last executing test programs: 5m34.080312916s ago: executing program 3 (id=439): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'nicvf0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x0, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 5m30.937488944s ago: executing program 1 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001580)="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", 0x0, 0x20000700, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x5}, 0x1d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x16, &(0x7f0000000140)={@multicast, @link_local, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, "fc", "278543", 0x16}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 5m29.55634223s ago: executing program 1 (id=459): socket(0x1d, 0x2, 0x6) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000040)="f6f4e9a100ddb7dbfc007024f8082d130827533e00"/34, 0x0, 0x3, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) connect$inet(r3, &(0x7f0000000100)={0x2, 0x200, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) 5m28.62557158s ago: executing program 1 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 5m27.31337765s ago: executing program 3 (id=465): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x34}}, 0x4084) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_BETA={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast1}, 0x0, 0x0, 0x4, 0x1}}, 0x26) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x100101) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0xfffffffffffffd38, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x28242, 0x880}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x4000840) 5m27.167630635s ago: executing program 1 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80400) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x100, 0x800, 0x2, 0x4, 0x349, 0x2, 0x7, 0x6, r4}, &(0x7f0000000040)=0x20) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2d, 'rlimit'}, {0x2b, 'perf_event'}, {0x2b, 'devices'}, {0x6, 'rdma'}, {0x2d, 'io'}, {0x77, 'pids'}, {0x2d, 'perf_event'}, {0x2b, 'perf_event'}, {0x2d, 'net_cls'}, {0x2b, 'devices'}]}, 0x57) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 5m26.798045403s ago: executing program 3 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r1], 0x48}}, 0x0) 5m26.564026415s ago: executing program 3 (id=472): socket(0x1d, 0x2, 0x6) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000040)="f6f4e9a100ddb7dbfc007024f8082d130827533e00"/34, 0x0, 0x3, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) connect$inet(r3, &(0x7f0000000100)={0x2, 0x200, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) 5m26.271019591s ago: executing program 3 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d0200000000000000000000000000000000000000000000000000040186009078000000000040000000000000efdfdb35de000627b633546d95ac794231a066217568b30f27ffd28b8115e62aa592eeb841eaa31ca91e3df8f18db9bea0d47621ffd78ddd12abc4382c17917ad07f9c76"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e00000000000002000000de680007000000000c000c4000000000000001ff459ab6867bde03ad6428da3f3a227eb7ad571a42c3d3538e10ca5c7f"], 0x28}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1a0000000000000004000000020000000f020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="01000000010100008000"], 0x50) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r5) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="cf000700", @ANYRES16=r6, @ANYBLOB="010325bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r9}, 0x20) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=@newtaction={0xc0, 0x76, 0x20, 0x70bd29, 0x25dfdbfc, {}, [{0xac, 0x1, [@m_ct={0xa8, 0x1, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0xa684c3fa23e5894c}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d27e7a84ce3fe9cfe86f3b33436e57f0"}, @TCA_CT_PARMS={0x18, 0x1, {0x1ff, 0x0, 0x6, 0xf, 0x7fff}}, @TCA_CT_ZONE={0x6, 0x4, 0x7}]}, {0x15, 0x6, "04243938542cc6b15aae036ac07b83f6ed"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1001, r11}, 0x38) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) 5m26.172605472s ago: executing program 1 (id=476): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e80100000000001c001280090001006d616373676300000c0002800500030002000000"], 0x3c}}, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x2, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="0000f3ffffff", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @private=0xa010102}}}], 0x20}, 0x24008004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r5, @in={{0x2, 0x4e22, @loopback}}}, 0x84) (async) unshare(0x400) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB]}, 0x78) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x48000) (async) r9 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async, rerun: 32) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0xfdff) (async, rerun: 32) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000240)=""/13, 0x6}) (async) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c008800090601010000008000000000070000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 5m25.965987287s ago: executing program 1 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 5m25.96505775s ago: executing program 3 (id=478): epoll_create(0xc5) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x9, 0x0, 0x36}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x1f8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x800, 0x9, 0x597, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffd}}}}, {{@ip={@local, @empty, 0x0, 0xffffffff, 'ip6gre0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "9d1d", 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x7c5600, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000004c0)={'veth0_to_bridge\x00', 0x200}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000500)={{r0}, "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"}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x90802, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001540)={0x0, 0x996f, 0xfffa, 0x2, 0x7ff}, &(0x7f0000001580)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001640)={r5, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x4, @mcast2, 0x23}, @in6={0xa, 0x4e20, 0x1, @private1, 0x80000001}]}, &(0x7f0000001680)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt(r6, 0x4, 0x414a, &(0x7f00000016c0)="df4cfaa54d56f7a41b8763ddfc4ff7ba533327586006acddf8c2497d720379d54e6a3af19092a325d3ca233f9135f8e31d70bc20359b3de4475d6bc207b26a13ab8992ef14dd016b1da304f47621ba38636df58f9dcdca9c8863da6645f768130ee020bd4b1d9be8094d94ac71b2fb7ff303fb42ccaf609766913b688b5d9c66f9890dc08366add57b65cdc6ca", 0x8d) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r8, &(0x7f0000001780)={0x1, @le_remove_cig={{0x2065, 0x1}, {0xcb}}}, 0x5) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000017c0)=0x0) r10 = syz_open_procfs$namespace(r9, &(0x7f0000001800)='ns/pid\x00') r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000001840)='cubic\x00', 0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r10, &(0x7f0000001880)={0x60001008}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xac83596803cb147c}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001e80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001ac0)={0x35c, r13, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @from_mac=@device_b, {0x2, 0x1}}, @sp_mp_open={0xf, 0x1, {0x0, {0x1, 0x2, [{0x36}, {0x6}]}, @val={0x72, 0x6}, @void}}}}, @NL80211_ATTR_FRAME={0x39, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @from_mac=@broadcast, {0x3, 0x81}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @void, @val={0x7e, 0x15, {{0x1, 0x71}, 0xf, 0x1, @device_a, 0x6, 0x6b12, 0x4}}}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_FRAME={0x2ab, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_a, @device_b, @random="aaf1dacdd023", {0x3, 0x7}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x8008, 0x6, {0x0, 0x6, @default_ap_ssid}, @val, @void, [{0xdd, 0x85, "4b63842896283b615bfc1ec762b7c5cb9fe07a564f419ef1aeb2448da82579aed524798ecee4eef6e2d74902391f9f627e2738eb8476f55a3bb72a0f426ed20076e51c912f857fc2b0cb792c290cd0f31114049994a271fbbd70fd7f892b4287a9b7439c68cafa62dd098179b2a5d28fb72698d769add5795b1d0d3f039449393074208c82"}, {0xdd, 0xda, "4c97ed74a3a7d62db845547d2140b7b8654dee4ed5116adeebd2219f4abca970ee120175adee99569cf35045bbc40db7631d8883c5f85893fb9f7275ddd5e5b2efc8b86beb1d1b26d9dad462a2ff5f15406132d5deed523ab5bfb4ed8d3ec03ae963bb8d793f92e8ef5140a627d451ffcad05dcbc2463b10a4f410886c3a77db76305847edffac3f52e3f143d1291eb8bff94ce67bb209e2ba355a8d175a772b3f858b9d8f015345e2df03a6e95fb520165118829e0b77dd3a692ea1f2d2fd8afff7ddcb3e7f3a4280a439781e2f4a154f3cc5a4945845b7e459"}, {0xdd, 0x6f, "d87ca9d97e5258f2e4a9899cf961db582609d02fd03fbf52b47a016ba8ebbdb99093584f0c9d9c939329571f5f49b0db89bdf88dda95bfa8d393e6dc7bfdbb0bf8e0cbf43ec24a731d82951907922a00e1d2c754d514af63ba40f62ce4e23dffef529a40d6f83141a973ee579f8954"}, {0xdd, 0xa7, "4e0e31bc39ee57b8e47fdb967dc2c4cd3200204e1042aaa663eefe1246af480bfdf14d8aaa2667a90e00ff63ab0b56e7b6cefa7d7d85405fcddb79b8c4e95f536064cd14512cc0232bbadd39a03916f9f87b7a025fb6e16c6fa9335ec3b5b66617d5305f586db215ba7384de707112bb23db9a99c0013146e22af375f25617bc6c28f248b0dc20b685a604cdd0a05a90a6126e04275c5a23e5985fb0f40370c92b5b1d0cfb7d6c"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x4, 0x6d29, 0xc, 0x6, 0x4]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x800]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x40880}, 0x11) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r14, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x50, r13, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1000}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40007}, 0x80) 5m25.569675827s ago: executing program 32 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 5m25.549761896s ago: executing program 33 (id=478): epoll_create(0xc5) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x9, 0x0, 0x36}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x1f8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x800, 0x9, 0x597, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffd}}}}, {{@ip={@local, @empty, 0x0, 0xffffffff, 'ip6gre0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "9d1d", 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x7c5600, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000004c0)={'veth0_to_bridge\x00', 0x200}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000500)={{r0}, "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"}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x90802, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001540)={0x0, 0x996f, 0xfffa, 0x2, 0x7ff}, &(0x7f0000001580)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001640)={r5, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x4, @mcast2, 0x23}, @in6={0xa, 0x4e20, 0x1, @private1, 0x80000001}]}, &(0x7f0000001680)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt(r6, 0x4, 0x414a, &(0x7f00000016c0)="df4cfaa54d56f7a41b8763ddfc4ff7ba533327586006acddf8c2497d720379d54e6a3af19092a325d3ca233f9135f8e31d70bc20359b3de4475d6bc207b26a13ab8992ef14dd016b1da304f47621ba38636df58f9dcdca9c8863da6645f768130ee020bd4b1d9be8094d94ac71b2fb7ff303fb42ccaf609766913b688b5d9c66f9890dc08366add57b65cdc6ca", 0x8d) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r8, &(0x7f0000001780)={0x1, @le_remove_cig={{0x2065, 0x1}, {0xcb}}}, 0x5) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000017c0)=0x0) r10 = syz_open_procfs$namespace(r9, &(0x7f0000001800)='ns/pid\x00') r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000001840)='cubic\x00', 0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r10, &(0x7f0000001880)={0x60001008}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xac83596803cb147c}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001e80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001ac0)={0x35c, r13, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @from_mac=@device_b, {0x2, 0x1}}, @sp_mp_open={0xf, 0x1, {0x0, {0x1, 0x2, [{0x36}, {0x6}]}, @val={0x72, 0x6}, @void}}}}, @NL80211_ATTR_FRAME={0x39, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @from_mac=@broadcast, {0x3, 0x81}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @void, @val={0x7e, 0x15, {{0x1, 0x71}, 0xf, 0x1, @device_a, 0x6, 0x6b12, 0x4}}}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_FRAME={0x2ab, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_a, @device_b, @random="aaf1dacdd023", {0x3, 0x7}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x8008, 0x6, {0x0, 0x6, @default_ap_ssid}, @val, @void, [{0xdd, 0x85, "4b63842896283b615bfc1ec762b7c5cb9fe07a564f419ef1aeb2448da82579aed524798ecee4eef6e2d74902391f9f627e2738eb8476f55a3bb72a0f426ed20076e51c912f857fc2b0cb792c290cd0f31114049994a271fbbd70fd7f892b4287a9b7439c68cafa62dd098179b2a5d28fb72698d769add5795b1d0d3f039449393074208c82"}, {0xdd, 0xda, "4c97ed74a3a7d62db845547d2140b7b8654dee4ed5116adeebd2219f4abca970ee120175adee99569cf35045bbc40db7631d8883c5f85893fb9f7275ddd5e5b2efc8b86beb1d1b26d9dad462a2ff5f15406132d5deed523ab5bfb4ed8d3ec03ae963bb8d793f92e8ef5140a627d451ffcad05dcbc2463b10a4f410886c3a77db76305847edffac3f52e3f143d1291eb8bff94ce67bb209e2ba355a8d175a772b3f858b9d8f015345e2df03a6e95fb520165118829e0b77dd3a692ea1f2d2fd8afff7ddcb3e7f3a4280a439781e2f4a154f3cc5a4945845b7e459"}, {0xdd, 0x6f, "d87ca9d97e5258f2e4a9899cf961db582609d02fd03fbf52b47a016ba8ebbdb99093584f0c9d9c939329571f5f49b0db89bdf88dda95bfa8d393e6dc7bfdbb0bf8e0cbf43ec24a731d82951907922a00e1d2c754d514af63ba40f62ce4e23dffef529a40d6f83141a973ee579f8954"}, {0xdd, 0xa7, "4e0e31bc39ee57b8e47fdb967dc2c4cd3200204e1042aaa663eefe1246af480bfdf14d8aaa2667a90e00ff63ab0b56e7b6cefa7d7d85405fcddb79b8c4e95f536064cd14512cc0232bbadd39a03916f9f87b7a025fb6e16c6fa9335ec3b5b66617d5305f586db215ba7384de707112bb23db9a99c0013146e22af375f25617bc6c28f248b0dc20b685a604cdd0a05a90a6126e04275c5a23e5985fb0f40370c92b5b1d0cfb7d6c"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x4, 0x6d29, 0xc, 0x6, 0x4]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x800]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x40880}, 0x11) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r14, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x50, r13, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1000}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40007}, 0x80) 1m35.845957917s ago: executing program 0 (id=2186): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0xffffff80}}], 0x18}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000080)}, 0x0) 1m24.879641383s ago: executing program 0 (id=2186): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0xffffff80}}], 0x18}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000080)}, 0x0) 1m12.039729041s ago: executing program 0 (id=2186): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0xffffff80}}], 0x18}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000080)}, 0x0) 1m3.659825969s ago: executing program 0 (id=2186): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0xffffff80}}], 0x18}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000080)}, 0x0) 53.653035758s ago: executing program 0 (id=2186): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0xffffff80}}], 0x18}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000080)}, 0x0) 6.429798127s ago: executing program 0 (id=2186): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0xffffff80}}], 0x18}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000080)}, 0x0) 2.837735613s ago: executing program 5 (id=2883): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x2}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01b8000000000000000004000000080004000000000008000500ac141400"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000040000000a80000200000000"], 0x24}}, 0x4000001) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) write(r7, &(0x7f00000001c0)='4', 0x1) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800004feb1524e702db4751fcab559285ba00000000000000000000000000950000000000000083d033366702d653c9dfe20fdd15087de8d97f15ec14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) tee(r6, r5, 0x240000, 0x2) r9 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911070000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000018007000ffdbdf080020200afe00c80a0006000005001a00000900020022040000000020a6be59fb237f7450a412ee", @ANYRES32=r10, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40844}, 0x8045) connect$802154_dgram(r5, &(0x7f0000000440)={0x24, @none={0x0, 0x3}}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="3c00ef000000000000bd70000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000005001100040000001400350065727370616e30000000000000000000"], 0x3c}}, 0x0) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r12 = socket$netlink(0x10, 0x3, 0x4) socket$alg(0x26, 0x5, 0x0) write(r12, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x500, &(0x7f0000000080), 0x100}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c0, 0x0, 0x1f0, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@rand_addr=0x64010100, @rand_addr=0x64010102, 0xffffff00, 0xff, 0xeb, 0x7, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0x8, 0xf801, 0x8, 0x2, 0xf93, 'dummy0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0x108}, 0xfc2d, 0xe8}, @unspec=@ERROR={0x0, 'ERROR\x00', 0x0, "91266d2a63b999990469cad01b72d280656d981edcae75c32b2646bffa96"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xff09) 2.624903473s ago: executing program 5 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d0200000000000000000000000000000000000000000000000000040186009078000000000040000000000000efdfdb35de000627b633546d95ac794231a066217568b30f27ffd28b8115e62aa592eeb841eaa31ca91e3df8f18db9bea0d47621ffd78ddd12abc4382c17917ad07f9c76"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e00000000000002000000de680007000000000c000c4000000000000001ff459ab6867bde03ad6428da3f3a227eb7ad571a42c3d3538e10ca5c7f"], 0x28}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1a0000000000000004000000020000000f020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="01000000010100008000"], 0x50) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r5) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="cf000700", @ANYRES16=r6, @ANYBLOB="010325bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r9}, 0x20) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=@newtaction={0xc0, 0x76, 0x20, 0x70bd29, 0x25dfdbfc, {}, [{0xac, 