last executing test programs: 3.241884499s ago: executing program 2 (id=1215): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x3, 0x81, 0x31da, 0x0, 0xfffffffd, 0xfffff800, 0x4, 0xa}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x1, 0xfff1}, {0xf, 0x6}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@delchain={0xb18, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x6, 0xa}, {0xfff2}, {0xb, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @filter_kind_options=@f_cgroup={{0xb}, {0x428, 0x2, [@TCA_CGROUP_POLICE={0x424, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffeffff, 0x5, 0x80, 0xfffffbff, 0x10, 0x9, 0x8001, 0x448c, 0x80000001, 0x5, 0x962e, 0x1ff, 0x3, 0x5, 0x9, 0x4, 0x0, 0x1, 0x400, 0xfffffffc, 0x9, 0x7, 0x8, 0x5, 0x9, 0x7, 0x38000000, 0xfffffffa, 0xe1, 0x8, 0x2, 0x2, 0x7a, 0x0, 0x7243, 0x50f5, 0x8e, 0x10000, 0x7, 0x200, 0x7, 0x1000, 0x5, 0xf, 0x2, 0x3, 0x8, 0x8, 0xff, 0x9, 0x7, 0x6, 0x8, 0x10, 0x6, 0x1, 0x8, 0xfffffba0, 0x4, 0x2, 0x6, 0x1, 0x8f5c, 0x7, 0x4, 0x9, 0xfffffffc, 0x4, 0x6, 0xc, 0xfffffffd, 0x9, 0x6d0, 0x6, 0x4, 0x4, 0x10e6, 0x1, 0x9, 0x0, 0x5, 0x8, 0x100, 0x8001, 0x433, 0x4, 0x7ff, 0x101, 0x8, 0x2, 0x8, 0xc, 0x4, 0x3, 0xfe1a, 0x80000000, 0x8001, 0x8, 0x7f, 0x2, 0x6, 0x60, 0x0, 0x9, 0x417b, 0x2d341cbf, 0x1, 0x3, 0x2, 0xff, 0x2f, 0x6, 0x8, 0xaf9, 0x0, 0x5, 0xfffffffc, 0x3, 0x7, 0x80000000, 0x33d, 0x3, 0xff, 0xfc, 0x400, 0x101, 0x5, 0x44aa, 0x9, 0x7fffffff, 0x7, 0x1, 0x1000, 0x7, 0xe7fd, 0x5, 0xffff2e96, 0x4, 0x1, 0x80000001, 0x45, 0x6, 0x6, 0x6, 0xec8a, 0x7, 0xf950, 0x7, 0x8, 0x1, 0x1, 0x72, 0xe7b5, 0x5, 0x1, 0x7, 0x6, 0x8, 0x10001, 0x4, 0x1000, 0x7fffffff, 0x1400000, 0x200, 0x0, 0x1a, 0x9, 0x4000000, 0x1, 0x7, 0x8000, 0x9, 0x7d, 0x7ff, 0x4, 0x8, 0x7, 0x9, 0x8, 0xf0, 0x6, 0x5, 0x9, 0xedc, 0xfffffff8, 0x0, 0x27f, 0x1, 0x4, 0x1, 0x3, 0x5, 0x2, 0x2, 0x13e, 0x66d8, 0x8, 0x6, 0x3, 0x6, 0x8, 0x9, 0xb, 0x80, 0x7, 0x6b6, 0x8, 0x6, 0xdc72, 0x1000, 0x0, 0x2, 0x5, 0x46, 0x1, 0x4e665c52, 0x48b1, 0x6, 0x3, 0x9, 0x3, 0x8, 0x7, 0x81, 0x0, 0x68, 0xc3f6, 0x1, 0xe, 0x9, 0xfffff801, 0x80000001, 0x4, 0x401, 0x100, 0x8, 0x7fffffff, 0xf, 0x9e, 0x7, 0x0, 0x6, 0x658d, 0x80000001, 0xf47, 0x8, 0x5, 0x9, 0x558601b5, 0x6, 0x9, 0x8, 0x2, 0x51, 0x80000001, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6a4, 0x2, [@TCA_FLOW_EMATCHES={0x264, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x218, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1bc, 0x3, 0x0, 0x0, {{0x327, 0x9, 0x1000}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0xef, 0x5, "a0df4dc54e1d3a986427fecbf607f510fdd71cb96acc6b617472ac2446ffa1847732dfd7f50facad70bbe56b0906d954084ff95dfecd0db54c148bb5450c777795d05575d08e17329026a1972bc51a2a2c245e2a26fbc26085bc3e8ade20872e97e45da807b19c6596de94e53996639a480b573ff8bd6a5080f35cc079fe2e905e4f3820ace49b08d8b59acb8540d37f6eb71cc9d4c9dc0f6c422e694c400f625e961272b480fc63f7cdd0c787d338bf077054995ff08dc23af58074847f1dee2d7961d1258498789fbed90a052d882664fb08a593acc3641f362fbb1876627e09646fb343d0d100311be6"}, @TCA_EM_IPT_MATCH_DATA={0x93, 0x5, "d3f1f9406328a7c7756c1cfb779f2a462899cb126b4ee6b1c071c224e737d61c5ccba7f9bd58041404e30b5b28f2cb0fd5541dab741510512b13088ad208a4626efbafeb0b665300bf17d007be721b39e96a39b943246d913dd8dc51c42fea9f93964d1e740d2c2290e7dbf4dd2a7a9371e0791bf89f4530937d0d4e1f1f836296d795bece3fae7764468e9a0b3f01"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1794, 0x7, 0x401}, {{0x2, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x290, 0x4, 0xf7d0}, [@TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="ff", @TCF_META_TYPE_VAR="3c9ce5432146", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x7, 0x1}, {0x9, 0x7, 0x1}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="7da8b12337", @TCF_META_TYPE_VAR="25e7"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0xffffffffffffffff, 0x7, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_ACT={0x434, 0x9, 0x0, 0x1, [@m_bpf={0x100, 0x8, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xfffffc01, 0x1, 0x2, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x3, 0xfe, 0x9, 0x3}, {0x2, 0xf, 0x0, 0xf79}, {0xd7, 0xc0, 0x0, 0x100}, {0x6e57, 0x5, 0x1e, 0x1}, {0x1, 0x2, 0x80, 0x9}, {0x1, 0x2, 0x5, 0x7}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1fa, 0x400, 0x20000000, 0x9, 0x400}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x9, 0x6}}]}, {0x21, 0x6, "5634ab9b7415ad4b335478b0448018992a57df03fbbd8eac5309d511f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xf4, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x34cb, 0x6, 0x101, 0x80}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x8, 0x1, 0x9}}, @TCA_DEF_DATA={0x8, 0x3, 'sit\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'sit\x00'}]}, {0x85, 0x6, "f52c44306405421a2205261e7264f5fd0745c4e4997e6ba7ff4d00e59187121bd507b2f76bc8d9489e318a672e93b95ae9f89db48026489f1917a56d20f2f62ae5ffa445688cb3b3425ec44eaf06b4c58aca589604de2a42343bbeab11d6babed1fc43adf73e8105f799069e076bc5a921aa7ba47884029bd1b234955bf185631e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x90, 0x12, 0x0, 0x0, {{0xc}, {0x4}, {0x62, 0x6, "70a71911c297afe2d99a7090387f1e0b9a946fd710ab04406a0272942fe24ef1ca79b3d0f18e4e62e303a410c6c19bab584e1569056d1eb520c45dc23490abb618bd08c5bd127a61f0ceb7931fd437a9c371cd6a2609c2a223cd5242f778"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1ac, 0x1f, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x0, 0x498, 0x6}, @empty, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1c8, 0x1, 0x5, 0x8, 0x3}, @remote, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x5, 0x7, 0x5}, @private=0xa010102, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x2, 0x3, 0x3, 0x1}, @remote, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfe, 0x308e, 0x3, 0x56e48af0, 0x400}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}]}, {0xbc, 0x6, "df97b95cb5d06d16ff59ac2eaf15393b302b0c4a27a981d0398eefd2dbb8e979932fd61d17015b9dbef1a07bd9c5015f2360d4a979b4379eb279858911ee58865e6e123931368b9c1d440ada8f2bcc4e65c3d3a8512a1a80667e6ea2de16d3dcde6fb2c1ca077da3be2977707b153fa362638011f1992a122da44c1032d3a80ca9ec13dfd2f05eca2c127598bc4406e218ac1081a549bd06064cb819d0900fe0ba342540f226040a507637dc3789bf9d7d740b169663819a"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x412}]}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0xb18}, 0x1, 0x0, 0x0, 0x1}, 0x48c1) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x41}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}]}}}]}, 0x48}}, 0x0) 3.159854286s ago: executing program 0 (id=1216): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x401, 0x256, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 32) r4 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfe33) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8014) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESOCT=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000300000000000800010010"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) (async, rerun: 64) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f00000002c0)={0x3b, "e80584f038615c538fb92bbe65db69036200646fce464368efc161b79e1305033b67a68b395b304f2eee74953c5e109f7aab6683f86bad8fb56f5781cc10f7f978083bfb4ef045ffb410b6ee36b4729b4284870b6bfe84d71b115773f33e57ee7cb6fe252021c12551a4c17f065685deab943b540f96a06e5b6eeaf327ef868c"}) (async, rerun: 64) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f00000000c0)=0x30, 0x4) 2.937840612s ago: executing program 2 (id=1220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000)=0x6, 0x4) getpid() recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0xa, [@typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x8}, {0xd, 0x2}]}, @union={0xb, 0x9, 0x0, 0x5, 0x1, 0x7fff, [{0x6, 0x3, 0x7fff}, {0x2, 0x5, 0xfffffd7c}, {0x6, 0x2, 0x10001}, {0x9, 0x4, 0x9}, {0x0, 0x3, 0x9}, {0x0, 0x0, 0x7}, {0x9, 0x4, 0x44}, {0x0, 0x0, 0x1}, {0x7, 0x1, 0x5}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x5}, @const={0x9, 0x0, 0x0, 0xa, 0x1}, @enum={0x7, 0x9, 0x0, 0x6, 0x4, [{0x6, 0x2}, {0x7, 0x4}, {0x9, 0x6}, {0x10, 0x8}, {0xc, 0x8}, {0x1, 0xa49}, {0x4, 0x4}, {0x0, 0x40}, {0x1, 0x9}]}]}, {0x0, [0x30, 0x0, 0x61, 0x0, 0x30, 0x0, 0x0, 0x30]}}, &(0x7f00000007c0)=""/235, 0x14a, 0xeb}, 0x28) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f00000003c0), 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r11, 0x1b, r8, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x6, 0x0, 0x1}, 0x10, r9, 0x0, 0x1, 0x0, &(0x7f0000000800)=[{0x3, 0x2, 0xb, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x2c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7694, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xc0000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9ae5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0xbd9f, 0xad, &(0x7f0000000580)=""/173, 0x41000, 0xc, '\x00', r4, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x0, 0x3, &(0x7f00000008c0)=[r2, r2], &(0x7f0000000900)=[{0x5, 0x5, 0x3, 0x2}, {0x1, 0x2, 0x3, 0xc}, {0x5, 0x2, 0x9, 0x5}], 0x10, 0x10001}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$tcp_mem(r1, &(0x7f0000000500)={0x3fffffffffff, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008100000b70300000010000085000000b400000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 2.794715374s ago: executing program 0 (id=1223): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_int(r0, 0x1, 0x45, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.736019415s ago: executing program 2 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x54, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x404c014) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000081000000000000000200000018010000696c6c250000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000050000000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0) r5 = socket(0x1, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000600), &(0x7f0000001380)=@udp=r5}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r5, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xd5, 0x401, 0x3, 0x7, 0x6, 0xc7, 0x6, 0x400}}}}]}, 0x58}}, 0x44000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', r10, 0x10, 0x80, 0x7, 0x92, {{0x7, 0x4, 0x1, 0x7, 0x1c, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x8, "808cf513adf5"}]}}}}}) close(0x3) 2.550263692s ago: executing program 0 (id=1227): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000d00010000000000000000000000711645000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000080)=0x1) 2.502287608s ago: executing program 0 (id=1228): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003b80)={@map, 0xffffffffffffffff, 0x1, 0x10}, 0x20) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.401985824s ago: executing program 4 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8e6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xa88}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r4, &(0x7f0000000a80), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@loopback, @broadcast, 0x1d, 0x11}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xbbfb8c4ab5bc5b51) r6 = bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0xec) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000003b88940f3412d4f8980000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a810000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900f80073797a31000000001c000380180000800c0001800600010012ad00000800034000000001140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x0, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x24}}, 0xc0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) r10 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000d00)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0, 0x0}, &(0x7f0000000d80)=0xc) r13 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r14, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r15, 0xee00, r16}}}, @cred={{0x1c, 0x1, 0x2, {r15}}}], 0x40, 0x4}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000001c0)="1d90d34fe0e25b61266c55f181f1f550b5", 0x11}, {&(0x7f0000000480)="f13d3c6d756fa9e5fe52af93928bf128777f58df7850f06fcfe931b8b681205e1c4267551cccd5ba0ffd35a0fee98706a225fe22884b754cb000989b623c35cf399844f641609d470c64444806b48741b3b457f824b1f7f3d73bd700dfe156ea78b3fe1d329874154cb383614794ba4037b1b0a8319cb088c471a91ca221500ea67dfa1a8b6a19880b", 0x89}, {&(0x7f0000000540)="557888f891a2afafc2fdfc96866812a87213bdd5b0fd0e35e5e412b7f91e247ac61f1f2e2cae5836a599b7147b0cb0cea9d8d89de59121f3ed1709b7202bd064330c398572248fa83ebef934d9f5350b169b94509bff8dfffd1a23cb0320c7e615c18e7e551931414c6318079fe5176419363f4e009a193d830989cd590a17a89fce3f23cfc57962f48fae9b1d25cc59773c2a084061278d9fb1f20d408af6a96154bac27cc851992a3b5332e6801e90dd2c79cb0c8d183930e93ac9ada9a3eb3c74748c834c1b", 0xc7}, {&(0x7f0000000640)="ceca010fa981d5f5be5ae73aa8f2c5479fefabd629abbc0b70f40a61318baef9170624396aa96cc7dc6e026baa6bc8a9aa0a11cafcbf248ae27b74a5c93b", 0x3e}, {&(0x7f0000000680)="44167f9a5c6ab2108fa3594d5cef36bea0e73191ca3eec733cd11fbd7c251919b18f5d321600f675d7255e2038d7e388bc346fce2752748412a9c0c26c643763bd3fb063f68f920f91bed45469b0e2fa81c9e82a47df0f344ccf125aa5ee64c58fb7cbbbdafc2226666de040edd84450aecb5340750d8dda2654211530a1a3758943701a1099ecf844ae9b14b00b270d010d39b087c946a4b4f6f731ef690a05ba8572bd3436e504466f6ea6ff99bb632180cf923c21b17c5aae67ee3ea585dabbbaa3f95871fdfe65cabfb9912d9124cd1db0a33b0dc61d35da3f", 0xdb}, {&(0x7f0000000780)="b5b66ed8dd8ee02cdd698c3672b74d5884b426035ad96993f3ce7e94008e33b73df65a0aa9665ffb5a5a1b13b99b0a9bf8ace8a85bc7a110f2f3c443fa52720ee62a96", 0x43}, {&(0x7f0000000800)="70ac94d6ecf0cf3df015992f666412be7aaabb37ac88d50751d4876b4d2ede8b7148a3822a8fa3db4dd77dc06e142178b8", 0x31}, {&(0x7f0000000840)="a0336d831666ac7981e9db919c5a9de4e449dd48408a001cbfaedc4581f91b515215c517e6868f58cbba7b22e94ee62bc0b775140247ab5b95b414d44e1cd3716b683d43536e045be7f64245c7235d963fb383f72f098cd609da4c59d3f5c5645a5fa0b0f262b1c203069833ab7261007cf5c7a571482f5334c6d24b9827b021ce2b4422ae20dc2c41f3", 0x8a}, {&(0x7f0000000900)="7837cf5e9601ccb9d336c2f7f9cf86f035e69fe554880ce189abb6", 0x1b}], 0x9, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r5]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, r16}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0xb0, 0x4004010}, 0x667b29e10121e5c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.342825334s ago: executing program 1 (id=1232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x44014) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200020000009000000000800010000000000", 0x24) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, 0x0, 0x44014) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200020000009000000000800010000000000", 0x24) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) 2.215838865s ago: executing program 4 (id=1234): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x100}}}}}}}, 0x0) 2.146858965s ago: executing program 3 (id=1235): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000100)) (async) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000100)) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000140)={0x5, 0x7}) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) r5 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x1000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000380)={r5, &(0x7f0000000280)='\x00', 0xa720b55589acf2c7, &(0x7f00000002c0)={@align=0x4, {0x6, 0x90, 0x10000, 0xfffffffffffffff9}}, 0x8000, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xde9e}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000380)={r5, &(0x7f0000000280)='\x00', 0xa720b55589acf2c7, &(0x7f00000002c0)={@align=0x4, {0x6, 0x90, 0x10000, 0xfffffffffffffff9}}, 0x8000, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xde9e}) clock_gettime(0x0, &(0x7f00000003c0)) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000400)={r6, r7/1000+10000}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000004c0)={@phonet={0x23, 0x4, 0x9, 0x1}, {&(0x7f0000000440)=""/44, 0x2c}, &(0x7f0000000480), 0x8}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002680)={r4, 0x0, 0xbe, 0x1000, &(0x7f0000000580)="38b944d0c83f5577265f3079f8350ecfafd3f0ac269a8b0d0597f85661c26e7a3d7d59e4371dd8c084bff35ff8d9b0672e896c63ff18ae81e1cacc42e84253f0ca4beaae0b1992449e83f282a6c18bbb8ff76e6057750c2eec7ca72cf55a5f2813cfac3c3b45ee1b478720695b75749a674ac42ff3470663e24ff88d760bd48f741d48b6d79ab6c8496ca96d42a8b0d883c140c7900afd7bfb28f2f3231dc3c1c2d02b05eb730648feaeb93358451ef47b26f6428bb279b67b32953bded6", &(0x7f0000000640)=""/4096, 0x800, 0x0, 0x17, 0x1000, &(0x7f0000001640)="172151dc8b9fdc38db9416a74c1def4ee48718f1ab3188", &(0x7f0000001680)="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", 0x5, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002680)={r4, 0x0, 0xbe, 0x1000, &(0x7f0000000580)="38b944d0c83f5577265f3079f8350ecfafd3f0ac269a8b0d0597f85661c26e7a3d7d59e4371dd8c084bff35ff8d9b0672e896c63ff18ae81e1cacc42e84253f0ca4beaae0b1992449e83f282a6c18bbb8ff76e6057750c2eec7ca72cf55a5f2813cfac3c3b45ee1b478720695b75749a674ac42ff3470663e24ff88d760bd48f741d48b6d79ab6c8496ca96d42a8b0d883c140c7900afd7bfb28f2f3231dc3c1c2d02b05eb730648feaeb93358451ef47b26f6428bb279b67b32953bded6", &(0x7f0000000640)=""/4096, 0x800, 0x0, 0x17, 0x1000, &(0x7f0000001640)="172151dc8b9fdc38db9416a74c1def4ee48718f1ab3188", &(0x7f0000001680)="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", 0x5, 0x0, 0x4}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r4) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r4) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002780)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x3c, r9, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x800, 0x43}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x5c}}, @NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x41) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000002880)=""/107, &(0x7f0000002900)=0x6b) setsockopt(r2, 0x7ed1, 0x5, &(0x7f0000002940)="da765dd7cae0521b8ce14a238063aaae9b041609a4", 0x15) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000029c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x58, r9, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xcd}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8000800) (async) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x58, r9, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xcd}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8000800) socket(0x1d, 0x80000, 0x3) bind$inet(r4, &(0x7f0000002b00)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000002cc0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002b80)={0xfc, 0x464, 0x100, 0x70bd2d, 