last executing test programs: 13.293331556s ago: executing program 1 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010001fff0000e67f65e6de59b43b2019", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x20040600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x24}}, 0x40004) syz_genetlink_get_family_id$team(&(0x7f0000000140), r5) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r4, r3, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r3, 0xffffffffffffffff, 0x0, 0x0, 0x4, @link_id}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r8, &(0x7f00000006c0)=""/191, 0xbf, 0x12000, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80) setsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r9, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 13.007074934s ago: executing program 1 (id=2003): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) socket$pptp(0x18, 0x1, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) unshare(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff7b) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) splice(r2, 0x0, r5, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) splice(r4, 0x0, r7, 0x0, 0x800, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r10, 0x65, 0x0, 0x0, 0x20000002) setsockopt$inet6_int(r9, 0x29, 0x2a, 0x0, 0xfff3) write$binfmt_elf64(r3, 0x0, 0x0) 11.827923101s ago: executing program 1 (id=2012): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000700", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf2507000000", @ANYRES32, @ANYBLOB="000000000a000200aaaaaaaaaa04000008000f0011"], 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) write$cgroup_int(r9, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f00000000c0)={0x0, r4}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r9, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in6=@empty, 0x0, 0x1}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800140600fe8000000000000000000000000000aafe800000000000ed"], 0x0) 11.452151309s ago: executing program 1 (id=2016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000"], 0x122}}, 0x0) 11.247366424s ago: executing program 1 (id=2018): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x160}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c0002800800fa400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x28}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0xb}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x8, 0x0, r3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) 10.908923514s ago: executing program 1 (id=2021): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r3, &(0x7f0000001080), 0x6, 0x2) r4 = epoll_create(0x0) socket(0x23, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0xb6, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB], 0x21c}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)="a2ccc88d85367e04a3f565ad3c5fb3907f9ef453c2674c91bd28c0a76b62fdff6c0d9385d556d51148ec076da15fd5871e6ca380ce6226cb071bfca2bcfb7dba260a945e09f0480cf0e5cdb1a1c2d393530000000000", 0x56}, {&(0x7f0000000180)="e4b0cba5f1baf3ca2ce430e6c33b855380e28b2bb5045e03045254f2423968c2b37b669cddeb2be7993de11eea3d70130bc7596085", 0x35}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x1, 0x7fffffff, 0xfffffc00, 0x0, 0x1, 0x178c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) 10.768298588s ago: executing program 0 (id=2022): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'pimreg1\x00', {0x3}, 0x2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="82341801d5e3", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @link_local, @remote}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYBLOB='\x00\x00', @ANYBLOB], 0x28}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) readv(r4, &(0x7f0000000040), 0x10) writev(r4, &(0x7f0000000500)=[{&(0x7f00000000c0)="1d6b", 0x2}], 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfffffffffffffef7}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c0002800800014000000008080002400000000405000300000000000900010073797a300000ff06000000000000003200000011000100eb000000070000000000000ab3c98859cd205c8d7bd3ca6c4efa006cb98cb5a711cb0f073d00fe8cda96bb882a3ad432"], 0x84}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 10.307019134s ago: executing program 0 (id=2025): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000002000000040000000c000180cafc0800"], 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000000)={0x1000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xc61, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000008fa000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000005c0)) 9.993514987s ago: executing program 0 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9.80388604s ago: executing program 0 (id=2032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18110000000012ac60e8c34eca856739f6ce00"/33], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1e, 0x4, 0x8, 0x8, 0x1060}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) connect$inet6(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000007480)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r8, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 9.548235328s ago: executing program 0 (id=2035): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="30ff0100", @ANYRES16=r4, @ANYBLOB="0107000000000000000067000000080001004b00000008000600", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000003c0)=0x1, 0x4) bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args], 0x58}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@can_newroute={0x78, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_FILTER={0xc}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_SRC_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "967bd033807ac2ab"}, 0x7}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "6a0100c9277d9777"}, 0x3}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "748167a4b123a993"}, 0x2}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x6c}, 0x90) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x5, 0x4) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1, 0x8014) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x1f0, 0xe8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan1\x00', 'veth0_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) 8.871966515s ago: executing program 0 (id=2037): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7d8aff3f0ee6bd46, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r8, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001240)="0da951", 0x0, 0x9}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a00000005000100070000000900020073797a30000000000500040000000000140007800800134000000000080006400000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 3.415928742s ago: executing program 3 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0xa6, &(0x7f0000000180)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='1-08'], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xd6, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002240)='_', &(0x7f0000002300), 0x8001, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000001300), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x6a) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x14, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000000104030000000000000000000000000206000640000500000800054000000000baf1b81d6e14fe83ac3ae758a7ed8f16159f9654a626ff53e88f3d692a8c894bca054bcc0a18cdf4500fc3bd657c8ff140e3db3a0c23c50e08752782f9b89bb7930ece7942af73c3c94362e1dd08b2ff076b933f0e1e6a3452dfa761046839b5d268a1a97ed9ee633e70c30cd7d3448d960a6673d53307c147c5572371d21ed055dfda1c939c3d50706134257179f10d21eabff0b8bfb323ae4d4c7694c45f8db075fc2b073ae6"], 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@volatile={0x7}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x61, 0x30, 0x61, 0x2e]}}, &(0x7f00000004c0)=""/110, 0x37, 0x6e, 0x0, 0x40}, 0x20) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x68, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1108004cea005a00650000fb069078640101000a010102004414aa9000000008000000060000000600000004940400000000000000000000000000000000000000000100004e2300004e2100000000fffffffd00"/104], 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2f}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0xa, @in=@remote, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x0, 0x0, 'lblc\x00', 0x3b}, 0x2c) r8 = socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000f40)={0x1, 0x4, 0xf, 0x4, 0x6, 0xc78, 0x0, 0x100000000}, &(0x7f0000000f80)={0x6, 0xffffffffffffff81, 0x8, 0xfff, 0x7fffffff, 0x31, 0x7fd, 0x81}, &(0x7f0000000fc0)={0xf75, 0xffffffffffffffc0, 0xaee, 0x3, 0x6635, 0x6, 0x1b3, 0x8}, &(0x7f0000001000)={0x77359400}, &(0x7f0000001080)={&(0x7f0000001040)={[0x869]}, 0x8}) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x400, 0x0, 0x1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x1b, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) 2.512786555s ago: executing program 3 (id=2081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES32], 0x36) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000200), 0x4) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) unshare(0x20000400) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x3, &(0x7f0000000000)=0x7, 0x4) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0xc540a1d105f65bf8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11f}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x3, 0x2, 0x3, 0x4}}, 0x26) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES8=r5], 0x36) r9 = socket(0x29, 0x80000, 0x7) unshare(0x40000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bind$l2tp6(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000160a01030000000000000000000000000900010073797a310000000014000000160a01020000000000000000000000001c000000140a0102000000000000000000000000080003400000000014000000090a81f8ff000000000000000000000018000000120a010300000000000000000000000004000480140000001100010000000000000000000000000a"], 0xa4}}, 0x0) socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000030000000000001907864010102ac1414000b00907800000000450000404900000000000000ac1414ff00000000"], 0x0) 2.212261095s ago: executing program 2 (id=2083): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x8040480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000500)="91", 0x0}, 0x20) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) unshare(0x4000400) syz_emit_ethernet(0xda, &(0x7f0000000380)={@multicast, @remote, @void, {@mpls_uc={0x8847, {[{0x1f, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0xd00, 0x0, 0x1}], @ipv4=@icmp={{0x2e, 0x4, 0x0, 0x27, 0xc0, 0x66, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010102, {[@end, @timestamp_prespec={0x44, 0x3c, 0xb3, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@multicast2, 0x200}, {@multicast1, 0x1f}, {@broadcast, 0x8000}, {@multicast1, 0x1}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @cipso={0x86, 0xc, 0x2, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x2}]}, @rr={0x7, 0x1b, 0xd1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}, @timestamp_addr={0x44, 0x34, 0x84, 0x1, 0x0, [{@rand_addr=0x64010101, 0xb7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@private=0xa010102, 0x3ff}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x5}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0xa0, 0x0, 0xc}, @end]}}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)={0x1, 0x3, [0xed1, 0x32f, 0xfd, 0x8e]}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x21a446c0, @empty, 0xaa}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000140), 0x8) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe880000000000000000000000000001c910fe8000000000000000000000000000000720000000000600"/96], 0x60}, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000004c0)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 2.033274991s ago: executing program 2 (id=2085): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000002c0)='memory.swap.max\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x27) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x8af76d1efe9a670d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000735af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000180)={0x0, 'wlan1\x00', {}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000903182cd5077c000000000011000000622aec4b7a28d41b5db00405610000008b7d0000009ee577811c40e911eeacdf61c2d67bcaa8d8b0cf0a2b363247cf1b67baf0c12ad6555fe615096c2af996757343ccbd41ec0713a32f4e592735ffed246565720d3e659dbf60"], 0x0, 0x2d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0xa9d6, 0xe7c9, 0x580, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x24000080) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.947011584s ago: executing program 4 (id=2086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x2000400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0xd55c, @none, 0xde}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000004600000000010000000c0002000800000000000000100007"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r13, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)={0x340, r13, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1b32016c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x95e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x398ae60e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x911b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @local, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x77c}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff6ca2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd05e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0xc8, 0x3, "9087e61550130e50718747bb0a148e3e37169cb557bb4d654d93aba7881ee50c1dad11226d661da9df42b9cc1bbeb8501392f167d535e43f9e00e40a6fdada23b4b34229a9ee8585c28fcf18216992839092cef47fa99a8217df53e258b77334e19d9cd98196265cb54017cfb253427070365028e9decf4bc476d9b47d4ab8544b58c34eb4942b61847d5f0b0eb097c9a69e9264855692727c61dee2c5dde908c606a3577fab012d757963a61637bae2eebe6c9bb9f515c62993a0b112b612fb4918b59b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c6f}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x48080}, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x4c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x0, @default, @val, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="0100e700000000000000080000000800030069454b83571b1a2a6d266b044e852d53c1c2b16078a9dbd2fff0d1e25c3033c6694d3a9925b7aca94831744217d4162deef8b6f35f96000000000000000000000000000000000086a663b9b16a3fa5f63d3f", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 1.863860684s ago: executing program 2 (id=2087): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@dev, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1400000023000b03d05a806f8c6394f91f24fc60", 0x14}, {&(0x7f0000000100)="c8ebdba110aee574730afe45a16a234cf01d32c01bf1351bfc451db03fc156ab3a4cf6802199a58920af", 0x2a}], 0x2}, 0x0) 1.789270456s ago: executing program 4 (id=2088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0}, 0x90) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)="925a95e24d506c24e8e1a95586dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) syz_emit_ethernet(0xe2, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0c200009078000004020303fd052a00000000000000000000000000000007000000000000000000000000000000000000000000000000000471de1e102000000000000000000000000001080a00000000000000001e102000000000000000000000000000051e0000000100000003000000080000000300000007000006d70000000013127b9d15a2cbadf86fea52aa98bb4c6abb080a000010000000000000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000001"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000001700)='team_slave_1\x00', 0x10) connect$caif(r9, &(0x7f0000001780)=@util={0x25, "8c3778e2a2253b827d46e5f207b62408"}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) ioctl$TUNGETDEVNETNS(r6, 0x8982, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) 1.728570079s ago: executing program 2 (id=2089): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x20, 0x67, 0x10, @mcast2, @mcast1, 0x20, 0x20, 0xc4ea, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r4, 0x29, 0xfd, 0xf0, 0x6, 0x0, @empty, @loopback, 0x40, 0x80, 0x5, 0x400}}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x0, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000b40), &(0x7f0000000000)=""/8, 0x2}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000000000000700000d000000000b000090f2000000030000000800000010000000020000000d0000000500000002000000"], &(0x7f00000001c0)=""/7, 0x60, 0x7, 0x1, 0x9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x4, 0x3, 0xffff, 0x111, r6, 0x0, '\x00', 0x0, r7, 0x2, 0x1, 0x4}, 0x48) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "e9e4e7529f5a629e", "83ccd9cfc92e2753fdc21df33e16be33", "043c5b5c", "484d9a6526d54458"}, 0x28) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x7}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) close(r0) 1.670005205s ago: executing program 4 (id=2090): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000110000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@dev, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1400000023000b03d05a806f8c6394f91f24fc60", 