0x1, [@m_ct={0xa8, 0x1, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0xa684c3fa23e5894c}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d27e7a84ce3fe9cfe86f3b33436e57f0"}, @TCA_CT_PARMS={0x18, 0x1, {0x1ff, 0x0, 0x6, 0xf, 0x7fff}}, @TCA_CT_ZONE={0x6, 0x4, 0x7}]}, {0x15, 0x6, "04243938542cc6b15aae036ac07b83f6ed"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1001, r11}, 0x38) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) 2.045926526s ago: executing program 4 (id=2889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001580)="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", 0x0, 0x20000700, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x5}, 0x1d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x19, &(0x7f0000000140)={@multicast, @link_local, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, "fc", "278543", 0x16, "e856e5"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) (fail_nth: 4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 2.005629355s ago: executing program 5 (id=2890): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10) 1.987501332s ago: executing program 6 (id=2891): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x8, 0x0, 0xf, 0xff, 0xff, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 1.654046664s ago: executing program 4 (id=2892): getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x1e, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0xd, &(0x7f00000002c0)=""/31, &(0x7f0000000300)=0x1f) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) unshare(0x20060400) bind$ax25(r2, &(0x7f0000000540)={{0x2, @bcast, 0x40}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) socket$rds(0x15, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 1.5975361s ago: executing program 4 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x800, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000070002007f00000007000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000004"], 0x38, 0x48060}], 0x1, 0x200000d0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x44}}, 0x0) 1.493324124s ago: executing program 6 (id=2894): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x558}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="fe218926754ca1d4f7f2b099685022045fd8dec3", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54204000880"], 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x0) 1.413303064s ago: executing program 5 (id=2896): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x8, 0x0, 0xf, 0xff, 0xff, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xa1, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 1.237902943s ago: executing program 4 (id=2898): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x4b) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02005f69", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfeb, &(0x7f0000001e00)=""/4075, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x8040480) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) socket$igmp(0x2, 0x3, 0x2) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000d"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000002c0)="86581a0cd5a266643e5bc021b0d2d19b6812219e010e9dc6b943e2913575ef142e44152316bd5bf3e8e383598c223592b26fc180158e9e1612453ccee7407f41b1a8edfd524a7d11573fff6d3e0f00c3c534f04a7076b60633daaa", &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x80fe) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.16580254s ago: executing program 5 (id=2899): r0 = socket$kcm(0x2, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 1.164192985s ago: executing program 6 (id=2900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d0200000000000000000000000000000000000000000000000000040186009078000000000040000000000000efdfdb35de000627b633546d95ac794231a066217568b30f27ffd28b8115e62aa592eeb841eaa31ca91e3df8f18db9bea0d47621ffd78ddd12abc4382c17917ad07f9c76"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e00000000000002000000de680007000000000c000c4000000000000001ff459ab6867bde03ad6428da3f3a227eb7ad571a42c3d3538e10ca5c7f"], 0x28}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1a0000000000000004000000020000000f020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="01000000010100008000"], 0x50) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r5) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="cf000700", @ANYRES16=r6, @ANYBLOB="010325bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r9}, 0x20) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=@newtaction={0xc0, 0x76, 0x20, 0x70bd29, 0x25dfdbfc, {}, [{0xac, 0x1, [@m_ct={0xa8, 0x1, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0xa684c3fa23e5894c}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d27e7a84ce3fe9cfe86f3b33436e57f0"}, @TCA_CT_PARMS={0x18, 0x1, {0x1ff, 0x0, 0x6, 0xf, 0x7fff}}, @TCA_CT_ZONE={0x6, 0x4, 0x7}]}, {0x15, 0x6, "04243938542cc6b15aae036ac07b83f6ed"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1001, r11}, 0x38) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) 1.073181251s ago: executing program 4 (id=2901): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000003c0)=ANY=[@ANYBLOB="80840600ffffffffffff08021100000008021100000179000600c4003f06000000000000feff00002a01042d1a200011060002000000000001006000030000000100000000f8077206030303030303710701ffff0101000976067c071b002b00"], 0x60) sendmmsg(0xffffffffffffffff, &(0x7f0000003900), 0x0, 0x40140) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000004300)={0xa, 0x4e23, 0x52e9abfd, @mcast1, 0x6}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) recvmmsg$unix(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000ac0)=""/4080, 0x103b}], 0x1}}], 0x1, 0x22041, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$unix(r2, 0x0, 0x40001143) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[], 0x8) sendmsg$nl_route(r1, 0x0, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000100)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) 1.011303637s ago: executing program 2 (id=2902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001580)="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", 0x0, 0x20000700, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x5}, 0x1d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x19, &(0x7f0000000140)={@multicast, @link_local, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, "fc", "278543", 0x16, "e856e5"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) (fail_nth: 5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 693.967119ms ago: executing program 2 (id=2903): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000800)="1d04", 0x2}], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x1010, r3, 0x9000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) 614.128023ms ago: executing program 6 (id=2904): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000440)=""/182, 0xb6}, {&(0x7f0000000a80)=""/261, 0x105}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/208, 0xd0}], 0x7}, 0x80000000}], 0x4, 0x40000030, 0x0) 495.450111ms ago: executing program 2 (id=2905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054040000347f45d97cb39c34e9060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340000000000900010073797a30000000001400000011000100000000"], 0xc8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x8, 0x0, 0xf, 0xff, 0xff, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x8804) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069b0070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xfffffffe}, 0x2d) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0xbc, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001880)={@ifindex, r3, 0x1b, 0x14, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002ebd7000ffdbdf253900000008000300eb9a5bbd31f3d2c0bbf487bb8d13aab6da73122a1303eb1751726f57", @ANYRES32=r16, @ANYBLOB="1c005a801800018014000300000001000a00050081000900ff7f0100"], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40) r17 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESHEX=r17, @ANYRES32=r12], 0x44}}, 0x0) 361.938308ms ago: executing program 6 (id=2906): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) unshare(0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 360.688394ms ago: executing program 2 (id=2907): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0xd0, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vti={{0x8}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4000}], @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x29eaa209}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4}, @IFLA_VTI_LINK={0x8, 0x1, r1}, @IFLA_VTI_OKEY={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xf}], @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x30}]}, 0xd0}}, 0x0) 272.134224ms ago: executing program 2 (id=2908): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000140)="8ff4a9ef34267d6153ac550d79add4d83df27aec3f995e209d838877f8ad348aa5ea8469c2cc255c08e49070adb76169d55a2da25bdd9f1b3f7bb9a5c603d3bf71a512c794aa35360a6ab3b27f40c16c80c4977a9b057b9584227e6db5b07a6dcaad5c3d13ad6ea541235a552111ebd93abc2dd1aab79db8d41e4bc82a171b21cca6640ad830f9d03730b7a8423f4e3970aea902afdcfa5e24053727de013dbcc6a83ad451acd4b29d30beedfdecd730e91831b1e6339063ae46dde25be365947adcf497d66216ee48b3824bb385b2691b13e5680eb3d45c547fe61f0caff9b31d45102b2e34e8c3") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4500, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x4, r2, 0x5d050, 0x40020}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x4850) socket$nl_generic(0x10, 0x3, 0x10) 258.504875ms ago: executing program 6 (id=2909): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) (async) sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x805) r3 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x2040) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) accept4(r3, 0x0, 0x0, 0x800) (async) recvfrom(r2, &(0x7f0000000280)=""/179, 0xb3, 0x7, 0x0, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x2, &(0x7f0000000340)='\x00\x00', 0x9, 0x1, 0x458, 0x9, 0x9, 0x1, 0x20000007, 'syz0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r12, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f00000000c0)={r1, 0x3, 0x3, 0x3ff}) sendto$packet(r13, &(0x7f0000000380)="74a89cd237de8549866ef84c6c19bdc2355b6b7376051fac0f0cb921ff3278714aa3c49715ae9bdd57113292d518084d92407150b296cbef5d33d83912d72811d8c8b6595bd28ab184057f581f21ac80102f40b80b57d796c9d52da1e61c06eb3e3f4f66748f8636a4c330aeda4b9bd4f15dd5bd613f07eceaa9110e2a853854a8e04cbdcc57da396b2e63fa8c5bf917078aef1389a2af05fe48fd2e4b3d7e0253acc7ed8cab7b43f8348dd90c6678", 0xaf, 0x4044004, 0x0, 0x0) 122.318756ms ago: executing program 5 (id=2910): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x25, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2, 0x3, 0xff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x1, 0x50000000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x7f, 0x29, 0x0, @empty, @empty, {[@end]}}}}}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000240)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xa8, 0x3f, 0x200, 0x70bd25, 0x25dfdbff, {0x7}, [@generic="8ba7e093dccf4d4afc0a08bc75bcdc4018308cfb30cc69f7d391c546c4300a32b9981b7a413c463137b8d2b9cd063df501c25b2885d8bc1b4670c432ac7171ebf9a066997067cab965c9d82d137b2c26acada3337c7070e2370436c2a6c1ff805342408f0254d9ebc5eb1fe4cc4cbeb484f40580ef2120570094ae7efc9b0326abd2048f80064029d1a0df1726fda1d29e2d09"]}, 0xa8}, 0x1, 0x0, 0x0, 0x30040800}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000003c0)={0x2, 'rose0\x00'}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYBLOB="8e3b04000000479ff16187be13f09d5101c9e75bb8eb1476ef8f82579f85c68419837be716fd09a5014f63c708213e70ab7760639d0f5c6e7b96141ff704bb3b4f0f4184eecc1ee67c4d04b8e8b06aaf77781b58ed50dff3e8b06c3e2c70cf4d99c9b8c56ca90183eeb8f4745164ad44694434fa8e1b2d346b524148834d9619e7507f6a68f36df8e2de411864e1587e792b3979f3b8e61c28c3e15ba153c1650215a9c2398d2cb7ff470f150be6034ad834dac2c9fc21095981256414c4e8", @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@broadcast, @local, @void, {@llc_tr={0x11, {@llc={0xfc, 0x42, 'I', "d871eea523a78be5e2f535e0d384b38b38d112a684547ba690492a8a1deda3fd7ebd336f63340d76275cb0c02fc85a918cad235500db3f95d1acd5ac7cde895692dc7463484513c72f6738b98c4a786e52772281169f98efd69a09e57e54fd919a80858b6b862eb7489cb52a63d332"}}}}}, 0x0) 8.140435ms ago: executing program 2 (id=2911): unshare(0xc040480) (async) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @remote}, 0x1c) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728", 0x5}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="020000015632de3c44b2d39806149e7fd2b91b2d0444004397063ee1dfdcc445", @ANYRES16=r5, @ANYBLOB="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"/2642], 0xa58}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) accept$phonet_pipe(r1, 0x0, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0500330002"], 0x2c}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) 0s ago: executing program 4 (id=2912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x8000) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={@mcast1, 0xe, r2}) listen(r0, 0x23a0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b27, &(0x7f0000000040)) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x41200100}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x150, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x81}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0xf68}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xffffffff}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 281.055321][T12244] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1708'. [ 281.247673][T12223] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.283860][T12223] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.538227][T12223] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.585392][T12223] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.729316][T12223] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.771373][T12223] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.821490][T12223] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.842944][T12223] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.917836][T12223] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.943287][T12223] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.014161][T12223] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.044188][T12223] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.449821][T12274] SET target dimension over the limit! [ 282.461678][ T9] IPVS: starting estimator thread 0... [ 282.503230][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1718'. [ 282.562985][T12275] IPVS: using max 18 ests per chain, 43200 per kthread [ 282.716238][T12280] sctp: [Deprecated]: syz.0.1717 (pid 12280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.716238][T12280] Use struct sctp_sack_info instead [ 282.765633][T12280] netlink: 'syz.0.1717': attribute type 32 has an invalid length. [ 282.933310][T12282] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1719'. [ 282.992072][T12282] openvswitch: netlink: Message has 44053 unknown bytes. [ 283.051021][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1719'. [ 283.097499][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1719'. [ 283.141605][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1721'. [ 283.406294][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 283.415980][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 283.443471][T12293] netlink: 'syz.2.1723': attribute type 1 has an invalid length. [ 283.463322][T12293] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1723'. [ 283.756184][T12308] netlink: 'syz.2.1728': attribute type 7 has an invalid length. [ 283.764487][T12308] netlink: 'syz.2.1728': attribute type 8 has an invalid length. [ 283.777705][T12308] bridge0: entered promiscuous mode [ 283.803379][T12308] bridge0: left promiscuous mode [ 283.819645][T12315] netlink: 'syz.0.1731': attribute type 7 has an invalid length. [ 283.827758][T12315] netlink: 'syz.0.1731': attribute type 8 has an invalid length. [ 283.877233][T12318] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 283.906541][T12315] syz_tun: entered promiscuous mode [ 283.952476][T12315] erspan0: entered promiscuous mode [ 283.995152][T12315] syz_tun: left promiscuous mode [ 284.041568][T12315] erspan0: left promiscuous mode [ 284.367565][T12340] xt_hashlimit: max too large, truncated to 1048576 [ 285.216104][T12384] __nla_validate_parse: 6 callbacks suppressed [ 285.216137][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 285.534939][T12374] geneve0: entered allmulticast mode [ 285.664231][T12357] delete_channel: no stack [ 285.768482][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 286.035769][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'. [ 286.073111][T12414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1760'. [ 286.159064][T12420] lo speed is unknown, defaulting to 1000 [ 286.295285][T12428] sctp: [Deprecated]: syz.5.1764 (pid 12428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.295285][T12428] Use struct sctp_sack_info instead [ 286.351576][T12428] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1764'. [ 286.433594][T12428] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1764'. [ 286.564886][T12440] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1765'. [ 286.582205][T12445] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1767'. [ 286.604789][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 286.637190][T12446] netlink: 'syz.6.1766': attribute type 1 has an invalid length. [ 286.661934][T12439] lo speed is unknown, defaulting to 1000 [ 289.875938][T12478] netlink: 'syz.5.1777': attribute type 30 has an invalid length. [ 289.999646][T12483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1779'. [ 290.041218][T12483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.124598][T12488] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 290.159666][T12489] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 290.170374][T12489] macvlan2: entered allmulticast mode [ 290.213668][T12489] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 290.440282][T12493] netlink: 'syz.0.1782': attribute type 1 has an invalid length. [ 290.560696][T12509] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 290.576882][T12506] xt_HMARK: proto mask must be zero with L3 mode [ 291.045987][T12525] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 291.109003][T12530] batadv1: entered promiscuous mode [ 291.128967][T12530] batadv1: entered allmulticast mode [ 291.150094][T12530] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 291.189335][T12530] netlink: 'syz.0.1793': attribute type 10 has an invalid length. [ 291.209407][T12530] veth0_macvtap: left promiscuous mode [ 291.242390][T12530] batman_adv: batadv0: Adding interface: macvtap0 [ 291.249208][T12530] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.283263][T12543] netlink: 'syz.2.1794': attribute type 11 has an invalid length. [ 291.301450][T12530] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 291.731503][T12562] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 8, id = 0 [ 291.799945][T12564] lo speed is unknown, defaulting to 1000 [ 291.997462][T12577] netlink: 'syz.4.1805': attribute type 1 has an invalid length. [ 292.056491][T12577] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1805'. [ 292.078761][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 292.102832][T12577] netlink: 'syz.4.1805': attribute type 1 has an invalid length. [ 292.215271][T12564] netlink: 'syz.6.1803': attribute type 7 has an invalid length. [ 293.127607][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 293.166435][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 293.219126][T12579] bridge4: entered allmulticast mode [ 293.477753][T12616] lo speed is unknown, defaulting to 1000 [ 293.730171][T12620] netlink: 'syz.0.1818': attribute type 16 has an invalid length. [ 293.745419][T12620] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1818'. [ 293.797517][T12623] team0: left promiscuous mode [ 293.812954][T12623] CÃ: left promiscuous mode [ 293.817836][T12623] team_slave_1: left promiscuous mode [ 294.170511][T12623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.188980][T12623] batadv_slave_1: left promiscuous mode [ 294.228422][T12623] vlan0: left promiscuous mode [ 294.315584][T12623] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.332360][T12623] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.368919][T12623] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.382948][T12623] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.479787][T12623] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 294.501849][T12623] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 294.522277][T12623] batadv1: left allmulticast mode [ 294.531369][T12623] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.540967][T12623] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.550106][T12623] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.559475][T12623] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.572814][T12623] macsec1: left promiscuous mode [ 294.577931][T12623] macsec1: left allmulticast mode [ 294.583664][T12623] vti0: left promiscuous mode [ 294.601317][T12623] gretap1: left promiscuous mode [ 294.614282][T12623] vlan3: left allmulticast mode [ 294.619664][T12623] bond0: left allmulticast mode [ 294.624947][T12623] bond_slave_0: left allmulticast mode [ 294.630842][T12623] bond_slave_1: left allmulticast mode [ 295.041200][T12654] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.227712][T12654] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.411849][T12676] netlink: 'syz.2.1836': attribute type 10 has an invalid length. [ 295.444241][T12654] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.558855][T12654] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.647490][T12676] bond0: entered promiscuous mode [ 295.654214][T12676] bond_slave_0: entered promiscuous mode [ 295.660321][T12676] bond_slave_1: entered promiscuous mode [ 295.666961][T12676] gretap1: entered promiscuous mode [ 295.686857][T12676] team0: entered promiscuous mode [ 295.703837][T12676] team_slave_0: entered promiscuous mode [ 295.723709][T12676] team_slave_1: entered promiscuous mode [ 295.737669][T12676] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 295.804040][T12693] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1839'. [ 295.914963][T12654] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.978953][T12654] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.039430][T12654] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.087841][T12654] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.121437][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'. [ 296.142596][T12706] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 296.151082][T12706] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 296.160238][T12706] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 296.213111][T12706] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.272389][T12760] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 297.286513][ T5920] IPVS: starting estimator thread 0... [ 297.395522][T12762] IPVS: using max 20 ests per chain, 48000 per kthread [ 297.561318][T12777] lo: entered allmulticast mode [ 297.567212][T12777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.623107][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 297.998055][T12800] : entered promiscuous mode [ 298.005527][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1871'. [ 298.014946][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1871'. [ 298.020347][T12799] lo speed is unknown, defaulting to 1000 [ 298.031783][T12800] netlink: 'syz.6.1871': attribute type 18 has an invalid length. [ 298.062703][T12800] netlink: 'syz.6.1871': attribute type 18 has an invalid length. [ 298.550595][T12820] netlink: 'syz.0.1879': attribute type 10 has an invalid length. [ 298.569817][T12820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1879'. [ 298.664255][T12820] team0: Port device geneve0 added [ 298.993835][ T30] audit: type=1800 audit(1742823097.064:4): pid=12842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1887" name=363535343120766C656E3D310A0920747970655F69643D32206F66667365743D352073697A653D3130204E6F74206120564152206B696E64206D656D6265720A dev="tmpfs" ino=1983 res=0 errno=0 [ 299.029294][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1889'. [ 299.394102][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1893'. [ 299.861256][T12884] netlink: 'syz.4.1898': attribute type 4 has an invalid length. [ 299.870303][T12884] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1898'. [ 300.194250][T12906] lo speed is unknown, defaulting to 1000 [ 300.331333][T12909] lo speed is unknown, defaulting to 1000 [ 300.417683][T12918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1906'. [ 300.469441][T12915] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1906'. [ 300.787669][T12921] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1909'. [ 301.327288][T12947] netlink: 'syz.2.1915': attribute type 1 has an invalid length. [ 301.464676][T12955] bond0: (slave bond_slave_0): Releasing backup interface [ 301.537872][T12955] bond0: (slave bond_slave_1): Releasing backup interface [ 301.649130][T12955] team0: Port device CÃ removed [ 301.697096][T12955] team0: Port device team_slave_1 removed [ 301.717445][T12955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.755327][T12977] netlink: 'syz.2.1921': attribute type 13 has an invalid length. [ 301.755746][T12955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.794241][T12955] bond1: (slave gretap1): Releasing active interface [ 302.442433][T12998] netlink: 'syz.5.1930': attribute type 1 has an invalid length. [ 302.460954][T12997] netlink: 'syz.5.1930': attribute type 1 has an invalid length. [ 302.505427][T12993] lo speed is unknown, defaulting to 1000 [ 303.406162][T13036] netlink: 'syz.5.1938': attribute type 1 has an invalid length. [ 304.098270][T13061] lo speed is unknown, defaulting to 1000 [ 304.107669][T13064] __nla_validate_parse: 8 callbacks suppressed [ 304.107690][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'. [ 304.149667][T13069] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 304.224141][T13069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.242063][T13064] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1951'. [ 304.376596][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'. [ 304.908746][T13086] bridge3: entered promiscuous mode [ 304.943522][T13086] bridge3: entered allmulticast mode [ 305.103997][T13084] netlink: 'syz.6.1955': attribute type 1 has an invalid length. [ 305.330393][T13105] ax25_connect(): syz.0.1961 uses autobind, please contact jreuter@yaina.de [ 305.375231][T13105] ax25_connect(): syz.0.1961 uses autobind, please contact jreuter@yaina.de [ 305.434160][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 305.487579][T13105] lo speed is unknown, defaulting to 1000 [ 305.566780][T13117] pimreg3: entered allmulticast mode [ 305.667075][T13120] lo speed is unknown, defaulting to 1000 [ 305.798778][T13129] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1969'. [ 305.881395][T13131] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.204224][T13142] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 306.455394][T13120] lo speed is unknown, defaulting to 1000 [ 306.548556][T13161] netlink: 'syz.0.1980': attribute type 10 has an invalid length. [ 306.683167][T13161] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.733081][T13161] team0: entered promiscuous mode [ 306.738195][T13161] geneve0: entered promiscuous mode [ 306.794174][T13161] bond0: (slave team0): Enslaving as an active interface with an up link [ 307.152028][T13188] netlink: 'syz.0.1986': attribute type 10 has an invalid length. [ 307.174668][T13173] netlink: 'syz.4.1987': attribute type 6 has an invalid length. [ 307.183346][T13173] netlink: 'syz.4.1987': attribute type 7 has an invalid length. [ 307.191832][T13173] netlink: 'syz.4.1987': attribute type 8 has an invalid length. [ 307.297509][T13182] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.302409][T13178] netlink: 'syz.5.1988': attribute type 1 has an invalid length. [ 307.376578][T13182] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.488762][T13182] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.624716][T13182] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.936555][T13182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.070359][T13182] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.251882][T13182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.300256][T13182] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.370402][T13206] lo speed is unknown, defaulting to 1000 [ 308.503601][T13209] lo speed is unknown, defaulting to 1000 [ 309.303789][T13244] netlink: 'syz.5.2001': attribute type 1 has an invalid length. [ 309.376275][T13247] netlink: 'syz.2.2004': attribute type 15 has an invalid length. [ 309.401156][T13247] netlink: 'syz.2.2004': attribute type 3 has an invalid length. [ 309.454427][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2004'. [ 309.558775][T13254] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 309.643141][T13257] openvswitch: netlink: Message has 20 unknown bytes. [ 309.682432][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2009'. [ 309.790414][T13261] macvlan3: entered promiscuous mode [ 309.928219][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 309.937579][T13274] netlink: 'syz.4.2010': attribute type 1 has an invalid length. [ 309.955227][T13274] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2010'. [ 310.007424][ T5146] block nbd1: Receive control failed (result -107) [ 310.029945][T13279] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2011'. [ 310.227337][T13287] lo: entered allmulticast mode [ 310.240592][T13287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.477994][T13294] gretap0: left promiscuous mode [ 310.511197][T13299] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 310.592421][T13294] sit0: left promiscuous mode [ 310.677112][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.684880][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.885189][T13294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.945950][T13294] macvlan0: left promiscuous mode [ 311.022163][T13294] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.042970][T13294] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.051724][T13294] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.093151][T13294] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.168902][T13294] vlan4: left promiscuous mode [ 311.174296][T13294] hsr0: left promiscuous mode [ 311.189891][T13294] bridge1: left promiscuous mode [ 311.201255][T13294] bridge1: left allmulticast mode [ 311.218556][T13294] bond2: left promiscuous mode [ 311.231358][T13294] batadv1: left promiscuous mode [ 311.243942][T13294] bond2: left allmulticast mode [ 311.256677][T13294] batadv1: left allmulticast mode [ 311.276326][T13294] ip6tnl1: left promiscuous mode [ 311.324188][T13294] ip6gre3: left allmulticast mode [ 311.408141][T13294] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 311.428980][T13294] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 311.452953][T13294] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 311.471957][T13294] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 311.515610][T13294] bridge3: left promiscuous mode [ 311.520642][T13294] bridge3: left allmulticast mode [ 311.540871][T13294] bond0: left promiscuous mode [ 311.549395][T13294] bond_slave_0: left promiscuous mode [ 311.556113][T13294] bond_slave_1: left promiscuous mode [ 311.562174][T13294] gretap1: left promiscuous mode [ 311.567583][T13294] team0: left promiscuous mode [ 311.572549][T13294] team_slave_0: left promiscuous mode [ 311.578512][T13294] team_slave_1: left promiscuous mode [ 311.584611][ T5146] Bluetooth: hci0: command tx timeout [ 311.584867][T13294] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 311.600456][T13294] macvlan3: left promiscuous mode [ 311.624230][T13323] xt_ipcomp: unknown flags F7 [ 311.636155][T13323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2023'. [ 312.194178][T13344] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 312.259232][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2033'. [ 312.384984][T13353] bridge0: port 1(dummy0) entered blocking state [ 312.399832][T13353] bridge0: port 1(dummy0) entered disabled state [ 312.415840][T13353] dummy0: entered allmulticast mode [ 312.422610][T13353] dummy0: entered promiscuous mode [ 312.429494][T13353] bridge0: port 1(dummy0) entered blocking state [ 312.436035][T13353] bridge0: port 1(dummy0) entered forwarding state [ 312.501065][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2036'. [ 312.549743][T13353] dummy0: left allmulticast mode [ 312.656054][T13353] dummy0: left promiscuous mode [ 312.661206][T13353] bridge0: port 1(dummy0) entered disabled state [ 312.911976][T13364] bond1: entered promiscuous mode [ 312.943151][T13364] bond1: entered allmulticast mode [ 312.950585][T13364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.399575][T13364] bond1 (unregistering): Released all slaves [ 314.127084][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 314.323099][T13410] sctp: [Deprecated]: syz.0.2055 (pid 13410) Use of int in max_burst socket option. [ 314.323099][T13410] Use struct sctp_assoc_value instead [ 314.356172][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2054'. [ 315.401271][T13456] lo speed is unknown, defaulting to 1000 [ 315.578492][T13462] 8021q: VLANs not supported on vxcan1 [ 315.594322][T13462] tap0: tun_chr_ioctl cmd 2148553947 [ 315.666282][T13464] __nla_validate_parse: 1 callbacks suppressed [ 315.666306][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2070'. [ 315.740404][T13463] lo speed is unknown, defaulting to 1000 [ 316.311103][T13485] validate_nla: 2 callbacks suppressed [ 316.311124][T13485] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 316.782640][T13499] veth0_virt_wifi: entered promiscuous mode [ 317.315265][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 317.343581][T13512] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 317.359805][T13514] netlink: 'syz.6.2086': attribute type 6 has an invalid length. [ 317.478231][T13512] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 317.872439][T13528] lo speed is unknown, defaulting to 1000 [ 318.004692][T13534] netlink: 'syz.5.2091': attribute type 1 has an invalid length. [ 318.628193][T13553] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2096'. [ 318.855626][T13558] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.864820][T13558] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.873716][T13558] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.882460][T13558] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.964090][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2100'. [ 319.408976][T13578] netlink: 'syz.4.2103': attribute type 1 has an invalid length. [ 320.023299][T13602] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2111'. [ 320.259809][T13607] batman_adv: batadv0: Adding interface: dummy0 [ 320.274173][T13607] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.331072][T13607] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 320.550416][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 321.099985][T13624] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 321.561179][T13646] netlink: 'syz.0.2124': attribute type 9 has an invalid length. [ 321.856388][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 321.922542][T13658] netlink: 'syz.5.2129': attribute type 1 has an invalid length. [ 321.950980][T13658] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2129'. [ 322.044357][T13658] netlink: 480 bytes leftover after parsing attributes in process `syz.5.2129'. [ 322.113073][T13666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2131'. [ 322.146614][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'. [ 322.435359][T13682] netlink: 'syz.4.2135': attribute type 10 has an invalid length. [ 322.444207][T13682] team0: Cannot enslave team device to itself [ 322.537301][T13687] netlink: 'syz.5.2137': attribute type 10 has an invalid length. [ 322.562121][T13687] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2137'. [ 322.728850][T13687] batman_adv: batadv0: Adding interface: virt_wifi0 [ 322.743371][T13687] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.837394][T13687] batman_adv: batadv0: Interface activated: virt_wifi0 [ 323.472099][T13724] lo: left allmulticast mode [ 323.543222][T13724] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 323.654277][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 323.820217][T13735] netlink: 'syz.0.2149': attribute type 21 has an invalid length. [ 323.856839][T13735] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 