0x25dfdbfe, "c23ce4e341bccdff3cbafcb7a40d5800798343fbca90a944095efad82d22162973bfbfda0562cd89c447e03a1d0fb8c0a34b0e4a1355dd8778d0832d6d87a589f277c226ca7a9801f7d490a2d9f3be3ed9d012cc7aa234f252ae4d26ea6de7509d6c8ec5850df875876830b81991c432e808331d798e0b6bd2a6658a8553a42bf025ec81bb99b25a398e218fbf49801d729a14b04ee228e14085829b9e9b5eafca48545328f38dd9dd0704ba11727892c08b97c5d5960670d7dafd7450f01b6b837781b7d68202d56ac46beb3cc2f043e7eff0dbcc088b334320388310ff0b998a411539022e0e5637d0a597", [""]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x11) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000002d00)=0xffffffffffffffff, 0x4) pselect6(0x40, &(0x7f0000002d40)={0x1, 0x7f, 0x10, 0x6, 0x15, 0x81, 0xbe7, 0x12fb}, &(0x7f0000002d80)={0x9, 0x1, 0xffffffffffffffff, 0xffffffffffffff3f, 0x9, 0x8d, 0x4, 0x7ff800000000}, &(0x7f0000002dc0)={0xfffffe0000000000, 0xf78, 0xeea5, 0xe, 0x5, 0x100, 0x5, 0xf}, &(0x7f0000002e00)={0x0, 0x989680}, &(0x7f0000002e80)={&(0x7f0000002e40)={[0x7]}, 0x8}) (async) pselect6(0x40, &(0x7f0000002d40)={0x1, 0x7f, 0x10, 0x6, 0x15, 0x81, 0xbe7, 0x12fb}, &(0x7f0000002d80)={0x9, 0x1, 0xffffffffffffffff, 0xffffffffffffff3f, 0x9, 0x8d, 0x4, 0x7ff800000000}, &(0x7f0000002dc0)={0xfffffe0000000000, 0xf78, 0xeea5, 0xe, 0x5, 0x100, 0x5, 0xf}, &(0x7f0000002e00)={0x0, 0x989680}, &(0x7f0000002e80)={&(0x7f0000002e40)={[0x7]}, 0x8}) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008050) 1.803543223s ago: executing program 0 (id=1236): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000530400012dbd7000ffdbdf25003791f889c48d7abd0686fff100fb4f4400000079de9a364a760e927d92106cde43e459fede4d1f273d641184699e6597716c6c7f6ce0695d871dc508cb"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) ioctl$sock_ifreq(r0, 0x8926, &(0x7f0000000080)={'ip6erspan0\x00', @ifru_map={0x6, 0xf, 0xb57, 0x4, 0x1, 0x8}}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1.802812245s ago: executing program 2 (id=1237): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="ba", 0x1}], 0x1, 0x0, 0x0, 0x100100}, 0x0) 1.715359414s ago: executing program 1 (id=1238): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44891}, 0x4000) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000580)={r0, &(0x7f0000000140)='b\x00', 0x2, &(0x7f0000000300)={@align=0x7, {0x6, 0xfc01, 0x8, 0x3}}, 0x7, &(0x7f0000000340), &(0x7f0000000540)=0x100}) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0xeac57d5ed4572416, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x91) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) socket$tipc(0x1e, 0x2, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x0, 0x1000, 0xffffff6e}, 0x20) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0xa}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41100, 0xa}, 0xffffffffffffffc7) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be"], 0x80}}, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', 0x0}) 1.64910203s ago: executing program 3 (id=1239): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@gettaction={0x28, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESOCT=r1, @ANYBLOB="010027bd7000f3d3df2502000000050004000100000005000400010000001400020076657468315f746f5f74278ba6b565616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x24008950}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x1ff, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="740000001600fe0327bd7000fedbdf2502050cff", @ANYRES32=r8, @ANYBLOB="080008003100000008000a00030000000800090004000000080008005c01000008000a000300000014000600010000000200000007000000050000000800040064010100080009000000000008000a000100000008000a0000000000"], 0x74}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="ad00"/16, 0x10) sendmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="100000"], 0x20}}, {{&(0x7f0000000400)=@generic={0x1, "4f3d5c5566487fc16ca19878bbc01f83d92b1734b09a44a0ef3483b37366fe6aada401350ed6a0b3d9895b85234da833ef69d502b889bc6ccd9130c89f0c54baef35ff68d7c950514c2c4271416354a8c3f07f5d30699298097bfc093bbf79f6861f8ac59aa1c9fbeed942f5a1895a9d49558ff9f415cd1522d51ef6e8bb"}, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="bb060aee9fb5935aed49cc89528042b9d4ec808426c2"}, {&(0x7f0000001300)="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"}, {&(0x7f0000000540)="c7c215fa6f9435bf84a572b1fa72c083d05ebf43d047a2c448dcfa6497ac39594d7e58b42d981b5ca4bfbfffd4eb8f8668c266bb07c11ce2ff071d1e0d8ba90970aa197a0f32d6cdb708f8ed7c1da339da03ae2186bc51d97ff9521f6a0d4c7e72e64806a7a9caf1bf52ca6744e085851390f081fa610cba510852e1d42feb8bce906c7083e84045b56469252607b968c8be3a85f632efc5fd8b90aa03263fee405f3719c325f5c11d8db69bdc99099c8e0e3b783d9de7c6fd89aebf"}], 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000914a1e9c14ac262cabbb0e5ea5f913740000000019010000000800009533d1fb1f13f2ff6e4096e14733565bf4eeae26c0f2d48f9e8aa6"]}}], 0x2, 0x48004) 1.487432914s ago: executing program 2 (id=1240): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendfile(r0, r2, 0x0, 0xffffffff000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) connect$llc(r0, &(0x7f0000000600)={0x1a, 0x118, 0x7, 0x5, 0x7, 0x8, @local}, 0x10) 1.026582507s ago: executing program 4 (id=1241): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@private=0xa010101, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x40, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x22020600) listen(r2, 0x0) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0xc, 0x0, &(0x7f00000001c0)=""/12, 0x6, 0x0, 0x800, 0x88, &(0x7f00000005c0)="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", &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8091d9adb97d6601215cf7ba1e5d41e2619f7727ad88954b2885d5fe237171b99a062625d3d4216b9b30743ac38d9d1350ad13dda19d2a26a8aec386f02c5755bb3d6eb0d99c482bd2c2e", 0x6, 0x0, 0x5}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.controllers\x00', 0x0, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) (async, rerun: 64) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) (rerun: 64) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x64, 0x0, 0x0, 0x52}]}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000000)=0x1e, 0x4) 851.920905ms ago: executing program 4 (id=1242): unshare(0x2c020400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r1, 0x8) listen(r1, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x28, 0x486, 0x0, 0x0) 771.274169ms ago: executing program 3 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000440)={0x1f, 0x4, 0x3}, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x986}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x22f0}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcd5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91e9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400}, 0x4000001) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xa, 0x7}, {0x0, 0xfff1}, {0x0, 0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a9", 0x24}], 0x1) write$cgroup_devices(r9, 0x0, 0xffdd) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x78d0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', r8, 0x4, 0x6, 0x2, 0x6, 0x6, @loopback, @remote, 0x80, 0x7, 0x8, 0x3}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x170bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) 763.59314ms ago: executing program 0 (id=1244): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000d33980b53e4626eb000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="180000004100eaff29bd50004661256032cb000004002c80256622387daf849d6a7e8595779dc1f334e3545fd63e369a375755c3152798a792498488f23fddd125551289ac00f28d2f4300e315c403cbd6946b969e65b190fd03df67a5c265deb957fb0b7a7c7ea54cfafd4d825a5599028e9378435fdb5a4414a3fd80f35c66fd154158e6ea9c4c900c2dc569252513606dbed0d433689d4ec9c179c9b01c810acc7b969671aa3410ddbedf64ff4fc671783a6e0f36496a15c7475a5d6757cd3a82afc3c55376e6c0881f339371ca107557b2e704fa9fcfc41d30c8b155336290bf6de4"], 0x18}, 0x1, 0x0, 0x0, 0x20008801}, 0x4004080) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff1, 0x9}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7eaa0000000000006110380600f1050000005d0000000000960d66b5df7e864fdd3abfd985346c96935105b293f259dd5e5220139f4eadad5497f0106f1b4752800a74e71938828fb4989eaebbc2190137e27f2b0049e5b099144f75cc2da93b1ed55a08cdb37d913a8be3cd58a8e725c687bfcf8b72fe864d07eb22e7d48f8a26bfac3d7dd5ccd329e4329f5d23"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) connect$unix(r5, &(0x7f0000000080)=@abs, 0x6e) recvmmsg$unix(r6, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a00"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff7, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0xaf2, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 651.814378ms ago: executing program 1 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00020010000d042abd7000000000000000000080b7a5940c2a77e0e42cd001", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c00028008001a00ffffffff"], 0x3c}}, 0x0) 651.04512ms ago: executing program 4 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad63, 0x9, 0x1}, {0x0, 0x2, 0x8000, 0x5, 0xe}, 0x1, 0x100, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0xfffff65e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)="8b", 0x1}], 0x1}, 0x4) close(r0) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40d4}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 467.072766ms ago: executing program 1 (id=1247): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x800, 0x70bd29, 0x25dfdc01, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000800}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4004011) 466.682826ms ago: executing program 2 (id=1248): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000080)="00af230579af5d532e0b0e6645f8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x6) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="9a5be948f5fe13ee19cf97661a98fa33025197433e80884e3711ca03692a0ce9df1d", 0x22}, {&(0x7f0000000740)="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", 0x4af}], 0x2, 0x0, 0x0, 0xc4}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000380)=0x7ffffffc, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {0x10}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e21, 0x2800, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) accept4(r0, 0x0, &(0x7f00000003c0), 0x80000) 463.787645ms ago: executing program 3 (id=1249): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f5, &(0x7f0000002280)={'veth0_virt_wifi\x00', @multicast}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xffff1af9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 327.286414ms ago: executing program 1 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r1, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x15}}}]}, 0x64}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="f3402c3e070a00000002000000ff1f000047", @ANYRESDEC=0x0, @ANYRES16=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)={0x58, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4040) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="a81000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a31000000007c10038078100080080001800400010008000340000000036410"], 0x10a8}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) splice(r5, &(0x7f00000000c0)=0xd, r3, &(0x7f0000000100)=0x8b6, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 251.662352ms ago: executing program 3 (id=1251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xfff, 0x4, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8d54}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0xfb7, 0x0, 0x20d, 0x6, 0x8, 0x3, 0x60b, 0xfff, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r5, 0xfff9, 0x2, 0x2, 0xf48, 0x7fffffff}, 0x14) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r6, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x1, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x590c7}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x2c, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xa, 0x3}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x2}}]}]}]}, 0x68}}, 0x0) 209.216502ms ago: executing program 4 (id=1252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket(0x840000000002, 0x3, 0xff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdd, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x77, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) sendmsg$kcm(r4, &(0x7f00000013c0)={&(0x7f0000000d80)=@nfc={0x27, r8, 0x1, 0x6}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e00)="f17040f97cf2c3ca5ff59c065da00589807df25892e3d9320b4b71525f0bd4346bcfc00a05785f278f9b3b3d1286c0c2a2d450a36f5a0fc7e5c7d563aa3205b328da1b5b3aafb9efef3e5e3a62dea80e4e53db6284413791a43a65babc054131bb0c14fe3edb7ea9ae18466cc4e071e8389a83d6528ec9c342bee49f1b6372050496d0ac64c54f2a58864fa992cd63ddbc0acac363b2ff1cf33f29e979888444ce69addc47aed77f312f9f6ddb50229dbd14cbcb2b0094142dd0ef1ecd5c37a356ada516f1dbd5ccb033335f641c1a56233d51c21dfb4766243df28ecc46d2b4fff23798b098538de146ce46", 0xec}, {&(0x7f0000000f00)="c5c3130483a4f55671437dce30dc7e9eaa98583cce50c9cf5063ad1408f65c2f1e5cee740fa9b61f9875e7d238515402dbd7d6d073ffd9ea501a9ce2e1d37afd06bd4324f04fe1c9002def873d6d92623e2f60393872cee10bb0551ea06d0b6ae7cc27cbedd8e74819e1dc1c1fccccfd0d6dac8ca629a1cbd19d9027871ca48f0c6e729f97fdf51f5781faa23b095e54cb10d26d3ed515a42a2d1f5b8c200b66c5839524608148590e19ea310cdc624e6a", 0xb1}, {&(0x7f0000000b00)="cd765786df0c818bc9777f266f70012527dda0278f7e5f2f74922ec36339dcda3266632def48f40e01b2e31a9a125b1d3110ee7470b919bc041492b463a5b35a", 0x40}, {&(0x7f0000000fc0)="29237190430c1374558ab8f9ca560cd3e9ccf63baf99c11e4d93c4b0a2d9add5b47fcce09da57753bbaa0bc26ac5f6c54ebcfa802e6d9fdb7424bb80100cbdfdb7a1df1768047c1db3b1c0c6bc8a93c1829dd2ae57a34a199bc1f3ffebf3d8eccb74c437d04b8909056397b8f8661acceffb013dee243c4ff85c570d2048e09bb1a70f7ee379c0d2567d8b5f051f8a02d3d71d", 0x93}, {&(0x7f0000001080)="93f1d9fadc2f7ca40f5c1caff2bc37b5c1ca20f79f6076dc98e5dd89f2028305be25bf8f9f9ff05e103b38484c782494ea84709cbdcfdbc50fade82a19723c48cfb8b0e17c850064035b4ad5a8c5ccf4540416fbfebdb22cc0302670ae2d932a6525e81f31e30882f66018cdf609c34fd2786f716e6f76bd9e0eaf1c639a79bd9597b823f365", 0x86}, {&(0x7f0000001140)="e3531bfb", 0x4}, {&(0x7f0000001180)="eae3bb0ba7907bced942eae24fbcff6b01aff61158b0d95ba1cc92fef02ddf938aba3197610d432d070463dbded1a6344b4ed1b2a4f75e6d23e74e63e4a0f53113fbdf5ed5f88290e82f5d0ef29368acca28b49ebbd486482fea1d53a81545e4806b6d544acb1ccaffff34278fe1b634cec2ae2e545cd304f97552ee73fff0b60090f8963e0020cc86d95c", 0x8b}], 0x7, &(0x7f00000012c0)=[{0x100, 0x107, 0x5, "ab7af08dde11a3f011290c8bb66a8cc94658541a256998f160e892dd4949760566db7f86ba40f959ec5ec41f541b1cfd5a22b2ccd04b00d652a9cf26ce6bfc8842645b538f0abab335ccea6cb4554389ca4f6e32b828159fb221e263eaaf3ded1524edbc9eee63f03cbb072925198db3b32c73d17b2b0b3bb9ae46f4e782c2e131073133d65dbeb14e1c4a096c76e2e949163c4b17ad32f4253f1ed74bbcf951c03128d46c22deb9a8a0d989ac6f4e6b400db3459e933ab74f618ea30e77d130669cae2aef8f38e0ff85d2bf61269a7d0e7ea717d3d783e5bff59029d55bd7d9c7b6a0133ff7e63251"}], 0x100}, 0x20048801) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000001400)) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000240012800b000300677265746170000014000280060010004e200005000000eaba833d2c9b8e01f311004e210000f35ad1011c366cd097ee26f0f193d080e31213c1f1f31b82eb20af6b47b1de2e9c0fb1eadebefd232691f09249365d8e3092f2f3e8379aa376c2d11fe1a1c4c4c4cda90760879c7ec66805aae4446fcd6ab68793cf438a95e35893b96745b6c5f4aca41f839feca06e5cf6b9af5819e18c7f3b844b4fbe87707ea17fa4d9dbf38883d68c575c9d8c008b7cf3a1bb30694f14cf29e4a3a0c13398e6e51dd9f0484d1ff9e323e4d456daec71c8fb4b98b58fd764"], 0x44}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, @mcast2, @mcast2, 0x7, 0x7, 0x1}}) sendmmsg$inet(r2, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000007464000100000000000000e5c09a0349f9cd417e5d4c8ba3d218c4f7e4ebebee6335ac4ca8c4", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="a656caba13dc2bddae37fc964d1b15102c6b601629dfd830edc221188a44600118d1b18f26f00037afe52cc5858e961d1f19147c7f167b20173ae4beb44dfed0979ff3cfed9d17fa3666dbf1af5ada05777aeea32351916399b7ab1d9d1ed015a9af0b0a9b391bd554057339f1953e1bbc05d80f90343986131d6484f435c7c597ddb9808899", 0x86}, {&(0x7f00000001c0)="2a0e0ce9fc07373b6f3c06d7f3b9727fce16e80a91fcb5ae9ee067470f6c9c5bab86b4f0cf9f3361a11128b1b75710f652c9236f2ec9cabbcc749e327ac5945fe95a9a6492675dcd01e6e3de7ec1df20e46fa87befaee15cc03dca08436eab4f1ee863e080363dd5abcb022a569c7aaade5c83b66327b09978fd3fe48dab4e68a43b2863afb7c33c2bedb0ae78d17f38cb41bf8ed4a3f4befeb04c3558327fc4f50836566adb586fa0bf86d4a000a0218edfd9c888fa3ca2a4beb9007a483c4dbbdc96d89e2848547c15a9ff3ddebc002b7c3243a4d8", 0xd6}, {&(0x7f00000002c0)="aacd6ccd2cdfe94e1ce98e57f25aa7a86977d1f15bfa231ddd0e9badc7f90baa5e783f1771b30f0c2b2214884c47ef69128046bc572066ab1892d7e654bf0f7a08bf891cb968e1c10ab95ef5089509d4b975a2a9df5ac9c4ad5e349fd3d5c59f192f34c665dff3cd09906b7b1bf0353d40672e8e68d8c0", 0x77}, {&(0x7f0000000340)="be9062964e42087b5a99bbccabf9267b5d7543e6dcf1b787e6abfd4a449c86ec8e5e9fd5e5f5a4d564656e4a4464623de248f8313b8a74949d3fe09e33cc263720c16f5e7513fcc6aeb0975abc6b555fd470631fb4efbb439520782402dc9e38cb5b0114551926720a345b8033479f86a14a376c6576198b9fad2eb2b78a8ea5c5a125", 0x83}, {&(0x7f0000000040)="3728862b1a8df4fcc2c94e59b4056e3b8dd3ad44fd1aa10b66a62def580b2b", 0x1f}, {&(0x7f0000000400)="67d2280ae04fe3639d32cbe7121f26de8fbb3889edf4cae0701358e4e6e238001e5db68e87429dc7ecb1ebcc39fd1d2c101a7f53208cdfa8d82f0bb24514df55afbd7e33603cfe9ef372ba8fda9daea9646e4c78fd5752fec53240b2ceefbec90110123f02cf91907fc5c79e058b48e06f130b3a9bc1e2300d5a2af285bc58fe96534858f6ca5076bb2e920077f71d", 0x8f}], 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c00005b0000efffffff00000000eaff99c185a563258d396b38af07196848b73d6457bf91ece2ca22f9c74946647f3ad7fc9395b5cc7184eeeb09950f", @ANYRES32=r3, @ANYBLOB="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"], 0x130}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)="9ef34c869c49f03e175735783a95c52e11261a2c1d6d7f69d65173003c3bb165a7714692692eb19778a06e844e0f64c9d7cfdd58d77ecc64f680b636f1f36bc2cdad9ee1fa375b58f7533efae92f647d29d3b2c4dbda75f6527e9639b267bdae9590c101110161bf631de3a404c69eaee30d19121d9de1d25dea418ce9a6913846c9f62303d4e4a55c78d4878aae11d26f5044a466fbcc98241163588a0eb37cccc43a20cb23", 0xa6}], 0x1, &(0x7f0000000a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x34fe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x80}}], 0x3, 0x4000050) 136.964983ms ago: executing program 1 (id=1253): r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000090000000000000000000000c3aff8ff1001000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 