0x14}, {&(0x7f0000000100)="c8ebdba110aee574730afe45a16a234cf01d32c01bf1351bfc451db03fc156ab3a4cf6802199a58920af", 0x2a}], 0x2}, 0x0) 1.600115418s ago: executing program 3 (id=2091): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008900000095000000000000001b7315d43b90037161e573d8dee4a8018b5f60b9969eec3b2344dd6f28997400fbcfa234f96c71d1ca3464ca1fe516cc2ca6c2873840a8c724a765c01618b6006e306b740b200545dd3f906e0045a7d49c058d5413e84e3ee9b6ffd13dde0be8110ffca3812534b8373b4d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00040028bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="8000250008bba4045000000008000b00020000000800040080000000"], 0x34}, 0x1, 0x0, 0x0, 0x6000081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000008400000095"], 0x0, 0x3aec, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x43) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800050100000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="0600150006000000ffff16800800010000000000ffd850bd9d1c1e9e0c56fcfd014242f77032dd7af31a91215ae9e44d31cdd4da6e981b26ef1952f200037c71f63d55c8e3878f6f9c38f0fab5ac21f2bd3d7a172e9df6bc"], 0x38}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="34000000130a010200000000000000000100000008000340000056f56a6f3300040900020073c98b271858ced6c3000e0073"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) sendto$packet(r4, &(0x7f0000000340)="bdc1bfd0f82f0941b5b5d48cb5555c14de9cb2eda43089a0392a6fefa804f41cdf672cc31502c73b5ee139a01d2c28665badb4e47bffd7a487523b5ed3a5640f4ad488898969c3d9aa2fa950fd19381b2933d2170a42b8e60d7d9b7bca3fa1f080f86c523bf21dbb3713c30ee4aaa9923439cbf9657e106522f5d7392b572fded69b2938a8e47a860dc93540df993d37cef26d0b94a391682407870a8b6e099816df3e8f0432e7f7ec", 0xa9, 0x20040005, &(0x7f0000000500)={0x11, 0x2, r14, 0x1, 0x67}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 1.372039961s ago: executing program 4 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="e80a94a5f52583f9285f72552d901400000033820dcb2c9a91ccb7dbe26205c1bcd15f513827c1be2c834b0a59c01eef72d83aa4c7fc9907f94b546f9a1716fd2261e449838dd62354516fae9e5cb80a396cd2d6d8811c9195d5bb38559407ae0a1f3e26b3be3bce", @ANYRES16=r6], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xd}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000980)={'wpan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000500)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000080)=0x5000000000, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, 0x0, 0x7}}) 1.263619541s ago: executing program 2 (id=2093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000006000000030000000000000e00000000000000000000005f6100e7f66de0801027d6b1966bee157e7e7b9d55f83669252debc2ee8b75de62ca54f416389953884751a72280e4efe02875737eba5018ed47c446b5f573d585130151b37dec03d8d1f4b2a5088277c6bc3d01010000"], 0x0, 0x2e}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae", 0x36}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723", 0x53}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59ef1", 0xe3}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9b8", 0xe}, {&(0x7f0000000880)="b45a498ea447ee604887121819ab170a8c4d", 0x12}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf18625abe82bdc6e47e081c06eb1d6ab55a68e53e8fbb1e88e1f41a71002eb8121bf965623ce7f464c363d86743c9279b5eedf88704b6a459766bee3d50ae9f16e5653783d08bfba153d27baa1b721743c", 0xa0}], 0x6}}], 0x4, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xd) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000a00)={&(0x7f00000003c0)={0x2, 0x0, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000440)="c1", 0x1}], 0x1}, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.030893727s ago: executing program 4 (id=2094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'vlan0\x00', 0x100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff00000000711042383300000007000000000000000000dce4832a2345893061c72eb230c7032d4a7329ca4e1d26deed7d490dc36be3cfe76f63"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg(r3, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x30}}], 0x2, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000a80)={0x0, 0x15, &(0x7f0000000a40)={&(0x7f00000008c0)={0x14, r4, 0x1}, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0xd427, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000005200010000000000000000520a0000000000000059370af08972411a6e0852d0dab90000000000000000"], 0x20}}, 0x0) 580.192199ms ago: executing program 3 (id=2096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 498.441939ms ago: executing program 3 (id=2097): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = socket$inet6(0xa, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_GETNSID={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@NETNSA_NSID={0x8}]}, 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r4, &(0x7f00000005c0), &(0x7f0000000640)=@tcp, 0x1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x30}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r3, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e00000001300010000000000000000007266633735333928616469616e74756d287874732d63616d656c6c69612d6165736e692c6165732d66697865642d74696d652c7368610100000000000000292c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/224], 0xe0}}, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000a40)={@cgroup=r9, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r12, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) 289.629481ms ago: executing program 2 (id=2098): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x7f, 0x5, 0x46, @mcast2, @empty, 0x97, 0x40, 0x7fffffff, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x2000, 0x2, {{0x51, 0x4, 0x2, 0x21, 0x144, 0x68, 0x0, 0x6, 0x0, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0xb, 0x1, 0x6, [{@multicast1, 0x202}, {@private=0xa010100}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x80000001}, {@multicast1, 0x3e}, {@multicast1, 0x5}]}, @timestamp={0x44, 0x20, 0xa5, 0x0, 0x4, [0x2, 0x2, 0x7, 0x7f, 0x3, 0x990f, 0xffff]}, @timestamp_prespec={0x44, 0x1c, 0x54, 0x3, 0xa, [{@multicast1, 0x5}, {@loopback, 0x8001}, {@empty}]}, @noop, @ssrr={0x89, 0x7, 0x9c, [@private=0xa010100]}, @rr={0x7, 0xb, 0xda, [@empty, @multicast2]}, @ra={0x94, 0x4}, @cipso={0x86, 0x44, 0x0, [{0x0, 0x6, "92039fa4"}, {0x0, 0x5, "2fc56b"}, {0x0, 0xe, "d6c20a33b7f537431c26f1fb"}, {0x1, 0x10, "0c2820033e040dce75a9522ae0b0"}, {0x7, 0x6, "314bface"}, {0x2, 0x8, "29fba668ecde"}, {0x1, 0x7, "9b9cbe003f"}]}, @timestamp_prespec={0x44, 0x4c, 0xa1, 0x3, 0x0, [{@empty, 0x888}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010100, 0x10000}, {@multicast2, 0x401}, {@private=0xa010100, 0x8}, {@multicast1}, {@private=0xa010101, 0x6}, {@loopback, 0x2}, {@local, 0x8e7}]}, @ssrr={0x89, 0xf, 0xc3, [@broadcast, @rand_addr=0x64010102, @multicast2]}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0xf8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040004}, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x90, 0x7203, 0x148, 0x90, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @rand_addr, 0xffffff00, 0x0, 'ip6tnl0\x00', 'bridge_slave_1\x00', {}, {}, 0x32}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x4b6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r15, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r16, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r17, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4048054) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x1d, 0x2, 0x6) 70.031833ms ago: executing program 4 (id=2099): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@dev, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1400000023000b03d05a806f8c6394f91f24fc60", 0x14}, {&(0x7f0000000100)="c8ebdba110aee574730afe45a16a234cf01d32c01bf1351bfc451db03fc156ab3a4cf6802199a58920af", 0x2a}], 0x2}, 0x0) 0s ago: executing program 3 (id=2100): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000002000000040000000c000180cafc0800"], 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000000)={0x1000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xc61, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000008fa000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000005c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000001780)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f0000001500)=ANY=[@ANYBLOB="f8010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf25030000001c000880140007800800060060000000080006001900000004000780d80008a4a0704ef6b9231a470fbf2405804c000780080006001d00000008000600f300000008000500d6911918080006005000000008000600d300000008000600376f9a640e70d911c35d8179052897750000000800050019040b3c08000500bdb7a4080800050079efdf614400078008000500c7303f2608000500a44a8d7f0800050008dcba450800060013000000080006009500000008000600c900000008000600a700000008000500ac79ff272c0007800800050039d36a1c08000600ea00000008000500fa529c0908000600b400000008000600a00000000c000780080006000a0000000c0007800800060066000000e8000880440000706ee51108000600fd00000008000500df07927a080006000200000008000500e1cf700208000600de000000080006000f0000000c000780080005005de8955b1400078008000600bf000000080006005d0000004c00078008000500f0465b4108000500ded4d93f08000600ab000000080005001aaf7164080005004af7f92008000600b3000000080006007d000000080006003e000000080005000983002f3400078008000600ed00000008000600e100000008000500f9891407080005008fe05061080005004af3264808"], 0x1f8}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000b40)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x24e23, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000a50000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/26, 0xff5d, 0x0, &(0x7f0000000b80)=""/4098, 0x1000}, &(0x7f00000005c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 6081 - 0 [ 296.771524][ T9678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.795163][ T9678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.807388][ T9678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.847349][ T9799] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.858466][ T9799] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.955064][ T9799] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.965222][ T9910] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1204'. [ 296.969189][ T9799] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.015244][ T9910] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.143830][ T9910] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.295749][ T9910] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.352591][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.380398][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.456516][ T9910] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.574144][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.608167][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.831227][ T29] audit: type=1107 audit(1724782430.004:62): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 297.949222][ T9928] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 297.982985][ T9931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1145'. [ 298.009960][ T9932] netlink: 'syz.0.1208': attribute type 4 has an invalid length. [ 298.220939][ T9939] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1211'. [ 298.247363][ T9942] IPVS: length: 215 != 24 [ 298.328335][ T9945] netlink: 'syz.2.1211': attribute type 7 has an invalid length. [ 298.413837][ T9952] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1215'. [ 298.442139][ T29] audit: type=1107 audit(1724782430.604:63): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 298.464638][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 298.484865][ T9939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1211'. [ 298.579671][ T9952] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.657049][ T9952] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.719903][ T9952] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.777638][ T9952] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.376655][ T29] audit: type=1107 audit(1724782431.554:64): pid=9976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 299.746934][ T9986] IPVS: length: 215 != 24 [ 299.880431][ T29] audit: type=1107 audit(1724782432.044:65): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 300.153672][T10000] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.314228][T10000] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.472679][ T29] audit: type=1107 audit(1724782432.644:66): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 300.520569][T10000] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.612937][ T9910] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.656997][T10000] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.728903][ T9910] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.759085][T10023] __nla_validate_parse: 6 callbacks suppressed [ 300.759107][T10023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1237'. [ 300.815840][ T9910] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.860952][ T9910] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.949353][T10000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.191887][T10000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.216496][T10029] validate_nla: 14 callbacks suppressed [ 301.216519][T10029] netlink: 'syz.3.1238': attribute type 4 has an invalid length. [ 301.243054][T10000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.250820][T10031] IPVS: length: 215 != 24 [ 301.338660][T10000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.585850][T10037] netlink: 'syz.0.1242': attribute type 10 has an invalid length. [ 301.587645][ T29] audit: type=1107 audit(1724782433.754:67): pid=10036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 301.674076][T10042] netlink: 'syz.1.1244': attribute type 7 has an invalid length. [ 301.700688][T10043] netlink: 'syz.0.1242': attribute type 8 has an invalid length. [ 301.707076][T10042] netlink: 'syz.1.1244': attribute type 39 has an invalid length. [ 301.818173][T10048] netlink: 'syz.1.1244': attribute type 7 has an invalid length. [ 301.871389][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 301.875653][T10048] netlink: 'syz.1.1244': attribute type 39 has an invalid length. [ 301.893760][ T29] audit: type=1107 audit(1724782434.034:68): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 301.911676][T10054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1244'. [ 301.951313][T10053] netlink: 'syz.4.1246': attribute type 10 has an invalid length. [ 301.993450][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.033068][T10053] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 302.038784][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 302.067135][T10060] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1248'. [ 302.176547][T10060] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.370634][T10060] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.457048][T10070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1249'. [ 302.469401][T10075] netlink: 'syz.1.1250': attribute type 4 has an invalid length. [ 302.530118][T10074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1251'. [ 302.573334][T10060] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.716913][T10060] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.743881][T10084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1262'. [ 302.783299][T10086] IPVS: length: 215 != 24 [ 302.925222][T10088] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1252'. [ 303.064412][T10094] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1255'. [ 303.104206][T10094] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.198132][T10094] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.304590][T10094] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.449424][T10094] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.843512][ T29] audit: type=1107 audit(1724782436.014:69): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 303.916725][ T29] audit: type=1107 audit(1724782436.084:70): pid=10108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 303.932447][T10110] netlink: 'syz.3.1259': attribute type 8 has an invalid length. [ 304.309601][T10122] bridge1: port 1(gretap1) entered blocking state [ 304.333521][T10122] bridge1: port 1(gretap1) entered disabled state [ 304.353553][T10122] gretap1: entered allmulticast mode [ 304.364383][T10122] gretap1: entered promiscuous mode [ 304.437013][T10126] IPVS: length: 215 != 24 [ 304.579474][ T29] audit: type=1107 audit(1724782436.754:71): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 304.828976][T10060] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.867868][T10060] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.895143][T10060] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.919920][T10060] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.048010][ T29] audit: type=1107 audit(1724782437.224:72): pid=10145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 305.122192][ T29] audit: type=1107 audit(1724782437.294:73): pid=10147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 305.807564][T10168] __nla_validate_parse: 7 callbacks suppressed [ 305.807586][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 305.848549][T10169] IPVS: length: 215 != 24 [ 