last executing test programs: 4.266626132s ago: executing program 4 (id=2650): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r0, 0x20, &(0x7f0000001980)={&(0x7f00000008c0)=""/4096, 0x1000, 0x0, &(0x7f00000018c0)=""/10, 0xa}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r4, 0xd7735000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@typedef={0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x61, 0x61, 0x61, 0x16829645d1e54c05]}}, &(0x7f0000000680)=""/217, 0x4f, 0xd9, 0x0, 0x9, 0x10000, @value=r4}, 0x28) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000880)={0x6, 'wlan0\x00', {0x3}, 0x8}) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) syz_emit_ethernet(0xbe, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xfffffe03, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x44}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 4.127903242s ago: executing program 4 (id=2652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000240)={0x9, 0x3, 0x7, 0xb, 0xd, 0x5, 0x40, 0x6, 0x6, 0x8, 0xae, 0x7c, 0xe, 0xea}, 0xe) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x12, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.974740738s ago: executing program 0 (id=2669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) unshare(0x24020400) r1 = socket(0x2000000000000021, 0x2, 0x2) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$inet6(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0xa, 0x4e20, 0x4, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000180)="869338eca61ce79ce2e65a9180088efa9f9969d206d534961d57fe882baf1326de8f5623870203f117e4bcae4608ab48cb461dce30c794e8152dcdf276a1430ec69b008c63b1686a640ffcfa4ebcd6c29320b9c7b17d051e3b1159bf90926402e6b79a85f506a1bbbbec4ac7ad0f21796ee3c811d7d5bda2c90670745afdde970a72105d26a34634be496d036520df7db8d257eb6bbb2bd0396cc60ef5595e6d47af86ab67a184b4999cd2d877758cb956c3d7adf099244d6758ce5de269ddc9c1585c52895e6a5597a0fdec9301032872a30be7", 0xd4}, {&(0x7f0000000280)="c1ef211830e41f5c610c93a268215537dce0f0c2517de6b76675fb9ed6b2d2844efbfd9faee9fb29493fa8fdab0089f80c5ac6a6af7821b59d0b391c19cfca66f12b9ec94b06b74c8d7cf452e754d494d8663d6a137fdd39be1bf2009f2b66de31f8049d8a8598f02fa026ffa33cd1236dbb48ad645998fce81570217e378008cde2c3a4cd7c2c6be8", 0x89}, {&(0x7f0000000680)="3ba0f729b464c79cd7398138d2f3ef9bb7136f6628c9e1c0bc3de11081441b3e386a1634a13c5818270e86068fe29a1bd8261ffba5f41ebd782df5464fb2ca887275a1ea8395b969c8a2e2e59820b413c58878c83080792831420fb483cf54daf65be1b11111cdcdd3befac6e69f75f9bc0013ee80cc8bf2ee3c5b4cc1bbb8317de8c20ff6654575bf426faa4144efca0bb3855d3e30b24fbc421b547d057d0ff5d74961b3174d0386d7ec8312325f41ce4bb5cd53b7f7e3acd94b25fcb649a92483b995f2bc58", 0xc7}, {&(0x7f0000000780)="fafc6c4e1b9f8e8df1614f79d1c8a6157810c24df753e1998327363b2f3a50b506822b9be9a41ec24240e8634d3135f10b6d837c4d5dc89a1f1debb43d5424d50a260b81431fcd11d58d470c6250c8864da817614a1323b917607d0c858f07c5e829dbc861ea6ffffefe4acf0a4b8fc95295cd2be2267f8a8e8960b5f0180c3403b8d96f6b9139ef7bbf2694ef79f95a07e4cb50bb3a08cb2a33831ccb41d641638923669766b1cb19847b1882", 0xad}, {&(0x7f0000000840)="9d91d058afd320604647adc9398e570e1cd8049313a39c39139249622c546b19a0dcf2f0ca9a32ad3839f6da038bc732cfd5ab40dc2a008ffc97c80be6abe6f0b5b5456a8fb2cb2db50a64f3b4e376addd7398a0c231e5650d7a8414d58819770a5b08fff083c1e3c5ce42403b23468cccde85beeccd05b31dd22334dbde234cde4fc1d39995a5a7bb4e9aae09fca957a6a978bc98662d93011048897d895bdb2297a200d42b74a2a5adf4857776d0a5c00bc30962e93f8998485981aa10159fb618ca01c7052640226bba927c6ea427c6", 0xd1}, {&(0x7f00000000c0)}, {&(0x7f00000003c0)="ff925c6c2359be9438a0ec922636a73231193024ed31c7b27b92d9d7baec724e773252fd65dc887eb851e5cd3fa5d0d0c800bbc0d331a950aed82d746b7488fa3f5cec3ccb87b1bc4d546b8ace1b85193e24962702ccf4f64dfe39fda703", 0x5e}, {&(0x7f0000000940)="7568b9700335cdd6e653a4001bd286e1400ea896d9ba69e0b69b54ba644cb2de1c35d6f0e5a320d1f99e2f50d14019a77403e0ca8a95ca88224b9ff8cafb37464003fff58ff86561e14ae402cee2a54f15d0e9703761b50fcff182211468e05a750e069292b5d6f57da360c166bdeae728f4cda0bed53655d88fe5bd9f62b96603f527c54e1d8b48b58359ba5d4483c3b1ce8488bbfac61b21e1b4b4a5e6c869810bcf07c3b25fb09449", 0xaa}, {&(0x7f0000000a00)}], 0x9, &(0x7f0000000b00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}, 0x4008000) sendto$packet(r5, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close(0x3) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000000000000000fc0200000000000000000000000071dbc02f000000001400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a0002001c000400feff4e244e230000fc0100"/116], 0xbc}}, 0x0) 2.731295103s ago: executing program 1 (id=2676): r0 = socket(0x18, 0x0, 0x0) close(r0) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000000700)="49723b3ab53a13274c56e00d5be19f87e669877bbc7b7c0cb48fd1bbea1e688e7c84ccfb034a845b4493c90e1785234592", 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 2.649299834s ago: executing program 1 (id=2678): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100"], 0x38}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 2.583890277s ago: executing program 3 (id=2679): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_delrule={0x50, 0x21, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x10, 0x90, 0x2, 0x9, 0x0, 0x0, 0x6, 0x8}, [@FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xc}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x33}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_FLOW={0x8, 0xb, 0x4}, @FRA_FLOW={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2.560271991s ago: executing program 3 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100001042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0900000000000000140075006e657464657673696d3000000000000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x240088c4}, 0x4000054) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2e1ade69cff00cba, &(0x7f0000000300)={0xa, 0x4e24, 0xb, @mcast1}, 0x1a) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x10001}, 0x8) 2.546701279s ago: executing program 1 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000700)={r2, 0x5, 0x7, 0xfffffffffffff4c3}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x8000, 0x8}, 0xc) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xb5, 0x10}, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r11}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000200)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r4}, @jmp={0x5, 0x1, 0x2, 0x3, 0xa, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x593}}], &(0x7f00000003c0)='GPL\x00', 0x6, 0xe5, &(0x7f0000000480)=""/229, 0x40f00, 0xd, '\x00', r3, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x18366, r6, 0x4, &(0x7f00000007c0)=[r7, r8, r9, 0x1, r10, 0x1, r11], &(0x7f0000000800)=[{0x4, 0x5, 0x0, 0x3}, {0x1, 0x2, 0x3, 0x2}, {0x3, 0x5, 0xf, 0xa}, {0x2, 0x2, 0x6, 0x9}], 0x10, 0x3}, 0x94) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r13, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, &(0x7f0000000580)=0x4000000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r12}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 2.375661413s ago: executing program 3 (id=2682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x4, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0x1, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0xfffffffe, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0xfffffe00, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x2, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r12, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) 2.30662563s ago: executing program 2 (id=2683): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 2.243975331s ago: executing program 2 (id=2684): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1], 0x1a000}, 0x1, 0x0, 0x0, 0x200480c0}, 0x40) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x1, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffffff}}}, 0x3a) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$FIONCLEX(r3, 0x5450) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000c00)) 2.127926113s ago: executing program 2 (id=2685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/net\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0xf, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xde6, 0xb, 0x7}}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 2.088748769s ago: executing program 0 (id=2686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000480)="f5c89e1e", 0x16) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x2, 0xfb, 0x2, 0x100}, {0x7, 0xfc, 0x69, 0xb}, {0x1, 0x6, 0x50, 0x7}, {0x4, 0x80, 0xd, 0x6}, {0x5, 0x3, 0xbb, 0x5}, {0x2, 0xea, 0xfe, 0x800}]}, 0x10) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x5, @loopback, 0x6}, 0x1c) 1.990259133s ago: executing program 4 (id=2687): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000040)=0xd9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.98758711s ago: executing program 0 (id=2688): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close(0x3) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 694.568088ms ago: executing program 1 (id=2689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000480)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000010c0)="2ae2", 0x2}], 0x1, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000680)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) splice(r3, 0x0, r7, 0x0, 0x10000000000066, 0xa) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x12, &(0x7f0000000400)=0x8, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x20, 0x0, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)}, 0x40) 692.722738ms ago: executing program 4 (id=2690): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1, 0x8, 0x102, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xa9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x80}]}]}, 0x38}}, 0x4048041) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x59}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000004c0)={0x0, 0x0, 0x1, [0x70, 0x1, 0x0, 0x4, 0x8], [0x5, 0x3ff, 0xfff, 0xb6, 0x8, 0x800, 0x4, 0x7, 0x9, 0x8, 0x8000000000000000, 0xd6b, 0x6, 0x2, 0x7fff, 0x4, 0x3, 0xc, 0x401, 0xffffffff80000000, 0x8000, 0x3, 0x8, 0x8, 0x2, 0x8000000000000, 0x4000000000000, 0x606b, 0x10000, 0xe, 0x3, 0x1000, 0x7, 0x1, 0xfffffffffffffff9, 0x5, 0x100000001, 0x0, 0x4, 0x5, 0x20, 0x1, 0x1, 0x2, 0x6, 0x0, 0x9, 0xdfa0, 0x7, 0x2, 0xaf, 0x0, 0x800000000000, 0x3ff, 0x80, 0xa, 0x4, 0xb, 0x0, 0x1, 0x1, 0x8461, 0x4, 0xf17f, 0x3, 0xfe6, 0xfffffffffffffff9, 0x10, 0x3, 0x2, 0x4, 0x0, 0xae, 0xde, 0x7, 0xffffffff, 0x928, 0x7, 0x4, 0x0, 0x100000001, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x2, 0x1800, 0x8, 0xa, 0x6, 0x5, 0x5, 0xfffffffffffffe01, 0x400, 0x2, 0xc, 0x9, 0x4, 0x12f3, 0xb13e, 0x52, 0x7, 0x2, 0x3, 0x7432, 0x9, 0x200000000000000, 0xffffffffffffffff, 0x3, 0x8001, 0xe9, 0x8, 0x0, 0x80000001, 0x5, 0xffffffff, 0x7f, 0x101, 0xa9, 0x56, 0x8, 0xfffffffffffffffd, 0x4]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000900)={r5, 0xa6, 0xef, 0x1}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000e00)={r3, r1, 0x6, 0xe0, &(0x7f0000000d00)="1d4edba1fbfb9ca90410371a89ea93e9c0221161643270c69bd854f9266c7a7f09fc8d7d53a2f656243bbee4c1a25e739c934d7be409ef9aae9310ba06a59a17dbf514f6464d41c696b0c3b892a5fa3d83cdbc136960db5d4eeb8de4e9a5849bdcb7a4e5fc29057162eda1b5b13554cc68972a31b359a61b4febe6528e447d53e9d2d47bdd2d86a55280d2d2fea8d70c6403ead2be3e140710745d0d2c921a1f51a7396d8277917f9d13b9f302c8888a040008a974eec51baa76073a29145e30d13df5390f7252cb1dd6303dcb3ea13575a52275930c66370fd71ddb7a1756c3", 0xff, 0x4, 0x1, 0x40, 0x1, 0x1, 0x9, 'syz0\x00'}) bind$bt_l2cap(r3, &(0x7f0000000ec0)={0x1f, 0x1, @none, 0x6, 0x2}, 0xe) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000f00)={0x3f39, {0x18, 0x9, 0x3, 0x4, 0xff}}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x13, @l2={'ib', 0x3a, '\x00'}}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x8011) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001080)="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") connect$rxrpc(r3, &(0x7f0000001180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x80000000, @mcast2, 0x9}}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) r7 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r7, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001200)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x24) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) listen(r8, 0x3) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001340), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r3, 0x0, 0xde, 0x1d, &(0x7f0000001380)="1e0ae472c314d44c16bba766867be800e9db903a2254aa247425e9781db5a06435a26116998e23137b91dd3bb6d70c37affbfbc9ecbe2c0d7d751c30f061b2e6c92541776654b8d5e810da5f5628490abf1238ca4638219158b50a6b5baba5041372a7c7f6d35d0d1fcc98075c297eccca857112fdfe2d6501616c0fecb5d6af99518570030ca32c6b93e0d93d2499e25f69e2b8557cbf3fc8d5aadffc96cdc584dba4c16181424979914e68b6ce57099a86900641d33f5c23ccd8804974e61faf0a0943897956234ad667004db334f5bd4aed8125d581e0c087f9aee415", &(0x7f0000001480)=""/29, 0x7f, 0x0, 0x7, 0xd5, &(0x7f00000014c0)="0c6f2d0fa4e9d1", &(0x7f0000001500)="49efcfd69741668af659c283356328a6274092b1a2390f11dadbddb81d8cb3599c5881012240cf3cb0fbaade7e9b5dc3b73ab4f06c356887573a372b14d394942eac1d348c96f8ef3f905558e3801e8a371532f73a091a9005ed86b0e95fcecc28cddc0f7a14dc2cf673787e5c9012727d64b19a8db66fd0250b80da01cf0c0f3b6c92d7c3e48ddc6e6ca332f1ca2eb69ee26160fafe0a59f725b4bafc8881042cdae437a0191e4731736594b34b0e7f8d701d0c044c527ef9dcfb0908c22e77e3cee25e1378ec29c579b786dc5b0baf79a35796ef", 0x4, 0x0, 0x2fc}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000016c0)=@generic={&(0x7f0000001680)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, &(0x7f0000001700)=[0x4], 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) 619.226751ms ago: executing program 0 (id=2691): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x8, 0xc, 0x3, 0x40102}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) socketpair$unix(0x1, 0x3fdf06c39ce9d235, 0x0, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="7acab9944db85031168f4d4f081beeb956ef75ceaff016845d3053dc9a252c38f1048699c220896831b419024d5deb6ecabc88c5b9441299a6239bd6e353772c57688c963efb2d4e745bf33f1f723dc2ff697d5f569ffcfb846aa663b096e140b3686b880afb09645b12cb8cb272c37a29663d4f477d18b6f821ee9a4ae5ccfa9d2947", 0x83}, {&(0x7f0000000200)="72c1807bf3d8d909984e9a4f27515a7e3b6f9e4950227c0cf1c1f247279d7e47a6a51d53cdef6d3c6cddc4e670a2b1235843aa0f2459f4ea61e6f6dcd535", 0x3e}, {&(0x7f0000000a40)="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", 0x139}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b47713305084a2f85549b2969bb6e2be3890112f4", 0x29}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde01573be51b4", 0xbf}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb133", 0xe}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a36d552b5712c83128d3e615cea43b36307d3f3dfddc1871400816339bb20ffdc07168880acbc3fe46a34e6611801f5c749eb82e304e7ddb13f9d06247a0b5ad41de6bae0d3ee736a1176", 0x79}], 0x7, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c"], 0x118}}], 0x1, 0x2010) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000280)=0x3, 0x4) shutdown(r4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c003f80110001"], 0x7c}}, 0x800) 539.529693ms ago: executing program 3 (id=2692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f00000000c0)=@udp, 0x2}, 0x20) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x25, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000200000000000000fff90000ea2df95cb909e8bbdbfc64f57b7ecbd1181100002ec4573253b03cae060b87b109f4901af3b9c60bcb3d9f4d05eb73cae4fef7c081b41231c8a9c219751ca79217b2b53b129a88fddea1fecaef794558b41b3f4225ec75f0b493c33892fd8556053427f9d711a862837bf12a09ffae8f93dd9aa93a10c1221b45020185c2bd115bc3abe3dd86bc65f987eeadc4566cc5f7218dbeb92b87b4", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000b6000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d68cffff85000000060000007c3b20001400000085000000af00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018290000", @ANYRES32=r3, @ANYBLOB="000000000d000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41000, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x8, 0x1000, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000740)=[0x1, 0x1], &(0x7f0000000780)=[{0x1, 0x3, 0xa, 0x8}, {0x4, 0x1, 0xb, 0x8}, {0x2, 0x5, 0x10, 0x3}, {0x5, 0x3, 0x5, 0xc}, {0x2, 0x2, 0x0, 0xb}, {0x2, 0x3, 0x2}, {0x3, 0x5, 0x0, 0x7}, {0x3, 0x1, 0xb, 0x3}, {0x2, 0x2, 0x10}, {0x1, 0x5, 0x6, 0x2}], 0x10, 0x4}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002ac0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000003000)={&(0x7f0000002b00)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}}, 0x80, &(0x7f0000002e80)=[{0x0}, {0x0}, {&(0x7f0000002e40)="0c186f77e859f4f58142928c0b649fd9df66f86b206d1b2a8917b48e6fa9a92bebbe72b572a439b06bc3b4657f84eeb9ab3d0a1f10c5358dca", 0x39}], 0x3}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r3, 0xc, 0x0, 0x7, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@map=r2, r6, 0x14, 0x1, r5, @void, @value=r5, @void, @void, r7}, 0x20) (async, rerun: 64) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000240)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 491.634039ms ago: executing program 2 (id=2693): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc, &(0x7f0000000180)=[{&(0x7f00000000c0)={0x70, 0x11, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x61, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="a5f045621790d4b0c28cf15087d0bf05e7a8eafb3403d45d7336e1d85e05a1a64d8655103fc032b4e22c5529b20b2b911cb6840353954b1057b79bb8b793ffe2a81bd8858c70e514", @typed={0x8, 0x6c, 0x0, 0x0, @u32=0xd}, @typed={0x8, 0x20, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x70}, {&(0x7f0000000340)={0x33c, 0x40, 0x200, 0x70bd29, 0x25dfdbff, "", [@generic="8b513a321d4dc4b45fd5758a0033dd12f4619c7deb69e4d9d3725b8acd36fecf", @nested={0x13b, 0xaa, 0x0, 0x1, [@generic="a0d18df1563dcea7bef7a3ce004cf3a95273d5217aa78934223e7d6e0a6cacb77a8c004c6ab07588493c32c60dd7116c99da5296a3711c3adc3e2aaf512ec37eb4b7f6a1fc01be0dfef6571779d8a0bab627fa9028cab8d8ec3904c800804b95ae187aaca72705c53f54939fd8a6fd7674fb6138951e6e6ea4bc4998cd494b8bb70e0fb7808b", @typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x52, 0xd4, 0x0, 0x0, @binary="e924b586ec0b55784f44231925367fb7cf2203bb7b9dd9ade79d14b1f0783f7896195e479b0d9fb5675390929e57719a4bd162310db8589575b7c18c3499b2fda5a8c3a59bcb77b5378511e964ff"}, @generic="0ed55396dbfeb4591180a0498b5dcc1103017a7b8fed990751cf6d448d77d8e87dc187fd3dfd882474eb5b7fc1f04ea81fb6f9437e7454961bec26e9ec2497615152b9940276b408d0f065bfc9e2e31ab0bb4e7b2f"]}, @nested={0x11f, 0x124, 0x0, 0x1, [@generic="723574deb94a7771d1a40b29584de228bb66485730af", @nested={0x4, 0x11f}, @generic="44408f3b2c6989eabcdaffc4179a6986", @generic="ceb8ca205f74c5dd998049db15cd75f906c86dddfbabe74afacbf11de75746508236920eb1baf0e0b3ec8525fc782ad72604567714fa3bd08d9013f23e64fca3d0954d9d629b3158af0c1eef484a3257544367a9e8be7e9e6c0041d877da44d0c00d375eb4babfeec2cd5d26827657e81d1cb66af60f9793dcd86431931d9a3df06dd904adc7a72ac1aeec4ae06f9c0907d1064ecebaf4c4bc4d9d9dc826b7017b0a122a80c56d7aada353eadf964fc938dd4ec0144cba37936874d13fd506ee3595065be8e9ac58e34396a7baeb9cc60cac2ed3cfa7f36b6d7b091b88e8b4dbc41ffb06c749a6c7574ed572e0d4577d19"]}, @typed={0x8, 0x22, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x34, 0x0, 0x0, @uid=r2}, @generic="3dc70621d18045ca35afb04b7b1686ccffd1f3f7aa3c574e064d8fb85aeafb9af8d9626d4473c41cd044d49dd6db9faa4c73b4245c48780172d7a319e5533fd2df0954d3ecdcfb015e0887049997124e085692b9e4c2bd4ac010383e06f1774cb8f50eb83f2072e694e8457b79ec16220b5c13d309cc21a0ba665c92153e7ee838e13755d834385c87128a3a740e29d162", @typed={0xc, 0x6e, 0x0, 0x0, @u64=0x9}]}, 0x33c}, {&(0x7f0000000700)={0x174, 0x1a, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="5483841651912ef1a96b032e907343339cb56da3257d42ea45cba36b8ecdfa416a3d685700f5aa649290702089495057a015906354207763b9720df528f3f32e1e19e02628bbc3faf2c9a794e24b873e78f3768b6e238291d806e15eddfcaef2731e03f1f5171232960519fa3fda87148fd6ce5e81f7cf09ec38406268c73d416cef7da8ecc74f712363c0690c47d80f1c41cad7a6e8a90253f5b67e699459d8c94bf374773ba0c325c32cedef76901b130eb7346d216476d58f6c2a7a1eaf2da821a72fbcd1131668b10486c91a8f357abd821cf6da257f8a7c4c860315329a", @generic="8373853affef105a36b3a6c6ba8361b114b3667d7c2a76c4afea7dfd65be53970fe0061425d5d41abd0d959461b25ad252d04656ea3f4608cb544775bf3eafe0ee6892f7f08d99b58201dd96321eb8fe7da4bb2d3ecc0662aff68f3885eca671784d00795aa65019c8e1c5b900da4cedb0cd1c273076fce4307d97264b5e73f93dd4"]}, 