ? __pfx__printk+0x10/0x10 [ 207.199049][ T9162] should_fail_ex+0x414/0x560 [ 207.199089][ T9162] _copy_from_user+0x2d/0xb0 [ 207.199121][ T9162] __copy_msghdr+0x3c5/0x5b0 [ 207.199148][ T9162] ___sys_sendmsg+0x1a5/0x2a0 [ 207.199174][ T9162] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.199239][ T9162] ? __fget_files+0x2a/0x420 [ 207.199259][ T9162] ? __fget_files+0x3a0/0x420 [ 207.199289][ T9162] __x64_sys_sendmsg+0x19b/0x260 [ 207.199316][ T9162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.199351][ T9162] ? __pfx_ksys_write+0x10/0x10 [ 207.199379][ T9162] ? rcu_is_watching+0x15/0xb0 [ 207.199418][ T9162] ? do_syscall_64+0xbe/0x3b0 [ 207.199455][ T9162] do_syscall_64+0xfa/0x3b0 [ 207.199488][ T9162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.199508][ T9162] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.199529][ T9162] ? clear_bhb_loop+0x60/0xb0 [ 207.199592][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.199613][ T9162] RIP: 0033:0x7fea8898ebe9 [ 207.199632][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.199650][ T9162] RSP: 002b:00007fea8982f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.199674][ T9162] RAX: ffffffffffffffda RBX: 00007fea88bb5fa0 RCX: 00007fea8898ebe9 [ 207.199690][ T9162] RDX: 0000000000000004 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 207.199703][ T9162] RBP: 00007fea8982f090 R08: 0000000000000000 R09: 0000000000000000 [ 207.199715][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.199763][ T9162] R13: 00007fea88bb6038 R14: 00007fea88bb5fa0 R15: 00007fff653957f8 [ 207.199799][ T9162] [ 207.656518][ T9174] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 207.676330][ T9174] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.193394][ T9199] block nbd1: server does not support multiple connections per device. [ 208.248983][ T9199] block nbd1: shutting down sockets [ 209.461758][ T9261] __nla_validate_parse: 10 callbacks suppressed [ 209.461780][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 209.899661][ T9276] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 209.916929][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 210.200499][ T9283] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.369252][ T9283] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.502950][ T9283] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.552928][ T9290] netlink: 248 bytes leftover after parsing attributes in process `syz.1.779'. [ 210.583943][ T9290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.779'. [ 210.597693][ T9283] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.643233][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 210.673706][ T9297] netlink: 180 bytes leftover after parsing attributes in process `syz.4.781'. [ 210.785567][ T9298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.926798][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.013677][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.045422][ T7518] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.096140][ T7518] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.254264][ T9290] rdma_rxe: rxe_newlink: failed to add lo [ 211.277944][ T9307] netlink: 68 bytes leftover after parsing attributes in process `syz.4.783'. [ 211.476951][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 211.496828][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 211.516485][ T9316] netlink: 52 bytes leftover after parsing attributes in process `syz.1.785'. [ 211.789775][ T9323] tipc: Enabled bearer , priority 0 [ 211.820037][ T9323] syzkaller0: entered promiscuous mode [ 211.825846][ T9323] syzkaller0: entered allmulticast mode [ 211.887556][ T9323] tipc: Resetting bearer [ 211.968472][ T9323] tipc: Disabling bearer [ 212.203073][ T9334] bond1: option mode: unable to set because the bond device is up [ 212.233203][ T9334] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 212.288348][ T9334] team0: Port device syz_tun removed [ 212.308011][ T9334] bridge0: port 1(dummy0) entered disabled state [ 212.396292][ T9334] team0: Port device geneve0 removed [ 212.443525][ T9334] bond1: (slave macvlan3): Releasing backup interface [ 212.485684][ T7509] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.510054][ T7509] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.544261][ T7509] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.568884][ T7509] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.233344][ T9360] netlink: 'syz.2.800': attribute type 4 has an invalid length. [ 213.388976][ T9366] netlink: 'syz.3.802': attribute type 2 has an invalid length. [ 213.396784][ T9366] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 213.433725][ T9368] sctp: [Deprecated]: syz.2.803 (pid 9368) Use of int in max_burst socket option. [ 213.433725][ T9368] Use struct sctp_assoc_value instead [ 213.631699][ T9381] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 213.640487][ T9381] netlink: 'syz.3.807': attribute type 4 has an invalid length. [ 214.497147][ T9423] syzkaller0: entered promiscuous mode [ 214.503682][ T9423] syzkaller0: entered allmulticast mode [ 216.628129][ T9430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.721065][ T9430] tipc: Enabled bearer , priority 0 [ 216.729809][ T9430] syzkaller0: entered promiscuous mode [ 216.735555][ T9430] syzkaller0: entered allmulticast mode [ 216.756265][ T9430] tipc: Resetting bearer [ 216.770586][ T9430] __nla_validate_parse: 10 callbacks suppressed [ 216.770606][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 216.797451][ T9428] tipc: Resetting bearer [ 216.825002][ T9428] tipc: Disabling bearer [ 217.018285][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 217.302977][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 217.871165][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.826'. [ 217.936560][ T9462] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 218.501993][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.829'. [ 218.780767][ T9481] netlink: 192 bytes leftover after parsing attributes in process `syz.2.830'. [ 218.799976][ T9479] bridge0: port 1(erspan0) entered blocking state [ 218.816632][ T9479] bridge0: port 1(erspan0) entered disabled state [ 218.832294][ T9479] erspan0: entered allmulticast mode [ 218.854114][ T9479] erspan0: entered promiscuous mode [ 218.860656][ T9479] bridge0: port 1(erspan0) entered blocking state [ 218.867757][ T9479] bridge0: port 1(erspan0) entered listening state [ 218.919915][ T9480] erspan0: left allmulticast mode [ 218.925188][ T9480] erspan0: left promiscuous mode [ 218.932141][ T9480] bridge0: port 1(erspan0) entered disabled state [ 219.076606][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 219.802179][ T9506] IPVS: Error connecting to the multicast addr [ 220.621203][ T9523] netlink: 64 bytes leftover after parsing attributes in process `syz.0.841'. [ 221.867597][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 222.060910][ T9576] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 222.133905][ T9578] netlink: 'syz.4.853': attribute type 4 has an invalid length. [ 222.283735][ T9583] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 222.343919][ T5157] Bluetooth: hci2: command 0x0401 tx timeout [ 222.344708][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 222.350079][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 222.423088][ T5851] Bluetooth: hci4: link tx timeout [ 222.434921][ T5851] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 223.165012][ T9600] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 223.334917][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 224.497002][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 224.502631][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 224.532456][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 224.811208][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 225.042917][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 225.164259][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 225.192025][ T9654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.874'. [ 225.381543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.485884][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'. [ 226.915595][ T9654] gretap1: entered promiscuous mode [ 228.381444][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 228.403024][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.887'. [ 228.422651][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 228.529194][ T9726] tipc: New replicast peer: 255.255.255.255 [ 228.537241][ T9726] tipc: Enabled bearer , priority 10 [ 228.634260][ T9728] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.871966][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 229.074166][ T9747] IPv6: Can't replace route, no match found [ 229.186362][ T9733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.213817][ T9733] netlink: 48 bytes leftover after parsing attributes in process `syz.0.893'. [ 229.265604][ T9733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.893'. [ 229.515575][ T9754] netlink: 148 bytes leftover after parsing attributes in process `syz.3.897'. [ 229.564260][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 229.775458][ T9765] netlink: 47 bytes leftover after parsing attributes in process `syz.2.901'. [ 230.092840][ T9768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.902'. [ 230.945822][ T59] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.988077][ T59] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.034343][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.064716][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.754944][ T9836] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 232.472129][ T9857] netlink: 'syz.4.932': attribute type 2 has an invalid length. [ 232.683264][ T9867] netlink: 'syz.4.934': attribute type 10 has an invalid length. [ 232.710768][ T9871] netlink: 'syz.4.934': attribute type 10 has an invalid length. [ 232.845346][ T30] audit: type=1800 audit(1754551937.600:4): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.937" name="memory.events" dev="tmpfs" ino=1050 res=0 errno=0 [ 232.961657][ T9878] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 232.983939][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.992430][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.272560][ T9874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.294711][ T9874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.470191][ T9874] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 233.504316][ T9] syz1: Port: 1 Link DOWN [ 233.519046][ T36] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.527724][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.548130][ T36] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.568527][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.577540][ T36] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.608906][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.617605][ T36] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.668510][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.805795][ T9902] __nla_validate_parse: 10 callbacks suppressed [ 233.805817][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.945'. [ 234.319004][ T9922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.347455][ T9918] hsr0: entered promiscuous mode [ 234.420357][ T9924] netlink: 80 bytes leftover after parsing attributes in process `syz.4.951'. [ 234.568790][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.952'. [ 234.705443][ T9938] netlink: 'syz.2.954': attribute type 10 has an invalid length. [ 234.729986][ T9926] nbd: socks must be embedded in a SOCK_ITEM attr [ 234.847225][ T9938] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 234.890265][ T9938] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.945718][ T9935] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 234.972264][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 234.980379][ T9935] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 234.997191][ T9935] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 235.035723][ T9961] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.962'. [ 235.052702][ T9961] openvswitch: netlink: Message has 5 unknown bytes. [ 235.243662][ T9970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.964'. [ 235.412114][ T9981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.440568][ T9981] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 235.469953][ T9987] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.968'. [ 235.499938][ T9981] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 235.529813][ T9985] openvswitch: netlink: Actions may not be safe on all matching packets [ 237.748369][T10079] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 237.819203][T10079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.875022][T10080] bond3: (slave bridge6): making interface the new active one [ 237.905709][T10080] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 237.970803][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.995'. [ 238.044153][T10079] gretap2: entered promiscuous mode [ 238.081845][T10079] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 238.122842][T10093] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 238.128434][T10091] netlink: 'syz.1.997': attribute type 58 has an invalid length. [ 238.141472][T10093] netlink: 224 bytes leftover after parsing attributes in process `syz.4.999'. [ 238.169026][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 238.355392][T10102] pim6reg1: entered promiscuous mode [ 238.370720][T10102] pim6reg1: entered allmulticast mode [ 239.163488][T10129] __nla_validate_parse: 2 callbacks suppressed [ 239.163510][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 239.571547][T10135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.676105][T10135] bond4: entered promiscuous mode [ 239.709933][T10135] team0: Port device bond4 added [ 240.436525][T10155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.503561][T10155] bond5: entered promiscuous mode [ 240.544907][T10155] team0: Port device bond5 added [ 242.009500][T10177] tipc: Enabled bearer , priority 0 [ 242.040595][T10177] syzkaller0: entered promiscuous mode [ 242.046410][T10177] syzkaller0: entered allmulticast mode [ 242.272112][T10177] tipc: Resetting bearer [ 242.317790][T10176] tipc: Resetting bearer [ 242.440473][T10176] tipc: Disabling bearer [ 242.569946][T10187] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1025'. [ 242.804033][T10190] netlink: 'syz.0.1026': attribute type 1 has an invalid length. [ 242.883879][T10192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.937699][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 243.035570][T10190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.069207][T10195] bond3: (slave bridge3): making interface the new active one [ 243.079492][T10195] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 243.146102][T10201] gretap1: entered promiscuous mode [ 243.163886][T10201] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 243.194886][T10205] netlink: 'syz.3.1029': attribute type 10 has an invalid length. [ 243.220528][T10205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1029'. [ 243.254448][T10190] macvlan3: entered promiscuous mode [ 243.266447][T10190] macvlan3: entered allmulticast mode [ 243.273664][T10190] bond3: entered promiscuous mode [ 243.284500][T10190] bridge3: entered promiscuous mode [ 243.293233][T10190] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 243.309617][T10190] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 243.330454][T10190] bond3: left promiscuous mode [ 243.337379][T10190] bridge3: left promiscuous mode [ 243.409560][T10205] v: entered promiscuous mode [ 243.430744][T10205] bridge0: port 3(v) entered blocking state [ 243.449668][T10205] bridge0: port 3(v) entered disabled state [ 243.482353][T10205] v: entered allmulticast mode [ 243.573410][T10216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.022114][T10274] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1047'. [ 245.184090][T10250] vlan3: entered promiscuous mode [ 245.189519][T10250] bridge0: entered promiscuous mode [ 245.195274][T10250] vlan3: entered allmulticast mode [ 245.209930][T10250] bridge0: entered allmulticast mode [ 246.122023][T10304] netlink: 'syz.0.1054': attribute type 4 has an invalid length. [ 246.725146][T10320] tipc: Enabled bearer , priority 0 [ 246.746672][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1061'. [ 246.757353][T10320] syzkaller0: entered promiscuous mode [ 246.765683][T10320] syzkaller0: entered allmulticast mode [ 246.855529][T10329] netlink: 'syz.0.1062': attribute type 3 has an invalid length. [ 246.865398][T10329] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1062'. [ 246.949854][T10332] tipc: Resetting bearer [ 247.128582][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 247.179899][T10342] netlink: 'syz.4.1068': attribute type 5 has an invalid length. [ 247.194181][T10344] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1067'. [ 247.341891][T10355] netlink: 'syz.0.1069': attribute type 15 has an invalid length. [ 247.518248][T10319] tipc: Resetting bearer [ 247.590358][T10319] tipc: Disabling bearer [ 247.643780][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1071'. [ 247.693075][T10359] tipc: Started in network mode [ 247.701647][T10359] tipc: Node identity 0ab285c6e70b, cluster identity 4711 [ 247.721857][T10359] tipc: Enabled bearer , priority 0 [ 247.738305][T10359] syzkaller0: entered promiscuous mode [ 247.751325][T10359] syzkaller0: entered allmulticast mode [ 248.040191][T10358] tipc: Resetting bearer [ 248.091041][T10358] tipc: Disabling bearer [ 248.675132][T10371] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1075'. [ 249.080873][T10418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1082'. [ 249.416272][T10426] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1086'. [ 249.468849][T10428] tipc: Enabled bearer , priority 0 [ 249.476800][T10428] syzkaller0: entered promiscuous mode [ 249.482638][T10428] syzkaller0: entered allmulticast mode [ 249.544447][T10428] tipc: Resetting bearer [ 249.545073][T10432] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1088'. [ 249.674616][T10437] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.713117][T10437] bond0: (slave lo): Error: Device can not be enslaved while up [ 249.757670][T10441] netlink: 'syz.0.1089': attribute type 12 has an invalid length. [ 249.896422][T10427] tipc: Resetting bearer [ 249.942915][T10427] tipc: Disabling bearer [ 250.214198][T10455] __nla_validate_parse: 2 callbacks suppressed [ 250.214220][T10455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1093'. [ 250.265846][T10459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1095'. [ 250.283188][T10459] openvswitch: netlink: Flow key attr not present in new flow. [ 250.645847][T10482] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 250.723415][T10482] bond5: entered promiscuous mode [ 250.739753][T10482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.788042][T10486] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.799594][T10486] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 250.813235][T10486] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 250.828360][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 250.841905][T10491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.849753][T10491] IPv6: NLM_F_CREATE should be set when creating new route [ 250.857308][T10491] IPv6: NLM_F_CREATE should be set when creating new route [ 250.875071][T10486] bond5: (slave wireguard0): making interface the new active one [ 250.888141][T10486] wireguard0: entered promiscuous mode [ 250.897471][T10486] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 250.910625][T10491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.988271][T10491] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 251.039277][T10491] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 251.555556][T10509] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 251.740493][T10525] netlink: 'syz.4.1112': attribute type 4 has an invalid length. [ 251.790357][T10525] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 251.791919][T10530] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1113'. [ 251.839957][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 252.348082][T10542] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1118'. [ 252.711800][T10551] batadv_slave_1: entered promiscuous mode [ 252.821074][T10547] batadv_slave_1: left promiscuous mode [ 253.347748][T10568] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1125'. [ 253.489730][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 253.543491][T10578] 8021q: VLANs not supported on ipvlan1 [ 253.894454][T10590] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.1131'. [ 254.812233][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1139'. [ 254.833645][T10619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.859700][T10619] openvswitch: netlink: IPv4 tun info is not correct [ 254.975754][T10621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.052125][T10636] netlink: 'syz.3.1142': attribute type 21 has an invalid length. [ 255.066710][T10636] netlink: 'syz.3.1142': attribute type 4 has an invalid length. [ 255.075336][T10636] netlink: 'syz.3.1142': attribute type 5 has an invalid length. [ 255.220387][T10640] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 255.258557][T10645] __nla_validate_parse: 3 callbacks suppressed [ 255.258578][T10645] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1144'. [ 255.674129][T10660] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1150'. [ 255.697733][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 255.716592][T10660] bridge0: port 1(dummy0) entered disabled state [ 255.760214][T10660] dummy0 (unregistering): left allmulticast mode [ 255.774448][T10660] dummy0 (unregistering): left promiscuous mode [ 255.781435][T10660] bridge0: port 1(dummy0) entered disabled state [ 255.999051][T10673] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1154'. [ 256.011262][T10678] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1156'. [ 256.026169][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 256.072713][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'. [ 256.317699][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 256.533814][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 256.555857][T10690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1161'. [ 256.908134][T10703] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 258.510207][T10773] block nbd1: server does not support multiple connections per device. [ 258.531531][T10773] block nbd1: shutting down sockets [ 259.005678][T10796] tipc: Enabled bearer , priority 0 [ 259.174379][T10796] syzkaller0: entered promiscuous mode [ 259.199408][T10796] syzkaller0: entered allmulticast mode [ 259.224556][T10796] tipc: Resetting bearer [ 259.304351][T10405] tipc: Resetting bearer [ 259.313342][T10811] siw: device registration error -23 [ 259.323482][T10794] tipc: Resetting bearer [ 260.911042][T10794] tipc: Disabling bearer [ 261.195344][T10830] __nla_validate_parse: 10 callbacks suppressed [ 261.195365][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 261.228413][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.323538][T10835] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1203'. [ 261.354603][T10835] 0: renamed from hsr0 [ 261.387269][T10835] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.409097][T10835] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.431700][T10835] 0: entered allmulticast mode [ 261.436634][T10835] hsr_slave_0: entered allmulticast mode [ 261.488771][T10835] hsr_slave_1: entered allmulticast mode [ 261.527672][T10835] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 261.632151][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1206'. [ 261.879193][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 262.223816][T10881] atomic_op ffff88804d6aa198 conn xmit_atomic 0000000000000000 [ 262.366436][T10888] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1218'. [ 262.504018][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1219'. [ 262.717128][T10903] netlink: 'syz.4.1222': attribute type 39 has an invalid length. [ 262.841064][T10911] batadv_slave_0: entered promiscuous mode [ 262.882855][T10905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1223'. [ 263.067377][T10919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1226'. [ 263.295336][T10919] bond0 (unregistering): left promiscuous mode [ 263.301831][T10919] @: left promiscuous mode [ 263.307039][T10919] bond_slave_1: left promiscuous mode [ 263.314057][T10919] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 263.322588][T10919] bond0 (unregistering): (slave 1@): Releasing backup interface [ 263.334863][T10919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.346465][T10919] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 263.357426][T10919] bond0 (unregistering): Released all slaves [ 263.382478][T10904] batadv_slave_0: left promiscuous mode [ 263.392606][T10925] tipc: Enabled bearer , priority 0 [ 263.403602][T10933] net veth1_virt_wifi : renamed from virt_wifi0 [ 263.441870][T10917] tipc: Disabling bearer [ 263.465308][T10935] tipc: Enabled bearer , priority 0 [ 263.478008][T10935] syzkaller0: entered promiscuous mode [ 263.493868][T10935] syzkaller0: entered allmulticast mode [ 263.541208][T10935] tipc: Resetting bearer [ 263.562528][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1230'. [ 263.610561][T10934] tipc: Resetting bearer [ 263.709417][T10955] netlink: 