305.874968][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1280'. [ 305.947683][T10170] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1278'. [ 306.029353][ T29] audit: type=1107 audit(1724782438.204:74): pid=10176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 306.219725][T10184] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1284'. [ 306.242966][T10184] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.316141][ T29] audit: type=1107 audit(1724782438.494:75): pid=10185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 306.360397][T10184] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.395022][ T29] audit: type=1107 audit(1724782438.564:76): pid=10188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 306.488718][T10191] validate_nla: 14 callbacks suppressed [ 306.488742][T10191] netlink: 'syz.4.1286': attribute type 8 has an invalid length. [ 306.490223][T10094] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.536777][T10184] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.633939][T10094] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.661966][T10094] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.688685][T10094] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.700941][T10193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1287'. [ 306.748997][T10184] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.823348][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 307.001008][T10208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1290'. [ 307.303903][T10212] netlink: 'syz.4.1292': attribute type 4 has an invalid length. [ 307.385184][T10215] bond3: entered promiscuous mode [ 307.457090][T10215] lo: entered promiscuous mode [ 307.470003][T10215] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.511342][T10215] bond3: (slave lo): Enslaving as an active interface with an up link [ 307.527361][ T5333] lo speed is unknown, defaulting to 1000 [ 307.536297][ T58] lo speed is unknown, defaulting to 1000 [ 307.544602][ T9] lo speed is unknown, defaulting to 1000 [ 307.716735][ T29] audit: type=1107 audit(1724782439.894:77): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 307.717984][T10225] netlink: 'syz.4.1296': attribute type 10 has an invalid length. [ 307.817897][T10229] netlink: 'syz.4.1296': attribute type 8 has an invalid length. [ 308.087970][ T29] audit: type=1107 audit(1724782440.264:78): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 308.114879][T10234] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 308.206287][T10242] netlink: 'syz.2.1299': attribute type 8 has an invalid length. [ 308.228648][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 308.319823][T10235] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1300'. [ 308.395578][T10235] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1300'. [ 308.461981][T10235] netlink: 'syz.4.1300': attribute type 6 has an invalid length. [ 308.522582][T10235] netlink: 'syz.4.1300': attribute type 5 has an invalid length. [ 308.633148][T10252] netlink: 'syz.2.1304': attribute type 4 has an invalid length. [ 308.669668][ T2636] lo speed is unknown, defaulting to 1000 [ 309.027506][T10270] IPVS: length: 215 != 24 [ 309.417254][ T29] audit: type=1107 audit(1724782441.594:79): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 309.424149][T10284] netlink: 'syz.4.1314': attribute type 10 has an invalid length. [ 310.065772][T10298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.108106][T10298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.208949][T10308] IPVS: length: 215 != 24 [ 310.276848][T10312] dccp_v4_rcv: dropped packet with invalid checksum [ 310.574846][ T29] audit: type=1107 audit(1724782442.744:80): pid=10323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 310.962155][T10337] __nla_validate_parse: 8 callbacks suppressed [ 310.962177][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 310.992680][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1330'. [ 311.148317][T10184] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.185261][T10184] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.212524][T10184] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.242261][T10184] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.304805][T10346] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1333'. [ 311.356840][T10346] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.382834][T10346] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.597750][ T29] audit: type=1107 audit(1724782443.764:81): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 311.621863][T10346] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.694639][T10346] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.721785][T10357] validate_nla: 5 callbacks suppressed [ 311.721807][T10357] netlink: 'syz.3.1335': attribute type 8 has an invalid length. [ 311.754600][ T29] audit: type=1107 audit(1724782443.924:82): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 311.798496][T10351] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 311.826950][T10355] netlink: 'syz.4.1336': attribute type 10 has an invalid length. [ 311.910160][T10346] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.945174][T10346] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.096036][ T29] audit: type=1107 audit(1724782444.264:83): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 312.150003][T10346] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.187389][T10346] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.222786][T10365] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 312.286464][T10365] netlink: 'syz.0.1338': attribute type 8 has an invalid length. [ 312.326507][T10368] netlink: 'syz.4.1340': attribute type 4 has an invalid length. [ 312.447129][T10375] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1341'. [ 312.528745][T10346] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.576734][T10382] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1344'. [ 312.587172][T10346] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.623265][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 312.624421][T10382] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.652458][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1343'. [ 312.930014][T10394] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 312.999741][T10346] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.022937][T10346] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.062863][T10382] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.110897][T10396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1345'. [ 313.180568][T10346] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.226794][T10346] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.276797][T10346] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.295285][T10346] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.326896][T10382] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.491854][ T29] audit: type=1107 audit(1724782445.664:84): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 313.531579][T10382] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.602078][T10404] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 313.638498][T10404] netlink: 'syz.1.1347': attribute type 8 has an invalid length. [ 313.894864][T10417] netlink: 'syz.2.1352': attribute type 4 has an invalid length. [ 314.193966][ T29] audit: type=1107 audit(1724782446.364:85): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 314.206874][T10427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1355'. [ 314.234943][T10425] netlink: 'syz.2.1354': attribute type 10 has an invalid length. [ 314.393279][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 314.659589][T10439] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.744809][T10439] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.958624][T10439] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.056865][ T29] audit: type=1107 audit(1724782447.234:86): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 315.139985][T10439] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.394625][T10439] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.453860][T10439] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.553722][T10439] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.644429][T10461] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 315.760043][T10439] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.893602][ T29] audit: type=1107 audit(1724782448.054:87): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 316.350271][T10489] __nla_validate_parse: 5 callbacks suppressed [ 316.350295][T10489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1374'. [ 316.624412][ T29] audit: type=1107 audit(1724782448.794:88): pid=10495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 316.662509][T10501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1378'. [ 317.118199][T10518] validate_nla: 9 callbacks suppressed [ 317.118224][T10518] netlink: 'syz.2.1379': attribute type 8 has an invalid length. [ 317.201382][T10521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1382'. [ 317.227200][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 317.253431][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 317.273062][T10515] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1379'. [ 317.287183][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 317.453987][T10382] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.480737][T10382] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.539286][T10382] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.605050][T10382] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.043970][T10540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1388'. [ 318.104338][T10541] netlink: 'syz.2.1386': attribute type 4 has an invalid length. [ 318.300813][T10531] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 318.410927][ T29] audit: type=1107 audit(1724782450.584:89): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 318.478677][T10557] netlink: 'syz.2.1391': attribute type 8 has an invalid length. [ 318.540455][T10553] netlink: 'syz.2.1391': attribute type 10 has an invalid length. [ 318.608599][T10556] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.618443][T10556] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.675214][T10563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1393'. [ 318.772927][T10567] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1394'. [ 318.896425][T10569] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.939929][ T29] audit: type=1107 audit(1724782451.114:90): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 319.009857][T10569] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.027641][T10575] netlink: 'syz.1.1396': attribute type 8 has an invalid length. [ 319.110787][T10569] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.220442][T10579] ip6tnl0: entered promiscuous mode [ 319.300644][T10569] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.488790][T10586] IPVS: stopping backup sync thread 6471 ... [ 319.490171][T10588] netlink: 'syz.4.1401': attribute type 4 has an invalid length. [ 319.519068][T10578] ip6tnl0: left promiscuous mode [ 319.732977][ T29] audit: type=1107 audit(1724782451.904:91): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 319.854888][T10600] netlink: 'syz.3.1404': attribute type 8 has an invalid length. [ 319.926006][T10594] netlink: 'syz.3.1404': attribute type 10 has an invalid length. [ 320.025284][T10607] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 320.217396][T10614] xt_recent: hitcount (184549376) is larger than allowed maximum (65535) [ 320.240377][T10612] IPVS: length: 215 != 24 [ 320.432944][ T29] audit: type=1107 audit(1724782452.604:92): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 320.533371][T10625] netlink: 'syz.4.1411': attribute type 8 has an invalid length. [ 321.315300][ T29] audit: type=1107 audit(1724782453.484:93): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 321.483387][T10651] __nla_validate_parse: 10 callbacks suppressed [ 321.483411][T10651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1420'. [ 321.614419][T10655] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1422'. [ 321.629485][T10655] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1422'. [ 321.674777][T10658] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1422'. [ 321.971479][T10666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1426'. [ 322.011196][T10663] Cannot find del_set index 286 as target [ 322.257737][T10666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.329745][T10663] validate_nla: 9 callbacks suppressed [ 322.329770][T10663] netlink: 'syz.3.1425': attribute type 2 has an invalid length. [ 322.490499][T10666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.664812][T10666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.690292][T10682] netlink: 'syz.2.1428': attribute type 7 has an invalid length. [ 322.702280][T10682] netlink: 'syz.2.1428': attribute type 39 has an invalid length. [ 322.737220][T10685] netlink: 'syz.2.1428': attribute type 7 has an invalid length. [ 322.750115][T10685] netlink: 'syz.2.1428': attribute type 39 has an invalid length. [ 322.779135][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 322.792564][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1428'. [ 322.847808][T10666] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.032165][T10666] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.060147][T10666] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.093952][T10666] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.122446][T10666] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.168402][T10692] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 323.276200][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1431'. [ 323.749636][T10569] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.762670][T10712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1435'. [ 323.905029][T10569] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.989126][T10569] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.054236][T10569] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.090080][T10718] netlink: 'syz.4.1437': attribute type 4 has an invalid length. [ 324.212766][T10722] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1439'. [ 324.464880][T10732] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.568429][T10732] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.694229][T10732] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.808072][T10732] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.690496][T10765] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.753205][T10767] netlink: 'syz.3.1451': attribute type 4 has an invalid length. [ 325.805184][T10765] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.999097][T10765] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.183727][T10765] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.569608][T10789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.589251][T10789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.633576][T10789] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 327.166759][ T29] audit: type=1107 audit(1724782459.344:94): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 327.183756][T10797] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 327.266372][T10798] netlink: 'syz.3.1459': attribute type 8 has an invalid length. [ 327.525075][T10805] __nla_validate_parse: 11 callbacks suppressed [ 327.525097][T10805] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1461'. [ 327.823695][T10808] lo speed is unknown, defaulting to 1000 [ 328.063742][T10812] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 328.406662][T10765] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.480522][T10765] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.533903][T10765] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.595927][T10765] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.665995][ T4619] Bluetooth: hci0: command tx timeout [ 328.840827][T10822] netlink: 'syz.4.1466': attribute type 4 has an invalid length. [ 328.854865][T10822] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1466'. [ 329.197547][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 329.538815][T10732] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.584577][T10732] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.633567][T10732] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.710139][T10732] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.847245][T10847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1472'. [ 330.000329][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 330.024270][T10849] netlink: 'syz.0.1473': attribute type 2 has an invalid length. [ 330.118432][T10849] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 330.203880][T10858] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1476'. [ 330.274816][T10858] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.566509][T10858] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.721222][T10870] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 