0x174}], 0x3, 0x0, 0x0, 0x44840}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r0, 0x0) close(r0) 491.213946ms ago: executing program 4 (id=2694): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x100}, {@in=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}]}, 0x154}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x16000b21, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0x83, 0x6, @multicast}, 0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000020000002d04a0a29c54f3d214f6b2e158fa6500100000001000000003000000050002000000005f00"], &(0x7f0000000080)=""/236, 0x2b, 0xec, 0x0, 0x1c7}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00ff0000008324d8f9f416074d00a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff46) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000380)={0x3, 0x2e, "2df05a29f9c8fe7063f21edfc277cbcfffa41a3cb934e981ee723f6b72b5eb37134b4d0afeaba08179247aeec76f"}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0x57) r6 = accept4$netrom(r4, &(0x7f0000000400)={{0x3, @default}, [@null, @bcast, @netrom, @null, @rose, @remote, @remote, @bcast]}, &(0x7f0000000040)=0x48, 0x800) bind$netrom(r6, &(0x7f0000000480)={{0x3, @null, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x100}, {@in=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}]}, 0x154}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) (async) sendto$packet(r2, 0x0, 0x0, 0x16000b21, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0x83, 0x6, @multicast}, 0x14) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000020000002d04a0a29c54f3d214f6b2e158fa6500100000001000000003000000050002000000005f00"], &(0x7f0000000080)=""/236, 0x2b, 0xec, 0x0, 0x1c7}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00ff0000008324d8f9f416074d00a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff46) (async) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000380)={0x3, 0x2e, "2df05a29f9c8fe7063f21edfc277cbcfffa41a3cb934e981ee723f6b72b5eb37134b4d0afeaba08179247aeec76f"}) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0x57) (async) accept4$netrom(r4, &(0x7f0000000400)={{0x3, @default}, [@null, @bcast, @netrom, @null, @rose, @remote, @remote, @bcast]}, &(0x7f0000000040)=0x48, 0x800) (async) bind$netrom(r6, &(0x7f0000000480)={{0x3, @null, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}, 0x48) (async) 467.034548ms ago: executing program 1 (id=2695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x10, @local, @loopback, 0x7, 0x10, 0x0, 0x1000}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x20, 0x700, 0x5, 0x6, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @remote, @broadcast, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x200, 0x7f, {{0x2c, 0x4, 0x3, 0x1b, 0xb0, 0x67, 0x0, 0x8, 0x2f, 0x0, @remote, @private=0xa010101, {[@timestamp_addr={0x44, 0x24, 0x89, 0x1, 0xc, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, {@local, 0x6d}, {@empty, 0x40}]}, @end, @timestamp_prespec={0x44, 0x14, 0xab, 0x3, 0x5, [{@rand_addr=0x64010102, 0xffff7fff}, {@multicast1, 0x2}]}, @end, @generic={0x88, 0x7, "ee518bb827"}, @lsrr={0x83, 0x1b, 0xc5, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @remote, @loopback]}, @generic={0x88, 0x5, "1467d4"}, @timestamp_addr={0x44, 0x14, 0x55, 0x1, 0x4, [{@loopback, 0x7fffffff}, {@private=0xa010102, 0x7}]}, @timestamp={0x44, 0x24, 0xb2, 0x0, 0xf, [0x100, 0xb1a8, 0x0, 0x84c7, 0x2, 0x8, 0xc, 0xfffffff8]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) (async) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r14 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20) (async) bind$can_raw(r14, &(0x7f00000005c0), 0x10) (async) sendmsg$can_raw(r14, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r15}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x4040) r16 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x16c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000800}, 0x881) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="9b81a582dc6877a495d0566eb380c605b800"/29], 0x50) 409.363324ms ago: executing program 2 (id=2696): pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000070000000800000000000000", @ANYRES32, @ANYBLOB="00000000c42ec8f93bf0b6bb00000000000000000000fc5aa02225e5de3bb7aa000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 307.46492ms ago: executing program 0 (id=2697): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c030) socketpair(0x1e, 0x1, 0x81, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e7c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x48}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r6 = accept4$inet(r2, &(0x7f0000000340)={0x2, 0x0, @private}, &(0x7f0000000380)=0x10, 0x80000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xa010) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x158, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r10, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044084) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000900)={r11}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x298, r4, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x61}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x15}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x269, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @initial, @broadcast, @device_b, {0x7, 0x7}, "", @void, @value=@ver_80211n={0x0, 0xe, 0x0, 0x0, 0x0, 0x1}}, @random="4c6ed623ce5a3720fb52e51ad226e0de7f5ff8666ce55bd2732e5e5e53576f2412c6c6890f77ac3176e503f6a277b6a51856759e2a50e94a37aadc26374b638c19d23f736666f19abf88bff87379df76022a944c14ccb031e8229ead66d188558ce7b0f8df9f4ccb81e2fa002f04c24f479f3c3f08dfb00cff9233a8b51727c31dd15a33454d18e0583c0a71f49b175e63c197fb146ff125abfc25c7edfd923e05f35d9af61276971e1522c3285c191f61d23fa8424c5eb11ab52d53e471b103d681d92bf1b2967b4cb9ee9d3b1d9bd3744be3b56905cfaad0156b6deb222e980f343eb1fe6399f5f1ab69656c6203a42a527e3b1c63ed0b79e037b8cdc06d25ba2bf7a9ff0842eee2871d89a145c58f9a4975467fc4da13aafb23f12dec496bc7b04b73e066021699452de6736e68a9cdba1a342e683f2343b418665a8b26eba86154bc0c9160bd414db44cc243f5433d447fda05b82f712214108f532170519b54ccaac6709acb22e615c697cdb94c5d6d37963cbd8ca70d09254d357712ac7065b765e8be888a1865bfd30e43fa21cd76cd8c0f18cd223e7f112c930f6b4e3cb7adfbef2446d449a473e3e82fb13e82d2bbb96bd117e229a6674afde705e4483b34354d324661361e161a213bc58ae862884daa5b6dd63dbc3d044afe48b6ce7db27ec88783fb2ce589871d925855c79963e7ab1a7116df310237fd48675670ca6795d4af146a0746573e9a552a0164369e927d5b12e07ff22f1984b890ddb7ab16ad93bbf0482be91216a1c9c5828868efe53449d86387a9e1ba3f77eaac4b5e8897080e80bfbb"}}]}, 0x298}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000cc0)={r2}) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000d40), r3) sendmsg$FOU_CMD_DEL(r12, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r13, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$tipc(r1, &(0x7f00000011c0)={&(0x7f0000000e40)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x3}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000e80)="9a6d8f6a36208b04299b6080b26365c05e9656fe39d062d4b6c719ee48cd3eca0ef00f4d1d421c14ffca9aa5faf519f9a0f251d4afb1a221286064a65dda66021329e829f6dcfac68b275ae7120f508326e7f95dcfffa0c7a0fc069c9f9238", 0x5f}, {&(0x7f0000000f00)="68b8d786b0bf872d5825af4d0b32b6a5765b54ead7c58d57a21174158f490ce8414e3a14b50d58", 0x27}, {&(0x7f0000000f40)="ec2271d6a2bb8dcca516c421c3457cca32626a79150caee8a76ebde2ab5dc90758e55faaa2ea71db0e616ba7b23bea63fa9d8858aab33dd50f2c69cb5829cfa5e668e579442474c1410bb09a64256167eb348ef6d36b3594a536ee523104de9e2b1204dc36934cf21399fcb0045ce4c0dc2794964d354ebb7774d640630c8b0cebb2eb151cd871da697fd75982dc192908365e92a6e81e749092252a6d19aec509bae31efb11280d9685988cdf665f6e540f5f2040f830ec29dab20657c7f2e2026fbae6f442426ce287bab272a2d5eea203587b6c38fe9a279482292f90e13be577f6c08634e2a830c133fb1e0f", 0xee}, {&(0x7f0000001040)="300dc7ccbe95bad8bbe8408034ac3a8994a19aa8949958b967566721bfc11d2bc54d35ded19e4401a60675b47f7e0bec767064", 0x33}], 0x4, &(0x7f00000010c0)="ef993bd105a2a4d7ef47e7ebbba2b235c72a8d6e8cb61e9f35035dbc4d36ab5b47df3f5dd8415dc2a59af68f77bca91a34c679296b68e82907426386de2445ea052a751485fc9f3656c9abc900dc2a9bb24ae680358098f9be1b6c88001401800476573283f9da26cf2677fe5d4a0a113cc62c4fbffaa306e3b56556e4535ea32360f16e4fa173a9e7bb4a0f21f13cbb24fd4ec03b531041a1b53d7e55db34e03882db3645b95637f7dacf545383ad798c6e8ce34dd222885108c4b712c336386b896838f0497e2908244104", 0xcc, 0x840}, 0x10) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xc0, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x2, 0x7, 0x6, 0x2}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3df}], @NL80211_ATTR_IE={0x12, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x37, 0xa, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x220}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x2, 0x5, 0x0, {0x80000000, 0x7b, 0x0, 0x2db, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x1, 0x5}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc0000000, {0xff, 0x6, 0x6, 0x8}}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40c5) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f0000001380)={r1, 0x0, 0x0, 0x1}) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001400), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r14, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, r15, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r3) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001780)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f0000001580)={0x1a8, r16, 0x404, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x824}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xb16, @private1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40814}, 0x4004850) 257.538719ms ago: executing program 4 (id=2698): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200260b0a000200aaaaaaaaaabb000008000f00fb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) (async, rerun: 64) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (rerun: 64) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) (async, rerun: 32) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x38}}, 0x0) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x140f, 0x1, 0x1}, 0x10}}, 0x0) 223.207825ms ago: executing program 3 (id=2699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000733c253f524dad387f178b8b7f90f40000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8936, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @remote}, 0x10) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000007c0)=0x516e, 0x4) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000100)={r6, 0x1, 0x6, @local}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000280)=""/233, 0xe9, 0x0, &(0x7f0000000180)=""/100, 0x64}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000006000000ffffffff0000000000400000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @ldst={0x3, 0x1, 0x6, 0x4, 0xb, 0x30, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x7b47, 0x0, 0x0, 0x41100, 0x40, '\x00', r6, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r1, 0x3, &(0x7f0000000400)=[r0, r0, r0, r0, r8, r0, r0, r0, r0], &(0x7f0000000440)=[{0x1, 0x1, 0x3, 0x3}, {0x0, 0x5, 0x8, 0x2}, {0x2, 0x3, 0x3, 0xc}]}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000540)={r1, 0xd, 0x1, 0x2}) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r9, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 163.471324ms ago: executing program 1 (id=2700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000022c0)=0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000002cc0)={0x0, r1}, 0x8) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002c00)=@base={0xa, 0x1, 0x3f, 0x0, 0x42, r3}, 0x50) r5 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r5, 0x0, 0x0, 0x2, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000027c0)={'gre0\x00', &(0x7f0000002740)={'sit0\x00', 0x0, 0x20, 0x8000, 0x8, 0x0, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@generic={0x82, 0xa, "4409895132aa6bea"}, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x5, 0x7, "e00864066d"}, {0x2, 0x12, "6239414b4d6d0ca1cddce5d63771e11d"}, {0x5, 0x7, "5280e569ad"}, {0x2, 0xc, "62b945a3821ff817313c"}, {0x0, 0x4, "23ef"}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000040c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002800)={&(0x7f0000004100)=ANY=[@ANYBLOB="a01400001300040027bd7000fddbdf25186df8044e204e2207000000ff0100002600000001000000010000000900000045cd0000e9050000", @ANYRES32=r7, @ANYBLOB="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"], 0x14a0}}, 0x4010) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x1003, r4}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r4, &(0x7f0000000180), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r8, &(0x7f0000000180), 0x0}, 0x20) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r9, 0x3d, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0x26, &(0x7f0000002ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3773, 0x0, 0x0, 0x0, 0xbdd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002840)='GPL\x00', 0x7, 0x5f, &(0x7f0000002880)=""/95, 0x41100, 0x42, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000002900)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002940)={0x5, 0xb, 0x80eb, 0xfc7}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000002980)=[{0x2, 0x4, 0x9, 0x6}, {0x2, 0x3, 0x6, 0x1}, {0x1, 0x2, 0x1, 0x2}, {0x2, 0x1, 0x1, 0xc}, {0x2, 0x3, 0x1}, {0x3, 0x5, 0x4, 0xc}], 0x10, 0xed}, 0x94) sendmmsg(r1, &(0x7f0000002600)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)="1cced75e5daf01c59a3131d54c9afe312cdaca9f5dbddf5dee1f57dd0a719517e9090231ead28dea542e6a061b240ebe5959ca43b01bfde2b8b50f53800c7f88bc2feaf5138e2092f8ac358e4e3e401064632a3d20adb3e670e04aa8fc7e45f0fcc722d3cfbaee004944d77fbc077e008bf7c1b4bca26b400ea71431680a89e9bfcfebeb400bb4fdebb6dea0fec63a24e40b44dc4eee35184bb5656ae37051690d431370c0d0f460c5b8fd274d2697aa89452fb3db59636c734872bad699d075ae23e9", 0xc3}, {&(0x7f0000000500)="8ab56290b790ccab51d7b396d6dc7ab2e35f00c4b0368dd5cb3d9e25c070998e7627c6e1f50240d8eedd8d5ef20cf75c952b8eea91b6d7e4974cbbec8eda69ad20c549939e625a5bb15e146631cda1fed3d1637ecbcb84", 0x57}, {&(0x7f0000000580)="60ac4ccd92bff20229bbecbd477776f4c14dd4e075ef8bab8bcabe394d4dfcd60c2a0f8588210060850f9a8a2a65cf21ffa9b6b79741e13c843c9473b5f26db7a86202fa6a6b90e703b0186805468beecf9f1c3d5dc8232f9d8d1ea3cb0dd729ccfa5e4b7d4300a505d731b3e9e692c1bc8f8ff212d77173142e9ef5cc64ddae66a7dbd7e0c4452ea02335b751c51bd416e5172c5e50ed9a7e908917a2e4bbfa3b09e64e429b3a8ef69cb0d8f77d9d4fd818f4398f57f7ef55395dcb2f3ab3d2cca00b680003a599a4d7b3", 0xcb}, {&(0x7f0000000680)="df62ac40b2035c4ddcf6684ce01a60ca4860e3bd1ccb035fc45ee8a5f164f2b390a8345272e38bb251ee58c2e490b60ca0244fdfe4c1263eaf39d82510efafe8e373a20678ae0f3b1c738e808b2da72dfc28a771687e53341e6d3820a18afe6f504fb7b8d79defbbd2a830aab057502928ecf0d707136798067c6eb612e10db4249a92720260b74ac87e065b8e23da9a5e75f7d2d10710eab3775e089439c8d9cb3183973e0e667b26b95b142ab1c0696f4ff0a785a3803269691f4abded340c75421290e5fb8594abb50eeacb313697b5189c38b9e7e74d5136df5610461e21e446f2fcbda3f1aedc4836", 0xeb}], 0x4}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)="1ec40335444355e2a533d95c926a5f98dd107d5957361bf04f094296bf6154eca5c0b072d451ada1ae66732d40f874d1a51270f82467cb38a65a5fc7fdc3283ecb1eff8d3a1667b37e0f53b13c08e454bb26bb5f74099db0fd895c9ec4", 0x5d}, {&(0x7f00000008c0)="986377113d8562e2558383cc06960a8a869a7e60dae95fad57c9d6786e96bb0c3c4592414a10811c3bcf0c0bb301883d5321a4a9123b6a6afa3981961d8d808547de3f941faa4cf13af318d59a508e20c2ccb246f69b953e421d42e187c4b0d75b921cc72f66dbacc8f59f54168f8b6ff8a65f1ce4626eeea6b4be72dfa1c31da4", 0x81}], 0x2, &(0x7f0000000ac0)=[{0xd8, 0x10f, 0x2, "8585b8b97616b00a7cefc4fdfadb53f54ab04150483be7f153e11f67bfb7ff754323edaeb7160cb6b769114329a5c16f19c53fb9e85d1e9c64bc1484c0945cdb366bd2bcec0fc3c1eb2c32387d1612fbf3b0db8c61b3945ff6c2d4573357459b120157c0578fe43205bcecdcdb83ecefdab0f4c68fbc621aa34188b1d86d89a4dcd2c14a67d35e197bcb2e359ee3964ef6ed47a36582bf9f474852482dc92bff3ef05eae281ef39cfed9de205fc2175326d81d38e3cbe8c274438f0b28307f000022"}, {0xd8, 0x111, 0x1, "20c002977936912b4a057b1508cd5ee3a74151d714678f32300c83020f0c56784def7d3f7c7b4600bac7b5ebdedca4b896cb27043c5590a67643992f94810af44a2d6bd6377d5789c086006382daf85837c2b51e26ce477f5faeb60dabaef64a187f206ec433cb72513848761fd7b4ce305db136b12c5624b56df2c95273a6e0b6f72b12f3d3a38ba4d35c14f8ca83427e9b37f642e6ad982f526270a72ccea17016d8acf931c55bf69cd23915abf0c6396dee4b88b8c17220e6f27e0bf24bca4897cede9182"}, {0x78, 0x115, 0xfffffffc, "dedb0a209cffb89b8ae98bd8eea2b20f2b8c543e0a0e5e3c63345a4f7de932d29ccafca8e2fed99758d4857272cdeca9ecaaa482988502d0cad5321e735ef49227560d2100d0108b25eedac26097355c16d70ce350ac22737b1c041e4adb628401f105"}], 0x228}}, {{&(0x7f0000000800)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000980)="8334cf3a96eee621cf7522c9e57efaf6fa490ad0b72196a1c5f73b39be8765f6826164468f1592b973a4959e2f0facddbdda2a8f369ab764c58b724110ff75545642e2741c836e78b89bf9b12eb9b197ab8c1aa254ded903bcc87e1dd19182a68337f5d41744b651c7948d59708c1bcfe6e07d7103528aa327ee196bfadd0711c872a9d03e83573a1f", 0x89}, {&(0x7f0000000d00)="a4720549643f7e8280fd1039ed62afb775dacfbbfc29606c2fe9df4eac46d50954c79f5695cb66ed219639173c5ac4b6be8ca5ad9da88d95f97278c7fb23a5593391877744e3ecd62fe450fe4ca8fcd829764dfa69a336934bc5362315a8", 0x5e}, {&(0x7f0000000d80)="1516fd42ffd54067171bdefd6b3b259b5518de9a0881b5938f7664e5e43e56ceb459ca1542c11f0ad20cc1939696e3cc7cf7318825940f4bcd2a6400a99f7c8b969ccd85b49170c991249e0fecf2851b6f8c2724be95f144227894097e223d68153bcbe4fcb8250e4c18f082ace6271d04f12eef354da0a3b761b3fc15ff41d3f0b850ee0296a48a", 0x88}, {&(0x7f0000000e40)="4711ad0d79df514f9b5832b5ba79726158f61f771d318f3467ec2716c208d5cae0002d038ab766d8edefe352de94f6dbbd2fe04aef6b1db5689559b3ce9f910c1d4eb6ebe200c0d01cf1c102c05bace507029331a40a145e6e0fc97487777d6a12c56c3d28", 0x65}, {&(0x7f0000000240)="09b6a028fa3c9f7a30", 0x9}, {&(0x7f0000000a40)}], 0x6, &(0x7f0000000f40)=[{0xd8, 0x108, 0x2, "c7b8f18bdd53200ba03b3974c26799c72f3dd7f098fdfadc739fd98a1801e931d28e2b017336f24f18138cf43df0801f8828bd39d99ef70299b1bafe268f8afc3505b553987aec7aa8280d8dceb06f7a7270f47721ec5cc50e6962f4647852aa2ecdd596109fbeffb4374e13f46ee865a576cba517fbec78f90504c23a5926ab374fbdc839e63ab1524926b91ddd6309ddafdc1d26bc0f29c5e8694f71de37edca3730769286e5764a61449a30808d65dab15bbc3b4e126507923731b798b2a33b4db2dc71"}, {0x68, 0x112, 0x8, "a0aba82678fed0a6b09962c4554bfed3d4216d8e0eac1bdcd017df08f7dfb19de11e2411af2e5a8649883820250b758ddddfa680b683ef93135b8e6ea95c254a6b9bd00db82b33e9eb718e5cd0aed9a3f38ce5fc6395459a"}, {0x1010, 0x11, 0x4, "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"}, {0x20, 0x10e, 0x1, "429f958cdf411408af1ed8a350"}, {0x100, 0x11c, 0x8000, "d4987e395879212431aabccc97d67962b40ebc9d9e412370bd9d01801f407e9aa0f4e126decd38bd8edcfcc3cba4af8f9df50278612fcdc0a188c442127b351b544dd1a6fcad3517aa11e38ce539144d173be4219a5dfe771af8cdfa62e79809fbd4a4c24a9c2c822021d29f8666369a474055d970217c2f391db07c3bab8b40055c21b28e8139e4b5f04ddaeb31af7cf3e3abe3085102f8386559f905b8f5e6a2bc20483563029694662417c1856ad098e6393957a291afa9ab46148d1bc19837075c626165e59f7ca5dbcd13c6af69d01bfdc5b09289a957bf97742b7864dbb77e668a69112144bce116"}, {0xe0, 0x6, 0xfffffff5, "62307b11393a807caa443f8aa7740af683941f2822e22aa2a0c4e3fd026e1df1341952b031113c35901e6e05c6b552b7f3bb87bfba0ec4e434ebaba1e5cd8b11a5b84a4ab4123e86fb509ae24e2c7c12ce64b8f5b3edd0708e1b0ea74d5fc7a623962fa64d28cc121d45d91042edd225c4711400658dce1f8870ffa1e45f7272d4fe4d9c6632d5723477844670dc694c150660b99b0008f357c24f1d10c5e429a99771fa843f674a1246c769bff009cd4eed8eaa50caa6d871c8ff970b44d75a7fd945c683cce9e7c7a5aa"}], 0x1350}}, {{&(0x7f0000002300)=@nfc_llcp={0x27, r2, 0x1, 0x3, 0x3, 0xf1, "be245c3628ae9ff5a7e7d0b133aa5e610bee661b286ed30615ba94cee4ad7abb588a7329b5e90095e227208a9d18749b8d871f6280cfe7f5f340b75a1adbef", 