last executing test programs: 6.649648612s ago: executing program 3 (id=1759): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x2, 0xff, 0x8, 0x200}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000092690252d1133cb90f500001000400f210ec27b01eb1180001000080000000000000636b69ae54425358a36eac2b8e4e2ebcf9578c4bb31c375a064ea46c0c2c3c627d646c367bb2d9bf9c6dd73a5c807fe660182c3f90609fbbf0d4185b4ddb7881466bc56ab0e5898189902b14bf3aa88e757f2d92458b46e1a093c7b8f65d0929e3c0c5c4cc29a8957d291ab55934b99c3e6a6b49a456e9f014e731e9292b9e719821bdde601f8836ad8872507d53bfdcd050acbae73fe17da77aa3cea16e12f89859", @ANYRESDEC=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={r0, &(0x7f00000004c0), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000080)="23dcd5f5552e346a9005c233f350b99c4a818c4ee8f4aa706374027e0d62fd4e479aa5f84d3381823cd767f37a3328aaef2897f0d2a37ea325b613a13454f27016f1776a9f79179e99cdc772655310d499fb72a9d2720768bf5b9e3988ac00a9e0d3b2055ed904a2853990533d9f8852e647e80f84fde0c9d21590b49fa81478e69c48cd6ee465f26adb93d19c5a983b1f658242268a63355eebfd9efa0f296b89be315b94599f14742ae397274ce9c52ca7ffc2827ecb397c79ccad52f36f69748b6ed253e41b6d5e63a2f12f13a6dd35943c183063e4b426316e8a2d1ccaaa9f552d985e3603336b1960b53accce06869f", &(0x7f0000000180)=""/240, &(0x7f0000000000)="92f1290ecbeae8d466c87d1ca4bec7b46444419e12695796b85a65581ff42a9b3fbe9a30fa1dcb4635c5426751685b282413fa994ef9cf7118fcbc2f7d6e7056", &(0x7f0000000280)='+', 0x3ff}, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 6.508930877s ago: executing program 3 (id=1760): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x9}, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x28011, r2, 0x1000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r9, {0x0, 0x300}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x12}, @TCA_PIE_TARGET={0x8, 0x1, 0xffff}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0xb}]}}]}, 0x50}, 0x1, 0x7a00}, 0x0) socket$tipc(0x1e, 0x2, 0x0) 6.389748668s ago: executing program 3 (id=1761): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@ringbuf_query, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000080)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xa, 0x200, 0x6}, 0x10, 0x7192, 0xffffffffffffffff, 0xa, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180)=[{0x1, 0x1, 0x8, 0x8}, {0x2, 0x5, 0xa, 0x8}, {0x3, 0x5, 0x5, 0x8}, {0x0, 0x2, 0xe, 0x2}, {0x1, 0x3, 0x8, 0x2}, {0x5, 0x5, 0xb, 0xc}, {0x5, 0x2, 0x8, 0x7}, {0x2, 0x4, 0x9}, {0x4, 0x1, 0xf, 0x5}, {0x5, 0x5, 0x7, 0x5}], 0x10, 0xf076, @void, @value}, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=0xffffffffffffffff, 0x4, 0x0, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup, r0, 0x2e, 0x0, r1, @void, @value, @void, @void, r3}, 0x20) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000540)={0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000580)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f00000005c0)='GPL\x00', 0x1, 0x5d, &(0x7f0000000600)=""/93, 0x41100, 0x10, '\x00', r4, 0x1c, r2, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xc, 0x7, 0x10000}, 0x10, 0x22fb1, r1, 0x1, 0x0, &(0x7f0000000700)=[{0x4, 0x2, 0x3, 0x8}], 0x10, 0x98d, @void, @value}, 0x94) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x57, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xe, &(0x7f0000000800)=@raw=[@call={0x85, 0x0, 0x0, 0x29}, @ldst={0x0, 0x2, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0xfffffffffffffff7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @generic={0x1, 0x8, 0x5}, @call={0x85, 0x0, 0x0, 0x74}, @call={0x85, 0x0, 0x0, 0x61}], &(0x7f0000000880)='GPL\x00', 0x0, 0x5f, &(0x7f00000008c0)=""/95, 0x41000, 0x0, '\x00', r4, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0xf, 0xa0, 0xffffb72d}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[r6, r1, r1], &(0x7f0000000a40)=[{0x2, 0x1, 0xf, 0x5}], 0x10, 0x1000, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b40)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000b80)={0x0, 0x800, 0x7fff}, 0x8) setsockopt$inet6_buf(r2, 0x29, 0xcc, &(0x7f0000000bc0)="3f41bc4994c4f69dfb1ffe74e92560cd5551384939e7a0a94635d8482c29d93d677413316ba2418621919ac6b13788b091d2f0d3a5ea89a2c38457a467e0527b239d49e4b835f3e2fa02e5a8f3af2e1e5bb6fd609b5823c468f2461c7a862aa667f3227c129d3d952d1e0b7df577759221620aeb98cedbdbe8bebe16fe2154d8bb58ee69c4f8b08e10ccbc02710d66f61108435baa66a2d0e1748f358b1bdbbcb6370be045052756aa62db3588eda9f76925d266fde8adb44b72a7ae0b5f", 0xbe) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000c80)={0x0, 0x46, 0xc, 0x2, 0x1, 0xfffffff8}, &(0x7f0000000cc0)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000d00)={r7, 