330.743903][T10858] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.881145][T10858] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.918316][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 331.122085][T10858] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.149479][T10858] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.180510][T10858] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.224651][T10858] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.377834][T10885] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1480'. [ 331.411950][T10882] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1480'. [ 331.622845][T10891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1483'. [ 331.657355][T10891] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 331.996796][T10902] netlink: 'syz.0.1485': attribute type 7 has an invalid length. [ 332.056653][T10902] netlink: 'syz.0.1485': attribute type 39 has an invalid length. [ 332.194243][T10907] netlink: 'syz.0.1485': attribute type 7 has an invalid length. [ 332.237176][T10907] netlink: 'syz.0.1485': attribute type 39 has an invalid length. [ 332.517091][T10920] netlink: 'syz.2.1488': attribute type 1 has an invalid length. [ 332.532686][T10917] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.545498][T10920] __nla_validate_parse: 4 callbacks suppressed [ 332.545523][T10920] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.1488'. [ 332.588680][T10920] netlink: 'syz.2.1488': attribute type 2 has an invalid length. [ 332.663865][T10920] netlink: 'syz.2.1488': attribute type 10 has an invalid length. [ 332.710819][ T5237] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 332.726426][ T5237] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 332.742957][ T5237] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 332.781440][ T5237] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 332.801883][ T5237] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 332.813036][ T5237] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 332.884181][ T29] audit: type=1107 audit(1724782465.054:95): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 332.915061][T10917] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.023263][T10917] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.111592][T10926] lo speed is unknown, defaulting to 1000 [ 333.161698][T10917] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.898154][T10926] chnl_net:caif_netlink_parms(): no params data found [ 333.989844][T10953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.134310][T10963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1498'. [ 334.174070][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.186311][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.194006][T10926] bridge_slave_0: entered allmulticast mode [ 334.203602][T10926] bridge_slave_0: entered promiscuous mode [ 334.221505][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.231259][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.241705][T10926] bridge_slave_1: entered allmulticast mode [ 334.251910][T10926] bridge_slave_1: entered promiscuous mode [ 334.365029][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.383288][ T29] audit: type=1107 audit(1724782466.554:96): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 334.383508][T10969] validate_nla: 2 callbacks suppressed [ 334.383524][T10969] netlink: 'syz.2.1501': attribute type 10 has an invalid length. [ 334.416833][T10968] ip6tnl0: entered promiscuous mode [ 334.433119][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.492065][T10966] ip6tnl0: left promiscuous mode [ 334.539635][T10926] team0: Port device team_slave_0 added [ 334.563078][T10926] team0: Port device team_slave_1 added [ 334.570992][T10971] netlink: 'syz.2.1501': attribute type 8 has an invalid length. [ 334.652283][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.665122][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.726845][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.748764][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.761221][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.791862][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.875075][T10926] hsr_slave_0: entered promiscuous mode [ 334.893112][T10926] hsr_slave_1: entered promiscuous mode [ 334.903756][T10926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.912903][ T4619] Bluetooth: hci10: command tx timeout [ 334.919907][T10926] Cannot create hsr debugfs directory [ 335.124611][T10926] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.140412][T10926] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.241932][T10926] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.257959][T10926] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.359905][T10980] IPVS: length: 215 != 24 [ 335.360981][T10926] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.403053][T10926] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.521771][T10926] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.558497][T10926] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.823756][T10917] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.860589][T10917] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.927619][T10917] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.997467][T10917] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.201155][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1509'. [ 336.220248][T10926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.245701][T11000] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1510'. [ 336.248898][T10926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.296337][T10926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.329522][T10926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.583307][ T29] audit: type=1107 audit(1724782468.754:97): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 336.620355][T11010] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 336.723805][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.737070][T11014] netlink: 'syz.3.1512': attribute type 8 has an invalid length. [ 336.833137][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.896376][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.903678][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.964490][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.971884][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.985871][ T4619] Bluetooth: hci10: command tx timeout [ 337.034413][T11022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.042788][T11022] IPv6: NLM_F_CREATE should be set when creating new route [ 337.220689][T11024] IPVS: length: 215 != 24 [ 337.626975][T11034] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1518'. [ 337.648686][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.663879][T11034] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.790645][T11034] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.901146][T11034] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.012297][T10926] veth0_vlan: entered promiscuous mode [ 338.047407][T11034] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.086845][T10926] veth1_vlan: entered promiscuous mode [ 338.193554][T10926] veth0_macvtap: entered promiscuous mode [ 338.240631][T10926] veth1_macvtap: entered promiscuous mode [ 338.317071][T11034] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.345195][T11034] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.380847][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.394474][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.406100][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.418307][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.430509][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.462518][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.478708][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 338.483974][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.515864][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.545495][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.565483][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.586095][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.608175][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.633613][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.653071][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.667317][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.679072][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.690916][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.713061][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.733245][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.744501][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.762781][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.790134][T11034] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.800106][T11048] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 339.021863][T11034] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.037658][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.066341][ T4619] Bluetooth: hci10: command tx timeout [ 339.073814][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.084890][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.098227][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.109071][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.120319][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.132370][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.155700][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.185596][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.212653][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.235520][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.254568][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.267116][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.280442][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.294808][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.321419][T11070] IPVS: length: 215 != 24 [ 339.329568][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.353748][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.375635][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.388794][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.406867][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.426440][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.474729][T11069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1527'. [ 339.501029][T11066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1525'. [ 339.521215][T11075] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 339.584591][T10926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.609342][T10926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.634160][T10926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.662802][T10926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.854549][T11080] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 339.945004][ T2548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.954999][ T2548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.094993][ T2548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.118317][ T2548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.295715][T11093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1486'. [ 340.637582][T11104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.806350][T11111] IPVS: length: 215 != 24 [ 341.125610][T11121] Bluetooth: MGMT ver 1.23 [ 341.146820][ T4619] Bluetooth: hci10: command tx timeout [ 341.197403][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1540'. [ 341.214972][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 341.385057][T11127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.619003][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1543'. [ 341.725021][ T35] dummy0: left allmulticast mode [ 341.735731][ T35] bridge0: port 3(dummy0) entered disabled state [ 341.766920][ T35] bridge_slave_1: left allmulticast mode [ 341.773169][ T35] bridge_slave_1: left promiscuous mode [ 341.795031][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.832030][ T35] bridge_slave_0: left allmulticast mode [ 341.856200][ T35] bridge_slave_0: left promiscuous mode [ 341.872544][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.901315][ T35] gretap1: left allmulticast mode [ 341.915512][ T35] gretap1: left promiscuous mode [ 341.929020][ T35] bridge1: port 1(gretap1) entered disabled state [ 342.560774][ T35] dvmrp1 (unregistering): left allmulticast mode [ 342.824788][ T35] bond0 (unregistering): (slave lo): Releasing backup interface [ 342.837945][ T35] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 342.855123][ T35] bond0 (unregistering): Released all slaves [ 342.884877][ T35] bond1 (unregistering): Released all slaves [ 342.902934][T11140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1545'. [ 342.954054][T11153] netlink: 'syz.0.1549': attribute type 4 has an invalid length. [ 343.066061][T11143] lo speed is unknown, defaulting to 1000 [ 343.077088][ T35] tipc: Disabling bearer [ 343.109196][ T35] tipc: Left network mode [ 343.223244][T11159] IPVS: length: 215 != 24 [ 343.247977][T11163] netlink: 'syz.4.1552': attribute type 7 has an invalid length. [ 343.286838][T11163] netlink: 'syz.4.1552': attribute type 39 has an invalid length. [ 343.356341][ T29] audit: type=1107 audit(1724782475.524:98): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 343.456215][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 343.485894][T11171] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1552'. [ 343.510744][T11175] netlink: 'syz.0.1554': attribute type 8 has an invalid length. [ 343.619225][T11165] bridge1: port 1(gretap1) entered blocking state [ 343.652711][T11165] bridge1: port 1(gretap1) entered disabled state [ 343.671817][T11165] gretap1: entered allmulticast mode [ 343.687348][T11165] gretap1: entered promiscuous mode [ 343.702212][T11167] netlink: 'syz.0.1554': attribute type 10 has an invalid length. [ 343.742308][T11163] netlink: 'syz.4.1552': attribute type 7 has an invalid length. [ 343.775889][T11163] netlink: 'syz.4.1552': attribute type 39 has an invalid length. [ 343.803027][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 344.129015][T11182] netlink: 'syz.4.1557': attribute type 11 has an invalid length. [ 344.204722][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 344.331354][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 344.368366][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1557'. [ 344.668803][T11192] vlan0: entered promiscuous mode [ 344.937301][ T35] hsr_slave_0: left promiscuous mode [ 344.958571][ T35] hsr_slave_1: left promiscuous mode [ 344.977879][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.995701][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.019816][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.038093][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.072671][T11214] IPVS: length: 215 != 24 [ 345.109973][ T35] dummy0: left promiscuous mode [ 345.124622][ T35] veth1_macvtap: left promiscuous mode [ 345.141408][ T35] veth0_macvtap: left promiscuous mode [ 345.161367][ T35] veth1_vlan: left promiscuous mode [ 345.167782][ T35] veth0_vlan: left promiscuous mode [ 345.481530][ T35] pimreg (unregistering): left allmulticast mode [ 346.213260][ T35] team0 (unregistering): Port device team_slave_1 removed [ 346.292016][ T35] team0 (unregistering): Port device team_slave_0 removed [ 347.012080][ T35] smc: removing net device lo with user defined pnetid SYZ2 [ 347.030768][T11205] netlink: 'syz.2.1563': attribute type 4 has an invalid length. [ 347.040179][T11206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1562'. [ 347.278873][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1568'. [ 347.329545][T11229] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 347.430826][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1567'. [ 347.477281][T11231] lo speed is unknown, defaulting to 1000 [ 347.539176][T11239] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 347.720920][T11244] netlink: 'syz.4.1571': attribute type 7 has an invalid length. [ 347.745583][ T5309] IPVS: starting estimator thread 0... [ 347.809722][T11242] netlink: 'syz.4.1571': attribute type 4 has an invalid length. [ 347.855802][T11247] IPVS: using max 17 ests per chain, 40800 per kthread [ 347.926515][T11249] __nla_validate_parse: 6 callbacks suppressed [ 347.926539][T11249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1572'. [ 348.167364][T11254] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 348.231093][ T35] IPVS: stop unused estimator thread 0... [ 348.371746][T11259] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1575'. [ 348.503829][T11259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.714966][T11259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.743737][T11231] netlink: zone id is out of range [ 348.763879][T11265] SET target dimension over the limit! [ 348.855920][T11259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.917143][T11273] netlink: 'syz.4.1578': attribute type 5 has an invalid length. [ 349.011680][T11259] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.561332][T11288] IPVS: length: 215 != 24 [ 