0xd}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002380)="d9260b00fe275446ee05f93d9aca7a881ee851c586274beb23a2ec9f5648031161e0fc1c7f4bf3acd8a4080d5467216e84f851e062c67cc68a8120d9e27751665d90c3c6f13341e3286e136a97dd6f1d1c014ed1c2194016c1736837efe5763e9c0bd4da497234d11b5c4029694ccb46dc8e3b8d235734998d7f86f76862c6be6724c51be7f191e9d3a1ac168b4a3338c7f87c5278cc2cb96730281c7e1abc09464ecb5c7c4e9c52474c986a16169cdd5174c20c50869c945abe3b6b396a5cc449", 0xc1}, {&(0x7f0000002480)="bb45abb30afff348f7d458aa7d651757c120e776bffe0161a82ba9a6693e7a2bc207d71a23ab30124c61fac7c79c2f79e587623df1ef7d7d9497887dea0e19b1501abf13d0395819ca741fef069608221430cbc4672860189779d1e2548118cdd6bf61cb67cde62b29febd0d08e5741b44a22e1d4f7968ec0a56d53e60b811a49194d7b8fc1b9f8fdfa92da41e514b4a85ac4106c85d59bf0b7daafa2ec1b9981b772b7e9cbdc302193d", 0xaa}, {&(0x7f0000002540)="6b708ccffc600542aa774fd0b6ab92ec00246a33707f00abaac45f07ab4f98e42c95d91c4d7e5f095c12abb76fa9a5aa9bf6caeedfff022c9ba7ac63eef726555c542b16174ea4459f0fe88727dc8007fb", 0x51}], 0x3}}], 0x4, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000002d40)=ANY=[@ANYBLOB="050000000000000063113300000000008510000002000000870000000000000095000000000000009500a50500000000ba038d0fe1b0f6edead59a42af8f8ea1d348bd594d3e5b373841cf403ba51868"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000001d80)={0x0, 0x8001}, &(0x7f0000001dc0)=0x8) (async) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x0, 0x1, 0x2, {0xa, 0x4e22, 0x1, @empty, 0xfff}}}, 0x3a) (async) openat$cgroup_ro(r10, &(0x7f0000002d00)='pids.current\x00', 0x0, 0x0) 119.245732ms ago: executing program 0 (id=2701): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x6, 0x21044, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdeb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ldst={0x1, 0x0, 0x4, 0x0, 0x6, 0x1e948a626adc3afe, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 112.91785ms ago: executing program 2 (id=2702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148c00000000001d430000000000007a0a00fe00581c1f61144f0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58d"], 0x0}, 0x94) r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:* rr'], 0x9) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r7, r6, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}, 0x200ce0c0) bind$alg(r5, &(0x7f0000004480)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha256-generic,ecb-camellia-asm)\x00'}, 0x58) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) close(0x3) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000180)=0x5b, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000500)=""/239, 0xef}}, {{&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/50, 0x32}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/177, 0xb1}, {&(0x7f0000000b80)=""/14, 0xe}, {&(0x7f0000000bc0)=""/25, 0x19}], 0x9, &(0x7f0000000cc0)=""/223, 0xdf}, 0x7}, {{&(0x7f0000000dc0)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/10, 0xa}, {&(0x7f0000000e80)=""/234, 0xea}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/247, 0xf7}, {&(0x7f0000001180)=""/59, 0x3b}, {&(0x7f00000011c0)=""/187, 0xbb}, {&(0x7f0000001280)=""/243, 0xf3}, {&(0x7f0000001380)=""/4, 0x4}], 0xa, &(0x7f0000001480)=""/141, 0x8d}, 0x14}, {{&(0x7f0000001540)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/229, 0xe5}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000002880)=""/241, 0xf1}, {&(0x7f0000001740)=""/101, 0x65}, {&(0x7f0000002980)=""/72, 0x48}, {&(0x7f0000002a00)=""/11, 0xb}, {&(0x7f0000002a40)=""/5, 0x5}, {&(0x7f0000002a80)=""/34, 0x22}, {&(0x7f0000002ac0)=""/45, 0x2d}], 0x9, &(0x7f0000002bc0)=""/219, 0xdb}, 0x79}, {{&(0x7f0000002cc0)=@can, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002d40)=""/35, 0x23}, {&(0x7f0000002d80)=""/80, 0x50}, {&(0x7f0000002e00)=""/154, 0x9a}, {&(0x7f0000002ec0)=""/191, 0xbf}, {&(0x7f0000002f80)=""/255, 0xff}, {&(0x7f0000003080)=""/20, 0x14}, {&(0x7f00000030c0)=""/168, 0xa8}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/43, 0x2b}], 0x9, &(0x7f0000004280)=""/110, 0x6e}, 0x1136}], 0x5, 0x2, &(0x7f0000004440)={0x0, 0x989680}) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 0s ago: executing program 3 (id=2703): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000300)=""/110, 0x6e}], 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x2, 0x12) kernel console output (not intermixed with test programs): n failed: -22 [ 138.069221][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.243241][ T7878] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 199.259381][ T7872] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 199.264736][ T7878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.277915][ T7872] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 199.378496][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 199.461141][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 199.499526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.506182][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.569885][ T7890] xt_l2tp: invalid flags combination: 8 [ 199.769804][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 199.801056][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 199.881921][ T7908] bond1: entered allmulticast mode [ 199.889963][ T7908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.981816][ T7913] netlink: 40 bytes leftover after parsing attributes in process `syz.0.503'. [ 200.247584][ T7929] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 200.540141][ T7939] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.565696][ T7939] bond4: (slave lo): Enslaving as a backup interface with an up link [ 200.595596][ T7939] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 200.939660][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.519'. [ 201.088782][ T7982] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 201.699889][ T8022] syzkaller0: entered promiscuous mode [ 201.715183][ T8022] syzkaller0: entered allmulticast mode [ 202.689225][ T8074] syzkaller0: entered promiscuous mode [ 202.696263][ T8074] syzkaller0: entered allmulticast mode [ 202.759888][ T8074] netlink: 'syz.0.546': attribute type 5 has an invalid length. [ 203.293238][ T8096] team0: Device vti0 is of different type [ 203.351466][ T8102] netlink: 'syz.2.554': attribute type 10 has an invalid length. [ 203.359341][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.554'. [ 203.376156][ T8102] dummy0: entered promiscuous mode [ 203.394539][ T8102] bridge0: port 3(dummy0) entered blocking state [ 203.417974][ T8102] bridge0: port 3(dummy0) entered disabled state [ 203.465664][ T8102] dummy0: entered allmulticast mode [ 203.474053][ T8102] bridge0: port 3(dummy0) entered blocking state [ 203.480649][ T8102] bridge0: port 3(dummy0) entered forwarding state [ 203.676315][ T8119] netlink: 72 bytes leftover after parsing attributes in process `syz.0.561'. [ 203.766937][ T8119] bond4 (unregistering): Released all slaves [ 203.787933][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 203.798888][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 203.814133][ T8127] netlink: 'syz.3.562': attribute type 15 has an invalid length. [ 204.461037][ T8168] __nla_validate_parse: 1 callbacks suppressed [ 204.461065][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'. [ 204.488399][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 206.029261][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 206.058637][ T8212] netlink: 232 bytes leftover after parsing attributes in process `syz.2.588'. [ 206.097605][ T8210] netlink: 'syz.4.587': attribute type 10 has an invalid length. [ 206.105630][ T8210] netlink: 40 bytes leftover after parsing attributes in process `syz.4.587'. [ 206.137925][ T8210] geneve0: entered promiscuous mode [ 206.148575][ T8210] team0: Port device geneve0 added [ 206.344813][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 206.940159][ T8261] netlink: 'syz.2.602': attribute type 32 has an invalid length. [ 207.047153][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 207.146237][ T8272] netlink: 'syz.2.602': attribute type 2 has an invalid length. [ 207.183238][ T8272] netlink: 244 bytes leftover after parsing attributes in process `syz.2.602'. [ 207.693781][ T8296] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 207.742036][ T8296] netlink: 228 bytes leftover after parsing attributes in process `syz.1.609'. [ 207.818755][ T8296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.909854][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.612'. [ 208.076034][ T8309] nbd: nbd64 already in use [ 208.472824][ T8149] udevd[8149]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 208.728538][ T8304] infiniband syz1: set down [ 208.740451][ T8304] infiniband syz1: added ipvlan0 [ 208.751293][ T8304] syz1: rxe_create_cq: returned err = -12 [ 208.757909][ T8304] infiniband syz1: Couldn't create ib_mad CQ [ 208.764209][ T8304] infiniband syz1: Couldn't open port 1 [ 208.823293][ T8304] RDS/IB: syz1: added [ 208.832329][ T8304] smc: adding ib device syz1 with port count 1 [ 208.839643][ T8304] smc: ib device syz1 port 1 has no pnetid [ 209.313702][ T8373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.355176][ T8331] ipt_REJECT: TCP_RESET invalid for non-tcp [ 209.384076][ T8331] netlink: 'syz.2.618': attribute type 3 has an invalid length. [ 209.787515][ T8396] __nla_validate_parse: 3 callbacks suppressed [ 209.787534][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 209.847242][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 209.886392][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 209.919122][ T8397] netlink: 'syz.2.627': attribute type 20 has an invalid length. [ 210.002240][ T72] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.002326][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 210.030898][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 210.035308][ T72] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.087437][ T8397] netlink: 'syz.2.627': attribute type 20 has an invalid length. [ 210.134741][ T72] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.163705][ T72] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.664371][ T8429] tunl0: entered promiscuous mode [ 210.712289][ T8428] ip6t_srh: unknown srh invflags 4000 [ 210.946069][ T8443] netlink: 'syz.0.640': attribute type 13 has an invalid length. [ 210.991997][ T8443] gretap0: refused to change device tx_queue_len [ 210.993606][ T8449] xt_connbytes: Forcing CT accounting to be enabled [ 211.005636][ T8443] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 211.315745][ T8464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.506936][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 211.593546][ T8481] bond2: option all_slaves_active: invalid value (222) [ 211.633360][ T8481] bond2 (unregistering): Released all slaves [ 211.710613][ T8480] vlan2: entered promiscuous mode [ 211.720502][ T8480] vlan2: entered allmulticast mode [ 211.738650][ T8480] hsr_slave_1: entered allmulticast mode [ 211.811280][ T8489] : renamed from hsr0 (while UP) [ 212.420428][ T8518] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 212.435899][ T8516] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 212.449826][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 212.482258][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 212.911560][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 213.071884][ T8548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.666'. [ 213.618249][ T8573] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 213.888516][ T8591] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 214.121799][ T8598] netlink: 'syz.1.680': attribute type 3 has an invalid length. [ 214.256482][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 214.833556][ T8633] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 215.050945][ T8640] __nla_validate_parse: 3 callbacks suppressed [ 215.050965][ T8640] netlink: 596 bytes leftover after parsing attributes in process `syz.3.692'. [ 215.076954][ T8643] xt_hashlimit: size too large, truncated to 1048576 [ 215.259157][ T8653] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 215.278215][ T8651] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 215.296773][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'. [ 215.297881][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.402550][ T8651] bridge_slave_1: left allmulticast mode [ 215.418206][ T8651] bridge_slave_1: left promiscuous mode [ 215.424326][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.468750][ T8651] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 215.482393][ T8653] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 215.825518][ T8682] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 215.881857][ T8682] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 216.192769][ T8703] veth0_to_team: entered promiscuous mode [ 216.298210][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.711'. [ 216.482856][ T8718] syzkaller0: entered promiscuous mode [ 216.521302][ T8718] syzkaller0: entered allmulticast mode [ 216.596437][ T8721] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 216.725868][ T8734] syzkaller1: entered promiscuous mode [ 216.731536][ T8734] syzkaller1: entered allmulticast mode [ 216.902179][ T8739] tipc: Enabled bearer , priority 0 [ 216.910401][ T8739] syzkaller0: entered promiscuous mode [ 216.917532][ T8739] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 216.935369][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 216.942307][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 216.942321][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 216.963978][ T8739] tipc: Resetting bearer [ 217.062822][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 217.106748][ T8748] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 217.147256][ T8738] tipc: Disabling bearer [ 217.188247][ T8750] IPVS: Unknown mcast interface: netpci0 [ 217.248310][ T8759] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 217.651312][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.734'. [ 217.825488][ T8789] netlink: 156 bytes leftover after parsing attributes in process `syz.0.736'. [ 217.998099][ T8802] netlink: 1 bytes leftover after parsing attributes in process `syz.1.738'. [ 218.058986][ T8804] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 218.079878][ T8806] netlink: 'syz.0.740': attribute type 2 has an invalid length. [ 218.167374][ T8811] netlink: 'syz.2.742': attribute type 2 has an invalid length. [ 218.188520][ T8806] 9: entered promiscuous mode [ 218.421316][ T8824] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 218.440589][ T8824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.607913][ T5835] Bluetooth: hci4: link tx timeout [ 218.613495][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 218.659945][ T8838] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 218.686716][ T8838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.745674][ T8837] netlink: 10 bytes leftover after parsing attributes in process `syz.0.751'. [ 219.006081][ T8848] Bluetooth: MGMT ver 1.23 [ 219.045078][ T8851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.270182][ T8855] macvtap1: entered promiscuous mode [ 219.296248][ T8855] vlan0: entered promiscuous mode [ 219.310683][ T8855] macvtap1: entered allmulticast mode [ 219.356217][ T8855] vlan0: entered allmulticast mode [ 219.361403][ T8855] veth0_vlan: entered allmulticast mode [ 219.422720][ T8859] macvtap2: entered promiscuous mode [ 219.444672][ T8859] macvtap2: entered allmulticast mode [ 219.586679][ T8876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.611143][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 219.672040][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 219.852689][ T8891] delete_channel: no stack [ 220.198061][ T8902] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.209365][ T8899] __nla_validate_parse: 2 callbacks suppressed [ 220.209384][ T8899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.773'. [ 220.257292][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 220.361523][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.386245][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.470946][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.520766][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.696371][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 220.821758][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 220.857781][ T8934] block nbd0: Unsupported socket: should be TCP or UNIX. [ 220.944316][ T8940] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20002 [ 221.649056][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 221.926213][ T8984] tipc: Enabling of bearer rejected, failed to enable media [ 222.216168][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 222.997136][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'. [ 223.008351][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 223.022518][ T9046] netlink: 'syz.4.807': attribute type 7 has an invalid length. [ 223.039416][ T9046] netlink: 'syz.4.807': attribute type 8 has an invalid length. [ 223.058362][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 223.072064][ T9045] syzkaller1: entered promiscuous mode [ 223.096832][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 223.102064][ T9045] syzkaller1: entered allmulticast mode [ 223.107697][ T9054] netlink: 'syz.0.808': attribute type 2 has an invalid length. [ 223.431241][ T9067] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 223.645516][ T9074] netlink: 'syz.0.814': attribute type 11 has an invalid length. [ 223.843001][ T9085] vlan2: entered allmulticast mode [ 223.848389][ T9085] : entered allmulticast mode [ 223.851677][ T9087] netlink: 248 bytes leftover after parsing attributes in process `syz.1.819'. [ 223.853301][ T9085] hsr_slave_0: entered allmulticast mode [ 223.876051][ T9085] hsr_slave_1: entered allmulticast mode [ 223.979570][ T9090] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.388679][ T9106] netlink: 'syz.3.826': attribute type 29 has an invalid length. [ 224.422185][ T9106] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 225.332739][ T9156] __nla_validate_parse: 4 callbacks suppressed [ 225.332759][ T9156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.843'. [ 225.552277][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'. [ 225.582517][ T9166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.846'. [ 225.747080][ T9168] netlink: 'syz.1.847': attribute type 10 has an invalid length. [ 225.779458][ T9168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.847'. [ 225.795874][ T9168] dummy0: entered promiscuous mode [ 225.802072][ T9168] bridge0: port 2(dummy0) entered blocking state [ 225.810709][ T9168] bridge0: port 2(dummy0) entered disabled state [ 225.818003][ T9168] dummy0: entered allmulticast mode [ 225.827989][ T9168] bridge0: port 2(dummy0) entered blocking state [ 225.834544][ T9168] bridge0: port 2(dummy0) entered forwarding state [ 226.001769][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'. [ 226.186967][ T9186] netlink: 52 bytes leftover after parsing attributes in process `syz.1.853'. [ 226.228232][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 226.276864][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 226.327300][ T9195] netlink: 'syz.3.857': attribute type 21 has an invalid length. [ 226.353695][ T9195] netlink: 156 bytes leftover after parsing attributes in process `syz.3.857'. [ 226.368295][ T9201] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 226.381414][ T9195] syzkaller0: entered promiscuous mode [ 226.397328][ T9195] syzkaller0: entered allmulticast mode [ 226.407350][ T9201] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 226.510637][ T9205] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 226.541706][ T9205] netlink: 224 bytes leftover after parsing attributes in process `syz.4.860'. [ 227.169246][ T9234] syzkaller0: entered promiscuous mode [ 227.214826][ T9234] syzkaller0: entered allmulticast mode [ 228.018275][ T9271] bond7: Unable to set up delay as MII monitoring is disabled [ 228.037100][ T9271] bond7 (unregistering): Released