0s ago: executing program 3 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x4109}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x80000025a5, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000240)=""/10, 0x2}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 82.498203][ T5808] cgroup: Unknown subsys name 'net' [ 82.612316][ T5808] cgroup: Unknown subsys name 'cpuset' [ 82.620962][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.255409][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.401613][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.421740][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.429921][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.438329][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.446171][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.449772][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.455124][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.469510][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.469647][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.478432][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.486909][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.499709][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.500711][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.509217][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.515026][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.524615][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.529204][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.535775][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.547233][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.551009][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.558605][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.574000][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.574911][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.581334][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.591933][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.186665][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 87.424015][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 87.486538][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 87.631112][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 87.658235][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.666637][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.673966][ T5823] bridge_slave_0: entered allmulticast mode [ 87.681603][ T5823] bridge_slave_0: entered promiscuous mode [ 87.700914][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 87.717916][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.725153][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.732728][ T5820] bridge_slave_0: entered allmulticast mode [ 87.740005][ T5820] bridge_slave_0: entered promiscuous mode [ 87.748871][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.757060][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.764546][ T5823] bridge_slave_1: entered allmulticast mode [ 87.771955][ T5823] bridge_slave_1: entered promiscuous mode [ 87.805399][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.812684][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.820408][ T5820] bridge_slave_1: entered allmulticast mode [ 87.827911][ T5820] bridge_slave_1: entered promiscuous mode [ 87.938992][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.951722][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.986231][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.019094][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.026501][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.033755][ T5821] bridge_slave_0: entered allmulticast mode [ 88.041343][ T5821] bridge_slave_0: entered promiscuous mode [ 88.050781][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.088343][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.095859][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.103197][ T5821] bridge_slave_1: entered allmulticast mode [ 88.110696][ T5821] bridge_slave_1: entered promiscuous mode [ 88.130537][ T5823] team0: Port device team_slave_0 added [ 88.190186][ T5823] team0: Port device team_slave_1 added [ 88.214138][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.221654][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.229466][ T5822] bridge_slave_0: entered allmulticast mode [ 88.237775][ T5822] bridge_slave_0: entered promiscuous mode [ 88.247724][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.254971][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.262627][ T5824] bridge_slave_0: entered allmulticast mode [ 88.269746][ T5824] bridge_slave_0: entered promiscuous mode [ 88.289186][ T5820] team0: Port device team_slave_0 added [ 88.298424][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.308764][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.316126][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.342694][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.355104][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.362549][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.371053][ T5822] bridge_slave_1: entered allmulticast mode [ 88.379027][ T5822] bridge_slave_1: entered promiscuous mode [ 88.386717][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.394139][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.401910][ T5824] bridge_slave_1: entered allmulticast mode [ 88.409279][ T5824] bridge_slave_1: entered promiscuous mode [ 88.418516][ T5820] team0: Port device team_slave_1 added [ 88.436252][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.446380][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.453350][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.479863][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.584720][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.596149][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.603212][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.629697][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.641181][ T5834] Bluetooth: hci1: command tx timeout [ 88.641425][ T5142] Bluetooth: hci2: command tx timeout [ 88.649397][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.653013][ T5834] Bluetooth: hci3: command tx timeout [ 88.659615][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.659645][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.663166][ T5821] team0: Port device team_slave_0 added [ 88.711256][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.720821][ T5834] Bluetooth: hci0: command tx timeout [ 88.720855][ T5142] Bluetooth: hci4: command tx timeout [ 88.730196][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.743407][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.773583][ T5821] team0: Port device team_slave_1 added [ 88.835716][ T5823] hsr_slave_0: entered promiscuous mode [ 88.842118][ T5823] hsr_slave_1: entered promiscuous mode [ 88.912389][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.919984][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.946299][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.959833][ T5822] team0: Port device team_slave_0 added [ 88.968041][ T5822] team0: Port device team_slave_1 added [ 88.976332][ T5824] team0: Port device team_slave_0 added [ 88.995147][ T5820] hsr_slave_0: entered promiscuous mode [ 89.001834][ T5820] hsr_slave_1: entered promiscuous mode [ 89.008375][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 89.014264][ T5820] Cannot create hsr debugfs directory [ 89.021101][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.028202][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.054975][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.079158][ T5824] team0: Port device team_slave_1 added [ 89.163750][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.171048][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.197865][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.211184][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.218691][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.245585][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.308634][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.315732][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.342012][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.393403][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.400746][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.427750][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.485624][ T5822] hsr_slave_0: entered promiscuous mode [ 89.492076][ T5822] hsr_slave_1: entered promiscuous mode [ 89.498719][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 89.504717][ T5822] Cannot create hsr debugfs directory [ 89.519897][ T5821] hsr_slave_0: entered promiscuous mode [ 89.526403][ T5821] hsr_slave_1: entered promiscuous mode [ 89.532894][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 89.539524][ T5821] Cannot create hsr debugfs directory [ 89.711286][ T5824] hsr_slave_0: entered promiscuous mode [ 89.717837][ T5824] hsr_slave_1: entered promiscuous mode [ 89.723906][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 89.729883][ T5824] Cannot create hsr debugfs directory [ 90.008174][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.045497][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.086316][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.116518][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.187112][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.200221][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.212858][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.227522][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.328539][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.362685][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.373783][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.389690][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.467759][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.512895][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.523729][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.539891][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.563730][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.609543][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.663546][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.670835][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.700294][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.707514][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.716554][ T5142] Bluetooth: hci3: command tx timeout [ 90.716978][ T5834] Bluetooth: hci2: command tx timeout [ 90.721975][ T5142] Bluetooth: hci1: command tx timeout [ 90.742287][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.753848][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.776431][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.788771][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.796446][ T5142] Bluetooth: hci4: command tx timeout [ 90.806087][ T5142] Bluetooth: hci0: command tx timeout [ 90.814074][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.920515][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.959460][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.966685][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.999250][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.035042][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.042335][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.120543][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.159770][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.167018][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.200410][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.207719][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.230072][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.273130][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.293973][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.319049][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.340123][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.347255][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.373587][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.405875][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.412988][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.450666][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.457998][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.505069][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.512396][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.677038][ T5823] veth0_vlan: entered promiscuous mode [ 91.709335][ T5823] veth1_vlan: entered promiscuous mode [ 91.798772][ T5823] veth0_macvtap: entered promiscuous mode [ 91.834151][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.871587][ T5823] veth1_macvtap: entered promiscuous mode [ 92.008660][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.068123][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.080246][ T982] cfg80211: failed to load regulatory.db [ 92.101731][ T5820] veth0_vlan: entered promiscuous mode [ 92.126690][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.212608][ T5820] veth1_vlan: entered promiscuous mode [ 92.223091][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.237253][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.262436][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.272437][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.334465][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.401628][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.472226][ T5820] veth0_macvtap: entered promiscuous mode [ 92.488328][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.514412][ T5820] veth1_macvtap: entered promiscuous mode [ 92.515729][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.576093][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.584059][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.654739][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.669898][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.720498][ T5822] veth0_vlan: entered promiscuous mode [ 92.740389][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.758260][ T5824] veth0_vlan: entered promiscuous mode [ 92.765063][ T5822] veth1_vlan: entered promiscuous mode [ 92.795714][ T5142] Bluetooth: hci1: command tx timeout [ 92.801256][ T5142] Bluetooth: hci2: command tx timeout [ 92.801457][ T5834] Bluetooth: hci3: command tx timeout [ 92.841799][ T5821] veth0_vlan: entered promiscuous mode [ 92.853552][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.872895][ T3450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.882618][ T5834] Bluetooth: hci0: command tx timeout [ 92.882726][ T5834] Bluetooth: hci4: command tx timeout [ 92.896504][ T3450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.917779][ T2911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.936597][ T5824] veth1_vlan: entered promiscuous mode [ 92.943515][ T2911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.010597][ T5821] veth1_vlan: entered promiscuous mode [ 93.026106][ T5943] netlink: zone id is out of range [ 93.031414][ T5943] netlink: zone id is out of range [ 93.040723][ T5943] netlink: zone id is out of range [ 93.046899][ T5943] netlink: zone id is out of range [ 93.065190][ T5943] netlink: zone id is out of range [ 93.094549][ T5822] veth0_macvtap: entered promiscuous mode [ 93.095586][ T5943] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6'. [ 93.110604][ T5943] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6'. [ 93.131755][ T5943] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 93.160775][ T5822] veth1_macvtap: entered promiscuous mode [ 93.171975][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.179430][ T5824] veth0_macvtap: entered promiscuous mode [ 93.191260][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.210939][ T5824] veth1_macvtap: entered promiscuous mode [ 93.254100][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.264002][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.264176][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.292180][ T5821] veth0_macvtap: entered promiscuous mode [ 93.304499][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.314516][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.323541][ T5821] veth1_macvtap: entered promiscuous mode [ 93.347352][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.383465][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.396295][ T3535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.415784][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.430776][ T3535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.469604][ T3535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484797][ T3535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.503308][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.526885][ T5948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.543674][ T3535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583434][ T3535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.602261][ T3535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.650174][ T3535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.719202][ T3535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722657][ T5954] netlink: 'syz.2.8': attribute type 3 has an invalid length. [ 93.754294][ T3535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771213][ T3535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.872131][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.895894][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.957627][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.968204][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.068005][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.089830][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.098821][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.145463][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.153480][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.277930][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.293674][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.385826][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.415808][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.497432][ T5972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.633425][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 94.671875][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 94.881465][ T5842] Bluetooth: hci2: command tx timeout [ 94.884873][ T5834] Bluetooth: hci1: command tx timeout [ 94.887032][ T5842] Bluetooth: hci3: command tx timeout [ 94.958172][ T5142] Bluetooth: hci0: command tx timeout [ 94.964925][ T5834] Bluetooth: hci4: command tx timeout [ 95.021675][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 95.127725][ T5990] tipc: Started in network mode [ 95.132769][ T5990] tipc: Node identity 36536a7a0c6, cluster identity 4711 [ 95.175929][ T5990] tipc: Enabled bearer , priority 0 [ 95.201295][ T5994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21'. [ 95.247632][ T5990] syzkaller0: entered promiscuous mode [ 95.268759][ T6003] netlink: 'syz.4.22': attribute type 298 has an invalid length. [ 95.286008][ T5990] syzkaller0: entered allmulticast mode [ 95.332254][ T6008] : renamed from dummy0 (while UP) [ 95.371201][ T6008] bridge0: port 3(batadv0) entered blocking state [ 95.379749][ T6008] bridge0: port 3(batadv0) entered disabled state [ 95.386882][ T6008] batadv0: entered allmulticast mode [ 95.398262][ T6008] batadv0: entered promiscuous mode [ 95.405331][ T6008] bridge0: port 3(batadv0) entered blocking state [ 95.412110][ T6008] bridge0: port 3(batadv0) entered forwarding state [ 95.422179][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21'. [ 95.444127][ T3437] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 95.454107][ T3437] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 95.563762][ T6012] tipc: Resetting bearer [ 95.572131][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 95.819521][ T5989] tipc: Resetting bearer [ 95.873476][ T5989] tipc: Disabling bearer [ 96.170152][ T6031] syzkaller1: entered promiscuous mode [ 96.175818][ T6031] syzkaller1: entered allmulticast mode [ 97.226853][ T6063] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:21 [ 98.442737][ T6079] __nla_validate_parse: 3 callbacks suppressed [ 98.442751][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 98.517856][ T6087] trusted_key: syz.0.39 sent an empty control message without MSG_MORE. [ 98.528114][ T6082] syzkaller0: entered promiscuous mode [ 98.535852][ T6082] syzkaller0: entered allmulticast mode [ 98.564476][ T6083] netlink: 256 bytes leftover after parsing attributes in process `syz.3.41'. [ 98.648553][ T6082] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 98.881885][ T6096] warning: `syz.3.