349.608294][T11259] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.689977][T11259] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.788166][T11259] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.852975][T11259] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.035518][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 350.174990][T11310] pimreg: entered allmulticast mode [ 350.325857][T11317] pimreg: left allmulticast mode [ 350.902993][T11325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.095835][T11334] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1592'. [ 351.117265][T11334] netlink: 'syz.3.1592': attribute type 9 has an invalid length. [ 351.136071][T11334] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1592'. [ 351.161191][T11334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1592'. [ 351.267960][T11343] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 0, id = 0 [ 351.431521][T11351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1595'. [ 351.445232][T11351] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.526169][T11351] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.595548][T11351] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.693845][T11351] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.790613][T11357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.798404][T11357] IPv6: NLM_F_CREATE should be set when creating new route [ 351.852473][T11351] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.887872][T11351] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.920937][T11351] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.978122][T11351] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.159475][ T25] IPVS: starting estimator thread 0... [ 352.181574][T11363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.277265][T11368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1600'. [ 352.287077][T11364] IPVS: using max 15 ests per chain, 36000 per kthread [ 352.292715][T11369] netlink: 'syz.3.1601': attribute type 7 has an invalid length. [ 352.319901][T11369] netlink: 'syz.3.1601': attribute type 39 has an invalid length. [ 352.387778][T11369] netlink: 'syz.3.1601': attribute type 7 has an invalid length. [ 352.415661][T11369] netlink: 'syz.3.1601': attribute type 39 has an invalid length. [ 352.448989][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1601'. [ 352.462425][T11369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1601'. [ 352.751543][T11380] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 353.057065][T11391] __nla_validate_parse: 1 callbacks suppressed [ 353.057087][T11391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1608'. [ 353.100992][T11391] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.149710][T11393] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1609'. [ 353.183379][T11396] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1610'. [ 353.218445][T11393] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.291856][T11391] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.350396][T11396] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1610'. [ 353.459997][T11393] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.593285][T11396] IPVS: Unknown mcast interface: vcan0 [ 353.617576][T11391] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.812186][T11409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.827281][T11393] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.904617][T11391] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.063725][T11393] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.190103][T11415] netlink: 'syz.3.1614': attribute type 7 has an invalid length. [ 354.201444][T11415] netlink: 'syz.3.1614': attribute type 39 has an invalid length. [ 354.237043][T11421] netlink: 'syz.3.1614': attribute type 7 has an invalid length. [ 354.245167][T11421] netlink: 'syz.3.1614': attribute type 39 has an invalid length. [ 354.281900][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 354.302375][T11415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1614'. [ 354.309904][T11391] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.361012][T11391] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.401724][T11391] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.468519][T11391] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.190587][T11393] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.257218][T11393] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.316540][T11393] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.356087][T11441] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1619'. [ 355.397189][T11441] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1619'. [ 355.423158][T11393] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.650024][T11454] netlink: 'syz.2.1622': attribute type 5 has an invalid length. [ 355.949734][T11466] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1624'. [ 355.978161][T11468] netlink: 'syz.3.1626': attribute type 7 has an invalid length. [ 356.046114][T11466] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1624'. [ 356.137798][T11466] IPVS: Error connecting to the multicast addr [ 356.740303][T11489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.060021][ T5309] IPVS: starting estimator thread 0... [ 357.186912][T11502] IPVS: using max 15 ests per chain, 36000 per kthread [ 357.548224][T11516] validate_nla: 4 callbacks suppressed [ 357.548247][T11516] netlink: 'syz.2.1640': attribute type 7 has an invalid length. [ 357.576085][T11516] netlink: 'syz.2.1640': attribute type 39 has an invalid length. [ 357.606128][T11519] netlink: 'syz.4.1641': attribute type 4 has an invalid length. [ 357.623120][T11516] netlink: 'syz.2.1640': attribute type 7 has an invalid length. [ 357.635116][T11516] netlink: 'syz.2.1640': attribute type 39 has an invalid length. [ 357.653379][T11519] netlink: 'syz.4.1641': attribute type 4 has an invalid length. [ 358.176160][T11539] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 358.176191][T11537] __nla_validate_parse: 11 callbacks suppressed [ 358.176207][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 358.259319][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 358.308759][T11546] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 358.352568][T11546] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 358.375104][T11541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1649'. [ 358.455934][T11537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1648'. [ 358.768311][T11569] @ÿ: renamed from veth0_vlan (while UP) [ 359.039578][T11576] netlink: 'syz.4.1657': attribute type 6 has an invalid length. [ 359.095169][T11580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.186103][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 359.276567][T11586] IPVS: length: 215 != 24 [ 359.686956][T11604] netlink: 'syz.1.1667': attribute type 4 has an invalid length. [ 359.800084][T11607] netlink: 'syz.1.1667': attribute type 4 has an invalid length. [ 359.899758][T11610] ɶƣ0GC¦: entered promiscuous mode [ 360.048067][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1668'. [ 360.106821][T11621] netlink: 'syz.1.1670': attribute type 10 has an invalid length. [ 360.189723][T11621] batman_adv: batadv0: Adding interface: team0 [ 360.218231][T11621] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.303509][T11621] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 360.330388][T11622] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1670'. [ 360.368559][T11622] team0: entered promiscuous mode [ 360.393065][T11622] team_slave_0: entered promiscuous mode [ 360.418270][T11622] team_slave_1: entered promiscuous mode [ 360.453922][T11622] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.474966][T11622] batman_adv: batadv0: Interface activated: team0 [ 360.502332][T11622] batman_adv: batadv0: Interface deactivated: team0 [ 360.539701][T11622] batman_adv: batadv0: Removing interface: team0 [ 360.609491][T11622] bridge0: port 3(team0) entered blocking state [ 360.624256][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1672'. [ 360.644947][T11622] bridge0: port 3(team0) entered disabled state [ 360.660309][T11622] team0: entered allmulticast mode [ 360.696236][T11622] team_slave_0: entered allmulticast mode [ 360.710997][T11622] team_slave_1: entered allmulticast mode [ 360.730152][T11622] bridge0: port 3(team0) entered blocking state [ 360.736900][T11622] bridge0: port 3(team0) entered forwarding state [ 360.750990][T11632] IPVS: length: 215 != 24 [ 361.048997][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 361.173938][T11641] lo speed is unknown, defaulting to 1000 [ 361.183360][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 361.920850][T11673] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.995150][T11678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.039903][T11682] IPVS: length: 215 != 24 [ 362.080982][T11673] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.124690][T11676] team0: entered promiscuous mode [ 362.143698][T11676] team_slave_0: entered promiscuous mode [ 362.154193][T11676] team_slave_1: entered promiscuous mode [ 362.200737][T11673] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.242187][T11676] team0: left promiscuous mode [ 362.268827][T11676] team_slave_0: left promiscuous mode [ 362.286146][T11676] team_slave_1: left promiscuous mode [ 362.317334][T11673] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.611304][T11673] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.722413][T11673] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.899262][T11673] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.992842][T11673] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.026823][T11704] validate_nla: 6 callbacks suppressed [ 363.026846][T11704] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 363.454446][T11719] __nla_validate_parse: 5 callbacks suppressed [ 363.454478][T11719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1696'. [ 363.859209][T11734] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1700'. [ 364.127087][T11743] ipt_rpfilter: unknown options [ 364.345050][T11751] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1706'. [ 364.373055][T11751] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.514936][T11751] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.576292][T11760] syzkaller1: entered promiscuous mode [ 364.598253][T11760] syzkaller1: entered allmulticast mode [ 364.643076][T11751] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.732980][T11751] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.789065][T11764] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1708'. [ 364.845774][T11760] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1708'. [ 365.099638][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 365.108598][T11767] lo speed is unknown, defaulting to 1000 [ 365.224273][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 365.284217][ T4619] block nbd0: Receive control failed (result -107) [ 365.404830][T11778] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1712'. [ 365.991906][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 366.341230][T11812] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1718'. [ 368.841128][T11812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.940724][T11812] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.079845][T11751] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.115247][T11812] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.211704][T11751] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.264441][T11751] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.292443][T11812] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.374023][T11751] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.513821][T11812] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.574808][T11812] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.597770][T11840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1724'. [ 369.630874][T11812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.654977][T11841] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.666177][T11841] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.766395][T11812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.112406][T11859] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1728'. [ 370.290259][T11865] netlink: 'syz.3.1730': attribute type 10 has an invalid length. [ 370.333929][T11865] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1730'. [ 370.375594][T11865] openvswitch: netlink: Flow key attr not present in new flow. [ 370.391348][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1729'. [ 370.495684][T11871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1729'. [ 370.807078][T11884] syzkaller0: entered promiscuous mode [ 370.817738][T11884] syzkaller0: entered allmulticast mode [ 370.900800][T11889] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1735'. [ 370.927914][T11890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.998432][T11892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.799665][ T54] Bluetooth: hci10: command 0x0405 tx timeout [ 373.517605][T11889] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.620733][T11889] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.652022][T11898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1736'. [ 373.668578][T11900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1737'. [ 373.683548][T11889] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.715009][T11900] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.776978][T11889] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.827079][T11900] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.947503][T11900] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.962665][T11907] xt_hashlimit: invalid interval [ 374.043991][T11900] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.172044][T11900] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.194974][T11900] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.212594][T11900] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.237537][T11900] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.306669][T11889] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.324652][T11889] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.343570][T11889] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.378393][T11889] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.579976][T11914] trusted_key: syz.3.1740 sent an empty control message without MSG_MORE. [ 374.676931][T11916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1742'. [ 374.812068][T11922] wg0: entered allmulticast mode [ 374.854737][T11922] xt_SECMARK: invalid mode: 0 [ 375.137453][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888027442000: rx timeout, send abort [ 375.647715][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888027442000: abort rx timeout. Force session deactivation [ 375.660590][T11946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1747'. [ 375.690233][T11946] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.724046][T11949] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1748'. [ 375.777028][T11952] xt_l2tp: v2 doesn't support IP mode [ 375.790830][T11946] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.880744][T11946] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.944091][T11956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1750'. [ 375.964307][T11946] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.989746][T11956] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.079426][T11956] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.131000][T11956] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.191728][T11956] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.292850][T11956] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.318713][T11956] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.342399][T11956] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.389839][T11956] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.636871][T11959] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1752'. [ 376.708632][T11966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1753'. [ 376.782239][T11968] xt_l2tp: v2 doesn't support IP mode [ 376.854121][T11972] pim6reg: entered allmulticast mode [ 376.887137][T11973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1754'. [ 377.061436][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 377.091806][T11981] team0: entered promiscuous mode [ 377.097292][T11981] team_slave_0: entered promiscuous mode [ 377.106115][T11981] team_slave_1: entered promiscuous mode [ 377.119047][T11981] team_slave_0: entered allmulticast mode [ 377.144901][T11981] team0: Port device team_slave_0 removed [ 377.173827][T11980] team0: left promiscuous mode [ 377.179022][T11980] team_slave_1: left promiscuous mode [ 377.673632][T11970] pim6reg: left allmulticast mode [ 378.507986][T12001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1764'. [ 378.526811][T12001] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.585064][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 