all slaves [ 228.682008][ T9313] net veth1_virt_wifi .: renamed from virt_wifi0 [ 229.011428][ T9328] x_tables: duplicate underflow at hook 1 [ 229.426164][ T9350] validate_nla: 2 callbacks suppressed [ 229.426183][ T9350] netlink: 'syz.2.901': attribute type 13 has an invalid length. [ 229.740749][ T9350] A link change request failed with some changes committed already. Interface . may have been left with an inconsistent configuration, please check. [ 230.162032][ T9368] netlink: 'syz.1.905': attribute type 9 has an invalid length. [ 230.193583][ T9385] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 230.295698][ T9385] bridge0: port 3(dummy0) entered disabled state [ 230.310405][ T9385] dummy0: left allmulticast mode [ 230.327300][ T9385] dummy0: left promiscuous mode [ 230.332540][ T9385] bridge0: port 3(dummy0) entered disabled state [ 230.415854][ T9385] team0: Port device dummy0 added [ 230.449314][ T9394] tipc: Started in network mode [ 230.467802][ T9394] tipc: Node identity aa6f276b76f8, cluster identity 4711 [ 230.514892][ T9394] tipc: Enabled bearer , priority 0 [ 230.546594][ T9388] syzkaller0: entered promiscuous mode [ 230.552151][ T9388] syzkaller0: entered allmulticast mode [ 230.586330][ T9399] __nla_validate_parse: 14 callbacks suppressed [ 230.586349][ T9399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.911'. [ 230.662051][ T9388] tipc: Resetting bearer [ 230.678462][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 230.690908][ T9406] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 230.733934][ T9387] tipc: Resetting bearer [ 230.757537][ T9387] tipc: Disabling bearer [ 230.810451][ T9414] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.914'. [ 230.891823][ T9414] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.914'. [ 231.017719][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 231.167540][ T9430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.917'. [ 231.596965][ T9457] netlink: 'syz.3.924': attribute type 16 has an invalid length. [ 231.675637][ T9449] bridge3: entered promiscuous mode [ 231.694006][ T9449] bridge3: entered allmulticast mode [ 232.056653][ T9471] bond7 (unregistering): Released all slaves [ 232.199330][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.929'. [ 232.225921][ T9481] netlink: 6 bytes leftover after parsing attributes in process `syz.0.929'. [ 232.448522][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 232.605529][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 232.827156][ T9499] macvtap1: entered promiscuous mode [ 232.868808][ T9499] vlan0: entered promiscuous mode [ 232.879304][ T9499] macvtap1: entered allmulticast mode [ 232.905729][ T9499] vlan0: entered allmulticast mode [ 232.911011][ T9499] veth0_vlan: entered allmulticast mode [ 233.185509][ T9529] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 233.258433][ T9536] pim6reg1: entered promiscuous mode [ 233.282544][ T9536] pim6reg1: entered allmulticast mode [ 233.645434][ T9538] delete_channel: no stack [ 234.143971][ T9581] xt_l2tp: v2 doesn't support IP mode [ 234.357620][ T9590] netlink: 'syz.1.956': attribute type 13 has an invalid length. [ 234.389733][ T9590] veth0_macvtap: left promiscuous mode [ 234.404896][ T9590] macvtap0: entered allmulticast mode [ 234.454285][ T9590] macvtap0: refused to change device tx_queue_len [ 234.539936][ T9599] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 234.675269][ T9606] pim6reg1: entered promiscuous mode [ 234.694550][ T9606] pim6reg1: entered allmulticast mode [ 235.050523][ T9621] netlink: 'syz.2.964': attribute type 4 has an invalid length. [ 235.324162][ T9631] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.343828][ T918] IPVS: starting estimator thread 0... [ 235.348071][ T9635] netlink: 'syz.3.967': attribute type 1 has an invalid length. [ 235.457185][ T9638] IPVS: using max 26 ests per chain, 62400 per kthread [ 235.890115][ T9661] tipc: Enabled bearer , priority 0 [ 235.918156][ T9661] syzkaller0: entered promiscuous mode [ 235.945435][ T9661] syzkaller0: entered allmulticast mode [ 235.985232][ T9661] tipc: Resetting bearer [ 236.027531][ T9657] tipc: Resetting bearer [ 236.135882][ T9657] tipc: Disabling bearer [ 236.206369][ T9672] __nla_validate_parse: 2 callbacks suppressed [ 236.206387][ T9672] netlink: 3 bytes leftover after parsing attributes in process `syz.1.975'. [ 236.433965][ T9692] netlink: 340 bytes leftover after parsing attributes in process `syz.0.980'. [ 236.899290][ T9723] netlink: 300 bytes leftover after parsing attributes in process `syz.3.984'. [ 237.295354][ T9736] syz.4.991 (9736) used greatest stack depth: 17832 bytes left [ 237.429064][ T9750] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 237.437110][ T9750] netlink: 224 bytes leftover after parsing attributes in process `syz.1.994'. [ 237.584224][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 237.762430][ T9771] x_tables: duplicate underflow at hook 4 [ 237.922950][ T9782] netlink: 'syz.0.1002': attribute type 29 has an invalid length. [ 237.949751][ T9782] netlink: 'syz.0.1002': attribute type 29 has an invalid length. [ 237.969178][ T9782] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1002'. [ 238.066906][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 238.336556][ T9812] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1008'. [ 238.385975][ T9812] unsupported nlmsg_type 40 [ 238.663011][ T9821] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1011'. [ 238.871737][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 238.903817][ T9834] openvswitch: netlink: Flow actions attr not present in new flow. [ 239.091676][ T9839] netlink: 'syz.1.1015': attribute type 12 has an invalid length. [ 239.102080][ T9839] netlink: 'syz.1.1015': attribute type 29 has an invalid length. [ 239.134757][ T9839] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 239.660129][ T9868] bond7: (slave gretap0): Device is not bonding slave [ 239.690978][ T9868] bond7: option active_slave: invalid value (gretap0) [ 239.702165][ T9868] bond7 (unregistering): Released all slaves [ 240.876722][ T9916] xt_socket: unknown flags 0xe4 [ 241.327021][ T9945] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 241.403019][ T9949] __nla_validate_parse: 5 callbacks suppressed [ 241.403039][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 241.511606][ T9951] erspan0: entered promiscuous mode [ 241.748535][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 241.758089][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 241.772161][ T9969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1054'. [ 241.786110][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 241.827857][ T9976] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1052'. [ 242.136691][ T9991] tipc: Enabled bearer , priority 0 [ 242.146330][ T9991] syzkaller0: entered promiscuous mode [ 242.152049][ T9991] syzkaller0: entered allmulticast mode [ 242.171685][ T9991] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 242.192179][ T9991] tipc: Resetting bearer [ 242.202052][ T9990] tipc: Resetting bearer [ 242.217783][ T9990] tipc: Disabling bearer [ 242.408029][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 242.638889][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 242.767812][ T5831] IPVS: starting estimator thread 0... [ 242.905540][T10021] IPVS: using max 34 ests per chain, 81600 per kthread [ 242.978034][T10026] dvmrp6: entered allmulticast mode [ 243.236904][T10047] openvswitch: netlink: Actions may not be safe on all matching packets [ 243.237826][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 243.285190][T10048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.385996][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1079'. [ 243.413670][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.091726][T10099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.113762][T10095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.236536][T10095] bond0: (slave bond4): Enslaving as an active interface with an up link [ 244.634302][T10124] can: request_module (can-proto-0) failed. [ 245.140147][T10157] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 245.142652][T10155] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 245.182057][T10154] x_tables: duplicate underflow at hook 3 [ 245.208693][T10155] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 245.217175][T10157] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 245.270633][T10161] tipc: Enabled bearer , priority 0 [ 245.310576][T10161] syzkaller0: entered promiscuous mode [ 245.335422][T10161] syzkaller0: entered allmulticast mode [ 245.372559][T10161] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 245.432430][T10164] netlink: 'syz.3.1102': attribute type 1 has an invalid length. [ 245.432430][T10163] netlink: 'syz.3.1102': attribute type 1 has an invalid length. [ 245.583132][T10171] tipc: Resetting bearer [ 245.590615][T10167] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 245.593180][T10152] tipc: Resetting bearer [ 245.616388][T10178] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 245.669375][T10152] tipc: Disabling bearer [ 245.797772][T10179] bond5: (slave geneve2): making interface the new active one [ 245.806834][T10179] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 245.852478][ T72] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.886452][T10182] ksmbd: Unknown IPC event: 1, ignore. [ 245.894263][ T72] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.921579][T10189] netlink: 'syz.3.1108': attribute type 21 has an invalid length. [ 245.932742][ T72] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.945974][T10189] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.956368][T10191] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 245.964154][ T72] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 246.070986][T10194] Cannot find add_set index 0 as target [ 246.100764][T10195] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.115004][T10195] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 246.137525][T10195] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 246.400113][T10197] bond9: entered promiscuous mode [ 246.405725][T10197] bond9: entered allmulticast mode [ 246.411281][T10197] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.448921][T10211] __nla_validate_parse: 3 callbacks suppressed [ 246.448942][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 246.640662][T10224] syzkaller0: entered promiscuous mode [ 246.646776][T10224] syzkaller0: entered allmulticast mode [ 246.736297][T10230] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 246.829912][T10229] bridge3: entered promiscuous mode [ 246.860742][T10229] bridge3: entered allmulticast mode [ 247.295729][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 247.693295][T10284] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.758941][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 247.770493][T10288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1137'. [ 247.789791][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 247.789832][ T8365] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.798964][T10288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1137'. [ 247.817704][ T8365] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.827601][ T8365] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.837384][ T8365] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.099485][T10305] netlink: 'syz.3.1141': attribute type 4 has an invalid length. [ 248.226473][T10276] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1129'. [ 248.822266][ T918] IPVS: starting estimator thread 0... [ 248.932365][T10343] IPVS: using max 24 ests per chain, 57600 per kthread [ 249.073960][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1154'. [ 249.106986][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1154'. [ 249.163295][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1154'. [ 250.207140][T10372] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 250.449999][T10394] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 250.490412][T10393] tipc: Can't bind to reserved service type 0 [ 250.505087][T10394] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 250.696506][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 260.938345][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.304121][T10440] __nla_validate_parse: 18 callbacks suppressed [ 300.304143][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 300.321719][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 300.387176][T10088] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.406577][T10088] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.417572][T10088] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.426760][T10088] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.687876][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 300.727263][T10475] veth11: entered allmulticast mode [ 300.747232][T10477] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1192'. [ 300.793875][T10480] validate_nla: 4 callbacks suppressed [ 300.793893][T10480] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 300.808345][T10480] netlink: 'syz.1.1193': attribute type 3 has an invalid length. [ 300.818769][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 300.829256][T10480] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1193'. [ 300.830339][T10477] bond6: option lacp_rate: invalid value (16) [ 300.849987][T10477] bond6 (unregistering): Released all slaves [ 301.328841][T10501] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1201'. [ 301.641053][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 301.667967][T10520] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 301.684288][T10522] netlink: 'syz.1.1207': attribute type 8 has an invalid length. [ 301.694520][T10515] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1205'. [ 301.882074][T10519] veth5: entered promiscuous mode [ 302.064017][T10520] veth5: entered promiscuous mode [ 302.240721][T10547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.453643][T10547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.507038][T10569] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1218'. [ 302.693715][T10547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.763834][T10577] veth0: entered promiscuous mode [ 302.861805][T10547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.130963][T10577] veth0: left promiscuous mode [ 303.185490][T10594] syz_tun: entered allmulticast mode [ 303.225589][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.275731][ T72] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.318699][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.362582][T10088] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.379314][T10597] netlink: 'syz.2.1228': attribute type 9 has an invalid length. [ 303.397059][T10597] netlink: 'syz.2.1228': attribute type 11 has an invalid length. [ 303.416365][T10597] netlink: 'syz.2.1228': attribute type 12 has an invalid length. [ 303.433194][T10597] openvswitch: netlink: Message has 4 unknown bytes. [ 303.531714][T10606] xt_hashlimit: size too large, truncated to 1048576 [ 303.810332][T10606] syz.1.1231: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 303.853744][T10606] CPU: 1 UID: 0 PID: 10606 Comm: syz.1.1231 Not tainted syzkaller #0 PREEMPT(full) [ 303.853772][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.853792][T10606] Call Trace: [ 303.853800][T10606] [ 303.853810][T10606] dump_stack_lvl+0x189/0x250 [ 303.853845][T10606] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 303.853879][T10606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.853907][T10606] ? __pfx__printk+0x10/0x10 [ 303.853936][T10606] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 303.853964][T10606] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 303.854000][T10606] warn_alloc+0x214/0x310 [ 303.854039][T10606] ? __pfx_warn_alloc+0x10/0x10 [ 303.854080][T10606] ? __get_vm_area_node+0x28f/0x300 [ 303.854109][T10606] ? htable_create+0x101/0x7a0 [ 303.854140][T10606] __vmalloc_node_range_noprof+0x690/0x12d0 [ 303.854202][T10606] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.854236][T10606] ? rcu_is_watching+0x15/0xb0 [ 303.854260][T10606] ? htable_create+0x101/0x7a0 [ 303.854286][T10606] __kvmalloc_node_noprof+0x674/0x910 [ 303.854317][T10606] ? htable_create+0x101/0x7a0 [ 303.854340][T10606] ? hashlimit_pernet+0x23/0x240 [ 303.854354][T10623] netlink: 'syz.0.1234': attribute type 11 has an invalid length. [ 303.854365][T10606] ? hashlimit_pernet+0x23/0x240 [ 303.854390][T10606] ? hashlimit_pernet+0x23/0x240 [ 303.854421][T10606] htable_create+0x101/0x7a0 [ 303.854453][T10606] hashlimit_mt_check_common+0x719/0xa10 [ 303.854505][T10606] xt_check_match+0x3d1/0xab0 [ 303.854543][T10606] ? __pfx_xt_check_match+0x10/0x10 [ 303.854579][T10606] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 303.854628][T10606] ? xt_find_match+0x1f7/0x250 [ 303.854663][T10606] translate_table+0x1553/0x2040 [ 303.854726][T10606] ? __pfx_translate_table+0x10/0x10 [ 303.854761][T10606] ? __might_fault+0xb0/0x130 [ 303.854816][T10606] ? _copy_from_user+0x94/0xb0 [ 303.854853][T10606] do_ip6t_set_ctl+0x970/0xce0 [ 303.854893][T10606] ? rcu_is_watching+0x15/0xb0 [ 303.854927][T10606] ? trace_contention_end+0x39/0x120 [ 303.854955][T10606] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 303.855018][T10606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 303.855058][T10606] ? file_init_path+0x3b/0x590 [ 303.855090][T10606] ? __lock_acquire+0xab9/0xd20 [ 303.855116][T10606] nf_setsockopt+0x26f/0x290 [ 303.855154][T10606] rawv6_setsockopt+0x23b/0x5b0 [ 303.855182][T10606] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 303.855204][T10606] ? aa_sock_opt_perm+0xff/0x1b0 [ 303.855241][T10606] ? sock_common_setsockopt+0x36/0xc0 [ 303.855274][T10606] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 303.855309][T10606] do_sock_setsockopt+0x17c/0x1b0 [ 303.855339][T10606] __x64_sys_setsockopt+0x13f/0x1b0 [ 303.855369][T10606] do_syscall_64+0xfa/0xfa0 [ 303.855402][T10606] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.855433][T10606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.855456][T10606] ? clear_bhb_loop+0x60/0xb0 [ 303.855484][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.855506][T10606] RIP: 0033:0x7fbcb278f6c9 [ 303.855541][T10606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.855559][T10606] RSP: 002b:00007fbcb09d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.855583][T10606] RAX: ffffffffffffffda RBX: 00007fbcb29e6090 RCX: 00007fbcb278f6c9 [ 303.855600][T10606] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000000 [ 303.855614][T10606] RBP: 00007fbcb2811f91 R08: 0000000000000588 R09: 0000000000000000 [ 303.855627][T10606] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 303.855642][T10606] R13: 00007fbcb29e6128 R14: 00007fbcb29e6090 R15: 00007ffd5c1e0818 [ 303.855676][T10606] [ 303.865109][T10606] Mem-Info: [ 304.230977][T10606] active_anon:4723 inactive_anon:0 isolated_anon:0 [ 304.230977][T10606] active_file:2568 inactive_file:39919 isolated_file:0 [ 304.230977][T10606] unevictable:768 dirty:72 writeback:0 [ 304.230977][T10606] slab_reclaimable:10568 slab_unreclaimable:119651 [ 304.230977][T10606] mapped:29978 shmem:1360 pagetables:1010 [ 304.230977][T10606] sec_pagetables:0 bounce:0 [ 304.230977][T10606] kernel_misc_reclaimable:0 [ 304.230977][T10606] free:1315421 free_pcp:14263 free_cma:0 [ 304.278498][T10606] Node 0 active_anon:18992kB inactive_anon:0kB active_file:10272kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119912kB dirty:288kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12712kB pagetables:3984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 304.316632][T10593] syz_tun: left allmulticast mode [ 304.352028][T10606] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 304.420953][T10639] netlink: 'syz.2.1238': attribute type 6 has an invalid length. [ 304.444663][T10606] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.478181][T10641] netlink: 'syz.2.1238': attribute type 6 has an invalid