323.945097][T13742] delete_channel: no stack [ 324.016984][T13739] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.2150'. [ 373.737299][T13767] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 373.874558][T13769] openvswitch: netlink: Duplicate or invalid key (type 0). [ 373.881875][T13769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.895120][T13759] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 373.942160][T13767] lo speed is unknown, defaulting to 1000 [ 374.746881][T13793] netlink: 'syz.5.2166': attribute type 4 has an invalid length. [ 374.782357][T13793] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2166'. [ 375.285532][T13808] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 375.331405][T13808] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 375.664344][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 375.974206][T13834] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2181'. [ 375.975565][T13832] xt_bpf: check failed: parse error [ 376.233004][T13839] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2182'. [ 376.243501][T13843] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2184'. [ 376.744358][T13857] syzkaller1: entered promiscuous mode [ 376.749930][T13857] syzkaller1: entered allmulticast mode [ 376.808458][T13866] netlink: 'syz.4.2190': attribute type 5 has an invalid length. [ 377.066650][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2193'. [ 377.092032][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.122159][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.130951][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.140516][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.150248][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 377.159374][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.173644][T13869] wg1: left promiscuous mode [ 377.178699][T13869] wg1: left allmulticast mode [ 377.346520][T13869] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.355433][T13869] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.365671][T13869] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.374277][T13869] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.396746][T13869] vlan2: left promiscuous mode [ 377.401717][T13869] vlan2: left allmulticast mode [ 377.406717][T13869] hsr_slave_1: left allmulticast mode [ 377.415822][ T5912] lo speed is unknown, defaulting to 1000 [ 377.475721][T13877] lo speed is unknown, defaulting to 1000 [ 377.736982][T13877] chnl_net:caif_netlink_parms(): no params data found [ 377.939192][T13877] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.003430][T13877] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.050501][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 378.073515][T13877] bridge_slave_0: entered allmulticast mode [ 378.080744][T13877] bridge_slave_0: entered promiscuous mode [ 378.109270][T13910] lo speed is unknown, defaulting to 1000 [ 378.115740][T13877] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.143335][T13877] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.150670][T13877] bridge_slave_1: entered allmulticast mode [ 378.178558][T13877] bridge_slave_1: entered promiscuous mode [ 378.327630][T13877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.414699][T13877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.421000][T13911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2200'. [ 378.814670][T13877] team0: Port device team_slave_0 added [ 378.845511][T13877] team0: Port device team_slave_1 added [ 378.905531][T13923] syzkaller0: entered promiscuous mode [ 378.911264][T13923] syzkaller0: entered allmulticast mode [ 379.262926][ T5146] Bluetooth: hci0: command tx timeout [ 379.354555][T13927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.350278][ T5146] Bluetooth: hci0: command tx timeout [ 381.919881][T13877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.933360][T13877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.972965][T13877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.034157][T13928] lo speed is unknown, defaulting to 1000 [ 382.036197][T13877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.076494][T13877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.120441][T13877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.138609][T13934] delete_channel: no stack [ 382.248673][T13877] hsr_slave_0: entered promiscuous mode [ 382.265391][T13877] hsr_slave_1: entered promiscuous mode [ 382.288860][T13877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.298323][T13877] Cannot create hsr debugfs directory [ 382.691366][T13877] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.736594][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2213'. [ 382.780534][T13952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.797060][T13877] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.965561][T13877] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.050440][T13877] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.192453][T13972] ip6tnl2: entered promiscuous mode [ 383.221247][T13972] ip6tnl2: entered allmulticast mode [ 383.399751][T13877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.430215][ T5146] Bluetooth: hci0: command tx timeout [ 383.439885][T13877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.460529][T13877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.490853][T13877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.801071][T13877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.869241][T13877] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.916322][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.923607][ T8605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.969289][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2224'. [ 383.991276][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.998597][ T9710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.042198][T14005] lo speed is unknown, defaulting to 1000 [ 384.133971][T14008] lo speed is unknown, defaulting to 1000 [ 384.372059][T14029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.598139][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2230'. [ 384.613006][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2230'. [ 384.632358][T14034] netlink: 'syz.6.2230': attribute type 1 has an invalid length. [ 384.880599][T13877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.935832][T14043] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2232'. [ 385.065305][T14046] netlink: 'syz.5.2235': attribute type 1 has an invalid length. [ 385.086170][T14046] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2235'. [ 385.154139][T13877] veth0_vlan: entered promiscuous mode [ 385.235080][T13877] veth1_vlan: entered promiscuous mode [ 385.252610][T14055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2235'. [ 385.317337][T14056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2236'. [ 385.345691][T14056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 385.391460][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 385.401761][T14058] ip6erspan0: entered allmulticast mode [ 385.415789][T13877] veth0_macvtap: entered promiscuous mode [ 385.443458][T13877] veth1_macvtap: entered promiscuous mode [ 385.521772][ T5146] Bluetooth: hci0: command tx timeout [ 385.548192][T13877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.591253][T13877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.604402][T13877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.619334][T13877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.636130][T13877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.647773][T13877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.723858][T13877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.744902][T13877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.766662][T13877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.792828][T13877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.811829][T14062] lo speed is unknown, defaulting to 1000 [ 385.955913][T14068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.968876][T14068] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.999493][T14068] batman_adv: batadv0: Interface activated: dummy0 [ 386.024104][T14068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.594466][ T8605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.606995][ T8605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.818475][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.844942][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.864010][ T9713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 387.495099][ T9710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.704440][ T9710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.016413][ T9710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.150746][T14120] __nla_validate_parse: 1 callbacks suppressed [ 388.150772][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2254'. [ 388.164521][ T9710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.255521][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 388.256997][T14124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2255'. [ 388.305245][T14125] syz.4.2253 uses old SIOCAX25GETINFO [ 388.360809][T14120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.476402][T14122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.510298][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.521710][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.522163][T14122] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 388.542111][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.554240][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.564790][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 388.572414][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.599741][T14122] bond1: (slave ipip0): Error -95 calling set_mac_address [ 388.762421][T14128] lo speed is unknown, defaulting to 1000 [ 389.021303][ T9710] bridge_slave_1: left allmulticast mode [ 389.040455][ T9710] bridge_slave_1: left promiscuous mode [ 389.062032][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.112524][ T9710] bridge_slave_0: left allmulticast mode [ 389.129717][ T9710] bridge_slave_0: left promiscuous mode [ 389.140011][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.672625][T14145] netlink: set zone limit has 4 unknown bytes [ 390.490550][ T9710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.502612][ T9710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.514684][ T9710] bond0 (unregistering): Released all slaves [ 390.627357][ T5146] Bluetooth: hci0: command tx timeout [ 390.705900][T14168] netlink: 308 bytes leftover after parsing attributes in process `syz.6.2266'. [ 390.795377][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2267'. [ 390.942849][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.031555][T14171] vlan0: entered allmulticast mode [ 391.041098][T14171] hsr0: entered allmulticast mode [ 391.047883][T14171] batadv_slave_1: entered allmulticast mode [ 391.091024][T14179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2267'. [ 391.101415][T14179] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 391.127228][T14128] chnl_net:caif_netlink_parms(): no params data found [ 391.484557][ T9710] hsr_slave_0: left promiscuous mode [ 391.513002][ T9710] hsr_slave_1: left promiscuous mode [ 391.519398][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.537653][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.574342][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.598526][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.698324][ T9710] veth1_macvtap: left promiscuous mode [ 391.715049][ T9710] veth0_macvtap: left promiscuous mode [ 391.731313][ T9710] veth1_vlan: left promiscuous mode [ 391.739658][ T9710] veth0_vlan: left promiscuous mode [ 392.561414][ T9710] team0 (unregistering): Port device team_slave_1 removed [ 392.626379][ T9710] team0 (unregistering): Port device team_slave_0 removed [ 392.712060][ T5146] Bluetooth: hci0: command 0x041b tx timeout [ 393.304208][T14128] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.311665][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.319700][T14128] bridge_slave_0: entered allmulticast mode [ 393.328763][T14128] bridge_slave_0: entered promiscuous mode [ 393.338291][T14128] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.346113][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.353747][T14128] bridge_slave_1: entered allmulticast mode [ 393.360917][T14128] bridge_slave_1: entered promiscuous mode [ 393.424092][T14222] tipc: Enabled bearer , priority 0 [ 393.435845][T14223] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 393.462953][T14223] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 393.471171][T14223] tipc: Resetting bearer [ 393.569406][T14233] xt_hashlimit: invalid interval [ 393.575881][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.605550][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.793300][T14128] team0: Port device team_slave_0 added [ 393.820015][T14128] team0: Port device team_slave_1 added [ 393.856184][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2284'. [ 393.924116][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.931384][T14240] lo speed is unknown, defaulting to 1000 [ 393.938447][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.984191][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.029988][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.049826][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.081088][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.446277][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 394.479376][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'. [ 394.503034][ T6977] tipc: Node number set to 4269801491 [ 394.783382][ T5843] Bluetooth: hci0: command 0x041b tx timeout [ 394.791694][ T8605] tipc: Resetting bearer [ 394.954363][T14128] hsr_slave_0: entered promiscuous mode [ 395.011750][T14128] hsr_slave_1: entered promiscuous mode [ 395.018571][T14128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.042903][T14128] Cannot create hsr debugfs directory [ 395.182143][T14281] lo speed is unknown, defaulting to 1000 [ 395.286363][T14285] netlink: 'syz.5.2294': attribute type 12 has an invalid length. [ 395.312966][T14285] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2294'. [ 396.042252][T14316] sctp: [Deprecated]: syz.6.2304 (pid 14316) Use of int in max_burst socket option. [ 396.042252][T14316] Use struct sctp_assoc_value instead [ 396.087729][T14314] lo speed is unknown, defaulting to 1000 [ 396.095072][T14316] netlink: 'syz.6.2304': attribute type 21 has an invalid length. [ 396.123224][T14316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2304'. [ 396.520462][T14128] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.578566][T14128] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.610735][T14128] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.626375][T14334] netlink: 'syz.6.2306': attribute type 1 has an invalid length. [ 396.656195][T14128] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.690512][T14344] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 396.704643][T14344] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 396.863328][ T5843] Bluetooth: hci0: command 0x041b tx timeout [ 396.954539][T14128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.977509][T14128] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.998809][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.006143][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.055065][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.062500][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.338000][T14359] xt_nfacct: accounting object `syz1' does not exists [ 397.620887][T14128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.642476][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2316'. [ 397.692468][T14372] lo speed is unknown, defaulting to 1000 [ 397.774525][T14128] veth0_vlan: entered promiscuous mode [ 397.780595][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 397.898063][T14128] veth1_vlan: entered promiscuous mode [ 397.905879][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2320'. [ 397.936388][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2320'. [ 398.010146][T14128] veth0_macvtap: entered promiscuous mode [ 398.032574][T14128] veth1_macvtap: entered promiscuous mode [ 398.076455][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.087294][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.099106][T14128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.112151][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.153161][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.204903][T14128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.247551][T14128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.264457][T14128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.295220][T14128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.323950][T14128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.603767][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 398.652973][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.677384][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.775246][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.797651][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.935930][T14441] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2332'. [ 398.945328][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.957176][ T5843] Bluetooth: hci0: command 0x041b tx timeout [ 398.973705][T14442] netlink: 'syz.2.2333': attribute type 39 has an invalid length. [ 398.979615][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2332'. [ 399.403287][T14462] gretap0: entered allmulticast mode [ 399.416374][T14462] netlink: 'syz.4.2340': attribute type 8 has an invalid length. [ 399.448098][T14462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 399.471984][T14463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2340'. [ 399.482927][T14467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2340'. [ 399.589420][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 399.675815][T14468] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 399.756312][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2344'. [ 399.784086][T14481] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 