378.638550][T12001] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.751972][T12001] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.858946][T12001] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.570186][T11946] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.604199][T11946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.626999][T11946] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.646143][T11946] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.945007][T12019] lo speed is unknown, defaulting to 1000 [ 380.109815][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.125743][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.145894][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.156418][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.187709][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 380.205779][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.453349][T12022] lo speed is unknown, defaulting to 1000 [ 380.613878][T12032] lo speed is unknown, defaulting to 1000 [ 380.629033][ T29] audit: type=1107 audit(1724782512.804:99): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 380.646663][T12036] netlink: 'syz.2.1774': attribute type 10 has an invalid length. [ 380.744799][T12039] netlink: 'syz.2.1774': attribute type 8 has an invalid length. [ 381.062359][T12022] chnl_net:caif_netlink_parms(): no params data found [ 381.361402][T12022] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.382508][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.414839][T12022] bridge_slave_0: entered allmulticast mode [ 381.433820][T12022] bridge_slave_0: entered promiscuous mode [ 381.554580][T12046] tap0: tun_chr_ioctl cmd 1074025677 [ 381.567773][T12046] tap0: linktype set to 147 [ 381.585990][T12022] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.611792][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.632466][T12022] bridge_slave_1: entered allmulticast mode [ 381.665053][T12022] bridge_slave_1: entered promiscuous mode [ 381.690950][T12058] __nla_validate_parse: 1 callbacks suppressed [ 381.691097][T12058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1777'. [ 381.849247][T12022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.910972][T12022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.012112][T12060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.039503][T12022] team0: Port device team_slave_0 added [ 382.094991][T12022] team0: Port device team_slave_1 added [ 382.264960][T12001] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.297955][T12022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.318487][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.348822][ T4619] Bluetooth: hci0: command tx timeout [ 382.360345][T12022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.400110][T12001] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.477201][T12022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.499787][T12073] netlink: 'syz.0.1781': attribute type 2 has an invalid length. [ 382.512976][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.544232][T12022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.572921][T12001] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.643471][T12001] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.871801][ T29] audit: type=1107 audit(1724782515.044:100): pid=12080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 382.926028][T12022] hsr_slave_0: entered promiscuous mode [ 382.943594][T12022] hsr_slave_1: entered promiscuous mode [ 382.959151][T12022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.972902][T12022] Cannot create hsr debugfs directory [ 382.989057][T12081] netlink: 'syz.4.1784': attribute type 10 has an invalid length. [ 383.024884][T12081] netlink: 'syz.4.1784': attribute type 8 has an invalid length. [ 383.362617][T12088] netlink: 'syz.0.1786': attribute type 1 has an invalid length. [ 383.461843][T12088] bond4: entered promiscuous mode [ 383.496159][T12088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.544006][T12097] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1788'. [ 383.697280][T12022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.962086][T12022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.978060][T12109] netlink: 'syz.2.1789': attribute type 4 has an invalid length. [ 383.994853][T12109] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1789'. [ 383.995048][T12107] netlink: 'syz.3.1790': attribute type 30 has an invalid length. [ 384.022334][T12108] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1791'. [ 384.059849][T12110] bridge0: port 3(macvlan2) entered blocking state [ 384.077539][T12110] bridge0: port 3(macvlan2) entered disabled state [ 384.090332][T12110] macvlan2: entered allmulticast mode [ 384.104831][T12110] macvlan2: entered promiscuous mode [ 384.190904][T12022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.327384][T12022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.410754][T12118] netlink: 'syz.0.1795': attribute type 10 has an invalid length. [ 384.430079][ T4619] Bluetooth: hci0: command tx timeout [ 384.467285][T12118] batman_adv: batadv0: Adding interface: team0 [ 384.475152][T12118] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.514830][T12118] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 384.553092][T12120] netlink: 'syz.0.1795': attribute type 10 has an invalid length. [ 384.586731][T12120] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1795'. [ 384.676684][T12120] team0: entered promiscuous mode [ 384.697597][T12120] team_slave_1: entered promiscuous mode [ 384.770133][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.812116][T12120] batman_adv: batadv0: Interface activated: team0 [ 384.839329][T12120] batman_adv: batadv0: Interface deactivated: team0 [ 384.856450][ T29] audit: type=1107 audit(1724782517.024:101): pid=12127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 384.870814][T12120] batman_adv: batadv0: Removing interface: team0 [ 384.887239][T12120] bridge0: port 4(team0) entered blocking state [ 384.896563][T12120] bridge0: port 4(team0) entered disabled state [ 384.909318][T12120] team0: entered allmulticast mode [ 384.918497][T12120] team_slave_1: entered allmulticast mode [ 384.934745][T12120] bridge0: port 4(team0) entered blocking state [ 384.947742][T12120] bridge0: port 4(team0) entered forwarding state [ 385.137198][T12022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.182882][T12022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.206826][T12022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.234830][T12022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.258092][T12118] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 385.796269][T12022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.824528][T12150] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.1802'. [ 385.848973][T12150] validate_nla: 2 callbacks suppressed [ 385.848999][T12150] netlink: 'syz.4.1802': attribute type 1 has an invalid length. [ 385.897360][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'. [ 385.982125][T12022] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.037141][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.045949][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.080282][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.090512][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.236108][T12158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.371083][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'. [ 386.419140][T12163] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 386.560876][T12166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1806'. [ 386.597163][T12169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.676430][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 386.765806][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 386.821052][T12178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1808'. [ 386.850939][T12022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.043012][T12022] veth0_vlan: entered promiscuous mode [ 387.084634][T12022] veth1_vlan: entered promiscuous mode [ 387.137407][T12183] netlink: 'syz.4.1810': attribute type 4 has an invalid length. [ 387.167876][T12022] veth0_macvtap: entered promiscuous mode [ 387.194885][T12022] veth1_macvtap: entered promiscuous mode [ 387.249508][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.279647][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.296099][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.310526][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.322339][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.341523][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.358743][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.375065][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.390197][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.396644][ T29] audit: type=1107 audit(1724782519.564:102): pid=12188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 387.403203][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.475868][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.505463][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.518399][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.550845][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.567921][T12194] netlink: 'syz.0.1813': attribute type 8 has an invalid length. [ 387.587522][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.640172][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.678996][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.718498][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.725216][T12192] netlink: 'syz.4.1812': attribute type 11 has an invalid length. [ 387.750342][T12022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.789761][T12189] netlink: 'syz.0.1813': attribute type 10 has an invalid length. [ 388.009439][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.041874][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.087226][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.156287][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.177258][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.225467][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.254538][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.290736][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.331357][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.375729][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.415748][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.435538][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.468969][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.494246][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.531666][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.552155][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.580615][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.612871][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.642610][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.678910][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.715259][T12022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.755687][T12022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.774329][T12022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.805820][T12022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.834836][T12022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.918387][T12222] vlan0: entered promiscuous mode [ 389.226470][T12240] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1820'. [ 389.462742][T12247] netlink: 'syz.0.1821': attribute type 4 has an invalid length. [ 389.526593][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.574771][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.697782][ T2548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.722015][ T2548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.899091][T12255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.947117][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 389.972761][T12259] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1769'. [ 390.195068][T12262] netlink: 'syz.1.1769': attribute type 7 has an invalid length. [ 390.267679][T12262] netlink: 'syz.1.1769': attribute type 39 has an invalid length. [ 390.279315][T12276] netlink: 'syz.4.1824': attribute type 2 has an invalid length. [ 390.300780][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 390.330856][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1769'. [ 390.387922][T12272] netlink: 'syz.1.1769': attribute type 7 has an invalid length. [ 390.400114][T12272] netlink: 'syz.1.1769': attribute type 39 has an invalid length. [ 390.484482][T12271] syzkaller0: mtu less than device minimum [ 390.579391][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 390.649340][T12278] syzkaller0: entered allmulticast mode [ 391.389251][T12305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1831'. [ 391.531070][T12309] netlink: 'syz.4.1832': attribute type 6 has an invalid length. [ 391.600521][T12313] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 391.606318][T12309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1832'. [ 391.704030][T12313] bridge0: entered allmulticast mode [ 391.742230][T12316] netlink: 'syz.1.1834': attribute type 4 has an invalid length. [ 391.773223][T12320] syz.3.1835: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 391.837428][T12320] CPU: 0 UID: 0 PID: 12320 Comm: syz.3.1835 Not tainted 6.11.0-rc4-syzkaller-00147-gbc21000e99f9 #0 [ 391.850985][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 391.863205][T12320] Call Trace: [ 391.867146][T12320] [ 391.870559][T12320] dump_stack_lvl+0x241/0x360 [ 391.875674][T12320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.881139][T12320] ? __pfx__printk+0x10/0x10 [ 391.889027][T12320] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 391.897144][T12320] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 391.906586][T12320] warn_alloc+0x278/0x410 [ 391.911679][T12320] ? stack_depot_save_flags+0x29/0x830 [ 391.917285][T12320] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 391.925607][T12320] ? __pfx_warn_alloc+0x10/0x10 [ 391.932644][T12320] ? kasan_save_track+0x3f/0x80 [ 391.938351][T12320] ? __kasan_kmalloc+0x98/0xb0 [ 391.944488][T12320] ? xsk_setsockopt+0x4ea/0x950 [ 391.950738][T12320] ? do_sock_setsockopt+0x3af/0x720 [ 391.957830][T12320] ? __sys_setsockopt+0x1ae/0x250 [ 391.964876][T12320] ? __x64_sys_setsockopt+0xb5/0xd0 [ 391.972853][T12320] ? do_syscall_64+0xf3/0x230 [ 391.979070][T12320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.986937][T12330] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1838'. [ 391.987207][T12320] __vmalloc_node_range_noprof+0x126/0x1400 [ 392.007664][T12320] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.015542][T12320] ? __kasan_kmalloc+0x98/0xb0 [ 392.021317][T12320] ? xskq_create+0x54/0x170 [ 392.026960][T12320] vmalloc_user_noprof+0x74/0x80 [ 392.033012][T12320] ? xskq_create+0xb6/0x170 [ 392.038183][T12320] xskq_create+0xb6/0x170 [ 392.043292][T12320] xsk_init_queue+0xa1/0x100 [ 392.049177][T12320] xsk_setsockopt+0x4ea/0x950 [ 392.054904][T12320] ? __pfx_xsk_setsockopt+0x10/0x10 [ 392.054956][T12320] ? __pfx_lock_acquire+0x10/0x10 [ 392.068467][T12320] ? aa_sock_opt_perm+0x79/0x120 [ 392.074953][T12320] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 392.082251][T12320] ? security_socket_setsockopt+0x87/0xb0 [ 392.090662][T12320] ? __pfx_xsk_setsockopt+0x10/0x10 [ 392.097366][T12320] do_sock_setsockopt+0x3af/0x720 [ 392.104770][T12320] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 392.111927][T12320] ? __fget_files+0x29/0x470 [ 392.113060][T12337] netlink: 'syz.1.1838': attribute type 7 has an invalid length. [ 392.118749][T12320] ? __fget_files+0x3f6/0x470 [ 392.118812][T12320] __sys_setsockopt+0x1ae/0x250 [ 392.118852][T12320] __x64_sys_setsockopt+0xb5/0xd0 [ 392.118886][T12320] do_syscall_64+0xf3/0x230 [ 392.154660][T12320] ? clear_bhb_loop+0x35/0x90 [ 392.159842][T12320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.160473][T12337] netlink: 'syz.1.1838': attribute type 39 has an invalid length. [ 392.169110][T12320] RIP: 0033:0x7f218f779e79 [ 392.169147][T12320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.169174][T12320] RSP: 002b:00007f2190481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.169203][T12320] RAX: ffffffffffffffda RBX: 00007f218f915f80 RCX: 00007f218f779e79 [ 392.169221][T12320] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 392.169236][T12320] RBP: 00007f218f7e793e R08: 0000000000000004 R09: 0000000000000000 [ 392.169252][T12320] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.271198][T12320] R13: 0000000000000000 R14: 00007f218f915f80 R15: 00007ffe2f9a19c8 [ 392.282598][T12320] [ 392.293141][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 392.318769][T12320] Mem-Info: [ 392.323712][T12320] active_anon:4354 inactive_anon:0 isolated_anon:0 [ 392.323712][T12320] active_file:1294 inactive_file:38294 isolated_file:0 [ 392.323712][T12320] unevictable:768 dirty:422 writeback:0 [ 392.323712][T12320] slab_reclaimable:11202 slab_unreclaimable:122279 [ 392.323712][T12320] mapped:48533 shmem:1255 pagetables:972 [ 392.323712][T12320] sec_pagetables:0 bounce:0 [ 392.323712][T12320] kernel_misc_reclaimable:0 [ 