length. [ 304.588694][T10606] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 304.620059][T10606] Node 0 DMA32 free:1356636kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18992kB inactive_anon:0kB active_file:10272kB inactive_file:159472kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:39872kB local_pcp:19268kB free_cma:0kB [ 304.699277][T10606] lowmem_reserve[]: 0 0 0 0 0 [ 304.704086][T10606] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.742054][T10606] lowmem_reserve[]: 0 0 0 0 0 [ 304.781546][T10606] Node 1 Normal free:3890460kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17556kB local_pcp:8848kB free_cma:0kB [ 304.791327][T10654] xt_recent: Unsupported userspace flags (000000b1) [ 304.828819][T10606] lowmem_reserve[]: 0 0 0 0 0 [ 304.834481][T10606] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.850934][T10606] Node 0 DMA32: 1411*4kB (UM) 730*8kB (UM) 360*16kB (UME) 2297*32kB (UME) 1181*64kB (UME) 287*128kB (UME) 64*256kB (UM) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UM) 272*4096kB (UM) = 1356604kB [ 304.877639][T10606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 304.881477][T10655] tipc: Enabled bearer , priority 0 [ 304.889353][T10606] Node 1 Normal: 189*4kB (UE) 43*8kB (UME) 47*16kB (UME) 111*32kB (UME) 28*64kB (UM) 8*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890460kB [ 304.906354][T10653] syzkaller0: entered promiscuous mode [ 304.917805][T10606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.919854][T10653] syzkaller0: entered allmulticast mode [ 304.945956][T10653] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 304.971019][T10606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.982015][T10606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.991738][T10606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.009612][T10606] 43844 total pagecache pages [ 305.014450][T10606] 0 pages in swap cache [ 305.020130][T10606] Free swap = 124996kB [ 305.024402][T10606] Total swap = 124996kB [ 305.028831][T10606] 2097051 pages RAM [ 305.032871][T10606] 0 pages HighMem/MovableOnly [ 305.038129][T10606] 424119 pages reserved [ 305.042379][T10606] 0 pages cma reserved [ 305.058299][T10653] tipc: Resetting bearer [ 305.237168][T10652] tipc: Resetting bearer [ 305.266377][T10652] tipc: Disabling bearer [ 305.699441][T10702] netlink: 'syz.3.1254': attribute type 4 has an invalid length. [ 305.707783][T10702] __nla_validate_parse: 7 callbacks suppressed [ 305.707800][T10702] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1254'. [ 306.065974][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1255'. [ 306.114268][T10708] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1257'. [ 306.158647][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1257'. [ 306.174224][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 306.499537][T10730] syzkaller0: entered promiscuous mode [ 306.508217][T10730] syzkaller0: entered allmulticast mode [ 306.567300][T10725] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 306.857761][T10750] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1269'. [ 306.892808][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 306.957580][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 306.977051][T10757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1271'. [ 307.055173][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 307.822015][T10770] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 307.947627][T10775] bond6: (slave ip6gretap1): making interface the new active one [ 307.978085][T10775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.007307][T10775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.018754][T10775] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 308.397062][T10806] sctp: [Deprecated]: syz.4.1284 (pid 10806) Use of int in max_burst socket option deprecated. [ 308.397062][T10806] Use struct sctp_assoc_value instead [ 308.735650][T10824] tipc: Enabled bearer , priority 0 [ 308.941180][T10842] openvswitch: netlink: Unknown nsh attribute 0 [ 308.959548][T10842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.024468][T10830] vlan0 (unregistering): left allmulticast mode [ 309.030864][T10830] veth0_vlan (unregistering): left allmulticast mode [ 309.043610][T10830] vlan0 (unregistering): left promiscuous mode [ 309.083032][T10824] syzkaller0: entered promiscuous mode [ 309.088816][T10824] syzkaller0: entered allmulticast mode [ 309.098579][T10842] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 309.120622][T10837] bond4: option mode: unable to set because the bond device has slaves [ 309.151190][T10839] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 309.207969][T10840] tipc: Resetting bearer [ 309.281102][T10836] tipc: Resetting bearer [ 309.397525][T10836] tipc: Disabling bearer [ 309.496926][T10870] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 310.032784][T10902] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 310.303507][T10915] netlink: 'syz.4.1309': attribute type 5 has an invalid length. [ 310.327205][T10915] sctp: [Deprecated]: syz.4.1309 (pid 10915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.327205][T10915] Use struct sctp_sack_info instead [ 310.365994][T10915] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 310.406862][T10919] bond0: entered promiscuous mode [ 310.411964][T10919] bond_slave_0: entered promiscuous mode [ 310.431365][T10919] bond_slave_1: entered promiscuous mode [ 310.441473][T10919] batadv0: entered promiscuous mode [ 310.496830][T10923] xt_ipcomp: unknown flags 1D [ 310.511014][T10919] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 310.598717][T10935] xt_ipcomp: unknown flags 1D [ 310.804285][T10947] tipc: Enabling of bearer rejected, failed to enable media [ 310.846219][T10945] vlan4: entered promiscuous mode [ 310.854377][T10945] vlan4: entered allmulticast mode [ 310.861609][T10945] hsr_slave_1: entered allmulticast mode [ 310.898273][T10947] geneve2: entered promiscuous mode [ 310.906503][T10947] geneve2: entered allmulticast mode [ 310.975145][T10951] __nla_validate_parse: 27 callbacks suppressed [ 310.975165][T10951] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1320'. [ 311.006856][T10951] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1320'. [ 311.146586][T10965] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 311.224264][T10969] nbd: must specify a device to reconfigure [ 311.490398][T10965] vlan0 (unregistering): left allmulticast mode [ 311.498963][T10965] veth0_vlan (unregistering): left allmulticast mode [ 311.506200][T10965] vlan0 (unregistering): left promiscuous mode [ 311.796412][T10969] C: renamed from lo (while UP) [ 311.803904][T10975] syzkaller1: entered promiscuous mode [ 311.813811][T10975] syzkaller1: entered allmulticast mode [ 311.845021][T10982] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 312.479509][T11007] bond3 (unregistering): Released all slaves [ 312.496627][T11019] netlink: 'syz.2.1336': attribute type 10 has an invalid length. [ 312.506066][T11019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1336'. [ 312.557588][T11019] dummy0: entered promiscuous mode [ 312.594465][T11019] team0: Port device dummy0 removed [ 312.611476][T11019] bridge0: port 3(dummy0) entered blocking state [ 312.633634][T11019] bridge0: port 3(dummy0) entered disabled state [ 312.650933][T11019] dummy0: entered allmulticast mode [ 312.860256][T11031] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 313.158857][T11046] netlink: 'syz.2.1345': attribute type 4 has an invalid length. [ 313.203849][T11046] netlink: 'syz.2.1345': attribute type 4 has an invalid length. [ 313.585856][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1349'. [ 313.629499][T11066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.842762][T11076] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1353'. [ 313.862373][T11076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 313.878277][T11076] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 313.891961][T11076] gretap1: entered promiscuous mode [ 313.898326][T11076] gretap1: entered allmulticast mode [ 313.906651][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 314.121343][T11095] netlink: 'syz.4.1358': attribute type 29 has an invalid length. [ 314.135461][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1358'. [ 314.323900][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 314.348221][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 314.509218][T11115] tipc: Enabled bearer , priority 0 [ 314.535304][T11115] syzkaller0: entered promiscuous mode [ 314.541227][T11115] syzkaller0: entered allmulticast mode [ 314.628809][T11122] tipc: Resetting bearer [ 314.645968][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 314.768187][T11111] tipc: Resetting bearer [ 314.788988][T11111] tipc: Disabling bearer [ 314.973921][T11137] tipc: Enabled bearer , priority 0 [ 315.009520][T11137] syzkaller0: entered promiscuous mode [ 315.016964][T11137] syzkaller0: entered allmulticast mode [ 315.048053][T11137] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 315.076806][T11137] tipc: Resetting bearer [ 315.086374][T11134] tipc: Resetting bearer [ 315.107822][T11134] tipc: Disabling bearer [ 315.403083][T11161] netlink: 'syz.4.1380': attribute type 13 has an invalid length. [ 315.413992][T11161] netlink: 'syz.4.1380': attribute type 13 has an invalid length. [ 315.429781][ T36] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 315.860066][T11188] team_slave_0: left promiscuous mode [ 315.868907][T11188] team0: Port device team_slave_0 removed [ 315.881883][T11188] team_slave_1: left promiscuous mode [ 315.897148][T11188] team0: Port device team_slave_1 removed [ 315.909482][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.917429][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.926377][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.933876][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.946479][T11188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.358749][T11199] geneve3: entered promiscuous mode [ 316.364112][T11199] geneve3: entered allmulticast mode [ 316.392405][ T50] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 17951 - 0 [ 316.456512][T11205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.469611][T11205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.487887][T11202] __nla_validate_parse: 11 callbacks suppressed [ 316.487920][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1392'. [ 316.504121][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1392'. [ 316.513325][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1392'. [ 316.523762][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1392'. [ 316.533570][T11202] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1392'. [ 316.545737][ T50] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 17951 - 0 [ 316.556133][ T50] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 17951 - 0 [ 316.762897][T11220] tipc: Enabled bearer , priority 13 [ 316.903945][T11228] IPv6: addrconf: prefix option has invalid lifetime [ 317.032403][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 317.038082][T11231] bond11: entered promiscuous mode [ 317.047244][T11231] bond11: entered allmulticast mode [ 317.052817][T11231] 8021q: adding VLAN 0 to HW filter on device bond11 [ 317.456319][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 317.519169][T11267] raw_sendmsg: syz.4.1411 forgot to set AF_INET. Fix it! [ 317.556737][T11272] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 317.566100][T11272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.723638][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 317.748062][T11281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1417'. [ 317.760257][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 317.776788][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.788518][T11278] Cannot find add_set index 2 as target [ 317.794514][T11283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.841660][T11291] netlink: 'syz.4.1420': attribute type 24 has an invalid length. [ 317.850819][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.862179][T11283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.889979][ T5914] tipc: Node number set to 537428934 [ 318.015835][T11297] netlink: 'syz.0.1421': attribute type 11 has an invalid length. [ 318.038297][T11301] netlink: 'syz.3.1423': attribute type 6 has an invalid length. [ 318.063648][T11301] netlink: 'syz.3.1423': attribute type 5 has an invalid length. [ 318.174955][T11310] Bluetooth: MGMT ver 1.23 [ 318.305672][T11205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.317169][T11205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.328363][T11205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 17951 - 0 [ 318.358967][T11314] bridge0: entered allmulticast mode [ 318.480844][T11205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.506212][T11321] netlink: 'syz.1.1428': attribute type 10 has an invalid length. [ 318.521099][T11205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.554700][T11205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 17951 - 0 [ 318.728263][T11205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.753524][T11205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.782384][T11205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 17951 - 0 [ 318.977812][ T30] audit: type=1107 audit(1762765221.041:4): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 319.093208][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.153145][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 17951 - 0 [ 319.171110][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.248076][T11357] xt_CT: No such helper "snmp_trap" [ 319.376516][T10088] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.397951][T10088] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 17951 - 0 [ 319.430392][T10088] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.446064][T10088] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.454437][T10088] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 17951 - 0 [ 319.463663][T10088] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.551983][ T72] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.562864][ T72] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 17951 - 0 [ 319.575819][ T72] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.055643][T11391] veth0_to_bridge: entered promiscuous mode [ 320.270896][T11388] veth0_to_bridge: left promiscuous mode [ 320.625052][T11407] netlink: 'syz.4.1451': attribute type 10 has an invalid length. [ 320.651047][T11407] batadv0: entered promiscuous mode [ 320.661090][T11407] batadv0: entered allmulticast mode [ 320.675013][T11407] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 321.319512][T11448] netlink: 'syz.4.1463': attribute type 13 has an invalid length. [ 322.380579][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.639876][T11444] vlan6: entered allmulticast mode [ 322.645199][T11444] hsr0: entered allmulticast mode [ 322.650251][T11444] hsr_slave_0: entered allmulticast mode [ 322.875320][T11448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.073435][T11481] __nla_validate_parse: 17 callbacks suppressed [ 323.073455][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 323.441762][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 323.452161][T11498] xt_TCPMSS: Only works on TCP SYN packets [ 323.646762][T11504] bond0: entered promiscuous mode [ 323.654202][T11504] batadv0: entered promiscuous mode [ 323.668062][T11504] batadv0: left promiscuous mode [ 323.674275][T11504] bond0: left promiscuous mode [ 324.080374][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 324.107654][T11529] bond2 (unregistering): Released all slaves [ 324.127799][T11540] netlink: 'syz.3.1490': attribute type 178 has an invalid length. [ 324.433469][T11555] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1493'. [ 324.434892][T11556] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1493'. [ 324.568692][T11555] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 324.610432][T11555] bond12 (unregistering): Released all slaves [ 324.690039][T11564] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1497'. [ 324.742395][T11573] netem: incorrect ge model size [ 324.761653][T11573] netem: change failed [ 324.788950][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 324.887971][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1501'. [ 324.900478][T11573] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1499'. [ 324.937860][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1501'. [ 324.984354][T11573] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 325.000029][T11573] bond7 (unregistering): Released all slaves [ 325.500768][T11627] sctp: [Deprecated]: syz.3.1508 (pid 11627) Use of int in maxseg socket option. [ 325.500768][T11627] Use struct sctp_assoc_value instead [ 325.523668][T11629] bridge: RTM_NEWNEIGH with invalid ether address [ 325.801187][T11643] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 325.836094][T11649] netem: change failed [ 325.847714][T11650] netem: change failed [ 325.861763][T11652] xt_SECMARK: invalid mode: 9 [ 326.660341][T11701] Driver unsupported XDP return value 0 on prog (id 255) dev N/A, expect packet loss! [ 326.909770][T11717] atomic_op ffff8880518f3198 conn xmit_atomic 0000000000000000 [ 327.099649][T11727] sctp: [Deprecated]: syz.1.1540 (pid 11727) Use of int in max_burst socket option deprecated. [ 327.099649][T11727] Use struct sctp_assoc_value instead [ 327.218073][T11732] netlink: 'syz.4.1542': attribute type 10 has an invalid length. [ 327.304506][T11741] IPVS: Unknown mcast interface: vcan0 [ 327.311964][T11740] IPVS: Unknown mcast interface: vcan0 [ 327.386354][T11745] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 327.396280][T11745] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 327.404799][T11745] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 327.915836][ T5834] block nbd0: Receive control failed (result -32) [ 328.351416][T11789] tipc: Enabled bearer , priority 0 [ 328.365789][T11789] syzkaller0: entered promiscuous mode [ 328.389022][T11789] syzkaller0: entered allmulticast mode [ 328.473626][T11789] tipc: Resetting bearer [ 328.568356][T11789] tipc: Disabling bearer [ 328.621028][T11808] netlink: 'syz.3.1561': attribute type 8 has an invalid length. [ 328.938125][T11829] __nla_validate_parse: 10 callbacks suppressed [ 328.938146][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1568'. [ 329.010197][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1568'. [ 329.678698][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 329.685212][T11872] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 329.696021][T11872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.748800][T11872] ksmbd: Unknown IPC event: 3, ignore. [ 329.904768][T11880] block nbd1: NBD_DISCONNECT [ 330.060976][T11891] xt_l2tp: v2 doesn't support IP mode [ 330.067946][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 330.081893][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 330.115807][T11891] veth3: entered promiscuous mode [ 330.137666][T11891] veth3: entered allmulticast mode [ 330.437838][T11910] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1593'. [ 330.518692][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1593'. [ 330.658200][T11908] bond0: entered allmulticast mode [ 330.665787][T11908] bond4: entered allmulticast mode [ 330.832269][T11917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1596'. [ 331.091497][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'. [ 331.302017][T11948] sctp: [Deprecated]: syz.1.1604 (pid 11948) Use of int in maxseg socket option. [ 331.302017][T11948] Use struct sctp_assoc_value instead [ 331.466126][T11960] syzkaller1: entered promiscuous mode [ 331.480932][T11960] syzkaller1: entered allmulticast mode [ 331.732755][T11974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1614'. [ 331.760108][T11977] SET target dimension over the limit! [ 332.549846][T12025] tipc: Enabled bearer , priority 0 [ 332.576135][T12025] syzkaller0: entered