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.882792][ T6094] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 98.963054][ T6094] vlan2: entered promiscuous mode [ 98.971202][ T6096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.983523][ T6094] veth0_to_bond: entered promiscuous mode [ 98.989854][ T6094] vlan2: entered allmulticast mode [ 99.001521][ T6094] veth0_to_bond: entered allmulticast mode [ 99.293310][ T6104] team0: Port device erspan0 added [ 99.373389][ T6107] team0: Port device erspan0 removed [ 99.453392][ T6107] bridge_slave_0: left allmulticast mode [ 99.505415][ T6107] bridge_slave_0: left promiscuous mode [ 99.519768][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.590589][ T6107] bridge_slave_1: left allmulticast mode [ 99.621145][ T6107] bridge_slave_1: left promiscuous mode [ 99.635596][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.849119][ T6107] bond0: (slave bond_slave_0): Releasing backup interface [ 99.884906][ T6107] bond0: (slave bond_slave_1): Releasing backup interface [ 99.939752][ T6107] team0: Port device team_slave_0 removed [ 99.975811][ T6107] team0: Port device team_slave_1 removed [ 99.995216][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.025037][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.059403][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.100535][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.144834][ T6107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.191412][ T6117] netlink: 32 bytes leftover after parsing attributes in process `syz.1.51'. [ 100.388312][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 100.468725][ T6153] pimreg: entered allmulticast mode [ 100.566185][ T6158] tipc: Started in network mode [ 100.571122][ T6158] tipc: Node identity 825d205f739a, cluster identity 4711 [ 100.583902][ T6158] tipc: Enabled bearer , priority 0 [ 100.689876][ T6164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.699578][ T6167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.750193][ T6158] tipc: Disabling bearer [ 100.858805][ T6173] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 101.099489][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 101.258223][ T6186] vcan1: entered promiscuous mode [ 101.275559][ T6186] vcan1: entered allmulticast mode [ 101.297536][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 101.559539][ T6195] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 101.577173][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 101.662499][ T6198] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.67'. [ 101.687074][ T6176] Zero length message leads to an empty skb [ 101.921549][ T6212] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 102.067346][ T6217] xt_CONNSECMARK: invalid mode: 0 [ 102.145408][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.180693][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.214191][ T6221] xt_l2tp: v2 doesn't support IP mode [ 102.564767][ T6243] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.785199][ T6233] bridge0: port 3(batadv0) entered disabled state [ 102.792190][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.800219][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.989388][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.010833][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.277869][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.302022][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.327024][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.379458][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.473868][ T6287] tipc: Started in network mode [ 103.502927][ T6287] tipc: Node identity , cluster identity 4711 [ 103.547010][ T6287] tipc: Failed to obtain node identity [ 103.547673][ T6289] __nla_validate_parse: 2 callbacks suppressed [ 103.547687][ T6289] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.91'. [ 103.552730][ T6287] tipc: Enabling of bearer rejected, failed to enable media [ 103.648115][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'. [ 103.700671][ T6297] netlink: 120 bytes leftover after parsing attributes in process `syz.4.93'. [ 103.745831][ T6297] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 103.804057][ T6297] netlink: 64 bytes leftover after parsing attributes in process `syz.4.93'. [ 103.828750][ T6302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.92'. [ 104.295471][ T6323] netlink: 'syz.2.99': attribute type 21 has an invalid length. [ 104.306691][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 104.315935][ T6323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.99'. [ 104.437470][ T6314] sctp: [Deprecated]: syz.0.96 (pid 6314) Use of int in max_burst socket option deprecated. [ 104.437470][ T6314] Use struct sctp_assoc_value instead [ 108.349286][ T6401] netlink: 'syz.0.112': attribute type 5 has an invalid length. [ 108.404080][ T6406] netlink: 44 bytes leftover after parsing attributes in process `syz.0.112'. [ 108.598919][ T6414] netlink: 'syz.2.116': attribute type 8 has an invalid length. [ 108.607972][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 108.636604][ T6414] bond0: entered promiscuous mode [ 108.652469][ T6414] bond_slave_0: entered promiscuous mode [ 108.675018][ T6414] bond_slave_1: entered promiscuous mode [ 108.696883][ T6414] gretap0: entered promiscuous mode [ 108.711696][ T6414] bond0: left promiscuous mode [ 108.724651][ T6414] bond_slave_0: left promiscuous mode [ 108.730586][ T6414] bond_slave_1: left promiscuous mode [ 108.743388][ T6414] gretap0: left promiscuous mode [ 108.790128][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.115'. [ 109.202810][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 109.249353][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 109.387463][ T6418] syz.1.117 (6418) used greatest stack depth: 17816 bytes left [ 109.405515][ T6420] syz.1.117 (6420) used greatest stack depth: 17592 bytes left [ 109.454206][ T6440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'. [ 109.480671][ T6442] netlink: 11 bytes leftover after parsing attributes in process `syz.4.122'. [ 109.557811][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 110.011258][ T6464] syzkaller0: entered promiscuous mode [ 110.020942][ T6464] syzkaller0: entered allmulticast mode [ 110.090549][ T6478] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 110.288680][ T6480] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.302708][ T6480] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 110.348344][ T6482] bond1: (slave gretap1): making interface the new active one [ 110.360427][ T6482] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 110.522236][ T6497] netlink: 'syz.0.134': attribute type 12 has an invalid length. [ 110.530426][ T6497] netlink: 'syz.0.134': attribute type 29 has an invalid length. [ 110.539724][ T6497] netlink: 148 bytes leftover after parsing attributes in process `syz.0.134'. [ 110.549101][ T6497] netlink: 43 bytes leftover after parsing attributes in process `syz.0.134'. [ 110.798366][ T6502] tipc: Enabling of bearer rejected, failed to enable media [ 110.811510][ T6505] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 110.821289][ T6505] netlink: 224 bytes leftover after parsing attributes in process `syz.3.137'. [ 110.961337][ T6509] syzkaller0: entered promiscuous mode [ 110.972035][ T6509] syzkaller0: entered allmulticast mode [ 111.241146][ T6366] tipc: Subscription rejected, illegal request [ 111.373525][ T6518] bond1: option ad_select: invalid value (34) [ 111.424070][ T6518] bond1 (unregistering): Released all slaves [ 111.482354][ T6526] x_tables: duplicate underflow at hook 1 [ 111.625879][ T6526] bond1: option miimon: invalid value (18446744073709551607) [ 111.633439][ T6526] bond1: option miimon: allowed values 0 - 2147483647 [ 111.653029][ T6526] bond1 (unregistering): Released all slaves [ 112.304565][ T6556] netlink: 'syz.3.150': attribute type 89 has an invalid length. [ 112.392276][ T6564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.487884][ T6567] netlink: 'syz.2.153': attribute type 8 has an invalid length. [ 112.559466][ T6571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.641376][ T6567] bond0: entered promiscuous mode [ 112.656193][ T6567] bond_slave_0: entered promiscuous mode [ 112.682484][ T6567] bond_slave_1: entered promiscuous mode [ 112.712857][ T6567] gretap0: entered promiscuous mode [ 112.753228][ T6567] bond0: left promiscuous mode [ 112.765431][ T6567] bond_slave_0: left promiscuous mode [ 112.792618][ T6567] bond_slave_1: left promiscuous mode [ 112.826417][ T6567] gretap0: left promiscuous mode [ 112.839888][ T6584] Bluetooth: MGMT ver 1.23 [ 112.941591][ T6573] veth0_virt_wifi: entered promiscuous mode [ 112.975464][ T6573] veth0_virt_wifi: entered allmulticast mode [ 113.539002][ T6617] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 113.603592][ T6618] netlink: 'syz.2.166': attribute type 3 has an invalid length. [ 113.697311][ T6622] netlink: 'syz.1.170': attribute type 3 has an invalid length. [ 113.728859][ T6620] syzkaller0: entered promiscuous mode [ 113.744303][ T6620] syzkaller0: entered allmulticast mode [ 114.115494][ T6634] ip6gre1: entered allmulticast mode [ 114.157115][ T6639] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 114.185680][ T6639] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 114.260620][ T6640] __nla_validate_parse: 10 callbacks suppressed [ 114.260642][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 114.375592][ T6650] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 114.413229][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 114.567144][ T6653] bond1 (unregistering): Released all slaves [ 114.715181][ T6655] veth1_macvtap: left promiscuous mode [ 114.807299][ T6655] veth1_macvtap: entered promiscuous mode [ 114.825475][ T6674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.928728][ T6671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.145621][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 115.148862][ T6686] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 115.199317][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'. [ 115.206189][ T6686] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 115.250141][ T6676] syzkaller0: entered promiscuous mode [ 115.255719][ T6676] syzkaller0: entered allmulticast mode [ 115.277339][ T6698] netlink: 96 bytes leftover after parsing attributes in process `syz.4.186'. [ 115.278035][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 115.318904][ T6698] vlan2: entered allmulticast mode [ 115.324313][ T6698] bond0: entered allmulticast mode [ 115.334457][ T6698] bond_slave_0: entered allmulticast mode [ 115.347420][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 115.352162][ T6698] bond_slave_1: entered allmulticast mode [ 115.358181][ T6699] validate_nla: 1 callbacks suppressed [ 115.358196][ T6699] netlink: 'syz.4.186': attribute type 39 has an invalid length. [ 115.417906][ T6689] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 115.455609][ T6682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.794762][ T6716] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.190'. [ 115.863809][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.190'. [ 115.877126][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.190'. [ 115.895888][ T6716] netlink: 'syz.3.190': attribute type 3 has an invalid length. [ 116.191201][ T6737] netlink: 'syz.1.195': attribute type 1 has an invalid length. [ 116.215877][ T6728] netlink: 'syz.2.187': attribute type 51 has an invalid length. [ 116.767179][ T6759] syzkaller0: entered promiscuous mode [ 116.785873][ T6759] syzkaller0: entered allmulticast mode [ 117.089395][ T6776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.854072][ T6805] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 118.027117][ T6816] netlink: 'syz.3.217': attribute type 8 has an invalid length. [ 118.067745][ T6816] bond0: entered promiscuous mode [ 118.090492][ T6816] gretap0: entered promiscuous mode [ 118.118821][ T6816] bond0: left promiscuous mode [ 118.128956][ T6816] gretap0: left promiscuous mode [ 118.161688][ T6818] netlink: 'syz.2.218': attribute type 3 has an invalid length. [ 118.893314][ T6851] m1Ie5n: entered promiscuous mode [ 118.926633][ T6845] tipc: Started in network mode [ 118.931581][ T6845] tipc: Node identity 3693bc9532d6, cluster identity 4711 [ 118.957852][ T6845] tipc: Enabled bearer , priority 0 [ 118.975918][ T6845] syzkaller0: entered promiscuous mode [ 118.986249][ T6845] syzkaller0: entered allmulticast mode [ 119.027867][ T6845] tipc: Resetting bearer [ 119.041849][ T6844] tipc: Resetting bearer [ 119.064817][ T6844] tipc: Disabling bearer [ 119.323426][ T6867] netlink: 'syz.4.231': attribute type 8 has an invalid length. [ 119.332001][ T6867] __nla_validate_parse: 13 callbacks suppressed [ 119.332019][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 119.379086][ T6867] bond0: entered promiscuous mode [ 119.384276][ T6867] bond_slave_0: entered promiscuous mode [ 119.467754][ T6867] bond_slave_1: entered promiscuous mode [ 119.476110][ T6867] gretap0: entered promiscuous mode [ 119.536920][ T6867] bond0: left promiscuous mode [ 119.542100][ T6867] bond_slave_0: left promiscuous mode [ 119.549683][ T6867] bond_slave_1: left promiscuous mode [ 119.598061][ T6867] gretap0: left promiscuous mode [ 119.906112][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 120.379605][ T6901] netlink: 'syz.4.242': attribute type 11 has an invalid length. [ 120.961387][ T6919] netlink: 'syz.2.245': attribute type 3 has an invalid length. [ 121.009860][ T6919] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 121.031532][ T6919] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.245'. [ 121.111314][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. [ 121.212324][ T6923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 121.360623][ T6926] vlan2: entered allmulticast mode [ 121.368158][ T6926] bond0: entered allmulticast mode [ 121.373414][ T6926] bond_slave_0: entered allmulticast mode [ 121.379764][ T6926] bond_slave_1: entered allmulticast mode [ 121.549413][ T6938] syzkaller0: entered promiscuous mode [ 121.556570][ T6938] syzkaller0: entered allmulticast mode [ 121.694545][ T6938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.250'. [ 122.093474][ T6956] netlink: 'syz.0.256': attribute type 8 has an invalid length. [ 122.111844][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 122.218529][ T6956] bond0: entered promiscuous mode [ 122.249102][ T6956] bond_slave_0: entered promiscuous mode [ 122.264762][ T6956] bond_slave_1: entered promiscuous mode [ 122.293899][ T6956] gretap0: entered promiscuous mode [ 122.320761][ T6956] bond0: left promiscuous mode [ 122.348116][ T6956] bond_slave_0: left promiscuous mode [ 122.362379][ T6956] bond_slave_1: left promiscuous mode [ 122.403044][ T6956] gretap0: left promiscuous mode [ 122.505461][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 122.514411][ T6966] netlink: 148 bytes leftover after parsing attributes in process `syz.1.259'. [ 122.527565][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 123.034476][ T6983] netlink: 'syz.2.265': attribute type 3 has an invalid length. [ 123.153639][ T6983] syz_tun: entered allmulticast mode [ 123.269329][ T6983] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.381988][ T6984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.408829][ T6983] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 123.488498][ T6998] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.531179][ T6998] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 123.681524][ T6982] syz_tun: left allmulticast mode [ 123.941764][ T7011] netlink: 'syz.2.272': attribute type 8 has an invalid length. [ 123.971245][ T5944] IPVS: starting estimator thread 0... [ 123.980143][ T7004] IPVS: fo: FWM 3 0x00000003 - no destination available [ 123.989443][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 124.085561][ T7017] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.094140][ T7011] bond0: entered promiscuous mode [ 124.109518][ T7011] bond_slave_0: entered promiscuous mode [ 124.135141][ T7011] bond_slave_1: entered promiscuous mode [ 124.178879][ T7011] gretap0: entered promiscuous mode [ 124.209888][ T7011] bond0: left promiscuous mode [ 124.214818][ T7011] bond_slave_0: left promiscuous mode [ 124.228540][ T7011] bond_slave_1: left promiscuous mode [ 124.236912][ T7011] gretap0: left promiscuous mode [ 124.390690][ T6828] Set syz1 is full, maxelem 65536 reached [ 124.475366][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 124.532312][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 124.548634][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 124.558048][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 125.113147][ T7049] netlink: 'syz.2.280': attribute type 11 has an invalid length. [ 125.122084][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 125.155859][ T7049] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 125.253359][ T7049] ip6gre1: entered promiscuous mode [ 125.346785][ T7059] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 125.452884][ T7059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.488205][ T7058] tipc: Started in network mode [ 125.493308][ T7058] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 125.513798][ T7058] tipc: Enabled bearer , priority 28 [ 125.715634][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 125.879690][ T7088] netlink: 180 bytes leftover after parsing attributes in process `syz.3.287'. [ 125.920375][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.287'. [ 125.958440][ T7088] netlink: 180 bytes leftover after parsing attributes in process `syz.3.287'. [ 126.009338][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.287'. [ 126.425097][ T7109] netlink: 'syz.1.293': attribute type 10 has an invalid length. [ 126.492400][ T7109] team0: Port device netdevsim0 added [ 126.507425][ T982] tipc: Node number set to 8432298 [ 126.816615][ T7118] syzkaller0: entered promiscuous mode [ 126.822327][ T7118] syzkaller0: entered allmulticast mode [ 128.562634][ T7168] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 128.646854][ T7176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.320601][ T7208] netlink: 'syz.0.317': attribute type 8 has an invalid length. [ 129.364265][ T7209] bond1: Removing last arp target with arp_interval on [ 129.405124][ T7213] netlink: 'syz.4.318': attribute type 8 has an invalid length. [ 129.470011][ T7208] bond0: entered promiscuous mode [ 129.475484][ T7208] bond_slave_0: entered promiscuous mode [ 129.481751][ T7208] bond_slave_1: entered promiscuous mode [ 129.489856][ T7208] gretap0: entered promiscuous mode [ 129.497479][ T7208] hsr1: entered promiscuous mode [ 129.520891][ T7213] bond0: entered promiscuous mode [ 129.526279][ T7213] bond_slave_0: entered promiscuous mode [ 129.529536][ T7216] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 129.532605][ T7213] bond_slave_1: entered promiscuous mode [ 129.540466][ T7216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.566838][ T7213] gretap0: entered promiscuous mode [ 129.577320][ T7213] debugfs: 'hsr1' already exists in 'hsr' [ 129.590227][ T7213] Cannot create hsr debugfs directory [ 129.605455][ T7213] hsr1: entered promiscuous mode [ 129.839746][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 129.914257][ T7241] syzkaller0: entered promiscuous mode [ 129.920756][ T7241] syzkaller0: entered allmulticast mode [ 130.286011][ T982] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 130.349394][ T7260] __nla_validate_parse: 82 callbacks suppressed [ 130.349415][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 130.407339][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 130.497990][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 130.512024][ T7268] netlink: 'syz.0.331': attribute type 29 has an invalid length. [ 130.522211][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 130.535745][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 130.544992][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 130.846690][ T7279] IPVS: Error connecting to the multicast addr [ 130.873440][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 130.912603][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.335'. [ 131.032199][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 131.135643][ T7293] bridge_slave_1: left allmulticast mode [ 131.141421][ T7293] bridge_slave_1: left promiscuous mode [ 131.158824][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.186519][ T7293] bridge_slave_0: left allmulticast mode [ 131.201494][ T7293] bridge_slave_0: left promiscuous mode [ 131.212033][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.230158][ T7308] netlink: 'syz.1.338': attribute type 2 has an invalid length. [ 131.422412][ T7308] : entered promiscuous mode [ 131.875014][ T7327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.078414][ T7327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.090149][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.344'. [ 132.142512][ T7337] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 132.409357][ T7327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.548326][ T7327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.667336][ T7360] netlink: 'syz.0.347': attribute type 13 has an invalid length. [ 132.807839][ T6368] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.898899][ T6368] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.931826][ T6368] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.976645][ T6368] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.018778][ T7370] sctp: [Deprecated]: syz.2.349 (pid 7370) Use of int in maxseg socket option. [ 133.018778][ T7370] Use struct sctp_assoc_value instead [ 133.041501][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.853141][ T7407] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 133.880385][ T7407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.968133][ T7410] syzkaller0: entered promiscuous mode [ 133.995600][ T7410] syzkaller0: entered allmulticast mode [ 134.925519][ T7443] geneve2: entered promiscuous mode [ 136.014349][ T7483] lo speed is unknown, defaulting to 1000 [ 136.034485][ T7483] lo speed is unknown, defaulting to 1000 [ 136.061822][ T7483] lo speed is unknown, defaulting to 1000 [ 136.143813][ T7492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.171998][ T7483] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.283070][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.291037][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.554251][ T7518] __nla_validate_parse: 10 callbacks suppressed [ 136.554274][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.378'. [ 136.638186][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.671962][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.864269][ T7483] lo speed is unknown, defaulting to 1000 [ 136.873982][ T7483] lo speed is unknown, defaulting to 1000 [ 136.901842][ T6370] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.929968][ T6370] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.965414][ T7483] lo speed is unknown, defaulting to 1000 [ 136.974341][ T6370] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.004279][ T7483] lo speed is unknown, defaulting to 1000 [ 137.037414][ T7483] lo speed is unknown, defaulting to 1000 [ 137.108314][ T7535] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 137.136652][ T7535] netlink: 224 bytes leftover after parsing attributes in process `syz.4.379'. [ 137.562133][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 137.772497][ T7492] team0: Port device netdevsim0 removed [ 137.970872][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'. [ 138.339020][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 138.400956][ T7596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.396'. [ 138.542543][ T7604] team0: Port device syz_tun added [ 138.592070][ T7611] tipc: Enabled bearer , priority 0 [ 138.626896][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'. [ 138.637458][ T7611] syzkaller0: entered promiscuous mode [ 138.643085][ T7611] syzkaller0: entered allmulticast mode [ 138.731909][ T7611] netlink: 'syz.0.400': attribute type 21 has an invalid length. [ 138.774777][ T7611] tipc: Resetting bearer [ 138.803172][ T7610] tipc: Resetting bearer [ 138.837069][ T7610] tipc: Disabling bearer [ 138.894980][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 139.046302][ T7635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.229058][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 139.261633][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'. [ 139.283478][ T7649] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 139.298882][ T7649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.518515][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 139.753568][ T7678] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 140.217195][ T7703] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 140.230638][ T7703] syzkaller1: linktype set to 778 [ 140.270727][ T7703] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.286697][ T7706] netlink: 'syz.3.426': attribute type 6 has an invalid length. [ 140.327900][ T7706] netlink: 'syz.3.426': attribute type 6 has an invalid length. [ 140.907038][ T7744] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 140.972326][ T7744] bond2: entered promiscuous mode [ 141.009321][ T7744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.067009][ T7753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.098827][ T7753] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 141.155446][ T7753] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 141.221290][ T7753] bond2: (slave wireguard0): making interface the new active one [ 141.245395][ T7753] wireguard0: entered promiscuous mode [ 141.260166][ T7753] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 141.554076][ T7765] syzkaller0: entered promiscuous mode [ 141.572522][ T7765] syzkaller0: entered allmulticast mode [ 141.919763][ T7783] __nla_validate_parse: 17 callbacks suppressed [ 141.919782][ T7783] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.449'. [ 142.106131][ T7801] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 143.781455][ T7814] vlan2: entered promiscuous mode [ 143.792843][ T7814] geneve1: entered promiscuous mode [ 143.801452][ T7814] vlan2: entered allmulticast mode [ 143.809351][ T7814] geneve1: entered allmulticast mode [ 143.951113][ T7827] sctp: [Deprecated]: syz.0.461 (pid 7827) Use of int in max_burst socket option. [ 143.951113][ T7827] Use struct sctp_assoc_value instead [ 143.961435][ T7829] netlink: 156 bytes leftover after parsing attributes in process `syz.2.463'. [ 144.008138][ T7830] netlink: 27 bytes leftover after parsing attributes in process `syz.4.462'. [ 144.332052][ T7850] netlink: 196 bytes leftover after parsing attributes in process `syz.4.467'. [ 144.406668][ T7852] syzkaller0: entered promiscuous mode [ 144.412400][ T7852] syzkaller0: entered allmulticast mode [ 144.461375][ T7852] tipc: Enabled bearer , priority 0 [ 144.522138][ T7851] tipc: Resetting bearer [ 144.522200][ T7855] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 144.580134][ T7851] tipc: Disabling bearer [ 144.773900][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 144.803748][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 144.835584][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 144.846252][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 144.877075][ T6366] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.885837][ T6366] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.897033][ T6366] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.935589][ T6366] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.001732][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 145.116789][ T7878] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 145.136679][ T7886] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 145.188125][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 145.316525][ T7886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.342667][ T7901] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 145.364253][ T7901] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 145.387706][ T7899] bond3: option fail_over_mac: invalid value (127) [ 145.396470][ T7899] bond3 (unregistering): Released all slaves [ 145.421464][ T7908] netlink: 'syz.2.481': attribute type 5 has an invalid length. [ 145.534052][ T7908] geneve2: entered promiscuous mode [ 145.554772][ T7908] geneve2: entered allmulticast mode [ 145.597123][ T6370] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 35197 - 0 [ 145.639075][ T6370] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 35197 - 0 [ 145.702549][ T6370] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 35197 - 0 [ 145.732052][ T6370] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 35197 - 0 [ 145.861070][ T7922] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 145.867721][ T7922] syzkaller1: Linktype set failed because interface is up [ 145.905634][ T7512] syzkaller1: tun_net_xmit 90 [ 145.964447][ T7942] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 146.084003][ T7944] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 146.147879][ T7944] bond3 (unregistering): Released all slaves [ 146.958984][ T7987] __nla_validate_parse: 8 callbacks suppressed [ 146.959004][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.505'. [ 146.976071][ T7990] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 146.994124][ T7990] bond3 (unregistering): Released all slaves [ 147.022536][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 147.058870][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 147.078873][ T7987] bond0: entered promiscuous mode [ 147.078962][ T7996] netlink: 3 bytes leftover after parsing attributes in process `syz.4.507'. [ 147.084111][ T7987] bond_slave_0: entered promiscuous mode [ 147.100094][ T7987] bond_slave_1: entered promiscuous mode [ 147.111878][ T7987] gretap0: entered promiscuous mode [ 147.118730][ T7987] debugfs: 'hsr1' already exists in 'hsr' [ 147.124619][ T7987] Cannot create hsr debugfs directory [ 147.131638][ T7987] hsr1: entered promiscuous mode [ 147.173408][ T7996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.211616][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 147.275177][ T8004] bond3: entered promiscuous mode [ 147.296179][ T8004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.323456][ T8008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.354830][ T8006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.367825][ T8004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.375704][ T8004] IPv6: NLM_F_CREATE should be set when creating new route [ 147.383230][ T8004] IPv6: NLM_F_CREATE should be set when creating new route [ 147.391192][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.406910][ T8006] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 147.420046][ T8006] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 147.707538][ T8024] netlink: 'syz.0.513': attribute type 3 has an invalid length. [ 147.725497][ T8024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.814587][ T8029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.840573][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 147.855413][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 147.871704][ T8033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.514'. [ 147.881295][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 147.966955][ T8035] pimreg: tun_chr_ioctl cmd 1074025677 [ 147.972860][ T8035] pimreg: linktype set to 780 [ 147.981931][ T8035] veth1: entered promiscuous mode [ 147.988350][ T8035] veth1: entered allmulticast mode [ 148.001509][ T8040] batadv_slave_0: entered promiscuous mode [ 148.007884][ T8041] batadv_slave_0: left promiscuous mode [ 148.017531][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 148.037596][ T8040] batadv_slave_0: entered promiscuous mode [ 148.156091][ T8039] batadv_slave_0: left promiscuous mode [ 148.323498][ T8048] lo speed is unknown, defaulting to 1000 [ 148.358042][ T8053] veth3: entered promiscuous mode [ 148.569069][ T8062] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 148.826933][ T8070] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 148.943845][ T8075] openvswitch: netlink: Flow actions attr not present in new flow. [ 148.968197][ T8075] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.409927][ T8096] vlan3: entered promiscuous mode [ 149.416370][ T8096] batadv0: entered promiscuous mode [ 149.855826][ T8119] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 149.893989][ T8110] syzkaller0: entered promiscuous mode [ 149.900075][ T8110] syzkaller0: entered allmulticast mode [ 149.909633][ T8110] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 150.180437][ T8129] block nbd2: NBD_DISCONNECT [ 150.222229][ T30] audit: type=1800 audit(1771415009.984:2): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.544" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=588 res=0 errno=0 [ 150.411769][ T8136] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 150.643639][ T8136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.687858][ T142] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 150.762981][ T8142] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.821382][ T8142] bond5: (slave batadv1): making interface the new active one [ 150.856797][ T8142] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 150.928813][ T8146] bond5 (unregistering): (slave batadv1): Releasing active interface [ 150.948817][ T8146] bond5 (unregistering): Released all slaves [ 151.010926][ T8163] syzkaller0: entered promiscuous mode [ 151.036222][ T8163] syzkaller0: entered allmulticast mode [ 151.098323][ T8163] vlan3: entered promiscuous mode [ 151.114838][ T8163] geneve1: entered promiscuous mode [ 151.121376][ T8163] vlan3: entered allmulticast mode [ 151.138234][ T8163] geneve1: entered allmulticast mode [ 151.474894][ T8180] netlink: 'syz.2.558': attribute type 29 has an invalid length. [ 151.727430][ T8192] netlink: 'syz.2.561': attribute type 3 has an invalid length. [ 151.801923][ T8197] nbd: couldn't find device at index 536870912 [ 151.844742][ T8197] IPVS: set_ctl: invalid protocol: 98 172.30.0.1:20003 [ 152.006858][ T8206] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 