392.323712][T12320] free:1303379 free_pcp:954 free_cma:0 [ 392.363415][T12324] netlink: 'syz.2.1837': attribute type 11 has an invalid length. [ 392.397876][T12337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1838'. [ 392.411502][T12324] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1837'. [ 392.436332][T12320] Node 0 active_anon:17416kB inactive_anon:0kB active_file:5176kB inactive_file:153108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:196132kB dirty:1688kB writeback:0kB shmem:3484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12984kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? no [ 392.459259][T12345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1839'. [ 392.494058][T12320] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 392.499003][T12341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1839'. [ 392.542277][T12320] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.624902][T12320] lowmem_reserve[]: 0 2561 2562 0 0 [ 392.642818][T12320] Node 0 DMA32 free:1255224kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:17372kB inactive_anon:0kB active_file:5176kB inactive_file:151792kB unevictable:1536kB writepending:1684kB present:3129332kB managed:2651248kB mlocked:0kB bounce:0kB free_pcp:812kB local_pcp:684kB free_cma:0kB [ 392.679399][T12334] xt_NFQUEUE: number of total queues is 0 [ 392.709116][T12320] lowmem_reserve[]: 0 0 1 0 0 [ 392.714593][T12320] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 392.827319][T12320] lowmem_reserve[]: 0 0 0 0 0 [ 392.852731][T12320] Node 1 Normal free:3946920kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.903388][T12320] lowmem_reserve[]: 0 0 0 0 0 [ 392.918605][T12320] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.987192][T12320] Node 0 DMA32: 30*4kB (ME) 233*8kB (ME) 292*16kB (UME) 187*32kB (UME) 117*64kB (UME) 27*128kB (UM) 23*256kB (UM) 13*512kB (UM) 14*1024kB (UM) 6*2048kB (UME) 291*4096kB (UM) = 1254688kB [ 393.081889][T12320] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 393.146194][T12320] Node 1 Normal: 8*4kB (UM) 13*8kB (UM) 10*16kB (UM) 8*32kB (UM) 6*64kB (U) 4*128kB (U) 4*256kB (UM) 6*512kB (UM) 3*1024kB (U) 1*2048kB (U) 961*4096kB (M) = 3946920kB [ 393.210576][T12320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.258578][T12320] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 393.307308][T12320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.328661][T12320] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 393.355527][T12320] 40844 total pagecache pages [ 393.361399][T12320] 0 pages in swap cache [ 393.412120][T12320] Free swap = 124996kB [ 393.423196][T12320] Total swap = 124996kB [ 393.436165][T12320] 2097051 pages RAM [ 393.446299][T12320] 0 pages HighMem/MovableOnly [ 393.464476][T12320] 402773 pages reserved [ 393.478688][T12320] 0 pages cma reserved [ 393.587717][T12352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.769263][T12368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1846'. [ 393.860444][T12373] netlink: 'syz.2.1848': attribute type 4 has an invalid length. [ 393.873803][ T25] lo speed is unknown, defaulting to 1000 [ 394.034590][T12381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1851'. [ 394.057187][T12381] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.140142][T12381] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.389466][T12381] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.438912][T12389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1853'. [ 394.470815][T12383] lo speed is unknown, defaulting to 1000 [ 394.562053][T12381] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.144832][T12399] can: request_module (can-proto-0) failed. [ 395.194240][T12381] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.409799][T12381] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.492754][T12381] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.548473][T12381] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.607046][T12411] vlan0: entered promiscuous mode [ 396.188836][T12419] syzkaller1: entered promiscuous mode [ 396.211050][T12419] syzkaller1: entered allmulticast mode [ 396.247185][T12422] netlink: 'syz.4.1861': attribute type 4 has an invalid length. [ 396.265566][ T5237] Bluetooth: hci8: command 0x0406 tx timeout [ 396.280777][T12427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1862'. [ 396.981866][ T1060] tipc: Subscription rejected, illegal request [ 397.212701][T12447] __nla_validate_parse: 1 callbacks suppressed [ 397.212726][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 397.295497][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 397.309869][T12447] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1868'. [ 397.721686][T12470] netlink: 'syz.1.1875': attribute type 4 has an invalid length. [ 397.782547][T12465] IPVS: Scheduler module ip_vs_sip not found [ 397.964691][T12476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1877'. [ 398.006342][T12476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1877'. [ 398.117621][T12484] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1881'. [ 398.132806][T12483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1880'. [ 398.162666][T12484] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.261629][T12484] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.429300][T12484] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.583340][T12484] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.856012][T12484] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.913405][T12484] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.978102][T12484] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.180765][T12484] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.256056][T12511] netlink: 'syz.0.1886': attribute type 4 has an invalid length. [ 399.769675][T12516] IPVS: Scheduler module ip_vs_sip not found [ 400.320455][T12530] can: request_module (can-proto-0) failed. [ 400.370242][T12539] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1893'. [ 400.408426][T12530] geneve2: entered promiscuous mode [ 400.424890][T12530] geneve2: entered allmulticast mode [ 400.695726][T12545] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 400.763071][T12542] IPVS: stopping backup sync thread 12545 ... [ 401.219177][T12551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1897'. [ 401.252116][T12553] netlink: 'syz.4.1898': attribute type 10 has an invalid length. [ 401.274672][ T29] audit: type=1107 audit(1724782533.424:103): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 401.308707][T12555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1899'. [ 401.388071][T12559] netlink: 'syz.4.1898': attribute type 8 has an invalid length. [ 401.569404][T12555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.931950][T12577] IPVS: Scheduler module ip_vs_sip not found [ 402.025262][T12555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.122130][ T29] audit: type=1107 audit(1724782534.294:104): pid=12580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 402.177572][T12581] netlink: 'syz.3.1902': attribute type 10 has an invalid length. [ 402.255848][T12581] netlink: 'syz.3.1902': attribute type 8 has an invalid length. [ 402.521566][T12555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.587602][T12586] tipc: Started in network mode [ 402.619782][T12586] tipc: Node identity 4e70f1b4c8af, cluster identity 4711 [ 402.656104][T12586] tipc: Enabled bearer , priority 0 [ 402.682488][T12589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1905'. [ 402.788393][T12555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.033649][T12601] team0: left allmulticast mode [ 403.086014][T12601] team_slave_1: left allmulticast mode [ 403.103804][T12601] bridge0: port 4(team0) entered disabled state [ 403.127684][T12601] bond0: (slave batadv0): Releasing backup interface [ 403.155225][T12601] bridge_slave_0: left allmulticast mode [ 403.168095][T12601] bridge_slave_0: left promiscuous mode [ 403.186942][T12601] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.452773][T12601] bridge_slave_1: left allmulticast mode [ 403.462995][T12601] bridge_slave_1: left promiscuous mode [ 403.471752][T12601] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.492844][T12601] bond0: (slave bond_slave_0): Releasing backup interface [ 403.542477][T12601] bond0: (slave bond_slave_1): Releasing backup interface [ 403.573258][T12601] team_slave_1: left promiscuous mode [ 403.630958][T12601] team0: Port device team_slave_1 removed [ 403.647270][T12601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.662342][T12601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.679532][T12601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.689692][T12601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.717690][T12601] gretap1: left allmulticast mode [ 403.723751][T12601] gretap1: left promiscuous mode [ 403.734258][T12601] bridge2: port 1(gretap1) entered disabled state [ 403.763359][T12601] macvlan2: left allmulticast mode [ 403.773490][T12601] macvlan2: left promiscuous mode [ 403.782218][T12601] bridge0: port 3(macvlan2) entered disabled state [ 403.797201][ T5278] tipc: Node number set to 2262823348 [ 403.854786][T12603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.876122][T12603] team0: Device bond0 failed to register rx_handler [ 403.905215][T12583] tipc: Disabling bearer [ 403.933218][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 404.080859][T12555] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.163274][T12555] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.220420][ T29] audit: type=1107 audit(1724782536.384:105): pid=12616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 404.250278][T12555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.262295][T12620] Bluetooth: MGMT ver 1.23 [ 404.281617][T12618] netlink: 'syz.2.1911': attribute type 10 has an invalid length. [ 404.355661][T12617] IPVS: Scheduler module ip_vs_sip not found [ 404.369025][T12555] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.405628][ T29] audit: type=1107 audit(1724782536.574:106): pid=12625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 404.449780][T12622] netlink: 'syz.2.1911': attribute type 8 has an invalid length. [ 404.497937][T12627] netlink: 'syz.3.1914': attribute type 10 has an invalid length. [ 404.557085][T12627] netlink: 'syz.3.1914': attribute type 8 has an invalid length. [ 404.587636][T12620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.867875][T12634] lo speed is unknown, defaulting to 1000 [ 405.209243][T12631] tap0: tun_chr_ioctl cmd 1074025677 [ 405.227831][T12631] tap0: linktype set to 147 [ 405.286862][T12651] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1920'. [ 405.472249][T12654] netlink: 'syz.2.1920': attribute type 7 has an invalid length. [ 405.486068][T12654] netlink: 'syz.2.1920': attribute type 39 has an invalid length. [ 405.559922][T12654] netlink: 'syz.2.1920': attribute type 7 has an invalid length. [ 405.574903][T12654] netlink: 'syz.2.1920': attribute type 39 has an invalid length. [ 405.614086][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 405.631957][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 405.648347][T12651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'. [ 405.933462][T12653] team1: Mode "" not found [ 405.969913][T12653] netlink: 'syz.3.1921': attribute type 3 has an invalid length. [ 406.005839][T12653] netlink: 'syz.3.1921': attribute type 7 has an invalid length. [ 406.022509][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 406.067699][T12653] : entered promiscuous mode [ 406.118594][T12669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1924'. [ 406.196317][T12669] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.392019][T12669] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.554763][T12669] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.648433][T12669] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.177478][T12689] IPVS: Scheduler module ip_vs_sip not found [ 407.223470][ T29] audit: type=1107 audit(1724782539.394:107): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 407.264475][ T29] audit: type=1107 audit(1724782539.424:108): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 407.339908][T12696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.402780][T12696] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 407.476289][T12669] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.514605][T12669] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.579528][T12669] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.632148][T12669] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.653355][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1932'. [ 407.890000][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'. [ 407.943941][T12708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1934'. [ 408.190910][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 408.213283][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1936'. [ 408.428451][T12726] ipt_ECN: cannot use operation on non-tcp rule [ 408.810159][T12734] IPVS: Scheduler module ip_vs_sip not found [ 408.859749][ T29] audit: type=1107 audit(1724782541.034:109): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 408.882695][ T29] audit: type=1107 audit(1724782541.054:110): pid=12742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 409.072802][T12752] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1944'. [ 409.109959][T12752] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.137066][T12754] bridge0: entered allmulticast mode [ 409.188566][T12752] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.218201][T12754] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1945'. [ 409.248525][T12754] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.373459][T12752] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.517194][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1947'. [ 409.630886][T12770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1948'. [ 409.771364][T12752] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.515937][ T29] audit: type=1107 audit(1724782542.684:111): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 410.588225][T12797] validate_nla: 8 callbacks suppressed [ 410.588247][T12797] netlink: 'syz.3.1956': attribute type 10 has an invalid length. [ 410.639581][T12797] netlink: 'syz.3.1956': attribute type 8 has an invalid length. [ 410.653205][T12795] netlink: 'syz.1.1954': attribute type 6 has an invalid length. [ 410.685697][T12805] syz.0.1958 uses old SIOCAX25GETINFO [ 410.700945][T12798] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 410.705685][T12795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1954'. [ 410.730603][T12794] IPVS: Scheduler module ip_vs_sip not found [ 410.764718][T12798] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.775363][T12798] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.815014][T12798] bridge0: entered allmulticast mode [ 411.073790][T12798] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.086987][T12798] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.098637][T12798] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.111515][T12798] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.139975][T12798] vxlan0: entered promiscuous mode [ 411.572867][T12830] x_tables: duplicate underflow at hook 2 [ 411.625962][ T5237] Bluetooth: hci9: command 0x0406 tx timeout [ 412.223507][T12849] IPVS: length: 215 != 24 [ 412.405140][T12859] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1971'. [ 412.460391][T12851] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 412.819546][T12871] netlink: 'syz.4.1974': attribute type 10 has an invalid length. [ 412.855022][T12873] pim6reg: tun_chr_ioctl cmd 1074025677 [ 412.862208][T12873] pim6reg: linktype set to 823 [ 412.945505][T12875] __nla_validate_parse: 5 callbacks suppressed [ 412.945529][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1976'. [ 413.060430][T12878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1977'. [ 413.082292][T12878] xt_recent: hitcount (184549376) is larger than allowed maximum (65535) [ 413.144374][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'. [ 413.160239][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'. [ 413.229347][T12752] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.270667][T12752] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.311085][T12752] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.389021][T12752] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.578005][T12896] netlink: 'syz.0.1980': attribute type 3 has an invalid length. [ 413.684240][T12901] IPVS: length: 215 != 24 [ 414.176211][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 414.555012][T12933] bond0: entered promiscuous mode [ 414.584903][T12933] bond_slave_0: entered promiscuous mode [ 414.622484][T12933] bond_slave_1: entered promiscuous mode [ 414.655256][T12933] batadv0: entered promiscuous mode [ 414.790520][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.961351][T12946] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1992'. [ 414.994740][T12947] IPVS: length: 215 != 24 [ 