promiscuous mode [ 332.593776][T12025] syzkaller0: entered allmulticast mode [ 332.726620][T12029] veth0_to_hsr: mtu less than device minimum [ 332.748499][T12025] tipc: Resetting bearer [ 332.851810][T12033] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 332.914838][T12020] tipc: Resetting bearer [ 332.973003][T12020] tipc: Disabling bearer [ 333.294176][T12062] netlink: 'syz.3.1634': attribute type 10 has an invalid length. [ 333.502041][T12057] netlink: 'syz.1.1635': attribute type 12 has an invalid length. [ 333.522152][T12057] netlink: 'syz.1.1635': attribute type 29 has an invalid length. [ 333.547552][T12057] netlink: 'syz.1.1635': attribute type 2 has an invalid length. [ 333.565095][T12057] netlink: 'syz.1.1635': attribute type 3 has an invalid length. [ 334.099978][T12084] __nla_validate_parse: 5 callbacks suppressed [ 334.099996][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1645'. [ 334.173041][T12090] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 334.179925][T12090] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 334.216649][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 334.254288][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 334.459431][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 334.521116][T12106] macsec2: entered promiscuous mode [ 334.562786][T12106] bridge0: entered promiscuous mode [ 334.646568][T12106] macsec2: entered allmulticast mode [ 334.651996][T12106] bridge0: entered allmulticast mode [ 334.658805][T12106] bridge0: port 1(macsec2) entered blocking state [ 334.668478][T12106] bridge0: port 1(macsec2) entered disabled state [ 334.680695][T12106] bridge0: left allmulticast mode [ 334.688811][T12106] bridge0: left promiscuous mode [ 335.003738][T12130] netlink: 'syz.0.1659': attribute type 2 has an invalid length. [ 335.022938][T12130] netlink: 'syz.0.1659': attribute type 2 has an invalid length. [ 335.030927][T12130] netlink: 'syz.0.1659': attribute type 1 has an invalid length. [ 335.039359][T12129] netlink: 'syz.0.1659': attribute type 2 has an invalid length. [ 335.055222][T12129] netlink: 'syz.0.1659': attribute type 2 has an invalid length. [ 335.183350][T12137] netlink: ct family unspecified [ 335.214339][T12137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.535256][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1667'. [ 335.587703][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1667'. [ 335.766857][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 335.905430][T12184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.979116][T12192] syzkaller0: entered promiscuous mode [ 335.993649][T12192] syzkaller0: entered allmulticast mode [ 336.403656][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.411500][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.137482][T12258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.186822][T12258] bond0: (slave rose0): Enslaving as an active interface with an up link [ 337.288654][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1700'. [ 337.469696][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1702'. [ 338.419304][T12327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1716'. [ 338.475946][T12329] veth1_vlan: mtu less than device minimum [ 338.929483][T12339] bond5: entered promiscuous mode [ 338.935199][T12339] bond5: entered allmulticast mode [ 338.943301][T12339] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.287400][T12386] syzkaller0: entered promiscuous mode [ 339.336262][T12386] syzkaller0: entered allmulticast mode [ 339.642810][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 339.771219][T12408] validate_nla: 5 callbacks suppressed [ 339.771237][T12408] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 339.846978][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1736'. [ 339.860385][T12408] 8021q: adding VLAN 0 to HW filter on device bond12 [ 339.948291][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 340.409289][T12447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.425052][T12446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.846751][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 340.957625][T12478] gre2: entered promiscuous mode [ 340.988498][T12478] gre2: entered allmulticast mode [ 340.990431][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1758'. [ 341.043849][T12480] gre2: entered promiscuous mode [ 341.067181][T12480] gre2: entered allmulticast mode [ 341.127852][T12500] xt_ecn: cannot match TCP bits for non-tcp packets [ 341.192969][T12502] 8021q: VLANs not supported on sit0 [ 341.214108][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1760'. [ 341.390168][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 341.401877][T12517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1767'. [ 341.411682][T12517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1767'. [ 341.438798][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 341.774736][T12538] netlink: 'syz.4.1773': attribute type 64 has an invalid length. [ 341.870361][T12541] x_tables: duplicate underflow at hook 4 [ 342.113471][T12552] netlink: 'syz.0.1775': attribute type 11 has an invalid length. [ 342.175888][T12556] netlink: 'syz.3.1779': attribute type 13 has an invalid length. [ 342.201618][T12556] ip6gretap0: refused to change device tx_queue_len [ 342.224971][T12556] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 342.287771][T12566] syz_tun: entered allmulticast mode [ 342.312641][T12566] pimreg: entered allmulticast mode [ 342.413156][T12563] syz_tun: left allmulticast mode [ 343.361103][T12618] netlink: 'syz.3.1795': attribute type 39 has an invalid length. [ 344.306162][T12660] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 344.490576][T12670] veth1_to_bond: entered allmulticast mode [ 344.619631][T12684] bond4: (slave lo): Releasing backup interface [ 344.655566][T12684] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 344.701850][T12690] netlink: 'syz.4.1816': attribute type 10 has an invalid length. [ 344.719326][T12684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.740251][T12685] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.759303][T12668] veth1_to_bond: left allmulticast mode [ 345.098695][T12714] __nla_validate_parse: 12 callbacks suppressed [ 345.098716][T12714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1823'. [ 345.135798][T12714] ip6gre1: entered promiscuous mode [ 345.146693][T12714] ip6gre1: entered allmulticast mode [ 345.450415][T12726] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 345.478803][T12726] netlink: 'syz.2.1828': attribute type 2 has an invalid length. [ 345.513806][T12729] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 345.528722][T12723] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 345.653373][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'. [ 345.677725][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1831'. [ 345.751924][T12745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1833'. [ 345.841553][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1833'. [ 346.283344][T12776] nbd: must specify a device to reconfigure [ 346.301396][T12776] netlink: 'syz.1.1841': attribute type 9 has an invalid length. [ 346.571630][T12782] netlink: 'syz.4.1843': attribute type 4 has an invalid length. [ 346.581604][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1843'. [ 346.612989][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 346.623832][T12782] netlink: 'syz.4.1843': attribute type 8 has an invalid length. [ 346.648609][T12788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1845'. [ 346.668068][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 346.873413][T12803] syzkaller1: entered promiscuous mode [ 346.902807][T12803] syzkaller1: entered allmulticast mode [ 347.245638][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1856'. [ 347.323477][T12825] syzkaller0: entered promiscuous mode [ 347.392054][T12825] syzkaller0: entered allmulticast mode [ 347.811905][T12854] can: request_module (can-proto-0) failed. [ 347.860534][T12860] tipc: Started in network mode [ 347.870727][T12860] tipc: Node identity a616703f832c, cluster identity 4711 [ 347.900938][T12860] tipc: Enabled bearer , priority 0 [ 347.918270][T12864] syzkaller0: entered promiscuous mode [ 347.934094][T12864] syzkaller0: entered allmulticast mode [ 347.955169][T12861] tipc: Enabling of bearer rejected, already enabled [ 347.978033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.058427][T12861] tipc: Resetting bearer [ 348.138017][T12861] tipc: Disabling bearer [ 348.191615][ T30] audit: type=1800 audit(1762765250.261:5): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1868" name="memory.events" dev="tmpfs" ino=1941 res=0 errno=0 [ 348.459680][T12894] macvtap1: entered allmulticast mode [ 348.470940][T12894] veth0_macvtap: entered allmulticast mode [ 349.102218][T12937] netlink: 'syz.0.1887': attribute type 16 has an invalid length. [ 349.133165][T12937] netlink: 'syz.0.1887': attribute type 17 has an invalid length. [ 349.171317][T12930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.217806][T12937] bond0: left allmulticast mode [ 349.222961][T12937] bond4: left allmulticast mode [ 349.238922][T12937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.428932][T12949] vlan0: entered allmulticast mode [ 349.434136][T12949] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 349.489783][T12951] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 349.789796][T12964] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 349.853908][T12964] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20004 [ 349.882831][T12969] sctp: [Deprecated]: syz.0.1894 (pid 12969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.882831][T12969] Use struct sctp_sack_info instead [ 350.131641][T12979] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 350.345340][T12995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.409901][T12979] bond6: entered promiscuous mode [ 350.415521][T12979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.431795][T12999] netlink: 'syz.0.1901': attribute type 6 has an invalid length. [ 350.456058][T12992] validate_nla: 1 callbacks suppressed [ 350.456073][T12992] netlink: 'syz.4.1899': attribute type 3 has an invalid length. [ 350.727217][T13006] sit0: entered promiscuous mode [ 350.891078][T13015] __nla_validate_parse: 5 callbacks suppressed [ 350.891099][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'. [ 351.227626][T13019] syzkaller0: entered allmulticast mode [ 351.237134][T13032] tipc: Enabling of bearer rejected, failed to enable media [ 351.454023][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 352.386411][T13041] veth0: entered promiscuous mode [ 352.402598][T13046] veth0: left promiscuous mode [ 352.603205][T13059] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 352.635493][T13059] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20003 [ 352.711155][T13067] netlink: 'syz.4.1923': attribute type 10 has an invalid length. [ 352.768080][T13077] netlink: 'syz.4.1923': attribute type 10 has an invalid length. [ 353.113058][T13102] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1928'. [ 353.144280][T13104] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1925'. [ 353.153725][T13104] openvswitch: netlink: Missing key (keys=40, expected=100) [ 353.178655][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 353.285307][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.455576][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.564174][T13127] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 353.597269][T13128] tipc: Enabled bearer , priority 0 [ 353.610982][T13124] syzkaller0: entered promiscuous mode [ 353.620129][T13124] syzkaller0: entered allmulticast mode [ 353.695553][T13125] tipc: Resetting bearer [ 353.790051][T13125] tipc: Disabling bearer [ 353.812362][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 354.255307][T13166] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1944'. [ 354.346141][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1946'. [ 354.359894][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1946'. [ 354.492001][T13184] netlink: 'syz.0.1950': attribute type 29 has an invalid length. [ 354.722674][T13198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1952'. [ 354.943473][T13220] netlink: 'syz.3.1958': attribute type 2 has an invalid length. [ 355.175522][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 356.082764][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.122364][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.133773][T13290] __nla_validate_parse: 6 callbacks suppressed [ 356.133793][T13290] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1982'. [ 356.252544][T13299] netlink: 'syz.2.1983': attribute type 16 has an invalid length. [ 356.278304][T13299] netlink: 'syz.2.1983': attribute type 17 has an invalid length. [ 356.356735][T13299] tunl0: left promiscuous mode [ 356.373708][T13299] erspan0: left promiscuous mode [ 356.380679][T13299] erspan0: left allmulticast mode [ 356.416814][T13299] bridge0: port 3(dummy0) entered blocking state [ 356.423396][T13299] bridge0: port 3(dummy0) entered forwarding state [ 356.458425][T13299] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.465780][T13299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.518293][T13299] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.525574][T13299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.560987][T13319] netlink: 'syz.4.1989': attribute type 28 has an invalid length. [ 356.569259][T13319] netlink: 'syz.4.1989': attribute type 3 has an invalid length. [ 356.578074][T13319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1989'. [ 356.607090][T13299] A link change request failed with some changes committed already. Interface . may have been left with an inconsistent configuration, please check. [ 356.733932][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'. [ 356.792733][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'. [ 356.928693][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1991'. [ 358.643062][T13381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2003'. [ 358.728121][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 358.778169][T13390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2007'. [ 358.790484][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 358.946475][T13394] nbd2: detected capacity change from 0 to 127 [ 358.970642][T13402] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 359.392231][T13426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2015'. [ 359.414765][T13426] team0: No ports can be present during mode change [ 359.460719][ T5834] block nbd2: Receive control failed (result -104) [ 359.526141][T13428] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 359.625723][T13428] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.646400][T13429] bond7: (slave gretap2): making interface the new active one [ 359.686118][T13429] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 359.799412][T13441] syzkaller0: entered promiscuous mode [ 359.805132][T13441] syzkaller0: entered allmulticast mode [ 359.834023][T13444] sctp: [Deprecated]: syz.0.2022 (pid 13444) Use of int in maxseg socket option. [ 359.834023][T13444] Use struct sctp_assoc_value instead [ 360.106374][T13459] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 360.174024][T13461] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 360.301141][T13463] xt_ecn: cannot match TCP bits for non-tcp packets [ 360.500190][T13471] ipt_REJECT: TCP_RESET invalid for non-tcp [ 361.172672][T13509] geneve4: entered promiscuous mode [ 361.313430][T13519] __nla_validate_parse: 5 callbacks suppressed [ 361.313453][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 361.499022][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 361.620024][T13536] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 [ 361.721588][T13544] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2054'. [ 361.789604][T13554] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2056'. [ 361.839125][T13554] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2056'. [ 361.858792][T13558] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2059'. [ 361.869930][T13561] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2058'. [ 361.878696][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'. [ 361.891634][T13561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2058'. [ 362.440448][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 362.467772][T13602] nbd: must specify at least one socket [ 363.034518][T13641] netlink: 'syz.2.2077': attribute type 21 has an invalid length. [ 363.059231][T13641] netlink: 'syz.2.2077': attribute type 22 has an invalid length. [ 363.073075][T13641] netlink: 'syz.2.2077': attribute type 23 has an invalid length. [ 363.081733][T13641] netlink: 'syz.2.2077': attribute type 25 has an invalid length. [ 363.090255][T13641] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2077'. [ 363.271354][T13656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.495839][T13673] smc: net device gre0 applied user defined pnetid SYZ1 [ 363.503800][T13673] smc: net device gre0 erased user defined pnetid SYZ1 [ 363.545647][T13676] xt_TPROXY: Can be used only with -p tcp or -p udp [ 363.566991][T13677] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 363.598100][T13677] netlink: 'syz.4.2085': attribute type 11 has an invalid length. [ 363.716943][T13685] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 363.743037][T13685] netlink: 'syz.0.2087': attribute type 3 has an invalid length. [ 363.786580][T13685] NCSI netlink: No device for ifindex 813332851 [ 363.838907][T13693] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 364.108382][T13699] syzkaller0: entered promiscuous mode [ 364.128827][T13699] syzkaller0: entered allmulticast mode [ 364.635395][T13728] netlink: 'syz.4.2100': attribute type 13 has an invalid length. [ 365.003457][T13762] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 365.013024][T13762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.109552][T13752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.207591][T13772] netlink: 'syz.0.2114': attribute type 1 has an invalid length. [ 365.239753][T13775] syzkaller1: entered promiscuous mode [ 365.245839][T13775] syzkaller1: entered allmulticast mode [ 365.380403][T13782] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 365.408458][T13783] ipvlan0: entered promiscuous mode [ 366.287483][T13830] openvswitch: netlink: IP tunnel dst address not specified [ 366.433190][T13842] Bluetooth: MGMT ver 1.23 [ 366.787035][T13869] __nla_validate_parse: 7 callbacks suppressed [ 366.787055][T13869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2141'. [ 367.092062][T13882] : renamed from veth0_vlan (while UP) [ 367.099061][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'. [ 367.180558][T13878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.230286][T13878] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 367.262846][T13878] bond4: (slave macvlan2): Enslaving as a backup interface with a down link [ 367.421035][T13891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 367.530219][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 368.059642][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 368.085098][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2156'. [ 368.121821][T13913] geneve2: entered promiscuous mode [ 368.143972][T13913] geneve2: entered allmulticast mode [ 368.314122][T13932] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2161'. [ 368.323836][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2160'. [ 368.429671][T13935] bridge8: port 1(veth13) entered blocking state [ 368.450131][T13935] bridge8: port 1(veth13) entered disabled state [ 368.470115][T13935] veth13: entered allmulticast mode [ 368.481864][T13935] veth13: entered promiscuous mode [ 368.512597][T13944] validate_nla: 3 callbacks suppressed [ 368.512616][T13944] netlink: 'syz.3.2165': attribute type 21 has an invalid length. [ 368.547257][T13933] bridge8: port 2(veth15) entered blocking state [ 