399.905840][T14485] lo speed is unknown, defaulting to 1000 [ 400.066560][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2347'. [ 401.345320][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2354'. [ 401.580492][T14522] sctp: [Deprecated]: syz.2.2356 (pid 14522) Use of int in maxseg socket option. [ 401.580492][T14522] Use struct sctp_assoc_value instead [ 401.623986][T14522] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 401.649345][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.659397][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.669622][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.679517][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.690565][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 401.698677][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.748789][T14524] lo speed is unknown, defaulting to 1000 [ 401.975682][T14536] bridge: RTM_NEWNEIGH with invalid ether address [ 402.126450][T14524] chnl_net:caif_netlink_parms(): no params data found [ 402.151821][T14546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2362'. [ 402.183108][T14545] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 402.215922][T14545] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 402.447886][T14553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2365'. [ 402.563136][T14524] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.614756][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.622257][T14524] bridge_slave_0: entered allmulticast mode [ 402.676174][T14524] bridge_slave_0: entered promiscuous mode [ 402.696898][T14524] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.712842][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.730475][T14524] bridge_slave_1: entered allmulticast mode [ 402.743084][T14524] bridge_slave_1: entered promiscuous mode [ 402.873092][T14524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.899867][T14565] lo speed is unknown, defaulting to 1000 [ 402.902277][T14524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.923691][T14562] netlink: 'syz.5.2369': attribute type 1 has an invalid length. [ 403.015666][T14524] team0: Port device team_slave_0 added [ 403.050593][T14524] team0: Port device team_slave_1 added [ 403.119341][T14524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.129421][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.156320][T14524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.243571][T14524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.254688][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.284841][T14524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.299971][T14577] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 403.311428][T14577] tipc: Enabled bearer , priority 10 [ 403.461700][T14524] hsr_slave_0: entered promiscuous mode [ 403.471525][T14524] hsr_slave_1: entered promiscuous mode [ 403.477962][T14524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.486157][T14524] Cannot create hsr debugfs directory [ 403.762793][ T5843] Bluetooth: hci0: command tx timeout [ 403.891126][T14588] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 403.942409][T14593] netlink: 'syz.4.2377': attribute type 4 has an invalid length. [ 403.965915][T14524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.023384][T14589] __nla_validate_parse: 3 callbacks suppressed [ 404.023406][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2376'. [ 404.079949][T14592] bridge0: port 4(gretap0) entered blocking state [ 404.094319][T14592] bridge0: port 4(gretap0) entered disabled state [ 404.101322][T14592] gretap0: entered allmulticast mode [ 404.133408][T14592] gretap0: entered promiscuous mode [ 404.213955][T14524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.333958][T14602] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2378'. [ 404.354848][T14524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.470752][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 404.492429][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 404.518719][T14524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.531174][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 404.557470][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 404.618923][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 404.651689][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 404.702531][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 404.733959][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 404.851238][T14524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.883520][T14524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.911707][T14618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 405.017723][T14524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 405.224939][T14627] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 405.427622][T14614] lo speed is unknown, defaulting to 1000 [ 405.433618][T14524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 405.519807][T14617] lo speed is unknown, defaulting to 1000 [ 405.822865][ T5843] Bluetooth: hci0: command tx timeout [ 405.842615][T14524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.948064][T14524] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.983789][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.991042][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.020930][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.028292][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.656614][T14645] bridge0: port 1(ipvlan2) entered blocking state [ 406.691474][T14645] bridge0: port 1(ipvlan2) entered disabled state [ 406.703933][T14645] ipvlan2: entered allmulticast mode [ 406.709325][T14645] bridge0: entered allmulticast mode [ 406.785017][T14645] ipvlan2: left allmulticast mode [ 406.800442][T14645] bridge0: left allmulticast mode [ 406.946950][T14524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.030312][T14652] sock: sock_set_timeout: `syz.5.2392' (pid 14652) tries to set negative timeout [ 407.069219][T14524] veth0_vlan: entered promiscuous mode [ 407.095356][T14654] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 407.135872][T14524] veth1_vlan: entered promiscuous mode [ 407.218143][T14524] veth0_macvtap: entered promiscuous mode [ 407.243817][T14524] veth1_macvtap: entered promiscuous mode [ 407.292225][T14524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.320105][T14524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.330393][T14524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.341555][T14524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.364490][T14524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.405966][T14524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.431116][T14665] netlink: 'syz.2.2394': attribute type 1 has an invalid length. [ 407.456612][T14524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.476348][T14524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.487302][T14524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.498726][T14524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.509714][T14524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.519009][T14524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.531953][T14524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.552224][T14524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.752407][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.769125][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.808312][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.818883][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.903114][ T5843] Bluetooth: hci0: command tx timeout [ 408.780993][T14708] macsec1: entered promiscuous mode [ 408.823110][T14708] ip6gretap0: entered promiscuous mode [ 408.839565][T14708] macsec1: entered allmulticast mode [ 408.860470][T14708] ip6gretap0: entered allmulticast mode [ 409.878534][T14726] __nla_validate_parse: 61 callbacks suppressed [ 409.878556][T14726] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2411'. [ 409.904258][T14720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.047442][T14729] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2410'. [ 410.298061][T14744] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2414'. [ 410.328054][T14737] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2414'. [ 410.350915][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2416'. [ 410.392225][T14741] lo speed is unknown, defaulting to 1000 [ 410.393447][T14746] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2415'. [ 410.429623][T14737] netlink: 'syz.5.2414': attribute type 27 has an invalid length. [ 410.487986][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.503555][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.521021][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.538768][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.557932][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 410.565563][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.583536][T14750] lo speed is unknown, defaulting to 1000 [ 410.652481][T14748] lo speed is unknown, defaulting to 1000 [ 410.791833][T14754] x_tables: duplicate underflow at hook 1 [ 411.023597][T14748] chnl_net:caif_netlink_parms(): no params data found [ 411.124802][T14770] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2423'. [ 411.145599][T14770] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2423'. [ 411.155677][T14770] netlink: 'syz.5.2423': attribute type 5 has an invalid length. [ 411.172927][T14770] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2423'. [ 411.227480][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.238854][T14748] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.251770][T14748] bridge_slave_0: entered allmulticast mode [ 411.274215][T14748] bridge_slave_0: entered promiscuous mode [ 411.343768][T14748] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.350935][T14748] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.383169][T14748] bridge_slave_1: entered allmulticast mode [ 411.394050][T14748] bridge_slave_1: entered promiscuous mode [ 411.585103][T14748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.608292][T14748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.759593][T14748] team0: Port device team_slave_0 added [ 411.775858][T14748] team0: Port device team_slave_1 added [ 411.844166][T14793] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2430'. [ 411.859224][T14795] lo speed is unknown, defaulting to 1000 [ 411.864040][T14748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.873274][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.930533][T14748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.962803][T14748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.969814][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.033135][T14748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.298572][ T5900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.317934][T14748] hsr_slave_0: entered promiscuous mode [ 412.323161][T14808] netlink: 'syz.4.2432': attribute type 11 has an invalid length. [ 412.324881][T14748] hsr_slave_1: entered promiscuous mode [ 412.338236][T14748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.346547][T14748] Cannot create hsr debugfs directory [ 412.353187][ T5900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.633010][ T5843] Bluetooth: hci0: command tx timeout [ 413.077626][T14748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.232484][T14748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.335788][T14748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.460388][T14748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.728168][T14748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 413.787734][T14748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.823989][T14748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.834107][T14829] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 413.865167][T14748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.108129][T14748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.165252][T14748] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.191313][T14834] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 414.207843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.215101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.286099][T14846] ip6gre1: entered promiscuous mode [ 414.305213][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.312523][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.703548][ T5843] Bluetooth: hci0: command tx timeout [ 414.889275][T14748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.028540][T14748] veth0_vlan: entered promiscuous mode [ 415.086185][T14748] veth1_vlan: entered promiscuous mode [ 415.156037][T14871] FAULT_INJECTION: forcing a failure. [ 415.156037][T14871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.183151][T14871] CPU: 1 UID: 0 PID: 14871 Comm: syz.6.2452 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 415.183184][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.183195][T14871] Call Trace: [ 415.183202][T14871] [ 415.183210][T14871] dump_stack_lvl+0x241/0x360 [ 415.183240][T14871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.183260][T14871] ? __pfx__printk+0x10/0x10 [ 415.183281][T14871] ? __pfx_lock_release+0x10/0x10 [ 415.183316][T14871] should_fail_ex+0x40a/0x550 [ 415.183347][T14871] _copy_from_user+0x2d/0xb0 [ 415.183370][T14871] copy_msghdr_from_user+0xae/0x680 [ 415.183403][T14871] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 415.183428][T14871] ? __fget_files+0x2a/0x410 [ 415.183464][T14871] ? __fget_files+0x2a/0x410 [ 415.183498][T14871] __sys_sendmsg+0x209/0x350 [ 415.183525][T14871] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.183560][T14871] ? do_sys_openat2+0x17a/0x1d0 [ 415.183615][T14871] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 415.183644][T14871] ? do_syscall_64+0x100/0x230 [ 415.183674][T14871] ? do_syscall_64+0xb6/0x230 [ 415.183703][T14871] do_syscall_64+0xf3/0x230 [ 415.183729][T14871] ? clear_bhb_loop+0x35/0x90 [ 415.183758][T14871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.183783][T14871] RIP: 0033:0x7fb1ac18d169 [ 415.183802][T14871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.183818][T14871] RSP: 002b:00007fb1ad09b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.183839][T14871] RAX: ffffffffffffffda RBX: 00007fb1ac3a5fa0 RCX: 00007fb1ac18d169 [ 415.183853][T14871] RDX: 0000000004040814 RSI: 00002000000002c0 RDI: 0000000000000004 [ 415.183866][T14871] RBP: 00007fb1ad09b090 R08: 0000000000000000 R09: 0000000000000000 [ 415.183877][T14871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.183889][T14871] R13: 0000000000000000 R14: 00007fb1ac3a5fa0 R15: 00007ffe730d3348 [ 415.183916][T14871] [ 415.191425][T14748] veth0_macvtap: entered promiscuous mode [ 415.418277][T14874] __nla_validate_parse: 4 callbacks suppressed [ 415.418300][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2453'. [ 415.592300][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 415.888475][T14748] veth1_macvtap: entered promiscuous mode [ 415.980167][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.018495][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.043200][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.069824][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.095588][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.118914][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.156136][T14748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.185662][T14888] netlink: 'syz.2.2455': attribute type 1 has an invalid length. [ 416.220156][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.253328][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.264123][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.275836][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.288999][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.300530][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.313687][T14748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.324610][T14748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.377916][T14748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.387495][T14748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.396856][T14748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.431261][T14887] lo speed is unknown, defaulting to 1000 [ 416.455581][T14895] tun0: tun_chr_ioctl cmd 1074025673 [ 416.468705][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2459'. [ 416.483018][T14895] netlink: 'syz.5.2459': attribute type 3 has an invalid length. [ 416.661860][T14900] sctp: [Deprecated]: syz.2.2461 (pid 14900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.661860][T14900] Use struct sctp_sack_info instead [ 416.784963][ T5843] Bluetooth: hci0: command tx timeout [ 416.896665][T14882] pimreg0: tun_chr_ioctl cmd 1074025677 [ 416.902584][T14882] pimreg0: linktype set to 65534 [ 417.011983][ T8606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.062466][ T8606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.225676][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.249234][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.744677][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2467'. [ 417.757692][T14919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2468'. [ 417.773721][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2467'. [ 417.803731][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2467'. [ 417.838204][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 417.918502][T14924] sch_tbf: burst 511 is lower than device veth7 mtu (1514) ! [ 417.981909][T14923] netlink: 'syz.5.2469': attribute type 3 has an invalid length. [ 418.116890][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2470'. [ 418.201026][T14932] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2471'. [ 418.377769][T14935] netlink: 'syz.4.2472': attribute type 1 has an invalid length. [ 419.587404][T14973] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.2478'. [ 419.617864][T14973] openvswitch: netlink: Message has 44053 unknown bytes. [ 419.653196][T14973] openvswitch: netlink: Flow key attr not present in new flow. [ 419.835072][T14981] netlink: 'syz.5.2484': attribute type 1 has an invalid length. [ 419.858075][T14977] lo speed is unknown, defaulting to 1000 [ 419.927047][T14981] 8021q: adding VLAN 0 to HW filter on device bond6 [ 419.942377][T14985] netlink: 