152.014562][ T8206] __nla_validate_parse: 11 callbacks suppressed [ 152.014579][ T8206] netlink: 248 bytes leftover after parsing attributes in process `syz.2.563'. [ 152.028587][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.565'. [ 152.133289][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.567'. [ 152.357023][ T8218] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 152.410267][ T8220] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 152.492416][ T8222] netlink: 'syz.0.569': attribute type 13 has an invalid length. [ 152.492416][ T8225] netlink: 'syz.0.569': attribute type 13 has an invalid length. [ 152.833514][ T8238] netlink: 364 bytes leftover after parsing attributes in process `syz.0.574'. [ 152.917964][ T8241] lo speed is unknown, defaulting to 1000 [ 152.923625][ T5834] Bluetooth: hci4: link tx timeout [ 152.930607][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.140734][ T8253] pim6reg1: entered promiscuous mode [ 153.143043][ T8255] netlink: 'syz.4.578': attribute type 58 has an invalid length. [ 153.146244][ T8253] pim6reg1: entered allmulticast mode [ 153.161092][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.578'. [ 153.166258][ T8248] netlink: 10 bytes leftover after parsing attributes in process `syz.0.576'. [ 153.450354][ T8268] lo speed is unknown, defaulting to 1000 [ 153.727368][ T8280] bond3: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 153.751513][ T8280] bond3: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 153.857330][ T8289] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 153.865558][ T8289] netlink: 224 bytes leftover after parsing attributes in process `syz.3.589'. [ 153.882370][ T8289] netlink: 244 bytes leftover after parsing attributes in process `syz.3.589'. [ 154.836543][ T8332] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 154.845371][ T8332] netlink: 224 bytes leftover after parsing attributes in process `syz.0.599'. [ 154.955349][ T5142] Bluetooth: hci4: command 0x0406 tx timeout [ 155.949189][ T8373] pimreg: tun_chr_ioctl cmd 1074025677 [ 155.961720][ T8373] pimreg: linktype set to 823 [ 156.033889][ T8375] lo speed is unknown, defaulting to 1000 [ 157.078522][ T8412] lo: Caught tx_queue_len zero misconfig [ 157.363327][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 157.403416][ T8424] netlink: 52 bytes leftover after parsing attributes in process `syz.4.627'. [ 157.644379][ T8445] veth5: entered promiscuous mode [ 157.884250][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'. [ 157.978212][ T8464] netlink: 'syz.1.639': attribute type 10 has an invalid length. [ 157.994958][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 158.000032][ T8464] team0: Port device dummy0 added [ 158.023602][ T8462] netlink: 48 bytes leftover after parsing attributes in process `syz.0.638'. [ 158.144515][ T8480] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 158.193378][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 158.233261][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 158.248114][ T8483] Bluetooth: MGMT ver 1.23 [ 158.302266][ T8480] geneve2: entered promiscuous mode [ 158.346858][ T8480] geneve2: entered allmulticast mode [ 158.553221][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 158.585421][ T8496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.803535][ T7533] IPVS: starting estimator thread 0... [ 158.900995][ T8514] IPVS: using max 27 ests per chain, 64800 per kthread [ 159.037326][ T8518] pim6reg: entered allmulticast mode [ 183.461544][ T8536] netlink: 'syz.0.652': attribute type 29 has an invalid length. [ 183.593230][ T8542] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 183.626669][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.657'. [ 183.675726][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.657'. [ 183.889385][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.658'. [ 184.096888][ T8560] netlink: 'syz.0.662': attribute type 3 has an invalid length. [ 184.110113][ T8561] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 184.119013][ T8560] syz_tun: entered allmulticast mode [ 184.125142][ T8561] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 184.134632][ T8558] syz_tun: left allmulticast mode [ 184.710422][ T8582] syzkaller0: entered promiscuous mode [ 184.737231][ T8582] syzkaller0: entered allmulticast mode [ 184.905773][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'. [ 184.914709][ T8589] netlink: 'syz.1.672': attribute type 7 has an invalid length. [ 184.965775][ T8589] netlink: 'syz.1.672': attribute type 8 has an invalid length. [ 184.983815][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 185.693932][ T8629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.701306][ T8629] IPv6: NLM_F_CREATE should be set when creating new route [ 185.708702][ T8629] IPv6: NLM_F_CREATE should be set when creating new route [ 185.730514][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 185.758480][ T8620] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 185.854808][ T8637] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 185.887190][ T8636] lo speed is unknown, defaulting to 1000 [ 186.008955][ T8637] netlink: 64 bytes leftover after parsing attributes in process `syz.4.685'. [ 186.484123][ T8663] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.568076][ T8665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.597009][ T8665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'. [ 186.627061][ T8673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.695'. [ 186.636825][ T8673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.695'. [ 186.968224][ T8691] syzkaller0: entered promiscuous mode [ 186.973911][ T8691] syzkaller0: entered allmulticast mode [ 187.025191][ T8691] macsec1: entered promiscuous mode [ 187.299039][ T8713] syzkaller0: entered promiscuous mode [ 187.306703][ T8713] syzkaller0: entered allmulticast mode [ 187.520797][ T8537] udevd[8537]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 187.554467][ T8537] udevd[8537]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 187.790194][ T8738] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 187.793892][ T8742] team_slave_0: entered promiscuous mode [ 187.803588][ T8742] team_slave_1: entered promiscuous mode [ 187.809349][ T8742] syz_tun: entered promiscuous mode [ 187.811765][ T8738] siw: device registration error -23 [ 187.846680][ T8742] vlan4: entered promiscuous mode [ 187.851895][ T8742] team0: entered promiscuous mode [ 187.862512][ T30] audit: type=1804 audit(1771415047.624:3): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.718" name="/newroot/138/cgroup.controllers" dev="tmpfs" ino=718 res=1 errno=0 [ 187.887986][ T30] audit: type=1800 audit(1771415047.624:4): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.718" name="cgroup.controllers" dev="tmpfs" ino=718 res=0 errno=0 [ 187.910682][ T8740] ip6tnl0: Caught tx_queue_len zero misconfig [ 187.942501][ T30] audit: type=1800 audit(1771415047.704:5): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.718" name="cgroup.controllers" dev="tmpfs" ino=718 res=0 errno=0 [ 188.058111][ T8749] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 188.083682][ T8749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.185036][ T8755] lo speed is unknown, defaulting to 1000 [ 188.247855][ T8759] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 188.328190][ T8759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.371372][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 188.381496][ T8762] bond4: (slave batadv2): making interface the new active one [ 188.391490][ T8762] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 188.436660][ T8759] bond4 (unregistering): (slave batadv2): Releasing active interface [ 188.452489][ T8759] bond4 (unregistering): Released all slaves [ 188.616656][ T8780] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 189.050101][ T8801] __nla_validate_parse: 8 callbacks suppressed [ 189.050119][ T8801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.736'. [ 189.083240][ T8801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.736'. [ 189.122856][ T8806] netlink: del zone limit has 4 unknown bytes [ 189.302364][ T8809] lo speed is unknown, defaulting to 1000 [ 189.306799][ T8819] IPVS: length: 132 != 8 [ 189.529982][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 189.602909][ T8830] gtp2: entered promiscuous mode [ 189.614112][ T8830] gtp2: entered allmulticast mode [ 189.695828][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 190.167505][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.752'. [ 190.890148][ T8868] netlink: 'syz.4.756': attribute type 9 has an invalid length. [ 190.927493][ T8868] netlink: 'syz.4.756': attribute type 11 has an invalid length. [ 190.950730][ T8868] netlink: 'syz.4.756': attribute type 12 has an invalid length. [ 190.995770][ T8868] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.756'. [ 191.034220][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 191.084744][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 191.341207][ T8881] lo speed is unknown, defaulting to 1000 [ 191.492167][ T8890] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 191.728838][ T8890] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 192.067515][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 192.151761][ T8906] bridge3: entered promiscuous mode [ 192.179349][ T8906] team0: Port device bridge3 added [ 192.195030][ T8909] bridge0: port 1(team0) entered blocking state [ 192.251486][ T8909] bridge0: port 1(team0) entered disabled state [ 192.270606][ T8924] block nbd4: not configured, cannot reconfigure [ 192.287973][ T8909] team0: entered allmulticast mode [ 192.296532][ T8909] team_slave_0: entered allmulticast mode [ 192.312800][ T8909] team_slave_1: entered allmulticast mode [ 192.374633][ T8932] netlink: 144 bytes leftover after parsing attributes in process `syz.3.770'. [ 192.383403][ T8909] syz_tun: entered allmulticast mode [ 192.403016][ T8909] bridge3: entered allmulticast mode [ 192.413200][ T8909] bridge0: port 1(team0) entered blocking state [ 192.419803][ T8909] bridge0: port 1(team0) entered forwarding state [ 192.670582][ T8939] bridge2: entered promiscuous mode [ 192.682621][ T8939] bridge2: entered allmulticast mode [ 192.696443][ T8939] team0: Port device bridge2 added [ 192.726796][ T8948] bridge0: port 3(team0) entered blocking state [ 192.747729][ T8948] bridge0: port 3(team0) entered disabled state [ 192.762851][ T8948] team0: entered allmulticast mode [ 192.769255][ T8948] team_slave_0: entered allmulticast mode [ 192.776012][ T8948] team_slave_1: entered allmulticast mode [ 192.802319][ T8948] team0: entered promiscuous mode [ 192.812490][ T8948] team_slave_0: entered promiscuous mode [ 192.842561][ T8948] team_slave_1: entered promiscuous mode [ 192.860064][ T8948] bridge0: port 3(team0) entered blocking state [ 192.866631][ T8948] bridge0: port 3(team0) entered forwarding state [ 193.424939][ T8991] blkio.reset_stats is deprecated [ 193.593524][ T8997] syzkaller1: entered promiscuous mode [ 193.605394][ T8997] syzkaller1: entered allmulticast mode [ 194.064988][ T9018] syzkaller0: entered promiscuous mode [ 194.079723][ T9018] syzkaller0: entered allmulticast mode [ 194.131707][ T9029] __nla_validate_parse: 18 callbacks suppressed [ 194.131727][ T9029] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.791'. [ 194.268135][ T9038] netlink: 'syz.1.792': attribute type 5 has an invalid length. [ 194.479785][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.554625][ T9038] ip6erspan0: entered promiscuous mode [ 195.592365][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 195.941909][ T9064] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.104546][ T9073] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 196.113185][ T9073] netlink: 224 bytes leftover after parsing attributes in process `syz.2.804'. [ 196.401458][ T9091] syzkaller0: entered promiscuous mode [ 196.432006][ T9091] syzkaller0: entered allmulticast mode [ 196.495138][ T9091] 8021q: VLANs not supported on ip6_vti0 [ 196.704653][ T9112] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 196.899599][ T9119] netlink: 'syz.1.819': attribute type 32 has an invalid length. [ 196.914895][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 196.982191][ T9119] bond4: option coupled_control: invalid value (86) [ 197.000987][ T9119] bond4 (unregistering): Released all slaves [ 197.449425][ T9142] lo speed is unknown, defaulting to 1000 [ 197.591446][ T9151] syzkaller0: entered promiscuous mode [ 197.628664][ T9151] syzkaller0: entered allmulticast mode [ 198.312259][ T9172] bond4: option packets_per_slave: invalid value (1048582) [ 198.338943][ T9172] bond4: option packets_per_slave: allowed values 0 - 65535 [ 198.350328][ T9172] bond4 (unregistering): Released all slaves [ 198.868638][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 199.037913][ T3503] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.061821][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'. [ 199.074889][ T3503] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.120016][ T3503] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.138096][ T3503] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.155631][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 199.198597][ T9212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.269277][ T9217] macsec1: entered promiscuous mode [ 199.281660][ T9217] bond4: entered promiscuous mode [ 199.308609][ T9217] macsec1: entered allmulticast mode [ 199.322768][ T9217] bond4: entered allmulticast mode [ 199.378645][ T9217] bond4: left allmulticast mode [ 199.383743][ T9217] bond4: left promiscuous mode [ 199.718216][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.852'. [ 199.918456][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 199.954588][ T9263] netlink: 6 bytes leftover after parsing attributes in process `syz.0.854'. [ 199.958030][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 199.964301][ T9263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.993539][ T9263] netlink: 112 bytes leftover after parsing attributes in process `syz.0.854'. [ 200.007478][ T9268] : entered promiscuous mode [ 200.594645][ T9293] netlink: 'syz.0.862': attribute type 16 has an invalid length. [ 200.616656][ T9293] netlink: 'syz.0.862': attribute type 17 has an invalid length. [ 200.729472][ T9293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.760384][ T9293] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.778037][ T9293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.804661][ T7512] lo speed is unknown, defaulting to 1000 [ 200.825034][ T7512] syz2: Port: 1 Link ACTIVE [ 201.382066][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 201.403706][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 201.423114][ T9334] openvswitch: netlink: Unknown nsh attribute 0 [ 201.430914][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 201.441655][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 201.562920][ T9340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.649479][ T9351] bond0: Device is already in use. [ 201.903036][ T9365] siw: device registration error -23 [ 201.998142][ T9372] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 202.046966][ T9377] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 203.002402][ T9404] tipc: Enabling of bearer rejected, failed to enable media [ 203.176205][ T9419] netlink: 'syz.0.893': attribute type 11 has an invalid length. [ 203.439254][ T9424] syzkaller0: entered promiscuous mode [ 203.465498][ T9424] syzkaller0: entered allmulticast mode [ 203.545745][ T9431] xt_CT: No such helper "snmp" [ 203.620214][ T9439] ip6erspan0: entered allmulticast mode [ 203.762635][ T9446] bridge4: port 1(ip6gretap1) entered blocking state [ 203.792010][ T9446] bridge4: port 1(ip6gretap1) entered disabled state [ 203.812683][ T9446] ip6gretap1: entered allmulticast mode [ 203.848659][ T9446] ip6gretap1: entered promiscuous mode [ 203.932252][ T9440] bridge4: port 2(veth5) entered blocking state [ 203.940696][ T9440] bridge4: port 2(veth5) entered disabled state [ 203.948065][ T9440] veth5: entered allmulticast mode [ 203.971663][ T9440] veth5: entered promiscuous mode [ 203.997302][ T9440] bridge4: port 2(veth5) entered blocking state [ 204.004150][ T9440] bridge4: port 2(veth5) entered forwarding state [ 204.095818][ T9468] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 204.114509][ T6374] bridge4: port 2(veth5) entered disabled state [ 204.213943][ T9468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.241871][ T9474] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 204.249635][ T9474] __nla_validate_parse: 7 callbacks suppressed [ 204.249654][ T9474] netlink: 96 bytes leftover after parsing attributes in process `syz.4.911'. [ 204.257305][ T9463] syzkaller0: entered promiscuous mode [ 204.272116][ T9463] syzkaller0: entered allmulticast mode [ 204.282542][ T9474] netlink: 1 bytes leftover after parsing attributes in process `syz.4.911'. [ 204.293400][ T9474] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 204.304568][ T9474] netlink: 'syz.4.911': attribute type 8 has an invalid length. [ 204.321023][ T9474] netlink: 606 bytes leftover after parsing attributes in process `syz.4.911'. [ 204.439433][ T9470] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.910'. [ 204.563226][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 204.703878][ T9500] netlink: 'syz.1.918': attribute type 11 has an invalid length. [ 204.711982][ T9500] netlink: 'syz.1.918': attribute type 23 has an invalid length. [ 204.716558][ T9496] lo speed is unknown, defaulting to 1000 [ 204.730879][ T9500] netlink: 224 bytes leftover after parsing attributes in process `syz.1.918'. [ 204.783105][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 205.411340][ T9521] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 205.462248][ T9524] netlink: 'syz.3.925': attribute type 1 has an invalid length. [ 206.023206][ T9556] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 206.195458][ T9561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 207.770879][ T9557] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 208.061325][ T9587] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 208.093370][ T9586] tipc: Enabled bearer , priority 0 [ 208.148794][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.942'. [ 208.192887][ T9586] syzkaller0: entered promiscuous mode [ 208.210945][ T9586] syzkaller0: entered allmulticast