368.564033][T13933] bridge8: port 2(veth15) entered disabled state [ 368.582850][T13933] veth15: entered allmulticast mode [ 368.597618][T13933] veth15: entered promiscuous mode [ 368.782762][T13953] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2167'. [ 368.805241][T13952] ip6tnl0: Caught tx_queue_len zero misconfig [ 368.811432][T13952] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2169'. [ 368.968306][T13962] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 369.176559][T13968] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 369.321315][T13986] netlink: 'syz.1.2175': attribute type 10 has an invalid length. [ 369.363949][T13986] syzkaller0: entered promiscuous mode [ 369.375708][T13986] syzkaller0: entered allmulticast mode [ 369.423535][T13991] lo: Caught tx_queue_len zero misconfig [ 370.307033][T14002] xt_TCPMSS: Only works on TCP SYN packets [ 370.645321][T14017] sctp: [Deprecated]: syz.4.2183 (pid 14017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.645321][T14017] Use struct sctp_sack_info instead [ 371.695623][T14027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.070831][T14056] __nla_validate_parse: 72 callbacks suppressed [ 372.070851][T14056] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2195'. [ 372.135102][T14061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.162868][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2195'. [ 372.205019][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2195'. [ 372.461461][T14065] tipc: Enabling of bearer rejected, failed to enable media [ 372.528047][T14067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2199'. [ 372.710843][T14075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.732248][T14077] tipc: Enabled bearer , priority 0 [ 372.745631][T14077] syzkaller0: entered promiscuous mode [ 372.751157][T14077] syzkaller0: entered allmulticast mode [ 372.799962][T14077] tipc: Resetting bearer [ 372.826412][T14076] tipc: Resetting bearer [ 372.865743][T14076] tipc: Disabling bearer [ 372.959947][T14075] netlink: 'syz.4.2201': attribute type 6 has an invalid length. [ 373.292130][T14093] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 373.304783][T14093] netlink: 'syz.2.2206': attribute type 2 has an invalid length. [ 373.456245][T14100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.471491][T14100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.601788][T14103] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 373.616178][T14106] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2210'. [ 373.745665][T14108] netlink: 'syz.2.2211': attribute type 4 has an invalid length. [ 373.775948][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 373.804805][T14108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2211'. [ 373.979366][T14117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2214'. [ 374.086085][T14117] netlink: 'syz.4.2214': attribute type 3 has an invalid length. [ 375.120593][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2229'. [ 375.797588][T14190] netlink: 'syz.4.2232': attribute type 64 has an invalid length. [ 375.823011][T14190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2232'. [ 375.859949][T14191] netlink: 'syz.4.2232': attribute type 64 has an invalid length. [ 378.148221][T14175] __nla_validate_parse: 1 callbacks suppressed [ 378.148239][T14175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2229'. [ 378.352822][T14202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'. [ 378.573970][T14216] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 378.593038][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 378.611657][T14216] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 379.022247][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 379.101692][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2247'. [ 379.154619][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2247'. [ 379.163771][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2247'. [ 379.247007][T14246] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2247'. [ 379.292951][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2247'. [ 379.628697][T14278] bond0: Caught tx_queue_len zero misconfig [ 380.237417][T14311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2262'. [ 380.294329][T14315] tipc: Enabled bearer , priority 0 [ 380.318042][T14316] syz.0.2263 (14316) used obsolete PPPIOCDETACH ioctl [ 380.329633][T14315] syzkaller0: entered promiscuous mode [ 380.344750][T14315] syzkaller0: entered allmulticast mode [ 380.390082][T14315] tipc: Resetting bearer [ 380.405408][T14313] tipc: Resetting bearer [ 380.443160][T14313] tipc: Disabling bearer [ 380.500146][T14325] tipc: Enabled bearer , priority 0 [ 380.508202][T14325] syzkaller0: entered promiscuous mode [ 380.513862][T14325] syzkaller0: entered allmulticast mode [ 380.524960][T14325] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 380.603721][T14325] tipc: Resetting bearer [ 380.615899][T14324] tipc: Resetting bearer [ 380.675650][T14324] tipc: Disabling bearer [ 381.012672][T14345] tipc: Enabled bearer , priority 0 [ 381.029557][T14345] syzkaller0: entered promiscuous mode [ 381.069555][T14345] syzkaller0: entered allmulticast mode [ 381.092051][T14357] ipt_ECN: cannot use operation on non-tcp rule [ 381.114079][T14344] tipc: Resetting bearer [ 381.119642][T14361] ipt_ECN: cannot use operation on non-tcp rule [ 381.145663][T14357] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 381.318128][T14344] tipc: Disabling bearer [ 381.404173][T14376] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 381.639094][T14388] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 381.661304][T14393] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 381.662966][T14380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.801513][T14403] netlink: 'syz.1.2281': attribute type 3 has an invalid length. [ 382.697513][T14401] geneve3: entered promiscuous mode [ 382.702807][T14401] geneve3: entered allmulticast mode [ 382.887467][T14423] bridge_slave_0: entered promiscuous mode [ 382.926403][T14429] netlink: 'syz.2.2292': attribute type 5 has an invalid length. [ 383.048770][T14436] SET target dimension over the limit! [ 383.058507][T14425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.105459][T14425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.129241][T14425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 383.220832][T14425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.267389][T14425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.278384][T14425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 383.446575][T14425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.469856][T14425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.493089][T14425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 383.638110][T14425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.671899][T14425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.686479][T14465] __nla_validate_parse: 7 callbacks suppressed [ 383.686499][T14465] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2302'. [ 383.719733][T14425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 383.834960][T14472] tipc: New replicast peer: 255.255.255.255 [ 383.842256][T14472] tipc: Enabled bearer , priority 10 [ 383.942424][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 383.951667][ T8365] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.971751][ T8365] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.003699][ T8365] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.029524][ T8365] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.046002][T14482] netlink: 'syz.1.2306': attribute type 32 has an invalid length. [ 384.055286][ T8365] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.084321][ T8365] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.151122][ T8365] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.180700][ T8365] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.200252][ T8365] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.263823][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.325745][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.334942][ T50] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.598836][T14498] netlink: 'syz.0.2310': attribute type 4 has an invalid length. [ 384.677649][T14501] netlink: 'syz.0.2310': attribute type 4 has an invalid length. [ 384.865009][T14515] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2313'. [ 384.957026][ T5831] tipc: Node number set to 624586815 [ 385.049543][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 385.752009][T14556] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 385.829809][T14556] bond8 (unregistering): Released all slaves [ 385.935035][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2326'. [ 386.037394][ T9] IPVS: starting estimator thread 0... [ 386.081237][T14581] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 386.135892][T14584] IPVS: using max 25 ests per chain, 60000 per kthread [ 386.181784][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 386.324456][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2332'. [ 386.334292][T14591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2332'. [ 386.407966][T14592] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 386.477551][T14603] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 386.524232][T14605] netlink: 'syz.1.2335': attribute type 10 has an invalid length. [ 386.550350][T14605] veth1_macvtap: left promiscuous mode [ 386.681216][T14608] netlink: 'syz.4.2336': attribute type 12 has an invalid length. [ 386.725075][T14608] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2336'. [ 386.752153][T14616] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2337'. [ 386.920602][T14621] netlink: 'syz.0.2339': attribute type 5 has an invalid length. [ 387.381089][T14640] tipc: Enabled bearer , priority 10 [ 387.413203][T14649] wg1: entered promiscuous mode [ 387.419141][T14649] wg1: entered allmulticast mode [ 387.746110][T14669] netlink: 'syz.3.2353': attribute type 1 has an invalid length. [ 387.872854][T14676] netlink: 'syz.1.2355': attribute type 11 has an invalid length. [ 387.883413][T14674] gretap2: entered promiscuous mode [ 387.911091][T14674] bond13: (slave gretap2): making interface the new active one [ 387.944222][T14674] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 388.165598][T14700] lo: entered allmulticast mode [ 388.326159][T14714] lo: entered allmulticast mode [ 388.400833][T14719] syzkaller0: entered allmulticast mode [ 389.012444][T14765] bond0: entered allmulticast mode [ 389.045787][T14765] bond_slave_0: entered allmulticast mode [ 389.069923][T14765] bond_slave_1: entered allmulticast mode [ 389.374464][T14789] gretap0: entered promiscuous mode [ 389.384903][T14792] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 389.393361][T14789] vlan3: entered promiscuous mode [ 389.586132][ T95] block nbd2: Possible stuck request ffff8880254a0000: control (read@0,1024B). Runtime 30 seconds [ 389.599830][ T95] block nbd2: Possible stuck request ffff8880254a01c0: control (read@1024,1024B). Runtime 30 seconds [ 389.612060][ T95] block nbd2: Possible stuck request ffff8880254a0380: control (read@2048,1024B). Runtime 30 seconds [ 389.623467][ T95] block nbd2: Possible stuck request ffff8880254a0540: control (read@3072,1024B). Runtime 30 seconds [ 389.828434][T14813] __nla_validate_parse: 6 callbacks suppressed [ 389.828455][T14813] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2396'. [ 389.937448][T14819] IPVS: length: 24 != 408 [ 389.951175][T14813] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2396'. [ 390.233663][T14813] bond0 (unregistering): left promiscuous mode [ 390.240475][T14813] bond_slave_0: left promiscuous mode [ 390.247290][T14813] bond_slave_1: left promiscuous mode [ 390.257041][T14813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.267133][T14813] bond_slave_0: left allmulticast mode [ 390.277994][T14813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.288306][T14813] bond_slave_1: left allmulticast mode [ 390.298761][T14813] bond0 (unregistering): Released all slaves [ 390.600585][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 390.635129][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 390.651757][T14835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2402'. [ 390.876595][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 391.092934][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 391.127988][T14867] syzkaller0: entered promiscuous mode [ 391.133646][T14867] syzkaller0: entered allmulticast mode [ 391.147963][T14867] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 391.322587][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2417'. [ 391.502547][T14897] syzkaller0: entered promiscuous mode [ 391.508526][T14897] syzkaller0: entered allmulticast mode [ 391.518157][T14898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2422'. [ 391.518160][T14903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2422'. [ 391.719460][T14921] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 391.841791][T14927] tipc: New replicast peer: 255.255.255.255 [ 391.851189][T14927] tipc: Enabled bearer , priority 10 [ 392.188406][T14948] xt_hashlimit: size too large, truncated to 1048576 [ 392.224097][T14948] warn_alloc: 1 callbacks suppressed [ 392.224114][T14948] syz.3.2436: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 392.277230][T14948] CPU: 1 UID: 0 PID: 14948 Comm: syz.3.2436 Not tainted syzkaller #0 PREEMPT(full) [ 392.277273][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 392.277291][T14948] Call Trace: [ 392.277299][T14948] [ 392.277307][T14948] dump_stack_lvl+0x189/0x250 [ 392.277343][T14948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.277371][T14948] ? __pfx__printk+0x10/0x10 [ 392.277392][T14948] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 392.277420][T14948] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 392.277450][T14948] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 392.277480][T14948] warn_alloc+0x214/0x310 [ 392.277514][T14948] ? __pfx_warn_alloc+0x10/0x10 [ 392.277553][T14948] ? __get_vm_area_node+0x28f/0x300 [ 392.277582][T14948] ? htable_create+0x101/0x7a0 [ 392.277614][T14948] __vmalloc_node_range_noprof+0x690/0x12d0 [ 392.277667][T14948] ? alloc_pages_mpol+0x3cd/0x4a0 [ 392.277690][T14948] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.277723][T14948] ? rcu_is_watching+0x15/0xb0 [ 392.277746][T14948] ? htable_create+0x101/0x7a0 [ 392.277772][T14948] __kvmalloc_node_noprof+0x674/0x910 [ 392.277803][T14948] ? htable_create+0x101/0x7a0 [ 392.277825][T14948] ? hashlimit_pernet+0x23/0x240 [ 392.277850][T14948] ? hashlimit_pernet+0x23/0x240 [ 392.277874][T14948] ? hashlimit_pernet+0x23/0x240 [ 392.277906][T14948] htable_create+0x101/0x7a0 [ 392.277939][T14948] hashlimit_mt_check_common+0x719/0xa10 [ 392.277975][T14948] xt_check_match+0x3d1/0xab0 [ 392.278007][T14948] ? __pfx_xt_check_match+0x10/0x10 [ 392.278053][T14948] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 392.278096][T14948] ? xt_find_match+0x1f7/0x250 [ 392.278127][T14948] translate_table+0x1553/0x2040 [ 392.278184][T14948] ? __pfx_translate_table+0x10/0x10 [ 392.278225][T14948] ? __might_fault+0xb0/0x130 [ 392.278277][T14948] ? _copy_from_user+0x94/0xb0 [ 392.278310][T14948] do_ip6t_set_ctl+0x970/0xce0 [ 392.278347][T14948] ? rcu_is_watching+0x15/0xb0 [ 392.278371][T14948] ? trace_contention_end+0x39/0x120 [ 392.278397][T14948] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 392.278453][T14948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 392.278499][T14948] ? __lock_acquire+0xab9/0xd20 [ 392.278524][T14948] nf_setsockopt+0x26f/0x290 [ 392.278558][T14948] rawv6_setsockopt+0x23b/0x5b0 [ 392.278584][T14948] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 392.278604][T14948] ? aa_sock_opt_perm+0xff/0x1b0 [ 392.278649][T14948] ? sock_common_setsockopt+0x36/0xc0 [ 392.278679][T14948] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 392.278711][T14948] do_sock_setsockopt+0x17c/0x1b0 [ 392.278738][T14948] __x64_sys_setsockopt+0x13f/0x1b0 [ 392.278765][T14948] do_syscall_64+0xfa/0xfa0 [ 392.278794][T14948] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.278823][T14948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.278844][T14948] ? clear_bhb_loop+0x60/0xb0 [ 392.278868][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.278889][T14948] RIP: 0033:0x7ff2b778f6c9 [ 392.278908][T14948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.278925][T14948] RSP: 002b:00007ff2b854c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.278947][T14948] RAX: ffffffffffffffda RBX: 00007ff2b79e5fa0 RCX: 00007ff2b778f6c9 [ 392.278996][T14948] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000086 [ 392.279010][T14948] RBP: 00007ff2b7811f91 R08: 0000000000000528 R09: 0000000000000000 [ 392.279023][T14948] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 392.279036][T14948] R13: 00007ff2b79e6038 R14: 00007ff2b79e5fa0 R15: 00007ffffc7162a8 [ 392.279074][T14948] [ 392.281525][T14948] Mem-Info: [ 392.657814][T14948] active_anon:4801 inactive_anon:0 isolated_anon:0 [ 392.657814][T14948] active_file:2568 inactive_file:39954 isolated_file:0 [ 392.657814][T14948] unevictable:768 dirty:51 writeback:0 [ 392.657814][T14948] slab_reclaimable:11871 slab_unreclaimable:121373 [ 392.657814][T14948] mapped:29169 shmem:1360 pagetables:1625 [ 392.657814][T14948] sec_pagetables:0 bounce:0 [ 392.657814][T14948] kernel_misc_reclaimable:0 [ 392.657814][T14948] free:1308013 free_pcp:16320 free_cma:0 [ 392.707470][T14948] Node 0 active_anon:19204kB inactive_anon:0kB active_file:10272kB inactive_file:159612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116676kB dirty:204kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12996kB pagetables:6344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.741954][T14948] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.795041][T14948] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.828329][T14948] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 392.835998][T14948] Node 0 DMA32 free:1326232kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19304kB inactive_anon:0kB active_file:10272kB inactive_file:159612kB unevictable:1536kB writepending:204kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:47956kB local_pcp:26072kB free_cma:0kB [ 392.871844][T14948] lowmem_reserve[]: 0 0 0 0 0 [ 392.877083][T14948] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.925193][T14948] lowmem_reserve[]: 0 0 0 0 0 [ 392.930726][T14948] Node 1 Normal free:3890460kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17692kB local_pcp:8924kB free_cma:0kB [ 392.968325][T14948] lowmem_reserve[]: 0 0 0 0 0 [ 392.973109][T14948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.986515][T14948] Node 0 DMA32: 4658*4kB (UM) 1521*8kB (UM) 1352*16kB (UME) 2338*32kB (UM) 1845*64kB (UM) 859*128kB (UM) 414*256kB (UM) 293*512kB (UME) 161*1024kB (UM) 9*2048kB (UM) 130*4096kB (M) = 1327056kB [ 393.006507][T14948] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 393.027402][T14948] Node 1 Normal: 189*4kB (UE) 43*8kB (UME) 47*16kB (UME) 111*32kB (UME) 28*64kB (UM) 8*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890460kB [ 393.046865][T14948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.065257][T14948] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.081648][T14948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.097894][T14948] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.107693][T14948] 43879 total pagecache pages [ 393.112616][T14948] 0 pages in swap cache [ 393.117654][T14948] Free swap = 124996kB [ 393.164144][T14948] Total swap = 124996kB [ 393.175129][T14948] 2097051 pages RAM [ 393.179041][T14948] 0 pages HighMem/MovableOnly [ 393.187378][T14948] 424119 pages reserved [ 393.193969][T14948] 0 pages cma reserved [ 393.847122][T15025] netlink: 'syz.4.2454': attribute type 10 has an invalid length. [ 393.867192][T15025] veth1_macvtap: left promiscuous mode [ 393.972368][T15030] netlink: 'syz.4.2454': attribute type 10 has an invalid length. [ 