'syz.2.2482': attribute type 1 has an invalid length. [ 420.019366][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.031486][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.040724][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.050745][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.058884][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 420.068962][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.342113][T14984] bond6: (slave ip6gretap2): making interface the new active one [ 420.387761][T14984] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 420.422813][T14984] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 420.430742][T14984] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 420.532500][T14989] netlink: 'syz.4.2485': attribute type 1 has an invalid length. [ 420.603811][T14985] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.857102][ T6979] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 420.899919][T14986] lo speed is unknown, defaulting to 1000 [ 420.913212][ T6979] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 421.134239][ T5900] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 421.235417][T15010] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 421.264872][T15010] syzkaller1: linktype set to 780 [ 421.364447][ T9713] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 421.553938][T14986] chnl_net:caif_netlink_parms(): no params data found [ 421.708078][T15014] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 421.946182][T14986] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.973966][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.981697][T14986] bridge_slave_0: entered allmulticast mode [ 422.014717][T14986] bridge_slave_0: entered promiscuous mode [ 422.095707][T14986] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.115883][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.134186][T14986] bridge_slave_1: entered allmulticast mode [ 422.144926][T15045] netlink: 'syz.5.2497': attribute type 1 has an invalid length. [ 422.164690][T14986] bridge_slave_1: entered promiscuous mode [ 422.176013][ T82] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.193909][ T82] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.417431][T15059] __nla_validate_parse: 2 callbacks suppressed [ 422.417456][T15059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2501'. [ 422.453065][T15059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2501'. [ 422.470060][T14986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.493703][ T82] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.513255][ T5929] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.514796][T15062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2503'. [ 422.551146][T14986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.683913][T15065] lo speed is unknown, defaulting to 1000 [ 422.714098][T14986] team0: Port device team_slave_0 added [ 422.735084][T14986] team0: Port device team_slave_1 added [ 422.847923][T14986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.875195][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.968336][T14986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.048113][T14986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.084554][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.169762][T14986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.280519][T15085] lo speed is unknown, defaulting to 1000 [ 423.387850][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2511'. [ 423.429279][T14986] hsr_slave_0: entered promiscuous mode [ 423.436800][T14986] hsr_slave_1: entered promiscuous mode [ 423.443409][T14986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.451155][T14986] Cannot create hsr debugfs directory [ 423.603815][ T9713] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 423.649785][T15103] netlink: 'syz.6.2512': attribute type 1 has an invalid length. [ 423.921747][T14986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.066062][T14986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.116697][T15111] netlink: 'syz.6.2515': attribute type 1 has an invalid length. [ 424.181919][T14986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.206285][T15111] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 424.253625][T15111] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2515'. [ 424.310657][T14986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.371606][T15118] ip6tnl2: entered promiscuous mode [ 424.711225][T14986] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 424.783043][ T8606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 424.797261][T14986] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 424.840746][T15138] : renamed from bond0 [ 424.854764][T14986] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.895998][T14986] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.926490][T15143] sch_tbf: burst 5 is lower than device ip6tnl0 mtu (1452) ! [ 425.123647][T15150] netlink: 'syz.2.2524': attribute type 1 has an invalid length. [ 425.228417][T14986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.293363][T15158] lo speed is unknown, defaulting to 1000 [ 425.300433][T14986] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.442949][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.448586][T15168] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2530'. [ 425.450209][ T8607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.506598][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.513947][ T8607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.746083][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 425.776703][T15183] vlan0: entered promiscuous mode [ 425.782068][T15183] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 425.818831][T15182] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 425.883640][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 426.099174][T14986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.118923][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2535'. [ 426.173937][T15203] openvswitch: netlink: Invalid VLAN frame [ 426.214427][T14986] veth0_vlan: entered promiscuous mode [ 426.230814][T14986] veth1_vlan: entered promiscuous mode [ 426.269815][T14986] veth0_macvtap: entered promiscuous mode [ 426.318997][T14986] veth1_macvtap: entered promiscuous mode [ 426.374704][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.402986][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.414015][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.425561][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.444288][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.482934][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.515279][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.534767][T15220] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 426.565177][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.589760][T14986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.611363][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.623574][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 426.632552][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.653991][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.693981][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.715006][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.739676][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.764634][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.786395][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.812273][T14986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.856563][T14986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.895060][T14986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.918709][T14986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.949165][T14986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.013298][ T1161] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 427.191828][T15232] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 427.278493][T15232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 427.296314][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.317218][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.423783][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.462480][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.578840][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 427.845338][T15247] lo speed is unknown, defaulting to 1000 [ 427.913699][T15254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.087923][T15258] lo speed is unknown, defaulting to 1000 [ 428.123026][ T1161] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 428.557482][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2551'. [ 429.093592][T15286] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2560'. [ 429.263097][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 429.776056][T15311] netlink: 'syz.6.2565': attribute type 32 has an invalid length. [ 429.803112][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2565'. [ 429.815945][T15311] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 429.878125][T15310] netlink: 'syz.6.2565': attribute type 10 has an invalid length. [ 429.881249][T15318] netlink: 'syz.6.2565': attribute type 10 has an invalid length. [ 429.893840][T15319] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2566'. [ 429.990049][T15316] gretap0: left allmulticast mode [ 430.374303][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 430.762561][T15316] batman_adv: batadv0: Interface deactivated: dummy0 [ 430.819891][T15316] tipc: Resetting bearer [ 430.832205][T15316] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 430.849770][T15316] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 430.862547][T15339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2570'. [ 430.894515][T15316] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.904102][T15316] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.913340][T15316] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.922256][T15316] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.026699][T15334] lo speed is unknown, defaulting to 1000 [ 431.053667][T15334] lo speed is unknown, defaulting to 1000 [ 431.083541][T15334] lo speed is unknown, defaulting to 1000 [ 431.121927][T15334] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 431.179723][T15346] macsec0: entered promiscuous mode [ 431.206250][T15334] lo speed is unknown, defaulting to 1000 [ 431.224300][T15334] lo speed is unknown, defaulting to 1000 [ 431.241062][T15334] lo speed is unknown, defaulting to 1000 [ 431.273979][T15334] lo speed is unknown, defaulting to 1000 [ 431.294299][T15349] macsec0: left promiscuous mode [ 431.314044][T15334] lo speed is unknown, defaulting to 1000 [ 431.321080][T15334] lo speed is unknown, defaulting to 1000 [ 431.363494][T15334] lo speed is unknown, defaulting to 1000 [ 431.384143][T15334] lo speed is unknown, defaulting to 1000 [ 431.408192][T15334] lo speed is unknown, defaulting to 1000 [ 431.429007][T15334] lo speed is unknown, defaulting to 1000 [ 431.454374][T15334] lo speed is unknown, defaulting to 1000 [ 431.465453][T15334] lo speed is unknown, defaulting to 1000 [ 431.504282][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 431.513540][T15334] lo speed is unknown, defaulting to 1000 [ 431.524138][T15334] lo speed is unknown, defaulting to 1000 [ 431.535551][T15334] lo speed is unknown, defaulting to 1000 [ 431.542595][T15334] lo speed is unknown, defaulting to 1000 [ 431.584289][T15334] lo speed is unknown, defaulting to 1000 [ 431.596698][T15334] lo speed is unknown, defaulting to 1000 [ 431.615932][T15334] lo speed is unknown, defaulting to 1000 [ 431.634613][T15334] lo speed is unknown, defaulting to 1000 [ 431.646664][T15334] lo speed is unknown, defaulting to 1000 [ 431.654039][T15334] lo speed is unknown, defaulting to 1000 [ 431.794436][T15370] macvlan4: entered promiscuous mode [ 431.800034][T15370] bridge0: entered promiscuous mode [ 431.885009][T15370] macvlan5: entered promiscuous mode [ 431.946691][T15365] netlink: 'syz.5.2580': attribute type 1 has an invalid length. [ 432.137067][T15384] netlink: 'syz.5.2585': attribute type 4 has an invalid length. [ 432.153634][T15381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2584'. [ 432.319759][T15396] netlink: 'syz.6.2589': attribute type 1 has an invalid length. [ 432.348845][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2589'. [ 432.423586][T15396] Cannot find set identified by id 65535 to match [ 432.444590][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2591'. [ 432.455179][T15396] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2589'. [ 432.623633][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 432.642354][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2595'. [ 432.687651][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2595'. [ 432.698493][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2595'. [ 432.703426][T15413] netlink: 'syz.4.2593': attribute type 2 has an invalid length. [ 432.709219][T15412] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2595'. [ 432.745025][T15412] nbd: socks must be embedded in a SOCK_ITEM attr [ 432.777627][T15416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 432.812988][T15416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.525213][T15447] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2604'. [ 433.538251][T15447] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2604'. [ 433.679505][T15451] bridge0: port 1(gretap0) entered blocking state [ 433.686880][T15451] bridge0: port 1(gretap0) entered disabled state [ 433.694148][T15451] gretap0: entered allmulticast mode [ 433.701308][T15451] gretap0: entered promiscuous mode [ 433.734552][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.775130][T15456] gretap0: left allmulticast mode [ 433.780249][T15456] gretap0: left promiscuous mode [ 433.813699][T15456] bridge0: port 1(gretap0) entered disabled state [ 433.897753][T15459] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 434.224288][T15473] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2613'. [ 434.412231][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 434.529420][T15483] netlink: 'syz.4.2616': attribute type 1 has an invalid length. [ 434.846305][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 434.857273][T15503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.423190][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 435.483726][T15537] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 435.593707][T15538] lo speed is unknown, defaulting to 1000 [ 435.635630][T15541] macvlan0: entered promiscuous mode [ 435.653795][T15541] bridge0: entered promiscuous mode [ 435.664919][T15538] lo speed is unknown, defaulting to 1000 [ 435.679655][T15534] macvlan1: entered promiscuous mode [ 435.929872][T15549] netlink: 29 bytes leftover after parsing attributes in process `syz.4.2633'. [ 435.956658][T15549] IPVS: length: 24 != 16106127384 [ 435.976474][T15549] netlink: 58 bytes leftover after parsing attributes in process `syz.4.2633'. [ 436.033036][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 436.371148][T15560] lo speed is unknown, defaulting to 1000 [ 436.399052][T15560] lo speed is unknown, defaulting to 1000 [ 436.475259][T15559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.153088][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 437.653674][T15593] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.661990][T15593] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.670388][T15593] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.678796][T15593] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.157588][T15608] netlink: 'syz.6.2649': attribute type 1 has an invalid length. [ 438.264440][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 438.558637][T15625] __nla_validate_parse: 5 callbacks suppressed [ 438.558662][T15625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2652'. [ 438.631633][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 438.663129][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2652'. [ 439.089015][T15647] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2659'. [ 439.297072][T15657] netlink: 'syz.6.2662': attribute type 27 has an invalid length. [ 439.341764][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2663'. [ 439.372927][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 439.405081][T15657] ip6erspan0: left allmulticast mode [ 439.415654][T15657] ip6gretap0: left allmulticast mode [ 439.421008][T15657] ip6gretap0: left promiscuous mode [ 439.443776][T15657] macsec1: left promiscuous mode [ 439.449502][T15657] macsec1: left allmulticast mode [ 439.471236][T15657] ip6gre1: left promiscuous mode [ 439.499056][T15657] ip6tnl2: left promiscuous mode [ 439.555843][T15660] 8021q: adding VLAN 0 to HW filter on device  [ 439.573334][T15660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.600110][ T26] lo speed is unknown, defaulting to 1000 [ 439.633130][T15528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.641073][T15528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.802948][ T26] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.835781][T15665] netlink: 4316 bytes leftover after parsing attributes in process `syz.5.2664'. [ 439.996227][T15672] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 440.023963][T15673] netlink: 'syz.6.2667': attribute type 1 has an invalid length. [ 440.043474][T15673] netlink: 'syz.6.2667': attribute type 4 has an invalid length. [ 440.051280][T15673] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2667'. [ 440.366256][T15686] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2671'. [ 440.492139][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 440.553781][T15691] bridge: RTM_NEWNEIGH with invalid ether address [ 440.616974][T15694] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2673'. [ 440.714323][T15531] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.753159][T15531] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.788393][T15697] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 440.823658][T15703] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 440.827925][T15705] lo speed is unknown, defaulting to 1000 [ 440.843153][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.875068][T15705] lo speed is unknown, defaulting to 1000 [ 441.059362][T15713] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2679'. [ 