mode [ 208.211025][ T9596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'. [ 208.429136][ T9607] tipc: Resetting bearer [ 208.503940][ T9582] tipc: Resetting bearer [ 208.540883][ T9582] tipc: Disabling bearer [ 208.649867][ T9618] only policy match revision 0 supported [ 208.649891][ T9618] unable to load match [ 208.909074][ T9634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.916599][ T9634] IPv6: NLM_F_CREATE should be set when creating new route [ 208.923876][ T9634] IPv6: NLM_F_CREATE should be set when creating new route [ 208.931186][ T9634] IPv6: NLM_F_CREATE should be set when creating new route [ 208.943725][ T9638] Cannot find add_set index 2 as target [ 209.131313][ T9639] lo speed is unknown, defaulting to 1000 [ 209.403088][ T9650] lo speed is unknown, defaulting to 1000 [ 209.692602][ T9668] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 209.726288][ T9668] __nla_validate_parse: 8 callbacks suppressed [ 209.726307][ T9668] netlink: 332 bytes leftover after parsing attributes in process `syz.1.959'. [ 209.746658][ T9668] netlink: 'syz.1.959': attribute type 9 has an invalid length. [ 209.766911][ T9668] netlink: 108 bytes leftover after parsing attributes in process `syz.1.959'. [ 209.801728][ T9668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.959'. [ 209.975880][ T9675] xt_bpf: check failed: parse error [ 210.054357][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 210.075992][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 210.136339][ T9673] tipc: Started in network mode [ 210.141392][ T9673] tipc: Node identity 2289843a92cd, cluster identity 4711 [ 210.166397][ T9673] tipc: Enabled bearer , priority 0 [ 210.278568][ T9673] syzkaller0: entered promiscuous mode [ 210.284251][ T9673] syzkaller0: entered allmulticast mode [ 210.290786][ T9673] tipc: Resetting bearer [ 210.312719][ T9672] tipc: Resetting bearer [ 210.504408][ T9686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.965'. [ 211.409203][ T9692] netlink: 56 bytes leftover after parsing attributes in process `syz.0.966'. [ 211.657714][ T9672] tipc: Disabling bearer [ 211.671764][ T9685] netlink: 'syz.1.965': attribute type 30 has an invalid length. [ 211.683876][ T7512] tipc: Node number set to 2957280314 [ 211.847710][ T9696] batman_adv: batadv0: Adding interface: dummy0 [ 211.864318][ T9696] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.893913][ T9696] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 211.920230][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.926542][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 211.932576][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 211.938826][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.236819][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 212.247788][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 212.266031][ T8967] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.276903][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.974'. [ 212.296375][ T8967] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.304791][ T8967] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.345658][ T8967] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.231705][ T9756] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 213.744264][ T9772] lo speed is unknown, defaulting to 1000 [ 214.172755][ T9784] netlink: 'syz.3.992': attribute type 5 has an invalid length. [ 214.694623][ T9810] Cannot find add_set index 1 as target [ 214.798128][ T9804] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 214.813302][ T9804] __nla_validate_parse: 7 callbacks suppressed [ 214.813328][ T9804] netlink: 92 bytes leftover after parsing attributes in process `syz.4.997'. [ 215.373341][ T9839] pimreg: left allmulticast mode [ 215.527485][ T9845] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 216.158408][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 216.170450][ T9849] bond5: (slave batadv2): making interface the new active one [ 216.180954][ T9849] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 216.308340][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1015'. [ 216.321096][ T9866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1014'. [ 216.496399][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 216.558804][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 216.920265][ T9896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'. [ 217.166718][ T9903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1024'. [ 217.270673][ T9917] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.1024'. [ 217.305321][ T9917] openvswitch: netlink: Flow key attr not present in new flow. [ 217.498543][ T9928] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 217.523328][ T9930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1029'. [ 217.609305][ T9925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.700342][ T9933] syzkaller0: entered promiscuous mode [ 217.706159][ T9933] syzkaller0: entered allmulticast mode [ 218.529893][ T9962] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1038'. [ 219.408606][ T9954] ip6gre0: entered allmulticast mode [ 219.464793][ T9941] lo speed is unknown, defaulting to 1000 [ 219.568898][ T9976] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 219.587145][ T9978] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 219.618674][ T9976] : renamed from bond_slave_0 (while UP) [ 220.122970][T10003] tipc: Enabling of bearer rejected, failed to enable media [ 220.418651][T10021] __nla_validate_parse: 3 callbacks suppressed [ 220.418670][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 220.536824][T10028] tipc: Enabled bearer , priority 10 [ 220.543605][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.590409][T10036] netlink: 'syz.2.1056': attribute type 10 has an invalid length. [ 220.596832][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.628940][T10036] syz_tun: left allmulticast mode [ 220.639092][T10036] team0: Port device syz_tun removed [ 220.650515][T10036] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.664071][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.691131][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.700405][T10035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1055'. [ 220.760049][T10037] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 220.807753][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.825663][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.842964][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.873401][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.882443][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.906183][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.917097][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.940343][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.941358][T10047] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1057'. [ 220.988240][T10028] tipc: Enabling of bearer rejected, already enabled [ 220.998043][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.008117][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.026171][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.056062][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.076686][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.136202][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.159076][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.188630][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.198203][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.227911][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.267300][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.319621][T10028] tipc: Enabling of bearer rejected, already enabled [ 221.353800][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 221.609587][ T7526] IPVS: starting estimator thread 0... [ 221.618988][T10076] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 221.711259][ T7533] tipc: Node number set to 71679125 [ 221.717150][T10077] IPVS: using max 28 ests per chain, 67200 per kthread [ 221.739209][T10080] bond6: (slave gretap2): making interface the new active one [ 221.749197][T10080] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 221.810898][T10080] lo speed is unknown, defaulting to 1000 [ 221.975307][T10090] IPVS: length: 189 != 8 [ 222.080972][T10093] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1068'. [ 222.432435][T10109] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1073'. [ 222.706328][T10122] only policy match revision 0 supported [ 222.706351][T10122] unable to load match [ 222.745792][T10123] xt_TCPMSS: Only works on TCP SYN packets [ 222.920233][T10134] bridge0: entered promiscuous mode [ 223.179127][T10145] syzkaller1: entered promiscuous mode [ 223.184788][T10145] syzkaller1: entered allmulticast mode [ 223.340207][ T7526] IPVS: starting estimator thread 0... [ 223.431912][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 223.436351][T10151] IPVS: using max 27 ests per chain, 64800 per kthread [ 223.445385][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 223.470255][T10155] vlan4: entered allmulticast mode [ 223.988877][T10186] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.021260][T10188] siw: device registration error -23 [ 224.167684][T10191] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1100'. [ 224.177189][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 224.261765][ T7526] IPVS: starting estimator thread 0... [ 224.333469][T10193] lo speed is unknown, defaulting to 1000 [ 224.385366][T10201] IPVS: using max 30 ests per chain, 72000 per kthread [ 224.824425][T10225] lo speed is unknown, defaulting to 1000 [ 225.131785][T10235] lo speed is unknown, defaulting to 1000 [ 227.150748][T10197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.560729][T10274] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 227.585078][T10274] __nla_validate_parse: 4 callbacks suppressed [ 227.585099][T10274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1118'. [ 228.126251][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 228.212310][T10306] macvtap1: entered promiscuous mode [ 228.247692][T10306] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 228.261224][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 228.586530][T10327] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1124'. [ 228.615106][T10322] m1Ie5: entered promiscuous mode [ 228.680831][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 228.892937][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1131'. [ 228.985510][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 228.992511][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 229.148670][T10340] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1133'. [ 229.312332][T10358] netlink: 'syz.2.1137': attribute type 9 has an invalid length. [ 229.320448][T10358] netlink: 'syz.2.1137': attribute type 6 has an invalid length. [ 229.439972][T10362] netlink: 'syz.0.1140': attribute type 6 has an invalid length. [ 229.466652][T10360] tipc: Resetting bearer [ 229.590907][T10374] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 229.642079][T10374] netlink: 'syz.1.1144': attribute type 2 has an invalid length. [ 229.753511][T10377] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 229.833024][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 229.943854][T10388] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 229.952016][T10388] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 232.882480][T10384] lo speed is unknown, defaulting to 1000 [ 233.077304][T10397] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 233.110752][T10402] __nla_validate_parse: 2 callbacks suppressed [ 233.110773][T10402] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.1153'. [ 233.532455][T10415] lo speed is unknown, defaulting to 1000 [ 234.373689][T10429] lo speed is unknown, defaulting to 1000 [ 234.781725][T10446] bond5: option tlb_dynamic_lb: invalid value (5) [ 234.790648][T10446] bond5 (unregistering): Released all slaves [ 234.873759][T10441] lo speed is unknown, defaulting to 1000 [ 235.160914][T10468] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 235.175368][T10468] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1167'. [ 235.205436][T10468] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1167'. [ 235.221230][T10468] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1167'. [ 235.359341][T10476] tipc: Enabled bearer , priority 0 [ 235.513726][T10468] syzkaller0: entered promiscuous mode [ 235.532035][T10468] syzkaller0: entered allmulticast mode [ 235.545805][T10468] tipc: Resetting bearer [ 235.611058][T10467] tipc: Resetting bearer [ 237.429787][T10467] tipc: Disabling bearer [ 237.554579][T10520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.567684][ T7512] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 237.588873][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 237.589817][T10520] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.602023][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 237.645447][T10520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.783546][T10532] syzkaller1: entered allmulticast mode [ 237.843940][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 237.876386][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 237.888972][T10548] netlink: 'syz.1.1186': attribute type 14 has an invalid length. [ 237.905062][T10548] netlink: 'syz.1.1186': attribute type 13 has an invalid length. [ 237.928108][T10541] lo speed is unknown, defaulting to 1000 [ 238.164556][T10557] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.458265][T10589] siw: device registration error -23 [ 238.551837][T10587] syzkaller0: entered promiscuous mode [ 238.559086][ T7533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.567511][T10587] syzkaller0: entered allmulticast mode [ 238.618286][T10587] tipc: Enabled bearer , priority 0 [ 238.647757][T10587] tipc: Resetting bearer [ 238.676326][T10586] tipc: Resetting bearer [ 238.692688][T10586] tipc: Disabling bearer [ 238.865804][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'. [ 239.024197][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 239.126397][T10613] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 239.181020][T10615] netlink: 'syz.2.1201': attribute type 10 has an invalid length. [ 239.195795][T10615] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1201'. [ 239.220848][T10551] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 239.238337][T10551] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 239.388289][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 239.399750][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 239.440867][T10626] geneve3: entered promiscuous mode [ 239.455860][T10626] geneve3: entered allmulticast mode [ 239.510105][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1206'. [ 239.557085][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1206'. [ 239.612202][T10639] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 239.734534][T10639] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 239.789943][T10644] netlink: 'syz.2.1210': attribute type 6 has an invalid length. [ 239.798098][T10644] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.929601][T10646] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 239.996189][ T7533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.002368][T10646] bond6: entered promiscuous mode [ 240.011131][T10646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.011200][T10616] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 240.102322][T10657] bond6: (slave bridge6): making interface the new active one [ 240.130267][T10657] bridge6: entered promiscuous mode [ 240.161088][T10657] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 240.180304][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 240.200031][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 240.273200][T10663] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1216'. [ 240.509656][T10680] netlink: 'syz.3.1221': attribute type 61 has an invalid length. [ 240.529957][T10680] netlink: 'syz.3.1221': attribute type 62 has an invalid length. [ 240.910854][T10693] netlink: 'syz.2.1225': attribute type 83 has an invalid length. [ 241.093037][T10719] nbd1: detected capacity change from 0 to 63 [ 241.101075][T10721] block nbd1: NBD_DISCONNECT [ 241.112039][T10715] lo speed is unknown, defaulting to 1000 [ 241.116149][T10721] block nbd1: Disconnected due to user request. [ 241.134777][T10721] block nbd1: shutting down sockets [ 241.147957][ T8714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.250496][ T8714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.275453][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 241.312766][ T1716] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 241.324043][ T1716] Buffer I/O error on dev nbd1, logical block 1, async page read [ 241.333873][ T1716] Buffer I/O error on dev nbd1, logical block 2, async page read [ 241.342500][ T1716] Buffer I/O error on dev nbd1, logical block 3, async page read [ 241.345682][T10729] can: request_module (can-proto-3) failed. [ 241.352409][ T8714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.369765][ T8714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.378442][ T8714] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.388530][ T8714] Buffer I/O error on dev nbd1, logical block 1, async page read [ 241.396406][ T8714] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.406147][ T8714] Buffer I/O error on dev nbd1, logical block 2, async page read [ 241.413968][ T8714] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.424064][ T8714] Buffer I/O error on dev nbd1, logical block 3, async page read [ 241.433055][ T8714] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.444030][ T8714] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.452626][ T8714] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.463115][ T8714] Buffer I/O error on dev nbd1, logical block 1, async page read [ 241.471756][ T8714] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.482033][ T8714] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 241.523829][ T8714] ldm_validate_partition_table(): Disk read failed. [ 241.540553][ T8714] Dev nbd1: unable to read RDB block 0 [ 241.563619][ T8714] nbd1: unable to read partition table [ 241.620493][ T8714] ldm_validate_partition_table(): Disk read failed. [ 241.646050][ T8714] Dev nbd1: unable to read RDB block 0 [ 241.652424][ T8714] nbd1: unable