394.268866][T15045] geneve3: entered promiscuous mode [ 394.280210][T15045] geneve3: entered allmulticast mode [ 394.423347][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.437125][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.916551][T15088] nbd: must specify an index to disconnect [ 394.962230][T15087] nbd: must specify an index to disconnect [ 394.979612][T15091] netlink: 'syz.4.2473': attribute type 6 has an invalid length. [ 395.160758][T15109] __nla_validate_parse: 12 callbacks suppressed [ 395.160778][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 395.465542][T15122] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 395.487936][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2478'. [ 395.497308][T15121] netlink: 'syz.3.2478': attribute type 7 has an invalid length. [ 395.510961][T15121] netlink: 'syz.3.2478': attribute type 8 has an invalid length. [ 395.533230][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 395.572132][T15121] team_slave_0: entered promiscuous mode [ 395.572769][T15129] netlink: 'syz.1.2482': attribute type 4 has an invalid length. [ 395.599102][T15121] batadv_slave_1: entered promiscuous mode [ 395.609070][T15121] team_slave_0: left promiscuous mode [ 395.619862][T15121] batadv_slave_1: left promiscuous mode [ 395.952139][T15163] netlink: 'syz.2.2487': attribute type 1 has an invalid length. [ 395.961211][T15158] netlink: 'syz.2.2487': attribute type 1 has an invalid length. [ 395.971403][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 396.048691][T15158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.077475][T15165] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.2489'. [ 396.087241][T15165] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.2489'. [ 396.199126][T15157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.218110][T15157] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 396.238086][T15157] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 396.399640][T15186] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2491'. [ 396.484509][T15192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2493'. [ 396.705318][T15197] team_slave_1: entered promiscuous mode [ 396.714640][T15197] team_slave_1: entered allmulticast mode [ 396.733779][T15197] netlink: 'syz.4.2494': attribute type 1 has an invalid length. [ 396.751934][T15197] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2494'. [ 397.326455][T15244] syzkaller0: entered promiscuous mode [ 397.340909][T15244] syzkaller0: entered allmulticast mode [ 397.533759][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'. [ 397.750982][T15265] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 397.762378][T15265] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 397.813690][T15270] bond14: (slave bridge0): Enslaving as an active interface with a down link [ 397.869812][T15265] bond14: (slave gretap3): making interface the new active one [ 397.880152][T15265] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 397.902021][T15275] macsec0: entered promiscuous mode [ 397.907662][T15275] macsec0: entered allmulticast mode [ 397.914349][T15275] bond8: (slave macsec0): Error -34 calling dev_set_mtu [ 398.446493][ T30] audit: type=1107 audit(1762765300.521:6): pid=15305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 398.550927][T15321] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 398.753632][T15322] kthread_run failed with err -4 [ 398.968935][T15346] validate_nla: 4 callbacks suppressed [ 398.968954][T15346] netlink: 'syz.4.2534': attribute type 3 has an invalid length. [ 399.279138][T15359] netlink: 'syz.2.2536': attribute type 6 has an invalid length. [ 399.306498][T15359] netlink: 'syz.2.2536': attribute type 1 has an invalid length. [ 399.956809][T15420] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 400.031460][T15420] 8021q: adding VLAN 0 to HW filter on device bond6 [ 400.051142][T15425] bond6: (slave geneve3): making interface the new active one [ 400.061669][T15425] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 400.427930][T15439] __nla_validate_parse: 18 callbacks suppressed [ 400.427953][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'. [ 401.097647][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 401.119278][T15474] netlink: 'syz.0.2569': attribute type 1 has an invalid length. [ 401.189042][T15478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2570'. [ 401.203719][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'. [ 401.216225][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'. [ 401.247542][T15482] netlink: 'syz.3.2571': attribute type 1 has an invalid length. [ 401.320112][T15483] openvswitch: netlink: nsh attribute has 2240 unknown bytes. [ 401.329583][T15483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.353883][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 401.363587][T15482] 8021q: adding VLAN 0 to HW filter on device bond15 [ 401.403698][T15482] veth7: entered promiscuous mode [ 401.413024][T15482] bond15: (slave veth7): Enslaving as an active interface with an up link [ 402.053630][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 402.118979][T15515] bond9: left promiscuous mode [ 402.124100][T15515] bond9: left allmulticast mode [ 402.136031][T15515] gretap1: left promiscuous mode [ 402.141049][T15515] gretap1: left allmulticast mode [ 402.150579][T15515] bond11: left promiscuous mode [ 402.156010][T15515] bond11: left allmulticast mode [ 402.175499][T15515] geneve3: left promiscuous mode [ 402.180498][T15515] geneve3: left allmulticast mode [ 402.189441][T15515] gretap2: left promiscuous mode [ 402.217084][T15515] veth7: left promiscuous mode [ 402.223418][ T50] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.244716][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.273139][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.328792][ T50] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.368581][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.403814][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.491944][T15538] can: request_module (can-proto-0) failed. [ 402.501260][T15542] bond9: ARP target 1.0.0.0 is already present [ 402.518198][T15542] bond9: option arp_ip_target: invalid value (1) [ 402.536718][T15542] bond9 (unregistering): Released all slaves [ 402.565471][ T50] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.582866][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.593322][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.634684][ T50] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.643689][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.663179][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.683586][T15558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'. [ 402.685348][T15560] syzkaller0: entered promiscuous mode [ 402.700027][T15560] syzkaller0: entered allmulticast mode [ 403.023613][T15578] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2599'. [ 403.138765][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'. [ 404.048747][T15646] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.071474][T15646] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.268005][T15666] sctp: [Deprecated]: syz.2.2623 (pid 15666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.268005][T15666] Use struct sctp_sack_info instead [ 404.401066][T15646] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.415653][T15646] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.599089][T15646] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.635147][T15646] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.887700][T15695] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.261508][T10088] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.270055][T10088] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.300593][ T50] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.309091][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.352729][ T50] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.366925][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.423880][T10088] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.437696][T10088] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.700377][T15750] netlink: 'syz.2.2645': attribute type 33 has an invalid length. [ 405.716133][T15752] __nla_validate_parse: 5 callbacks suppressed [ 405.716152][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2646'. [ 406.004477][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 406.069345][T15772] netlink: 'syz.3.2651': attribute type 10 has an invalid length. [ 406.079053][T15768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.096731][T15765] team_slave_0: invalid flags given to default FDB implementation [ 406.106796][T15767] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 406.131681][T15767] syzkaller0: entered promiscuous mode [ 406.147548][T15767] syzkaller0: entered allmulticast mode [ 406.233223][T15775] openvswitch: netlink: IP tunnel dst address not specified [ 406.709428][T15810] netlink: 'syz.0.2663': attribute type 83 has an invalid length. [ 406.748089][T15808] bond4: option lp_interval: invalid value (0) [ 406.754926][T15808] bond4: option lp_interval: allowed values 1 - 2147483647 [ 406.767850][T15808] bond4 (unregistering): Released all slaves [ 406.944129][T15826] tunl0: entered promiscuous mode [ 407.386862][T15853] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 407.471385][T15857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2678'. [ 407.560059][T15861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.723840][T15863] tunl0: left promiscuous mode [ 408.240670][T15863] bridge0: port 2(dummy0) entered disabled state [ 408.247355][T15863] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.406238][T15863] wg1: left promiscuous mode [ 408.416416][T15863] wg1: left allmulticast mode [ 409.038396][T15863] macvtap0: left allmulticast mode [ 409.058444][T15863] vlan3: left promiscuous mode [ 409.064216][T15863] geneve1: left promiscuous mode [ 409.071342][T15863] vlan3: left allmulticast mode [ 409.076766][T15863] geneve1: left allmulticast mode [ 409.082952][T15863] bond1: left promiscuous mode [ 409.089097][T15863] bond1: left allmulticast mode [ 409.115239][T15863] bridge3: left promiscuous mode [ 409.124605][T15863] bridge3: left allmulticast mode [ 409.135861][T15863] veth11: left allmulticast mode [ 409.142631][T15863] vlan4: left promiscuous mode [ 409.148319][T15863] vlan4: left allmulticast mode [ 409.156390][T15863] vlan6: left allmulticast mode [ 409.161300][T15863] hsr0: left allmulticast mode [ 409.166475][T15863] hsr_slave_0: left allmulticast mode [ 409.171963][T15863] hsr_slave_1: left allmulticast mode [ 409.393892][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.462348][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.491744][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.515117][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.610679][T15921] netlink: 'syz.0.2691': attribute type 63 has an invalid length. [ 409.805697][T15947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 409.844702][T15947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 409.885422][T15951] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2698'. [ 411.078552][ T5840] ------------[ cut here ]------------ [ 411.084272][ T5840] refcount_t: underflow; use-after-free. [ 411.091009][ T5840] WARNING: CPU: 0 PID: 5840 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 411.101530][ T5840] Modules linked in: [ 411.106058][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 411.116019][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.126980][ T5840] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 411.133485][ T5840] Code: 40 58 be 8b e8 c7 a5 f9 fc 90 0f 0b 90 90 eb d7 e8 bb 8b 36 fd c6 05 9b 7f dd 0a 01 90 48 c7 c7 a0 58 be 8b e8 a7 a5 f9 fc 90 <0f> 0b 90 90 eb b7 e8 9b 8b 36 fd c6 05 78 7f dd 0a 01 90 48 c7 c7 [ 411.153727][ T5840] RSP: 0018:ffffc90003f6f578 EFLAGS: 00010246 [ 411.160689][ T5840] RAX: e8111fe7f13ce600 RBX: 0000000000000003 RCX: ffff8880317f1e40 [ 411.169282][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 411.177860][ T5840] RBP: 0000000000000000 R08: ffffc90003f6f2a7 R09: 1ffff920007ede54 [ 411.186580][ T5840] R10: dffffc0000000000 R11: fffff520007ede55 R12: ffff888073baa000 [ 411.195154][ T5840] R13: ffff888058002460 R14: ffff888058002478 R15: dffffc0000000000 [ 411.203169][ T5840] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 411.212579][ T5840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.219770][ T5840] CR2: 00002000000012c0 CR3: 00000000742da000 CR4: 00000000003526f0 [ 411.228191][ T5840] Call Trace: [ 411.231480][ T5840] [ 411.234412][ T5840] klist_dec_and_del+0x3c7/0x3d0 [ 411.239866][ T5840] klist_remove+0x1bd/0x340 [ 411.244423][ T5840] ? __pfx_klist_children_put+0x10/0x10 [ 411.250412][ T5840] ? __pfx_klist_remove+0x10/0x10 [ 411.256364][ T5840] ? __pfx_kobject_move+0x10/0x10 [ 411.261687][ T5840] ? do_raw_spin_unlock+0x122/0x240 [ 411.267315][ T5840] ? get_device_parent+0x366/0x3a0 [ 411.272532][ T5840] device_move+0x193/0x700 [ 411.277431][ T5840] hci_conn_del_sysfs+0xb8/0x170 [ 411.282408][ T5840] hci_conn_del+0xc33/0x11b0 [ 411.287645][ T5840] hci_conn_hash_flush+0x191/0x230 [ 411.293051][ T5840] hci_dev_close_sync+0xaef/0x1330 [ 411.298600][ T5840] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 411.304235][ T5840] ? up_write+0x1c4/0x420 [ 411.309007][ T5840] hci_unregister_dev+0x21a/0x510 [ 411.314087][ T5840] vhci_release+0x152/0x1a0 [ 411.319681][ T5840] ? __pfx_vhci_release+0x10/0x10 [ 411.324827][ T5840] __fput+0x44c/0xa70 [ 411.328869][ T5840] task_work_run+0x1d4/0x260 [ 411.333491][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 411.339014][ T5840] ? do_exit+0x6b0/0x2300 [ 411.343388][ T5840] ? kmem_cache_free+0x19b/0x690 [ 411.348695][ T5840] do_exit+0x6b5/0x2300 [ 411.352890][ T5840] ? do_raw_spin_lock+0x121/0x290 [ 411.358048][ T5840] ? __pfx_do_exit+0x10/0x10 [ 411.362689][ T5840] do_group_exit+0x21c/0x2d0 [ 411.367387][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.372627][ T5840] get_signal+0x1285/0x1340 [ 411.377705][ T5840] arch_do_signal_or_restart+0xa0/0x790 [ 411.383328][ T5840] ? __pfx_get_timespec64+0x10/0x10 [ 411.388600][ T5840] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 411.394921][ T5840] ? exit_to_user_mode_loop+0x40/0x130 [ 411.400427][ T5840] exit_to_user_mode_loop+0x72/0x130 [ 411.406095][ T5840] do_syscall_64+0x2bd/0xfa0 [ 411.410723][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.416053][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.422145][ T5840] ? clear_bhb_loop+0x60/0xb0 [ 411.426900][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.432815][ T5840] RIP: 0033:0x7f8c201c1f85 [ 411.437587][ T5840] Code: Unable to access opcode bytes at 0x7f8c201c1f5b. [ 411.444703][ T5840] RSP: 002b:00007ffd30f4bbf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 411.453240][ T5840] RAX: 0000000000000000 RBX: 000000000000063c RCX: 00007f8c201c1f85 [ 411.461454][ T5840] RDX: 00007ffd30f4bc30 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.469748][ T5840] RBP: 00007ffd30f4bc9c R08: 0000000000000000 R09: 0000000000000000 [ 411.477842][ T5840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 411.485960][ T5840] R13: 00000000000927c0 R14: 00000000000641df R15: 00007ffd30f4bcf0 [ 411.493968][ T5840] [ 411.497787][ T5840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 411.505105][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 411.514589][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.524663][ T5840] Call Trace: [ 411.527967][ T5840] [ 411.530905][ T5840] dump_stack_lvl+0x99/0x250 [ 411.535513][ T5840] ? __asan_memcpy+0x40/0x70 [ 411.540115][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.545352][ T5840] ? __pfx__printk+0x10/0x10 [ 411.549961][ T5840] vpanic+0x237/0x6d0 [ 411.553960][ T5840] ? __pfx_vpanic+0x10/0x10 [ 411.558493][ T5840] panic+0xb9/0xc0 [ 411.562236][ T5840] ? __pfx_panic+0x10/0x10 [ 411.566678][ T5840] __warn+0x31b/0x4b0 [ 411.570670][ T5840] ? refcount_warn_saturate+0x11a/0x1d0 [ 411.576226][ T5840] ? refcount_warn_saturate+0x11a/0x1d0 [ 411.581870][ T5840] report_bug+0x2be/0x4f0 [ 411.586224][ T5840] ? refcount_warn_saturate+0x11a/0x1d0 [ 411.591788][ T5840] ? refcount_warn_saturate+0x11a/0x1d0 [ 411.597345][ T5840] ? refcount_warn_saturate+0x11c/0x1d0 [ 411.602898][ T5840] handle_bug+0x84/0x160 [ 411.607149][ T5840] exc_invalid_op+0x1a/0x50 [ 411.611659][ T5840] asm_exc_invalid_op+0x1a/0x20 [ 411.616517][ T5840] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 411.622686][ T5840] Code: 40 58 be 8b e8 c7 a5 f9 fc 90 0f 0b 90 90 eb d7 e8 bb 8b 36 fd c6 05 9b 7f dd 0a 01 90 48 c7 c7 a0 58 be 8b e8 a7 a5 f9 fc 90 <0f> 0b 90 90 eb b7 e8 9b 8b 36 fd c6 05 78 7f dd 0a 01 90 48 c7 c7 [ 411.642302][ T5840] RSP: 0018:ffffc90003f6f578 EFLAGS: 00010246 [ 411.648465][ T5840] RAX: e8111fe7f13ce600 RBX: 0000000000000003 RCX: ffff8880317f1e40 [ 411.656441][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 411.664415][ T5840] RBP: 0000000000000000 R08: ffffc90003f6f2a7 R09: 1ffff920007ede54 [ 411.672390][ T5840] R10: dffffc0000000000 R11: fffff520007ede55 R12: ffff888073baa000 [ 411.680369][ T5840] R13: ffff888058002460 R14: ffff888058002478 R15: dffffc0000000000 [ 411.688374][ T5840] ? refcount_warn_saturate+0x119/0x1d0 [ 411.693935][ T5840] klist_dec_and_del+0x3c7/0x3d0 [ 411.698894][ T5840] klist_remove+0x1bd/0x340 [ 411.703502][ T5840] ? __pfx_klist_children_put+0x10/0x10 [ 411.709092][ T5840] ? __pfx_klist_remove+0x10/0x10 [ 411.714134][ T5840] ? __pfx_kobject_move+0x10/0x10 [ 411.719171][ T5840] ? do_raw_spin_unlock+0x122/0x240 [ 411.724387][ T5840] ? get_device_parent+0x366/0x3a0 [ 411.729530][ T5840] device_move+0x193/0x700 [ 411.733962][ T5840] hci_conn_del_sysfs+0xb8/0x170 [ 411.738928][ T5840] hci_conn_del+0xc33/0x11b0 [ 411.743541][ T5840] hci_conn_hash_flush+0x191/0x230 [ 411.748662][ T5840] hci_dev_close_sync+0xaef/0x1330 [ 411.753798][ T5840] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 411.759356][ T5840] ? up_write+0x1c4/0x420 [ 411.763704][ T5840] hci_unregister_dev+0x21a/0x510 [ 411.768748][ T5840] vhci_release+0x152/0x1a0 [ 411.773273][ T5840] ? __pfx_vhci_release+0x10/0x10 [ 411.778309][ T5840] __fput+0x44c/0xa70 [ 411.782314][ T5840] task_work_run+0x1d4/0x260 [ 411.786931][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 411.792053][ T5840] ? do_exit+0x6b0/0x2300 [ 411.796477][ T5840] ? kmem_cache_free+0x19b/0x690 [ 411.801432][ T5840] do_exit+0x6b5/0x2300 [ 411.805609][ T5840] ? do_raw_spin_lock+0x121/0x290 [ 411.810649][ T5840] ? __pfx_do_exit+0x10/0x10 [ 411.815267][ T5840] do_group_exit+0x21c/0x2d0 [ 411.819869][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.825087][ T5840] get_signal+0x1285/0x1340 [ 411.829623][ T5840] arch_do_signal_or_restart+0xa0/0x790 [ 411.835213][ T5840] ? __pfx_get_timespec64+0x10/0x10 [ 411.840415][ T5840] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 411.846597][ T5840] ? exit_to_user_mode_loop+0x40/0x130 [ 411.852058][ T5840] exit_to_user_mode_loop+0x72/0x130 [ 411.857348][ T5840] do_syscall_64+0x2bd/0xfa0 [ 411.861951][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.867168][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.873240][ T5840] ? clear_bhb_loop+0x60/0xb0 [ 411.877926][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.883826][ T5840] RIP: 0033:0x7f8c201c1f85 [ 411.888244][ T5840] Code: Unable to access opcode bytes at 0x7f8c201c1f5b. [ 411.895260][ T5840] RSP: 002b:00007ffd30f4bbf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 411.903682][ T5840] RAX: 0000000000000000 RBX: 000000000000063c RCX: 00007f8c201c1f85 [ 411.911655][ T5840] RDX: 00007ffd30f4bc30 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.919629][ T5840] RBP: 00007ffd30f4bc9c R08: 0000000000000000 R09: 0000000000000000 [ 411.927601][ T5840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 411.935576][ T5840] R13: 00000000000927c0 R14: 00000000000641df R15: 00007ffd30f4bcf0 [ 411.943570][ T5840] [ 411.946965][ T5840] Kernel Offset: disabled [ 411.951290][ T5840] Rebooting in 86400 seconds..