441.375515][T15728] syz.4.2680: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 441.392032][T15728] CPU: 1 UID: 0 PID: 15728 Comm: syz.4.2680 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 441.392054][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 441.392063][T15728] Call Trace: [ 441.392067][T15728] [ 441.392073][T15728] dump_stack_lvl+0x241/0x360 [ 441.392093][T15728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.392106][T15728] ? __pfx__printk+0x10/0x10 [ 441.392121][T15728] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 441.392137][T15728] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 441.392153][T15728] warn_alloc+0x278/0x410 [ 441.392167][T15728] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 441.392181][T15728] ? __pfx_warn_alloc+0x10/0x10 [ 441.392193][T15728] ? kasan_save_track+0x3f/0x80 [ 441.392205][T15728] ? __kasan_kmalloc+0x98/0xb0 [ 441.392218][T15728] ? xsk_setsockopt+0x4aa/0x810 [ 441.392230][T15728] ? do_sock_setsockopt+0x3af/0x720 [ 441.392243][T15728] ? __x64_sys_setsockopt+0x1ee/0x280 [ 441.392255][T15728] ? do_syscall_64+0xf3/0x230 [ 441.392271][T15728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.392306][T15728] __vmalloc_node_range_noprof+0x126/0x1380 [ 441.392358][T15728] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 441.392386][T15728] ? __kasan_kmalloc+0x98/0xb0 [ 441.392410][T15728] vmalloc_user_noprof+0x74/0x80 [ 441.392422][T15728] ? xskq_create+0xb6/0x170 [ 441.392433][T15728] xskq_create+0xb6/0x170 [ 441.392447][T15728] xsk_init_queue+0xa1/0x100 [ 441.392461][T15728] xsk_setsockopt+0x4aa/0x810 [ 441.392474][T15728] ? __pfx_xsk_setsockopt+0x10/0x10 [ 441.392486][T15728] ? __pfx_aa_sk_perm+0x10/0x10 [ 441.392505][T15728] ? aa_sock_opt_perm+0x79/0x120 [ 441.392525][T15728] ? __pfx_xsk_setsockopt+0x10/0x10 [ 441.392536][T15728] do_sock_setsockopt+0x3af/0x720 [ 441.392558][T15728] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 441.392586][T15728] ? __fget_files+0x395/0x410 [ 441.392612][T15728] ? __fget_files+0x2a/0x410 [ 441.392655][T15728] __x64_sys_setsockopt+0x1ee/0x280 [ 441.392685][T15728] do_syscall_64+0xf3/0x230 [ 441.392712][T15728] ? clear_bhb_loop+0x35/0x90 [ 441.392741][T15728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.392768][T15728] RIP: 0033:0x7f253a78d169 [ 441.392795][T15728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.392812][T15728] RSP: 002b:00007f25385f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 441.392835][T15728] RAX: ffffffffffffffda RBX: 00007f253a9a5fa0 RCX: 00007f253a78d169 [ 441.392849][T15728] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 441.392860][T15728] RBP: 00007f253a80e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 441.392872][T15728] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.392884][T15728] R13: 0000000000000000 R14: 00007f253a9a5fa0 R15: 00007ffef65d9788 [ 441.392917][T15728] [ 441.687782][T15728] Mem-Info: [ 441.691154][T15728] active_anon:5620 inactive_anon:0 isolated_anon:0 [ 441.691154][T15728] active_file:1703 inactive_file:38456 isolated_file:0 [ 441.691154][T15728] unevictable:813 dirty:102 writeback:0 [ 441.691154][T15728] slab_reclaimable:12019 slab_unreclaimable:129493 [ 441.691154][T15728] mapped:30727 shmem:1470 pagetables:731 [ 441.691154][T15728] sec_pagetables:0 bounce:0 [ 441.691154][T15728] kernel_misc_reclaimable:0 [ 441.691154][T15728] free:1300534 free_pcp:5426 free_cma:0 [ 441.743806][T15728] Node 0 active_anon:22480kB inactive_anon:0kB active_file:6812kB inactive_file:153748kB unevictable:1716kB isolated(anon):0kB isolated(file):0kB mapped:122808kB dirty:408kB writeback:0kB shmem:4344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13236kB pagetables:2924kB sec_pagetables:0kB all_unreclaimable? no [ 441.776809][T15728] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 441.808402][T15728] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.837615][T15728] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 441.844036][T15728] Node 0 DMA32 free:1281912kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:22340kB inactive_anon:0kB active_file:6812kB inactive_file:153436kB unevictable:1716kB writepending:404kB present:3129332kB managed:2549692kB mlocked:180kB bounce:0kB free_pcp:21044kB local_pcp:17180kB free_cma:0kB [ 441.876391][T15728] lowmem_reserve[]: 0 0 0 0 0 [ 441.881215][T15728] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 441.908765][T15728] lowmem_reserve[]: 0 0 0 0 0 [ 441.914427][T15728] Node 1 Normal free:3904860kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 441.944143][T15728] lowmem_reserve[]: 0 0 0 0 0 [ 441.949027][T15728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 441.962125][T15728] Node 0 DMA32: 192*4kB (UME) 29*8kB (UME) 92*16kB (UME) 32*32kB (UME) 494*64kB (UME) 74*128kB (UM) 412*256kB (UME) 276*512kB (UME) 167*1024kB (UME) 12*2048kB (UME) 195*4096kB (UM) = 1285672kB [ 441.987434][T15728] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 441.999665][T15728] Node 1 Normal: 66*4kB (UME) 21*8kB (UME) 32*16kB (UME) 205*32kB (UME) 91*64kB (UME) 31*128kB (UME) 10*256kB (UM) 8*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3904912kB [ 442.030226][T15728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.041000][T15728] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 442.099091][T15734] lo speed is unknown, defaulting to 1000 [ 442.113696][T15734] lo speed is unknown, defaulting to 1000 [ 442.160785][T15728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.269623][T15728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 442.320612][T15728] 41629 total pagecache pages [ 442.340897][T15728] 0 pages in swap cache [ 442.374048][T15728] Free swap = 124996kB [ 442.378371][T15728] Total swap = 124996kB [ 442.421514][T15728] 2097051 pages RAM [ 442.433217][T15728] 0 pages HighMem/MovableOnly [ 442.452874][T15728] 427906 pages reserved [ 442.457137][T15728] 0 pages cma reserved [ 442.783970][ T5146] Bluetooth: hci1: command 0x0401 tx timeout [ 442.803943][ T5891] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 442.803964][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.860321][ T5146] Bluetooth: hci4: link tx timeout [ 442.866230][ T5146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 442.874799][ T55] Bluetooth: hci4: link tx timeout [ 442.880074][ T55] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 443.965047][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 444.150759][T15791] pim6reg9: entered allmulticast mode [ 444.463110][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.864475][ T55] Bluetooth: hci1: command 0x0401 tx timeout [ 444.943187][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 444.957420][T15812] sctp: [Deprecated]: syz.4.2705 (pid 15812) Use of int in max_burst socket option deprecated. [ 444.957420][T15812] Use struct sctp_assoc_value instead [ 445.162997][T15531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 445.248124][T15824] lo speed is unknown, defaulting to 1000 [ 445.274038][T15824] lo speed is unknown, defaulting to 1000 [ 445.330747][T15827] netlink: 'syz.2.2710': attribute type 10 has an invalid length. [ 445.796063][T15848] lo speed is unknown, defaulting to 1000 [ 445.834499][T15848] lo speed is unknown, defaulting to 1000 [ 446.117659][T15855] __nla_validate_parse: 6 callbacks suppressed [ 446.117680][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 446.164025][T15855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2717'. [ 446.221937][T15855] gretap2: entered promiscuous mode [ 446.273111][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 446.675352][T15876] syzkaller0: entered allmulticast mode [ 446.681433][T15876] syzkaller0: entered promiscuous mode [ 446.734267][T15864] syzkaller0 (unregistering): left promiscuous mode [ 446.760254][T15864] syzkaller0 (unregistering): left allmulticast mode [ 447.010010][T15889] netlink: 'syz.2.2725': attribute type 1 has an invalid length. [ 447.030544][T15889] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2725'. [ 447.072452][T15893] netlink: 'syz.6.2727': attribute type 1 has an invalid length. [ 447.103817][T15893] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2727'. [ 447.348144][T15908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.394300][T15528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 447.411322][T15910] netlink: 'syz.6.2732': attribute type 1 has an invalid length. [ 447.514908][T15912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.549889][T15918] vlan0: left promiscuous mode [ 447.603267][T15918] bridge0: left promiscuous mode [ 447.608826][T15918] macvlan4: left promiscuous mode [ 447.637590][T15918] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.646518][T15918] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.655488][T15918] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.665098][T15918] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.692526][T15918] gretap2: left promiscuous mode [ 448.290078][T15932] lo speed is unknown, defaulting to 1000 [ 448.328717][T15932] lo speed is unknown, defaulting to 1000 [ 448.550974][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 448.573719][ T8608] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 448.985413][T15956] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 449.673226][ T8606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 449.720128][T15969] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2747'. [ 450.014096][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2750'. [ 450.188863][T15985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2752'. [ 450.208655][T15985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2752'. [ 450.243296][T15989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2752'. [ 450.491633][T15997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.519595][T16001] netlink: 'syz.2.2758': attribute type 11 has an invalid length. [ 450.645377][T16010] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 450.792876][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 451.432023][T16020] __nla_validate_parse: 5 callbacks suppressed [ 451.432047][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 451.894029][ T8606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 452.062952][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 452.218756][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 452.285759][T16033] vti1: entered promiscuous mode [ 452.290799][T16033] vti1: entered allmulticast mode [ 452.589126][T16041] openvswitch: netlink: Actions may not be safe on all matching packets [ 452.649645][T16042] lo speed is unknown, defaulting to 1000 [ 452.663991][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2771'. [ 452.695996][T16042] lo speed is unknown, defaulting to 1000 [ 452.847396][T16049] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 452.923902][T16050] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 453.024103][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 453.343656][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 453.537800][T16071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2777'. [ 453.566142][T16070] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2778'. [ 453.608070][T16070] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2778'. [ 453.618582][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2778'. [ 453.652945][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2778'. [ 453.818601][T16077] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2779'. [ 453.830391][T16077] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2779'. [ 454.145704][T15528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 455.273196][ T8608] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 455.494762][T16085] netlink: 'syz.4.2781': attribute type 1 has an invalid length. [ 456.423890][ T8606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 457.418043][T16075] lo speed is unknown, defaulting to 1000 [ 457.441760][T16075] lo speed is unknown, defaulting to 1000 [ 457.524318][T16087] IPv6: sit1: Disabled Multicast RS [ 457.552866][ T8606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 457.605277][T16090] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2783'. [ 457.614615][T16090] netlink: 'syz.6.2783': attribute type 9 has an invalid length. [ 457.622459][T16090] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2783'. [ 457.702346][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2783'. [ 457.712596][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2783'. [ 457.719202][T16096] lo speed is unknown, defaulting to 1000 [ 457.744403][T16096] lo speed is unknown, defaulting to 1000 [ 457.987391][T16107] netlink: 236 bytes leftover after parsing attributes in process `syz.6.2786'. [ 458.117490][T16107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.134661][ T6967] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.183308][ T6967] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.393459][ T8606] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.415635][ T8606] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.430273][T16123] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:21 [ 458.733760][ T8606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 458.804770][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.959678][T16144] netlink: 'syz.5.2794': attribute type 1 has an invalid length. [ 459.077832][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 459.083510][T16149] netlink: 'syz.2.2797': attribute type 2 has an invalid length. [ 459.100152][T16149] fþ: entered promiscuous mode [ 459.224090][T16152] netlink: 'syz.5.2798': attribute type 10 has an invalid length. [ 459.265827][T16152] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 459.355698][T16156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2799'. [ 459.532868][T16161] bond0: (slave vxlan2): Enslaving as an active interface with an up link [ 459.843228][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 460.853027][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2811'. [ 460.873747][T16192] xt_l2tp: missing protocol rule (udp|l2tpip) [ 460.893192][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2811'. [ 460.902225][T16190] netlink: 'syz.4.2811': attribute type 6 has an invalid length. [ 460.946198][T16197] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2814'. [ 460.963063][T16197] netlink: 'syz.6.2814': attribute type 1 has an invalid length. [ 460.973375][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 461.083344][T16201] lo speed is unknown, defaulting to 1000 [ 461.094084][T16201] lo speed is unknown, defaulting to 1000 [ 461.103432][T16206] openvswitch: netlink: Flow key attr not present in new flow. [ 461.330924][T16201] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 461.671873][T16225] : renamed from bond_slave_0 [ 462.072964][ T5891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 462.142909][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 462.544495][T16253] netlink: 'syz.2.2827': attribute type 10 has an invalid length. [ 462.552939][T16253] syz_tun: entered promiscuous mode [ 462.561610][T16253] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 462.731940][T16262] sctp: [Deprecated]: syz.6.2829 (pid 16262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.731940][T16262] Use struct sctp_sack_info instead [ 463.203280][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 463.609055][T16296] pim6reg: entered allmulticast mode [ 463.617397][T16286] pim6reg: left allmulticast mode [ 463.696188][T16316] netlink: 'syz.2.2840': attribute type 4 has an invalid length. [ 464.310992][T15531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 464.499235][T16337] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.119511][T16356] ax25_connect(): syz.5.2857 uses autobind, please contact jreuter@yaina.de [ 465.423079][T15531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 465.455413][T16369] bridge0: left promiscuous mode [ 465.500679][T16369] netlink: 'syz.5.2859': attribute type 1 has an invalid length. [ 465.511172][T16369] netlink: 'syz.5.2859': attribute type 2 has an invalid length. [ 465.748743][T16377] netlink: 'syz.5.2861': attribute type 39 has an invalid length. [ 466.254980][T16380] tc_dump_action: action bad kind [ 466.262175][T16386] bridge0: failed insert local address into bridge forwarding table [ 466.289662][T16385] bond2: (slave ip6gretap1): Releasing backup interface [ 466.553360][ T8606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 466.881227][T16394] vti1: entered promiscuous mode [ 466.915901][T16394] vti1: entered allmulticast mode [ 467.373335][T16398] veth0_virt_wifi: left promiscuous mode [ 467.379447][T16398] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 467.389252][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.400956][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.412374][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.421640][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.433511][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 467.441077][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.447911][T16398] geneve0: left allmulticast mode [ 467.471994][T16398] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.489039][T16398] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.515006][T16398] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.524473][T16398] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.633897][T16398] macvlan0: left promiscuous mode [ 467.653309][T16398] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.662073][T16398] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.670961][T16398] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.679909][T16398] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.690517][T16403] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 467.806048][T16409] lo speed is unknown, defaulting to 1000 [ 467.835815][T16409] lo speed is unknown, defaulting to 1000 [ 467.856659][T16414] netlink: 'syz.2.2869': attribute type 2 has an invalid length. [ 468.294962][T16409] chnl_net:caif_netlink_parms(): no params data found [ 468.323201][T16433] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 468.503714][T16439] __nla_validate_parse: 10 callbacks suppressed [ 468.503735][T16439] netlink: 1672 bytes leftover after parsing attributes in process `syz.5.2873'. [ 468.568564][T16439] netlink: 1672 bytes leftover after parsing attributes in process `syz.5.2873'. [ 