415.010018][T12946] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.211823][T12946] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.432889][T12946] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.447652][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 415.557251][T12964] team0: entered promiscuous mode [ 415.576691][T12964] team_slave_0: entered promiscuous mode [ 415.596212][T12964] team_slave_1: entered promiscuous mode [ 415.821605][T12959] team_slave_0: entered allmulticast mode [ 415.864329][T12959] team0: Port device team_slave_0 removed [ 416.066238][T12946] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.135961][T12957] team0: left promiscuous mode [ 416.142122][T12957] team_slave_1: left promiscuous mode [ 416.308152][T12946] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.351604][T12946] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.404940][T12981] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2002'. [ 416.419806][T12946] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.442327][T12981] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 416.498310][T12946] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.546583][T12991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 416.596802][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'. [ 416.951409][T13001] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 416.976479][T13001] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 417.055920][T13001] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 417.076281][T13001] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 417.102266][T13001] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 417.130799][T13001] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 417.165908][T13001] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 417.198446][T13001] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 417.271575][T13001] geneve2: entered promiscuous mode [ 417.295522][T13001] geneve2: entered allmulticast mode [ 417.429388][T13015] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.584133][T13015] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.716757][T13015] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.878078][T13015] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.359487][T13037] netlink: 'syz.2.2017': attribute type 6 has an invalid length. [ 418.415871][T13037] __nla_validate_parse: 1 callbacks suppressed [ 418.415895][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2017'. [ 418.447789][T13015] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.499112][T13043] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 418.544625][T13043] bridge0: entered allmulticast mode [ 418.630498][T13015] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.701339][T13015] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.740625][T13043] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.751885][T13043] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.763537][T13043] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.773878][T13043] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.795764][T13043] vxlan0: entered promiscuous mode [ 418.796782][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 418.883752][T13015] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.164470][T13064] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2025'. [ 419.212224][T13068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2027'. [ 419.663150][T13085] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 419.876335][T13097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2034'. [ 419.900446][T13097] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.917573][T13097] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.314964][T13097] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.330037][T13097] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.412432][T13097] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.473755][T13097] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.574435][T13097] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.588145][T13097] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.617865][T13116] netlink: 'syz.3.2036': attribute type 1 has an invalid length. [ 420.646136][T13117] wg2: entered promiscuous mode [ 420.653912][T13117] wg2: entered allmulticast mode [ 420.727408][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 420.827815][T13118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2036'. [ 420.898624][T13097] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.916238][T13097] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.943009][T13097] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.954332][T13097] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.978106][T13097] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.990568][T13097] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.020459][T13097] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.043825][T13097] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.430839][T13133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2041'. [ 421.609164][T13136] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2042'. [ 421.637086][T13136] openvswitch: : Dropping previously announced user features [ 422.045109][T13150] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.053503][T13150] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.094803][T13150] hsr_slave_0: left promiscuous mode [ 422.099870][T13152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2047'. [ 422.116555][T13150] hsr_slave_1: left promiscuous mode [ 423.840749][T13195] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 423.852272][T13195] __nla_validate_parse: 6 callbacks suppressed [ 423.852286][T13195] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2059'. [ 424.063969][T13197] netlink: 'syz.4.2060': attribute type 2 has an invalid length. [ 424.201597][T13201] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'. [ 424.468702][T13211] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2065'. [ 424.474599][T13209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2064'. [ 424.525086][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 424.773531][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 424.810514][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2067'. [ 424.822982][T13217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2067'. [ 424.973289][T13225] netlink: 'syz.3.2069': attribute type 10 has an invalid length. [ 425.006240][T13225] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.018441][T13225] bond0: (slave team0): Enslaving as an active interface with an up link [ 425.500892][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 425.702254][T13236] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2073'. [ 426.796408][T13263] netlink: 'syz.4.2080': attribute type 14 has an invalid length. [ 426.925494][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.970335][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.981043][T13270] netlink: 'syz.4.2082': attribute type 2 has an invalid length. [ 427.009289][T13268] lo speed is unknown, defaulting to 1000 [ 427.379836][T13279] tipc: Enabled bearer , priority 10 [ 428.948021][T13317] __nla_validate_parse: 12 callbacks suppressed [ 428.948045][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 429.123897][ T5237] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 429.138439][ T5237] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 429.154156][ T5237] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 429.169402][ T5237] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 429.186415][ T5237] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 429.196952][ T5237] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 429.372981][T13321] xt_CT: No such helper "pptp" [ 429.394213][T13318] lo speed is unknown, defaulting to 1000 [ 429.432511][T13327] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2100'. [ 429.475973][ T4619] ================================================================== [ 429.485945][ T4619] BUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 429.497173][ T4619] Read of size 8 at addr ffff88804e66bf98 by task kworker/u9:1/4619 [ 429.508055][ T4619] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 429.511813][ T4619] CPU: 0 UID: 0 PID: 4619 Comm: kworker/u9:1 Not tainted 6.11.0-rc4-syzkaller-00147-gbc21000e99f9 #0 [ 429.527048][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 429.538243][ T4619] Workqueue: hci0 hci_cmd_sync_work [ 429.545203][ T4619] Call Trace: [ 429.549976][ T4619] [ 429.553453][ T4619] dump_stack_lvl+0x241/0x360 [ 429.559473][ T4619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.565811][ T4619] ? __pfx__printk+0x10/0x10 [ 429.570845][ T4619] ? _printk+0xd5/0x120 [ 429.576207][ T4619] ? __virt_addr_valid+0x183/0x530 [ 429.585661][ T4619] ? __virt_addr_valid+0x183/0x530 [ 429.592386][ T4619] print_report+0x169/0x550 [ 429.600738][ T4619] ? __virt_addr_valid+0x183/0x530 [ 429.607636][ T4619] ? __virt_addr_valid+0x183/0x530 [ 429.613389][ T4619] ? __virt_addr_valid+0x45f/0x530 [ 429.620369][ T4619] ? __phys_addr+0xba/0x170 [ 429.626232][ T4619] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 429.636673][ T4619] kasan_report+0x143/0x180 [ 429.645857][ T4619] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 429.653514][ T4619] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 429.661948][ T4619] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 429.669978][ T4619] hci_cmd_sync_work+0x22b/0x400 [ 429.675598][ T4619] ? process_scheduled_works+0x945/0x1830 [ 429.683046][ T4619] process_scheduled_works+0xa2c/0x1830 [ 429.690288][ T4619] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.698496][ T4619] ? assign_work+0x364/0x3d0 [ 429.704196][ T4619] worker_thread+0x86d/0xd40 [ 429.709301][ T4619] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 429.715868][ T4619] ? __kthread_parkme+0x169/0x1d0 [ 429.721283][ T4619] ? __pfx_worker_thread+0x10/0x10 [ 429.728608][ T4619] kthread+0x2f0/0x390 [ 429.735167][ T4619] ? __pfx_worker_thread+0x10/0x10 [ 429.741859][ T4619] ? __pfx_kthread+0x10/0x10 [ 429.748260][ T4619] ret_from_fork+0x4b/0x80 [ 429.754033][ T4619] ? __pfx_kthread+0x10/0x10 [ 429.759640][ T4619] ret_from_fork_asm+0x1a/0x30 [ 429.767635][ T4619] [ 429.771825][ T4619] [ 429.775301][ T4619] Allocated by task 12620: [ 429.780661][ T4619] kasan_save_track+0x3f/0x80 [ 429.787326][ T4619] __kasan_kmalloc+0x98/0xb0 [ 429.792162][ T4619] __kmalloc_cache_noprof+0x19c/0x2c0 [ 429.799502][ T4619] mgmt_pending_new+0x65/0x250 [ 429.807658][ T4619] mgmt_pending_add+0x36/0x120 [ 429.815301][ T4619] remove_adv_monitor+0x102/0x1b0 [ 429.821252][ T4619] hci_mgmt_cmd+0xc47/0x11d0 [ 429.827517][ T4619] hci_sock_sendmsg+0x7b8/0x11c0 [ 429.833463][ T4619] __sock_sendmsg+0x221/0x270 [ 429.841513][ T4619] sock_write_iter+0x2dd/0x400 [ 429.847081][ T4619] vfs_write+0xa72/0xc90 [ 429.853577][ T4619] ksys_write+0x1a0/0x2c0 [ 429.859242][ T4619] do_syscall_64+0xf3/0x230 [ 429.865906][ T4619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.873327][ T4619] [ 429.876025][ T4619] Freed by task 13048: [ 429.881526][ T4619] kasan_save_track+0x3f/0x80 [ 429.887094][ T4619] kasan_save_free_info+0x40/0x50 [ 429.893113][ T4619] poison_slab_object+0xe0/0x150 [ 429.898958][ T4619] __kasan_slab_free+0x37/0x60 [ 429.905781][ T4619] kfree+0x149/0x360 [ 429.910837][ T4619] mgmt_pending_foreach+0xd1/0x130 [ 429.916757][ T4619] __mgmt_power_off+0x187/0x420 [ 429.923471][ T4619] hci_dev_close_sync+0x665/0x11a0 [ 429.928736][ T4619] hci_dev_close+0x112/0x210 [ 429.934662][ T4619] sock_do_ioctl+0x158/0x460 [ 429.939559][ T4619] sock_ioctl+0x629/0x8e0 [ 429.944617][ T4619] __se_sys_ioctl+0xfc/0x170 [ 429.950306][ T4619] do_syscall_64+0xf3/0x230 [ 429.955361][ T4619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.963156][ T4619] [ 429.965574][ T4619] The buggy address belongs to the object at ffff88804e66bf80 [ 429.965574][ T4619] which belongs to the cache kmalloc-96 of size 96 [ 429.984771][ T4619] The buggy address is located 24 bytes inside of [ 429.984771][ T4619] freed 96-byte region [ffff88804e66bf80, ffff88804e66bfe0) [ 430.002022][ T4619] [ 430.005062][ T4619] The buggy address belongs to the physical page: [ 430.011848][ T4619] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804e66bb80 pfn:0x4e66b [ 430.025514][ T4619] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 430.035627][ T4619] page_type: 0xfdffffff(slab) [ 430.042346][ T4619] raw: 00fff00000000200 ffff888015841280 ffffea0001ef9910 ffffea00017ff010 [ 430.052349][ T4619] raw: ffff88804e66bb80 000000000020000f 00000001fdffffff 0000000000000000 [ 430.062882][ T4619] page dumped because: kasan: bad access detected [ 430.071535][ T4619] page_owner tracks the page as allocated [ 430.077424][ T4619] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7678, tgid 7677 (syz.2.552), ts 198226394842, free_ts 22938094451 [ 430.105668][ T4619] post_alloc_hook+0x1f3/0x230 [ 430.110901][ T4619] get_page_from_freelist+0x2e4c/0x2f10 [ 430.117614][ T4619] __alloc_pages_noprof+0x256/0x6c0 [ 430.123749][ T4619] alloc_slab_page+0x5f/0x120 [ 430.129859][ T4619] allocate_slab+0x5a/0x2f0 [ 430.134840][ T4619] ___slab_alloc+0xcd1/0x14b0 [ 430.139921][ T4619] __slab_alloc+0x58/0xa0 [ 430.146219][ T4619] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 430.154151][ T4619] nsim_fib_event_nb+0x17c/0x10b0 [ 430.161651][ T4619] call_fib_notifier+0x42/0x70 [ 430.169823][ T4619] fib6_node_dump+0x2d3/0x380 [ 430.175536][ T4619] fib6_walk_continue+0x658/0x8f0 [ 430.181657][ T4619] fib6_walk+0x168/0x2b0 [ 430.187054][ T4619] fib6_tables_dump+0x21a/0x310 [ 430.193609][ T4619] register_fib_notifier+0x182/0x370 [ 430.200861][ T4619] nsim_fib_create+0x902/0xa70 [ 430.206025][ T4619] page last free pid 1 tgid 1 stack trace: [ 430.212815][ T4619] free_unref_page+0xd22/0xea0 [ 430.220865][ T4619] free_contig_range+0x9e/0x160 [ 430.226617][ T4619] destroy_args+0x8a/0x890 [ 430.231789][ T4619] debug_vm_pgtable+0x4be/0x550 [ 430.238546][ T4619] do_one_initcall+0x248/0x880 [ 430.244562][ T4619] do_initcall_level+0x157/0x210 [ 430.249700][ T4619] do_initcalls+0x3f/0x80 [ 430.255450][ T4619] kernel_init_freeable+0x435/0x5d0 [ 430.262048][ T4619] kernel_init+0x1d/0x2b0 [ 430.267119][ T4619] ret_from_fork+0x4b/0x80 [ 430.272457][ T4619] ret_from_fork_asm+0x1a/0x30 [ 430.279360][ T4619] [ 430.282841][ T4619] Memory state around the buggy address: [ 430.293013][ T4619] ffff88804e66be80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 430.306435][ T4619] ffff88804e66bf00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 430.315415][ T4619] >ffff88804e66bf80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 430.328643][ T4619] ^ [ 430.334231][ T4619] ffff88804e66c000: 05 fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 430.343621][ T4619] ffff88804e66c080: 05 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 430.353013][ T4619] ================================================================== [ 430.372069][ T4619] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 430.383759][ T4619] CPU: 0 UID: 0 PID: 4619 Comm: kworker/u9:1 Not tainted 6.11.0-rc4-syzkaller-00147-gbc21000e99f9 #0 [ 430.401372][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 430.420290][ T4619] Workqueue: hci0 hci_cmd_sync_work [ 430.430487][ T4619] Call Trace: [ 430.433808][ T4619] [ 430.436910][ T4619] dump_stack_lvl+0x241/0x360 [ 430.442423][ T4619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.451479][ T4619] ? __pfx__printk+0x10/0x10 [ 430.458125][ T4619] ? preempt_schedule+0xe1/0xf0 [ 430.467672][ T4619] ? vscnprintf+0x5d/0x90 [ 430.472560][ T4619] panic+0x349/0x860 [ 430.478250][ T4619] ? check_panic_on_warn+0x21/0xb0 [ 430.491948][ T4619] ? __pfx_panic+0x10/0x10 [ 430.497484][ T4619] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 430.504611][ T4619] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.514504][ T4619] ? print_report+0x502/0x550 [ 430.520096][ T4619] check_panic_on_warn+0x86/0xb0 [ 430.527399][ T4619] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 430.535612][ T4619] end_report+0x77/0x160 [ 430.540370][ T4619] kasan_report+0x154/0x180 [ 430.545980][ T4619] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 430.555437][ T4619] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 430.566611][ T4619] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 430.574580][ T4619] hci_cmd_sync_work+0x22b/0x400 [ 430.582005][ T4619] ? process_scheduled_works+0x945/0x1830 [ 430.589710][ T4619] process_scheduled_works+0xa2c/0x1830 [ 430.597829][ T4619] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.606472][ T4619] ? assign_work+0x364/0x3d0 [ 430.615030][ T4619] worker_thread+0x86d/0xd40 [ 430.623847][ T4619] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.635097][ T4619] ? __kthread_parkme+0x169/0x1d0 [ 430.644170][ T4619] ? __pfx_worker_thread+0x10/0x10 [ 430.650874][ T4619] kthread+0x2f0/0x390 [ 430.656586][ T4619] ? __pfx_worker_thread+0x10/0x10 [ 430.664410][ T4619] ? __pfx_kthread+0x10/0x10 [ 430.673251][ T4619] ret_from_fork+0x4b/0x80 [ 430.680002][ T4619] ? __pfx_kthread+0x10/0x10 [ 430.686500][ T4619] ret_from_fork_asm+0x1a/0x30 [ 430.693760][ T4619] [ 430.698410][ T4619] Kernel Offset: disabled [ 430.704933][ T4619] Rebooting in 86400 seconds..