'syz.0.1235': attribute type 11 has an invalid length. [ 263.720658][T10934] tipc: Disabling bearer [ 263.738307][T10955] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1235'. [ 264.258789][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 264.693770][T11016] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.983966][T11034] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 265.014210][T11030] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.365296][T11059] veth1_to_bond: entered allmulticast mode [ 265.410530][T11059] veth1_to_bond (unregistering): left allmulticast mode [ 265.421336][ T7518] smc: removing ib device syz1 [ 266.382357][T11088] __nla_validate_parse: 13 callbacks suppressed [ 266.382380][T11088] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1267'. [ 266.542957][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1271'. [ 266.555363][T11095] nbd: must specify an index to disconnect [ 266.665230][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 267.503959][T11150] netlink: 'syz.0.1291': attribute type 15 has an invalid length. [ 268.696450][T11203] Unknown status report in ack skb [ 268.947306][T11209] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1305'. [ 269.028075][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 269.868082][T11234] pimreg: tun_chr_ioctl cmd 2147767506 [ 269.900587][T11236] tipc: Enabled bearer , priority 0 [ 269.965895][T11236] syzkaller0: entered promiscuous mode [ 269.973139][T11236] syzkaller0: entered allmulticast mode [ 269.980168][T11236] tipc: Resetting bearer [ 269.996122][T11235] tipc: Resetting bearer [ 270.979856][ T5920] tipc: Node number set to 3988358598 [ 271.770441][T11235] tipc: Disabling bearer [ 271.784026][T11244] tipc: New replicast peer: 255.255.255.255 [ 271.791585][T11244] tipc: Enabled bearer , priority 10 [ 271.802394][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 271.985545][T11261] syzkaller1: entered allmulticast mode [ 272.021019][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1319'. [ 272.265410][T11273] netlink: 'syz.2.1321': attribute type 13 has an invalid length. [ 272.273778][T11273] netlink: 'syz.2.1321': attribute type 17 has an invalid length. [ 272.299411][T11273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.420051][T11273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.349438][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 273.927792][T11314] tipc: Enabling of bearer rejected, failed to enable media [ 274.132857][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1331'. [ 274.188251][T11323] netlink: 'syz.0.1331': attribute type 3 has an invalid length. [ 274.342896][T11332] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 274.358328][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 274.373001][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 274.388406][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'. [ 274.412439][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 274.424793][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 274.434274][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 274.455700][T11338] ip6tnl2: entered promiscuous mode [ 274.461581][T11338] ip6tnl2: entered allmulticast mode [ 274.495526][T11343] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 274.572948][T11345] bond5: entered promiscuous mode [ 274.973279][T11358] netlink: 'syz.1.1341': attribute type 19 has an invalid length. [ 275.199143][T11369] batadv_slave_0: entered promiscuous mode [ 275.205585][T11369] batadv_slave_0: entered allmulticast mode [ 275.298530][T11373] 8021q: VLANs not supported on nlmon0 [ 276.092267][T11414] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.275158][T11431] netlink: 'syz.0.1364': attribute type 10 has an invalid length. [ 276.512815][T11445] team_slave_1: entered promiscuous mode [ 276.519592][T11445] team_slave_1: entered allmulticast mode [ 276.566122][T11447] netlink: 'syz.2.1365': attribute type 9 has an invalid length. [ 276.575092][T11447] netlink: 'syz.2.1365': attribute type 7 has an invalid length. [ 276.592027][T11447] netlink: 'syz.2.1365': attribute type 8 has an invalid length. [ 276.854125][T11453] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 276.891907][T11453] __nla_validate_parse: 16 callbacks suppressed [ 276.891928][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 277.074869][T11459] smc: net device bond0 applied user defined pnetid SYZ2 [ 277.084066][T11459] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1370'. [ 277.162074][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 277.209443][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1370'. [ 277.352743][T11459] smc: removing net device bond0 with user defined pnetid SYZ2 [ 277.363804][T11459] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 277.378977][T11459] bond0 (unregistering): Released all slaves [ 277.440325][T11464] netlink: 'syz.1.1371': attribute type 3 has an invalid length. [ 277.775775][T11488] netlink: 'syz.1.1378': attribute type 10 has an invalid length. [ 277.784761][T11488] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1378'. [ 277.795130][T11488] team0: entered