468.604354][T16409] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.633495][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.666685][T16409] bridge_slave_0: entered allmulticast mode [ 468.685190][T16449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 468.694692][T16409] bridge_slave_0: entered promiscuous mode [ 468.696414][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2873'. [ 468.745295][T16409] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.753934][T16409] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.761301][T16409] bridge_slave_1: entered allmulticast mode [ 468.761819][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 468.779132][T16409] bridge_slave_1: entered promiscuous mode [ 468.854141][T16457] netlink: 'syz.4.2878': attribute type 3 has an invalid length. [ 468.884182][T16457] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2878'. [ 468.927325][T16449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.951628][T16409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.961457][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 469.004219][T16409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.140784][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2880'. [ 469.144380][T16409] team0: Port device team_slave_0 added [ 469.162041][T16409] team0: Port device team_slave_1 added [ 469.225268][T16409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.232495][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.265193][T16409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.304994][T16409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.349803][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.361484][T16476] netlink: 'syz.5.2883': attribute type 1 has an invalid length. [ 469.389750][T16409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.462603][T16478] lo speed is unknown, defaulting to 1000 [ 469.503695][ T5843] Bluetooth: hci0: command tx timeout [ 469.538229][T16478] lo speed is unknown, defaulting to 1000 [ 469.764259][T16409] hsr_slave_0: entered promiscuous mode [ 469.810763][T16409] hsr_slave_1: entered promiscuous mode [ 469.834900][T16491] netlink: 'syz.5.2885': attribute type 1 has an invalid length. [ 469.863347][T16409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.898544][T16409] Cannot create hsr debugfs directory [ 469.982941][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.072366][T16498] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2888'. [ 470.171489][T16503] FAULT_INJECTION: forcing a failure. [ 470.171489][T16503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.232772][T16503] CPU: 0 UID: 0 PID: 16503 Comm: syz.4.2889 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 470.232813][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.232824][T16503] Call Trace: [ 470.232832][T16503] [ 470.232840][T16503] dump_stack_lvl+0x241/0x360 [ 470.232872][T16503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.232893][T16503] ? __pfx__printk+0x10/0x10 [ 470.232914][T16503] ? __pfx_lock_release+0x10/0x10 [ 470.232958][T16503] should_fail_ex+0x40a/0x550 [ 470.232991][T16503] _copy_from_user+0x2d/0xb0 [ 470.233017][T16503] generic_map_update_batch+0x567/0x900 [ 470.233056][T16503] ? __pfx_generic_map_update_batch+0x10/0x10 [ 470.233076][T16503] ? __fget_files+0x395/0x410 [ 470.233100][T16503] ? __fget_files+0x2a/0x410 [ 470.233135][T16503] ? __pfx_generic_map_update_batch+0x10/0x10 [ 470.233156][T16503] bpf_map_do_batch+0x39a/0x660 [ 470.233189][T16503] __sys_bpf+0x375/0x820 [ 470.233217][T16503] ? __pfx___sys_bpf+0x10/0x10 [ 470.233257][T16503] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.233287][T16503] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.233315][T16503] ? do_syscall_64+0x100/0x230 [ 470.233346][T16503] __x64_sys_bpf+0x7c/0x90 [ 470.233371][T16503] do_syscall_64+0xf3/0x230 [ 470.233397][T16503] ? clear_bhb_loop+0x35/0x90 [ 470.233426][T16503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.233450][T16503] RIP: 0033:0x7f253a78d169 [ 470.233467][T16503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.233483][T16503] RSP: 002b:00007f25385f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 470.233505][T16503] RAX: ffffffffffffffda RBX: 00007f253a9a5fa0 RCX: 00007f253a78d169 [ 470.233520][T16503] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 470.233533][T16503] RBP: 00007f25385f6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.233545][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.233556][T16503] R13: 0000000000000000 R14: 00007f253a9a5fa0 R15: 00007ffef65d9788 [ 470.233589][T16503] [ 471.080063][T16409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.265869][T16542] netlink: 'syz.6.2900': attribute type 1 has an invalid length. [ 471.301758][T16543] FAULT_INJECTION: forcing a failure. [ 471.301758][T16543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.323973][T16409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.330867][T16543] CPU: 1 UID: 0 PID: 16543 Comm: syz.2.2902 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 471.330894][T16543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 471.330904][T16543] Call Trace: [ 471.330912][T16543] [ 471.330920][T16543] dump_stack_lvl+0x241/0x360 [ 471.330951][T16543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.330971][T16543] ? __pfx__printk+0x10/0x10 [ 471.330993][T16543] ? __pfx_lock_release+0x10/0x10 [ 471.331028][T16543] should_fail_ex+0x40a/0x550 [ 471.331061][T16543] _copy_from_user+0x2d/0xb0 [ 471.331086][T16543] generic_map_update_batch+0x5ba/0x900 [ 471.331122][T16543] ? __pfx_generic_map_update_batch+0x10/0x10 [ 471.331141][T16543] ? __fget_files+0x395/0x410 [ 471.331166][T16543] ? __fget_files+0x2a/0x410 [ 471.331198][T16543] ? __pfx_generic_map_update_batch+0x10/0x10 [ 471.331217][T16543] bpf_map_do_batch+0x39a/0x660 [ 471.331247][T16543] __sys_bpf+0x375/0x820 [ 471.331274][T16543] ? __pfx___sys_bpf+0x10/0x10 [ 471.331296][T16543] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 471.331348][T16543] __x64_sys_bpf+0x7c/0x90 [ 471.331372][T16543] do_syscall_64+0xf3/0x230 [ 471.331398][T16543] ? clear_bhb_loop+0x35/0x90 [ 471.331425][T16543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.331448][T16543] RIP: 0033:0x7fa000b8d169 [ 471.331465][T16543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.331490][T16543] RSP: 002b:00007fa00195e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 471.331511][T16543] RAX: ffffffffffffffda RBX: 00007fa000da5fa0 RCX: 00007fa000b8d169 [ 471.331524][T16543] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 471.331536][T16543] RBP: 00007fa00195e090 R08: 0000000000000000 R09: 0000000000000000 [ 471.331548][T16543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.331559][T16543] R13: 0000000000000000 R14: 00007fa000da5fa0 R15: 00007ffcc251a0b8 [ 471.331588][T16543] [ 471.583111][ T5843] Bluetooth: hci0: command tx timeout [ 471.595834][T16539] pimreg: entered allmulticast mode [ 471.607583][T16545] syz_tun: left promiscuous mode [ 471.623789][T16545] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 471.697416][T16409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.874709][T16409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.035966][ T9] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 472.052815][ T9] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 472.071694][ T9] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 472.200850][T16566] IPVS: stopping backup sync thread 10186 ... [ 472.227008][T16566] [ 472.229406][T16566] ====================================================== [ 472.236453][T16566] WARNING: possible circular locking dependency detected [ 472.243512][T16566] 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 Not tainted [ 472.250638][T16566] ------------------------------------------------------ [ 472.257656][T16566] syz.5.2910/16566 is trying to acquire lock: [ 472.263722][T16566] ffffffff8fed7108 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x81/0x280 [ 472.272805][T16566] [ 472.272805][T16566] but task is already holding lock: [ 472.280188][T16566] ffff88805b0da1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xd10 [ 472.290293][T16566] [ 472.290293][T16566] which lock already depends on the new lock. [ 472.290293][T16566] [ 472.300695][T16566] [ 472.300695][T16566] the existing dependency chain (in reverse order) is: [ 472.309710][T16566] [ 472.309710][T16566] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 472.318337][T16566] lock_acquire+0x1ed/0x550 [ 472.323465][T16566] __mutex_lock+0x19c/0x1010 [ 472.328601][T16566] smc_switch_to_fallback+0x35/0xd90 [ 472.334599][T16566] smc_sendmsg+0x11f/0x530 [ 472.339548][T16566] __sock_sendmsg+0x221/0x270 [ 472.344758][T16566] __sys_sendto+0x363/0x4c0 [ 472.349819][T16566] __x64_sys_sendto+0xde/0x100 [ 472.355115][T16566] do_syscall_64+0xf3/0x230 [ 472.360153][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.367012][T16566] [ 472.367012][T16566] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 472.374670][T16566] lock_acquire+0x1ed/0x550 [ 472.379878][T16566] lock_sock_nested+0x48/0x100 [ 472.385177][T16566] gtp_encap_enable_socket+0x2ce/0x5c0 [ 472.391164][T16566] gtp_newlink+0x5ff/0xf70 [ 472.396115][T16566] rtnl_newlink_create+0x37b/0xbd0 [ 472.401750][T16566] rtnl_newlink+0x167a/0x1d90 [ 472.406951][T16566] rtnetlink_rcv_msg+0x791/0xcf0 [ 472.412419][T16566] netlink_rcv_skb+0x206/0x480 [ 472.417715][T16566] netlink_unicast+0x7f6/0x990 [ 472.423026][T16566] netlink_sendmsg+0x8de/0xcb0 [ 472.428333][T16566] __sock_sendmsg+0x221/0x270 [ 472.433558][T16566] ____sys_sendmsg+0x53a/0x860 [ 472.438856][T16566] __sys_sendmsg+0x269/0x350 [ 472.443971][T16566] do_syscall_64+0xf3/0x230 [ 472.449005][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.455431][T16566] [ 472.455431][T16566] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 472.462756][T16566] validate_chain+0x18ef/0x5920 [ 472.468230][T16566] __lock_acquire+0x1397/0x2100 [ 472.473615][T16566] lock_acquire+0x1ed/0x550 [ 472.478737][T16566] __mutex_lock+0x19c/0x1010 [ 472.483857][T16566] ip_mc_drop_socket+0x81/0x280 [ 472.489231][T16566] inet_release+0x96/0x200 [ 472.494174][T16566] sock_release+0x82/0x150 [ 472.499119][T16566] stop_sync_thread+0x4e6/0x5e0 [ 472.504673][T16566] do_ip_vs_set_ctl+0x4c8/0xe40 [ 472.510050][T16566] nf_setsockopt+0x295/0x2c0 [ 472.515337][T16566] smc_setsockopt+0x275/0xd10 [ 472.520632][T16566] do_sock_setsockopt+0x3af/0x720 [ 472.526199][T16566] __x64_sys_setsockopt+0x1ee/0x280 [ 472.531942][T16566] do_syscall_64+0xf3/0x230 [ 472.536984][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.543423][T16566] [ 472.543423][T16566] other info that might help us debug this: [ 472.543423][T16566] [ 472.553750][T16566] Chain exists of: [ 472.553750][T16566] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 472.553750][T16566] [ 472.567327][T16566] Possible unsafe locking scenario: [ 472.567327][T16566] [ 472.574786][T16566] CPU0 CPU1 [ 472.580152][T16566] ---- ---- [ 472.585515][T16566] lock(&smc->clcsock_release_lock); [ 472.590900][T16566] lock(sk_lock-AF_INET); [ 472.597952][T16566] lock(&smc->clcsock_release_lock); [ 472.605850][T16566] lock(rtnl_mutex); [ 472.609840][T16566] [ 472.609840][T16566] *** DEADLOCK *** [ 472.609840][T16566] [ 472.618009][T16566] 1 lock held by syz.5.2910/16566: [ 472.623167][T16566] #0: ffff88805b0da1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xd10 [ 472.633760][T16566] [ 472.633760][T16566] stack backtrace: [ 472.639657][T16566] CPU: 0 UID: 0 PID: 16566 Comm: syz.5.2910 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 472.639678][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.639696][T16566] Call Trace: [ 472.639702][T16566] [ 472.639710][T16566] dump_stack_lvl+0x241/0x360 [ 472.639734][T16566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.639750][T16566] ? __pfx__printk+0x10/0x10 [ 472.639769][T16566] print_circular_bug+0x13a/0x1b0 [ 472.639788][T16566] check_noncircular+0x36a/0x4a0 [ 472.639808][T16566] ? __pfx_check_noncircular+0x10/0x10 [ 472.639824][T16566] ? queued_spin_lock_slowpath+0x42/0x50 [ 472.639839][T16566] ? lockdep_lock+0x1b0/0x2b0 [ 472.639863][T16566] ? mark_lock+0x9a/0x360 [ 472.639878][T16566] validate_chain+0x18ef/0x5920 [ 472.639894][T16566] ? __lock_acquire+0x1397/0x2100 [ 472.639924][T16566] ? __pfx_validate_chain+0x10/0x10 [ 472.639941][T16566] ? mark_lock+0x9a/0x360 [ 472.639956][T16566] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.639980][T16566] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 472.640002][T16566] ? do_raw_spin_unlock+0x13c/0x8b0 [ 472.640022][T16566] ? finish_task_switch+0x1e5/0x870 [ 472.640038][T16566] ? lockdep_hardirqs_on+0x99/0x150 [ 472.640059][T16566] ? finish_task_switch+0x1e5/0x870 [ 472.640077][T16566] ? mark_lock+0x9a/0x360 [ 472.640092][T16566] __lock_acquire+0x1397/0x2100 [ 472.640120][T16566] lock_acquire+0x1ed/0x550 [ 472.640141][T16566] ? ip_mc_drop_socket+0x81/0x280 [ 472.640158][T16566] ? __pfx_lock_acquire+0x10/0x10 [ 472.640181][T16566] ? __pfx___might_resched+0x10/0x10 [ 472.640206][T16566] __mutex_lock+0x19c/0x1010 [ 472.640228][T16566] ? ip_mc_drop_socket+0x81/0x280 [ 472.640242][T16566] ? __pfx_lock_release+0x10/0x10 [ 472.640264][T16566] ? lockdep_hardirqs_on+0x99/0x150 [ 472.640285][T16566] ? ip_mc_drop_socket+0x81/0x280 [ 472.640297][T16566] ? wait_for_completion+0x555/0x620 [ 472.640317][T16566] ? __pfx___mutex_lock+0x10/0x10 [ 472.640345][T16566] ip_mc_drop_socket+0x81/0x280 [ 472.640360][T16566] inet_release+0x96/0x200 [ 472.640379][T16566] sock_release+0x82/0x150 [ 472.640402][T16566] stop_sync_thread+0x4e6/0x5e0 [ 472.640425][T16566] ? __might_fault+0xc6/0x120 [ 472.640443][T16566] do_ip_vs_set_ctl+0x4c8/0xe40 [ 472.640462][T16566] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 472.640480][T16566] ? __mutex_lock+0x397/0x1010 [ 472.640504][T16566] ? __mutex_unlock_slowpath+0x227/0x800 [ 472.640529][T16566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 472.640553][T16566] ? __pfx___mutex_lock+0x10/0x10 [ 472.640578][T16566] nf_setsockopt+0x295/0x2c0 [ 472.640594][T16566] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 472.640620][T16566] smc_setsockopt+0x275/0xd10 [ 472.640641][T16566] ? __pfx_smc_setsockopt+0x10/0x10 [ 472.640659][T16566] ? aa_sock_opt_perm+0x79/0x120 [ 472.640692][T16566] ? __pfx_smc_setsockopt+0x10/0x10 [ 472.640709][T16566] do_sock_setsockopt+0x3af/0x720 [ 472.640729][T16566] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 472.640748][T16566] ? __fget_files+0x395/0x410 [ 472.640770][T16566] ? __fget_files+0x2a/0x410 [ 472.640794][T16566] __x64_sys_setsockopt+0x1ee/0x280 [ 472.640813][T16566] do_syscall_64+0xf3/0x230 [ 472.640836][T16566] ? clear_bhb_loop+0x35/0x90 [ 472.640858][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.640880][T16566] RIP: 0033:0x7f49ebf8d169 [ 472.640895][T16566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.640909][T16566] RSP: 002b:00007f49ecda8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.640928][T16566] RAX: ffffffffffffffda RBX: 00007f49ec1a5fa0 RCX: 00007f49ebf8d169 [ 472.640939][T16566] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000007 [ 472.640949][T16566] RBP: 00007f49ec00e2a0 R08: 0000000000000018 R09: 0000000000000000 [ 472.640959][T16566] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 472.640969][T16566] R13: 0000000000000000 R14: 00007f49ec1a5fa0 R15: 00007ffd24033618 [ 472.640986][T16566] [ 472.646727][T16409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 473.050776][T16409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 473.062026][T16409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 473.081708][T16409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 473.145857][T16409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.160777][T16409] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.174526][T15528] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.181637][T15528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.196934][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.204071][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.321287][T16409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.354805][T16409] veth0_vlan: entered promiscuous mode [ 473.366043][T16409] veth1_vlan: entered promiscuous mode [ 473.387592][T16409] veth0_macvtap: entered promiscuous mode [ 473.396020][T16409] veth1_macvtap: entered promiscuous mode [ 473.410267][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.420824][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.431632][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.442490][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.452859][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.463500][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.473425][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.484115][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.494373][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.505060][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.516415][T16409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.527063][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.537618][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.547738][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.559476][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.569465][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.579997][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.590349][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.600907][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.610790][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.621410][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.632252][T16409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.648821][T16409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.658038][T16409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.666804][T16409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.675830][T16409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.684863][ T5843] Bluetooth: hci0: command tx timeout [ 473.716046][T16409] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 473.740541][T15528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.742110][T16409] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht' [ 473.757868][T15528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.779152][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.787734][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50