to read partition table [ 241.866291][T10749] lo speed is unknown, defaulting to 1000 [ 242.736434][T10770] syzkaller0: entered promiscuous mode [ 242.741979][T10770] syzkaller0: entered allmulticast mode [ 243.048481][T10788] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 243.195519][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.203907][ C0] ================================================================== [ 243.212092][ C0] BUG: KASAN: slab-use-after-free in ax25_heartbeat_expiry+0x115/0x140 [ 243.220554][ C0] Read of size 4 at addr ffff88807c420260 by task syz-executor/5822 [ 243.228669][ C0] [ 243.231022][ C0] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 243.231045][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.231052][ C0] Call Trace: [ 243.231057][ C0] [ 243.231062][ C0] dump_stack_lvl+0xe8/0x150 [ 243.231080][ C0] print_report+0xba/0x230 [ 243.231093][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 243.231107][ C0] kasan_report+0x117/0x150 [ 243.231125][ C0] ? call_timer_fn+0xd4/0x5a0 [ 243.231145][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 243.231171][ C0] ax25_heartbeat_expiry+0x115/0x140 [ 243.231195][ C0] call_timer_fn+0x192/0x5a0 [ 243.231214][ C0] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 243.231235][ C0] ? call_timer_fn+0xd4/0x5a0 [ 243.231247][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 243.231260][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.231272][ C0] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 243.231287][ C0] __run_timer_base+0x652/0x8b0 [ 243.231297][ C0] ? ktime_get+0x45/0x200 [ 243.231313][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 243.231324][ C0] ? sched_clock_cpu+0x74/0x440 [ 243.231337][ C0] run_timer_softirq+0xb7/0x170 [ 243.231348][ C0] handle_softirqs+0x22a/0x7c0 [ 243.231360][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 243.231373][ C0] __irq_exit_rcu+0x5f/0x150 [ 243.231384][ C0] irq_exit_rcu+0x9/0x30 [ 243.231394][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 243.231408][ C0] [ 243.231411][ C0] [ 243.231416][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.231427][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x9d/0xc0 [ 243.231441][ C0] Code: 80 ff 48 83 c4 08 48 89 df 4c 89 f6 e8 6c 87 80 ff e8 c7 0f ac ff 9c 58 a9 00 02 00 00 75 15 41 f7 c7 00 02 00 00 74 01 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc e8 24 3e 7e 09 41 f7 c7 00 02 00 00 [ 243.231450][ C0] RSP: 0018:ffffc9000420efc0 EFLAGS: 00000206 [ 243.231462][ C0] RAX: 0000000000000002 RBX: ffff88813fffbb80 RCX: 0000000000000046 [ 243.231470][ C0] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 243.231477][ C0] RBP: ffffea0000472780 R08: ffffffff90109077 R09: 1ffffffff202120e [ 243.231484][ C0] R10: dffffc0000000000 R11: fffffbfff202120f R12: 1ffff11027fff78a [ 243.231491][ C0] R13: ffff88813fffbc20 R14: ffffffff821ffd3b R15: 0000000000000a06 [ 243.231499][ C0] ? bad_range+0x8b/0x2c0 [ 243.231514][ C0] bad_range+0x8b/0x2c0 [ 243.231526][ C0] get_page_from_freelist+0x24bb/0x2580 [ 243.231544][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 243.231563][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 243.231578][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 243.231594][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.231609][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 243.231623][ C0] ? kasan_save_track+0x4f/0x80 [ 243.231635][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 243.231653][ C0] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 243.231675][ C0] ? __get_vm_area_node+0x13f/0x300 [ 243.231694][ C0] ? __vmalloc_node_range_noprof+0x372/0x1730 [ 243.231717][ C0] alloc_pages_bulk_noprof+0x558/0x700 [ 243.231745][ C0] ? alloc_pages_noprof+0xbd/0x190 [ 243.231764][ C0] __kasan_populate_vmalloc+0xc1/0x1d0 [ 243.231777][ C0] alloc_vmap_area+0xdbc/0x14a0 [ 243.231794][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 243.231805][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 243.231818][ C0] ? __get_vm_area_node+0x13f/0x300 [ 243.231829][ C0] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 243.231842][ C0] ? alloc_counters+0x64/0x5d0 [ 243.231852][ C0] __get_vm_area_node+0x1f8/0x300 [ 243.231865][ C0] __vmalloc_node_range_noprof+0x372/0x1730 [ 243.231878][ C0] ? alloc_counters+0x64/0x5d0 [ 243.231889][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.231904][ C0] ? rcu_is_watching+0x15/0xb0 [ 243.231916][ C0] ? trace_contention_end+0x39/0x100 [ 243.231932][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.231963][ C0] ? xt_find_table_lock+0x54/0x3e0 [ 243.231978][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 243.231992][ C0] ? net_generic+0x1e/0x240 [ 243.232005][ C0] ? alloc_counters+0x64/0x5d0 [ 243.232014][ C0] vzalloc_noprof+0xb2/0xe0 [ 243.232027][ C0] ? alloc_counters+0x64/0x5d0 [ 243.232047][ C0] alloc_counters+0x64/0x5d0 [ 243.232059][ C0] ? xt_find_table_lock+0x35e/0x3e0 [ 243.232073][ C0] do_ipt_get_ctl+0xada/0x1240 [ 243.232085][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 243.232094][ C0] ? do_ip_getsockopt+0x131d/0x1d40 [ 243.232110][ C0] ? __mutex_trylock_common+0x158/0x260 [ 243.232124][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.232138][ C0] ? rcu_is_watching+0x15/0xb0 [ 243.232150][ C0] ? trace_contention_end+0x39/0x100 [ 243.232165][ C0] ? nf_getsockopt+0x224/0x290 [ 243.232179][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 243.232193][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 243.232206][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.232221][ C0] ? __might_fault+0xaf/0x130 [ 243.232236][ C0] nf_getsockopt+0x26e/0x290 [ 243.232261][ C0] ip_getsockopt+0x19e/0x230 [ 243.232286][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 243.232311][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 243.232329][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 243.232348][ C0] do_sock_getsockopt+0x2d3/0x3f0 [ 243.232367][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 243.232380][ C0] ? fd_install+0x94/0x3d0 [ 243.232392][ C0] __x64_sys_getsockopt+0x1a4/0x240 [ 243.232406][ C0] do_syscall_64+0x14d/0xf80 [ 243.232419][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.232429][ C0] ? trace_irq_disable+0x37/0x100 [ 243.232441][ C0] ? clear_bhb_loop+0x40/0x90 [ 243.232453][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.232463][ C0] RIP: 0033:0x7fd97059de2a [ 243.232474][ C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 18 9a fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 243.232483][ C0] RSP: 002b:00007ffc665647a8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 243.232494][ C0] RAX: ffffffffffffffda RBX: 00007ffc66564830 RCX: 00007fd97059de2a [ 243.232501][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 243.232507][ C0] RBP: 0000000000000003 R08: 00007ffc665647cc R09: 0000000000000000 [ 243.232514][ C0] R10: 00007ffc66564830 R11: 0000000000000216 R12: 00007fd9707eaac0 [ 243.232521][ C0] R13: 00007ffc665647cc R14: 0000000000000000 R15: 00007fd9707eb180 [ 243.232532][ C0] [ 243.232536][ C0] [ 243.870930][ C0] Allocated by task 6292: [ 243.875260][ C0] kasan_save_track+0x3e/0x80 [ 243.880049][ C0] __kasan_kmalloc+0x93/0xb0 [ 243.884649][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 243.890063][ C0] ax25_dev_device_up+0x54/0x5f0 [ 243.895008][ C0] ax25_device_event+0x127/0x8a0 [ 243.900140][ C0] notifier_call_chain+0x19d/0x3a0 [ 243.905269][ C0] __dev_notify_flags+0x1a9/0x310 [ 243.910317][ C0] netif_change_flags+0xe8/0x1a0 [ 243.915346][ C0] dev_change_flags+0x130/0x260 [ 243.920285][ C0] dev_ioctl+0x7b4/0x1150 [ 243.924702][ C0] sock_do_ioctl+0x23e/0x320 [ 243.929293][ C0] sock_ioctl+0x5c6/0x7f0 [ 243.933630][ C0] __se_sys_ioctl+0xfc/0x170 [ 243.938393][ C0] do_syscall_64+0x14d/0xf80 [ 243.943071][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.949407][ C0] [ 243.951729][ C0] Freed by task 8714: [ 243.955704][ C0] kasan_save_track+0x3e/0x80 [ 243.960388][ C0] kasan_save_free_info+0x46/0x50 [ 243.965497][ C0] __kasan_slab_free+0x5c/0x80 [ 243.970267][ C0] __rcu_free_sheaf_prepare+0x129/0x290 [ 243.975817][ C0] rcu_free_sheaf+0x31/0x200 [ 243.980846][ C0] rcu_core+0x7cd/0x1070 [ 243.985086][ C0] handle_softirqs+0x22a/0x7c0 [ 243.989846][ C0] __irq_exit_rcu+0x5f/0x150 [ 243.994521][ C0] irq_exit_rcu+0x9/0x30 [ 243.998763][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 244.004398][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.010469][ C0] [ 244.012811][ C0] The buggy address belongs to the object at ffff88807c420200 [ 244.012811][ C0] which belongs to the cache kmalloc-256 of size 256 [ 244.026872][ C0] The buggy address is located 96 bytes inside of [ 244.026872][ C0] freed 256-byte region [ffff88807c420200, ffff88807c420300) [ 244.040946][ C0] [ 244.043292][ C0] The buggy address belongs to the physical page: [ 244.049893][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c420 [ 244.058837][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 244.067339][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 244.075144][ C0] page_type: f5(slab) [ 244.079156][ C0] raw: 00fff00000000040 ffff88813fe9ab40 dead000000000100 dead000000000122 [ 244.087828][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 244.096416][ C0] head: 00fff00000000040 ffff88813fe9ab40 dead000000000100 dead000000000122 [ 244.105173][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 244.113847][ C0] head: 00fff00000000001 ffffea0001f10801 00000000ffffffff 00000000ffffffff [ 244.122525][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 244.131204][ C0] page dumped because: kasan: bad access detected [ 244.137637][ C0] page_owner tracks the page as allocated [ 244.143528][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 91895029504, free_ts 91891164871 [ 244.164985][ C0] post_alloc_hook+0x228/0x280 [ 244.169858][ C0] get_page_from_freelist+0x24dc/0x2580 [ 244.175413][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 244.181328][ C0] allocate_slab+0x77/0x660 [ 244.185827][ C0] refill_objects+0x331/0x3c0 [ 244.190597][ C0] __pcs_replace_empty_main+0x2b9/0x620 [ 244.196158][ C0] __kmalloc_noprof+0x474/0x760 [ 244.201118][ C0] fib_create_info+0x171d/0x31f0 [ 244.206239][ C0] fib_table_insert+0xc8/0x1b50 [ 244.211109][ C0] fib_magic+0x434/0x510 [ 244.215352][ C0] fib_add_ifaddr+0x144/0x5f0 [ 244.220036][ C0] fib_inetaddr_event+0x12e/0x190 [ 244.225145][ C0] notifier_call_chain+0x19d/0x3a0 [ 244.230344][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 244.236066][ C0] __inet_insert_ifa+0x9e9/0xbc0 [ 244.241095][ C0] inet_rtm_newaddr+0x10d8/0x1ad0 [ 244.246116][ C0] page last free pid 5926 tgid 5926 stack trace: [ 244.252441][ C0] __free_frozen_pages+0xbf8/0xd70 [ 244.257559][ C0] __mmdrop+0xb5/0x750 [ 244.261631][ C0] exit_mm+0x168/0x220 [ 244.265786][ C0] do_exit+0x62e/0x2310 [ 244.270247][ C0] do_group_exit+0x21b/0x2d0 [ 244.274861][ C0] __x64_sys_exit_group+0x3f/0x40 [ 244.279888][ C0] x64_sys_call+0x221a/0x2240 [ 244.284654][ C0] do_syscall_64+0x14d/0xf80 [ 244.289331][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.295226][ C0] [ 244.297557][ C0] Memory state around the buggy address: [ 244.303356][ C0] ffff88807c420100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.311499][ C0] ffff88807c420180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.319659][ C0] >ffff88807c420200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.327727][ C0] ^ [ 244.335089][ C0] ffff88807c420280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.343269][ C0] ffff88807c420300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.351346][ C0] ================================================================== [ 244.359669][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.367162][ C0] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 244.376649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.386733][ C0] Call Trace: [ 244.390037][ C0] [ 244.392908][ C0] vpanic+0x1e0/0x670 [ 244.396932][ C0] panic+0xc5/0xd0 [ 244.400679][ C0] ? __pfx_panic+0x10/0x10 [ 244.405133][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 244.410611][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 244.416163][ C0] check_panic_on_warn+0x89/0xb0 [ 244.421210][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 244.426674][ C0] end_report+0x6f/0x140 [ 244.430918][ C0] kasan_report+0x128/0x150 [ 244.435429][ C0] ? call_timer_fn+0xd4/0x5a0 [ 244.440193][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 244.445655][ C0] ax25_heartbeat_expiry+0x115/0x140 [ 244.450944][ C0] call_timer_fn+0x192/0x5a0 [ 244.455633][ C0] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 244.461444][ C0] ? call_timer_fn+0xd4/0x5a0 [ 244.466120][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 244.471338][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.476563][ C0] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 244.482505][ C0] __run_timer_base+0x652/0x8b0 [ 244.487447][ C0] ? ktime_get+0x45/0x200 [ 244.491788][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 244.497231][ C0] ? sched_clock_cpu+0x74/0x440 [ 244.502087][ C0] run_timer_softirq+0xb7/0x170 [ 244.506936][ C0] handle_softirqs+0x22a/0x7c0 [ 244.511703][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 244.516479][ C0] __irq_exit_rcu+0x5f/0x150 [ 244.521095][ C0] irq_exit_rcu+0x9/0x30 [ 244.525352][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 244.531001][ C0] [ 244.534110][ C0] [ 244.537059][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.543046][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x9d/0xc0 [ 244.549772][ C0] Code: 80 ff 48 83 c4 08 48 89 df 4c 89 f6 e8 6c 87 80 ff e8 c7 0f ac ff 9c 58 a9 00 02 00 00 75 15 41 f7 c7 00 02 00 00 74 01 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc e8 24 3e 7e 09 41 f7 c7 00 02 00 00 [ 244.569401][ C0] RSP: 0018:ffffc9000420efc0 EFLAGS: 00000206 [ 244.575563][ C0] RAX: 0000000000000002 RBX: ffff88813fffbb80 RCX: 0000000000000046 [ 244.583710][ C0] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 244.591767][ C0] RBP: ffffea0000472780 R08: ffffffff90109077 R09: 1ffffffff202120e [ 244.599832][ C0] R10: dffffc0000000000 R11: fffffbfff202120f R12: 1ffff11027fff78a [ 244.607983][ C0] R13: ffff88813fffbc20 R14: ffffffff821ffd3b R15: 0000000000000a06 [ 244.616306][ C0] ? bad_range+0x8b/0x2c0 [ 244.620759][ C0] bad_range+0x8b/0x2c0 [ 244.625007][ C0] get_page_from_freelist+0x24bb/0x2580 [ 244.630565][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 244.635711][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 244.641098][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 244.647022][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 244.653567][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 244.658895][ C0] ? kasan_save_track+0x4f/0x80 [ 244.663762][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 244.668704][ C0] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 244.674770][ C0] ? __get_vm_area_node+0x13f/0x300 [ 244.679970][ C0] ? __vmalloc_node_range_noprof+0x372/0x1730 [ 244.686333][ C0] alloc_pages_bulk_noprof+0x558/0x700 [ 244.691831][ C0] ? alloc_pages_noprof+0xbd/0x190 [ 244.696980][ C0] __kasan_populate_vmalloc+0xc1/0x1d0 [ 244.702531][ C0] alloc_vmap_area+0xdbc/0x14a0 [ 244.707420][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 244.712704][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 244.717486][ C0] ? __get_vm_area_node+0x13f/0x300 [ 244.722945][ C0] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 244.728935][ C0] ? alloc_counters+0x64/0x5d0 [ 244.733963][ C0] __get_vm_area_node+0x1f8/0x300 [ 244.738999][ C0] __vmalloc_node_range_noprof+0x372/0x1730 [ 244.744900][ C0] ? alloc_counters+0x64/0x5d0 [ 244.749689][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 244.755583][ C0] ? rcu_is_watching+0x15/0xb0 [ 244.760350][ C0] ? trace_contention_end+0x39/0x100 [ 244.765816][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 244.772145][ C0] ? xt_find_table_lock+0x54/0x3e0 [ 244.777259][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 244.782288][ C0] ? net_generic+0x1e/0x240 [ 244.786797][ C0] ? alloc_counters+0x64/0x5d0 [ 244.791571][ C0] vzalloc_noprof+0xb2/0xe0 [ 244.796242][ C0] ? alloc_counters+0x64/0x5d0 [ 244.801112][ C0] alloc_counters+0x64/0x5d0 [ 244.805718][ C0] ? xt_find_table_lock+0x35e/0x3e0 [ 244.810946][ C0] do_ipt_get_ctl+0xada/0x1240 [ 244.815815][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 244.821021][ C0] ? do_ip_getsockopt+0x131d/0x1d40 [ 244.826322][ C0] ? __mutex_trylock_common+0x158/0x260 [ 244.832215][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 244.838352][ C0] ? rcu_is_watching+0x15/0xb0 [ 244.843143][ C0] ? trace_contention_end+0x39/0x100 [ 244.848441][ C0] ? nf_getsockopt+0x224/0x290 [ 244.853212][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 244.858864][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 244.864065][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.870223][ C0] ? __might_fault+0xaf/0x130 [ 244.874911][ C0] nf_getsockopt+0x26e/0x290 [ 244.879527][ C0] ip_getsockopt+0x19e/0x230 [ 244.884215][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 244.889419][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 244.894876][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 244.900855][ C0] do_sock_getsockopt+0x2d3/0x3f0 [ 244.905906][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 244.911756][ C0] ? fd_install+0x94/0x3d0 [ 244.916203][ C0] __x64_sys_getsockopt+0x1a4/0x240 [ 244.921651][ C0] do_syscall_64+0x14d/0xf80 [ 244.926285][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.932371][ C0] ? trace_irq_disable+0x37/0x100 [ 244.937400][ C0] ? clear_bhb_loop+0x40/0x90 [ 244.942079][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.948067][ C0] RIP: 0033:0x7fd97059de2a [ 244.952488][ C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 18 9a fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 244.972198][ C0] RSP: 002b:00007ffc665647a8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 244.980714][ C0] RAX: ffffffffffffffda RBX: 00007ffc66564830 RCX: 00007fd97059de2a [ 244.988972][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 244.996963][ C0] RBP: 0000000000000003 R08: 00007ffc665647cc R09: 0000000000000000 [ 245.005110][ C0] R10: 00007ffc66564830 R11: 0000000000000216 R12: 00007fd9707eaac0 [ 245.013081][ C0] R13: 00007ffc665647cc R14: 0000000000000000 R15: 00007fd9707eb180 [ 245.021067][ C0] [ 245.024548][ C0] Kernel Offset: disabled [ 245.028867][ C0] Rebooting in 86400 seconds..