promiscuous mode [ 277.804363][T11488] bridge0: port 1(team0) entered blocking state [ 277.811595][T11488] bridge0: port 1(team0) entered disabled state [ 277.818315][T11488] team0: entered allmulticast mode [ 278.101122][T11501] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1382'. [ 279.625128][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 279.711603][T11550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.746146][T11552] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1394'. [ 279.836979][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 280.960344][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.972904][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.982223][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.996538][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.006796][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.037971][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 281.324653][T11604] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 281.823740][T11587] chnl_net:caif_netlink_parms(): no params data found [ 281.923203][T11624] netlink: 'syz.0.1412': attribute type 32 has an invalid length. [ 282.038240][T11587] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.046623][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.054253][T11587] bridge_slave_0: entered allmulticast mode [ 282.063326][T11587] bridge_slave_0: entered promiscuous mode [ 282.074577][T11587] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.082909][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.091072][T11587] bridge_slave_1: entered allmulticast mode [ 282.107054][T11587] bridge_slave_1: entered promiscuous mode [ 282.154064][T11587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.167958][T11587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.213641][T11587] team0: Port device team_slave_0 added [ 282.223458][T11587] team0: Port device team_slave_1 added [ 282.270788][T11587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.278401][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.305209][T11587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.324764][T11587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.335091][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.367582][T11587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.453676][T11587] hsr_slave_0: entered promiscuous mode [ 282.461262][T11587] hsr_slave_1: entered promiscuous mode [ 282.467734][T11587] debugfs: 'hsr0' already exists in 'hsr' [ 282.474168][T11587] Cannot create hsr debugfs directory [ 282.721946][T11642] pimreg: entered allmulticast mode [ 282.747962][T11642] pimreg: left allmulticast mode [ 282.888578][T11587] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.906949][T11587] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.932175][T11587] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.951080][T11587] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.058974][ T5851] Bluetooth: hci5: command tx timeout [ 283.096349][T11587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.160717][T11587] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.187596][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.194978][T10401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.221406][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.230162][T10401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.398280][T11660] netlink: 'syz.0.1420': attribute type 16 has an invalid length. [ 283.406729][T11660] netlink: 'syz.0.1420': attribute type 17 has an invalid length. [ 283.507260][T11660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.706213][T11676] netlink: 'syz.1.1422': attribute type 3 has an invalid length. [ 283.713642][T11587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.726153][T11676] __nla_validate_parse: 4 callbacks suppressed [ 283.726173][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 283.765336][T11676] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.877798][T11676] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.982538][T11676] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.054066][T11676] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.211581][T11587] veth0_vlan: entered promiscuous mode [ 284.244776][T11587] veth1_vlan: entered promiscuous mode [ 284.265424][T11687] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1423'. [ 284.281480][T11687] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1423'. [ 284.322835][ T3514] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.357002][ T3514] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.417829][T10403] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.434360][T10403] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.488216][T11587] veth0_macvtap: entered promiscuous mode [ 284.500340][T11587] veth1_macvtap: entered promiscuous mode [ 284.564661][T11587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.607286][T11587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.649919][T10403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.664394][T10403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.700590][T10403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.723712][T10403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.807864][T11706] openvswitch: netlink: Multiple metadata blocks provided [ 284.891734][T10402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.915118][T10402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.917886][T11711] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1433'. [ 284.960747][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 284.963302][T11711] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 284.986108][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 284.998026][T11711] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1433'. [ 285.011433][T10399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.020079][T10399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.021243][T11711] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.059978][ T5920] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 285.072186][ T5920] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 285.080978][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: kworker/0:5 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 285.093145][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.103241][ T5920] Workqueue: events l2cap_info_timeout [ 285.108911][ T5920] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 285.114932][ T5920] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 285.134925][ T5920] RSP: 0018:ffffc900048077a8 EFLAGS: 00010206 [ 285.141096][ T5920] RAX: dffffc0000000000 RBX: ffffffff89508028 RCX: f0595902f3b17500 [ 285.149272][ T5920] RDX: 0000000000000000 RSI: ffffffff89508028 RDI: 000000000000004b [ 285.157518][ T5920] RBP: ffffffff8a798ad5 R08: 0000000000000001 R09: 0000000000000000 [ 285.165585][ T5920] R10: dffffc0000000000 R11: ffffffff8a798a90 R12: 0000000000000000 [ 285.173656][ T5920] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 285.181772][ T5920] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 285.191327][ T5920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.198179][ T5920] CR2: 0000000000000000 CR3: 000000005a99e000 CR4: 00000000003526f0 [ 285.206375][ T5920] Call Trace: [ 285.209758][ T5920] [ 285.212697][ T5920] __kasan_check_byte+0x12/0x40 [ 285.217581][ T5920] lock_acquire+0x8d/0x360 [ 285.222028][ T5920] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.227429][ T5920] ? __cancel_work+0x254/0x2e0 [ 285.232601][ T5920] lock_sock_nested+0x48/0x100 [ 285.237496][ T5920] ? l2cap_sock_ready_cb+0x45/0x140 [ 285.243073][ T5920] l2cap_sock_ready_cb+0x45/0x140 [ 285.248197][ T5920] l2cap_conn_start+0x76d/0xe50 [ 285.253081][ T5920] ? __pfx_l2cap_conn_start+0x10/0x10 [ 285.258474][ T5920] ? __lock_acquire+0xab9/0xd20 [ 285.263518][ T5920] ? __pfx___mutex_lock+0x10/0x10 [ 285.268751][ T5920] ? process_scheduled_works+0x9ef/0x17b0 [ 285.274782][ T5920] l2cap_info_timeout+0x68/0xa0 [ 285.279825][ T5920] ? process_scheduled_works+0x9ef/0x17b0 [ 285.285760][ T5920] process_scheduled_works+0xae1/0x17b0 [ 285.291346][ T5920] ? __pfx_process_scheduled_works+0x10/0x10 [ 285.297606][ T5920] worker_thread+0x8a0/0xda0 [ 285.302316][ T5920] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 285.308772][ T5920] ? __kthread_parkme+0x7b/0x200 [ 285.313998][ T5920] kthread+0x70e/0x8a0 [ 285.318440][ T5920] ? __pfx_worker_thread+0x10/0x10 [ 285.323684][ T5920] ? __pfx_kthread+0x10/0x10 [ 285.328378][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.333606][ T5920] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.339177][ T5920] ? __pfx_kthread+0x10/0x10 [ 285.343952][ T5920] ret_from_fork+0x3fc/0x770 [ 285.348657][ T5920] ? __pfx_ret_from_fork+0x10/0x10 [ 285.353808][ T5920] ? __switch_to_asm+0x39/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.358583][ T5920] ? __switch_to_asm+0x33/0x70 [ 285.363624][ T5920] ? __pfx_kthread+0x10/0x10 [ 285.368400][ T5920] ret_from_fork_asm+0x1a/0x30 [ 285.373449][ T5920] [ 285.376476][ T5920] Modules linked in: [ 285.381531][ T5920] ---[ end trace 0000000000000000 ]--- [ 285.399450][ T5851] Bluetooth: hci5: command tx timeout [ 285.648538][ T5920] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 285.669223][ T5920] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 285.750918][ T5920] RSP: 0018:ffffc900048077a8 EFLAGS: 00010206 [ 285.757474][ T5920] RAX: dffffc0000000000 RBX: ffffffff89508028 RCX: f0595902f3b17500 [ 285.816781][ T5920] RDX: 0000000000000000 RSI: ffffffff89508028 RDI: 000000000000004b [ 285.850729][ T5920] RBP: ffffffff8a798ad5 R08: 0000000000000001 R09: 0000000000000000 [ 285.878763][ T5920] R10: dffffc0000000000 R11: ffffffff8a798a90 R12: 0000000000000000 [ 285.887076][ T5920] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 285.911880][ T5920] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 285.922054][ T5920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.929645][ T5920] CR2: 0000555a006ec000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 285.937771][ T5920] Kernel panic - not syncing: Fatal exception [ 285.944398][ T5920] Kernel Offset: disabled [ 285.949055][ T5920] Rebooting in 86400 seconds..