0x2, 0x0, 0x8}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x7, 0x0, r6, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000e40)={r7, 0x48, &(0x7f0000000dc0)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x3, @private0, 0x7f}, @in6={0xa, 0x4e21, 0xf, @local, 0x263}]}, &(0x7f0000000e80)=0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r2, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r0}, 0x20) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r5) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xb8, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008848}, 0x4000005) sendmsg$nl_route(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getneigh={0x14, 0x1e, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) select(0x40, &(0x7f0000001240)={0x8000000000000000, 0x7fffffffffffffff, 0x3, 0x9, 0x6, 0x2, 0x6, 0xd72}, &(0x7f0000001280)={0x2, 0x10000, 0x10000, 0x1, 0x9, 0x80, 0xc02, 0x2}, &(0x7f00000012c0)={0x39, 0x90d4, 0x5, 0x80000001, 0x200, 0xfffffffffffffffc, 0x5, 0x9}, &(0x7f0000001300)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001540)={r8, &(0x7f0000001380)="fb567ca6b74af2e0acc9130180ad456cea20858e5c777f0937a3d3d57f0464ac5071cece67d793dfd9ccfe5744098cb191668898fef4c493c93e0851558912c089f676c6a8c253c8f7590c58621949b5a7ef6cdfdf509da54a1c1a57f9615e3c71410b2c78139454b41ee9ad12760686475dc180dfeae9941dc42d02b33746d9901950e27049b215aa944b4513fa6ae68b76543ad8d4d0736c", &(0x7f0000001440)=""/229}, 0x20) socketpair(0x3, 0x4, 0x80, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000015c0)={r10, 0x2, 0x1, 0x1}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r11) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r11, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xb4, r12, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xb4}}, 0x20040400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r2}, &(0x7f00000017c0), &(0x7f0000001800)=r1}, 0x20) 6.36077044s ago: executing program 3 (id=1763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 6.305829445s ago: executing program 3 (id=1764): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) 6.097573091s ago: executing program 3 (id=1766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff086dd", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r1, 0x852dd6c070cd7e4d, 0x70bd26}, 0x14}, 0x4, 0x700000000000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000200000000000000000000000100000000000000000000000c627bed20bf5023118dcd91ea67a1d4e280d580318d4fd1987a7b798bc88ee86cb77ea71ba58f339620606b7d6689183e4f0c229701add80a038d280c240b23e8f1b3f6cec47846ea3911770947e3b3f389d864b5b914d541f61966f045f94f5412b6a8f4b5c7ad442ee33fb749caa1f8b8b3529107ccdfbfb9cd6f5675703ce12048f82e4000000b07233c318203b8a66988e53ae4c9ad5ea352f2cbd5995696edba715aceab965eda494c39d4a86ba5f4726698ad0f2e0789d"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff086dd", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r1, 0x852dd6c070cd7e4d, 0x70bd26}, 0x14}, 0x4, 0x700000000000000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000200000000000000000000000100000000000000000000000c627bed20bf5023118dcd91ea67a1d4e280d580318d4fd1987a7b798bc88ee86cb77ea71ba58f339620606b7d6689183e4f0c229701add80a038d280c240b23e8f1b3f6cec47846ea3911770947e3b3f389d864b5b914d541f61966f045f94f5412b6a8f4b5c7ad442ee33fb749caa1f8b8b3529107ccdfbfb9cd6f5675703ce12048f82e4000000b07233c318203b8a66988e53ae4c9ad5ea352f2cbd5995696edba715aceab965eda494c39d4a86ba5f4726698ad0f2e0789d"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 5.644886553s ago: executing program 1 (id=1770): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r1, &(0x7f00000003c0)='@', 0x1, 0x8080, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0xfffffffffffffe45) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 5.505354741s ago: executing program 1 (id=1771): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000140)=0x2c) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x40}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x462, '\x00', r0, r1, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x10}]}}}]}, 0x44}}, 0x0) 5.27790726s ago: executing program 1 (id=1773): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz1\x00', {0x7}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000002"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000008}, 0x4014) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000000c0)={0x14, r7, 0x341, 0x70bd28, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) 4.335802344s ago: executing program 1 (id=1776): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, r1}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x160, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000140)="a3726b86f5cca1dea177835dc445ef6bdddb910e73baa0e5eea881b8ae46237b3f54726033db1e8afe0adf037fcac38f4381f90b53", 0x35}, {&(0x7f0000000180)="048c32b6713740868fb18db1063b0df937eb7b00908b62b0bd911d2890fb13a33bed591a44b10d1c17f48053bae464db57193b163a45cd4dcd8477dad5f5fd61ae2b4ed3a0526c7af786a0c5760a68f1993250822fc556b70f9904b432d9ab0820df18bd819ef32a1e63185a24111b211e42ab9f4f847e0749ff0b2c5b92ba25b3664a6461aca74abcb3df73be48ac83e55a60fa2f34168cacdd777a543c029edabfb0aed334c7e4ea8424007b42f8f8a62faf6829864b3eb4dfa11011efcfaf0f2f17450ee320819debe46df3ef6906d25532bcca27860f57ab08811130e0", 0xdf}, {&(0x7f0000000280)="91ce5fc13e5e72698c55201830f2b06cd5", 0x11}, {&(0x7f00000002c0)="bc4cd7c920d3c95ff0128d92ae2d48d1d44b06ef7e119ac2", 0x18}, {&(0x7f0000000300)="f4352df5f391e263c64171f3060b37db95b05500c220241184ab05f68f24805e2e8c7256b6ce6a3489545217160c6d5348251f991c40b8143c763e629217c30fea49ca650e63fcaa5af5c7d00af4f6f4e2499dfcb00895f91797ab07dada012f5e38", 0x62}, {&(0x7f0000000380)="50378f8673c9", 0x6}, {&(0x7f0000000440)="a15da72dc8f5ebab554233d56e49838b5521617aa5176fc4827814d8bbc751ae36b756b75da2a6193ff1db5a0aab6e532ebca7af2ca36f039d2dacbfad7dbe1a2284fb2fdd052078c98a1aadac95e9f6f7eb44b16b9d2d52933b9610d264b57df1e5a44b117727d8e565fea52ff193ea9c8e7f103a74a43976b22bf092f09a", 0xfffffe07}, {&(0x7f00000004c0)="371e8ceb8cc59d82d9c7af2061b713e46fe82ebd62c92f0fd6f116d1710594c13b887942a4283554cf4d373e94e5adae5ff2749af02dfe00a3921fbf96751329e0e73ab97a320dbf", 0x48}, {&(0x7f0000000540)="2d36a00a78324ca5e95cac84390e47caf6f0711b5042a1bb02a694f3ad370bfc02dd042ce16fe2da295e61c626163f28a71b7e16ee89797ca35522672b0fda2eaebed5d7bb98bd670ec23878d9ba0daa6446e43a816f341af884e9bc0919da4fc63043486908d9e722f95d29d8f68f8ce35776730dd46430cb969a21004506e4bf98df38642f9a7f", 0x88}], 0x9, &(0x7f00000006c0)=[@dstopts_2292={{0x38, 0x29, 0x4, {0xa, 0x3, '\x00', [@generic={0x2, 0x1b, "1038624b469e7b468db484c2dc79fa6cf332c45c3f2ee46e3c8824"}]}}}, @hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2626dc3e}}, @rthdr={{0x98, 0x29, 0x39, {0x3c, 0x10, 0x0, 0x0, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @empty, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @loopback]}}}], 0x100}}], 0x1, 0x4000000) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x81, 0x4000105, 0x9, 0x8001, 0x9]}, &(0x7f0000000400)=0x54) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 3.626476195s ago: executing program 4 (id=1777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.510726901s ago: executing program 4 (id=1778): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe00001a"], 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x8000000}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000001a00010000000000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="0400088008000300", @ANYRES32=0x0, @ANYBLOB="562010cf9901f939af0100000000000000c07737043a5a0670144f157ceba07c3442f4f64c4cd37c474496acd87eb17ca44233b4519ee5f7867f080d5fb238e298540a2b665684c198e1376205f0c16bd66ca959ff25c1a354363e5ac05f331def6c99bd033551aeff0fd0f5ddd3f60b7cd1686102a68a9f11f58f4c7f3785d31ad9b4e32f6bd1cbc5313bf0601258da9c8ba85995f1e49ce8a42b46ab8a8e146ae01824463bc178f2073a178572f1bf5d68953159"], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0xc061, 0x6, 0x528, 0x120, 0x3f0, 0x3f0, 0x120, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0x0, 0xff], [0xff, 0x0, 0xff, 0xffffffff], 'syzkaller1\x00', 'netpci0\x00', {0xff}, {}, 0x1, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0xffff, 0x0, 0x2}}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vlan0\x00', 'pimreg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x6}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8b04, &(0x7f0000000040)={'wlan1\x00'}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010004bffffffffffffffff007a000000", @ANYRES32=r14, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070007000000"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c00625c0f00030400"/20, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 3.290088201s ago: executing program 0 (id=1780): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x64}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffff01, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x1) mmap(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x1000009, 0x10, r0, 0x20a96000) 2.790082364s ago: executing program 0 (id=1781): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff2bbd7000", @ANYBLOB], 0x48}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_init_net_socket$ax25(0x3, 0x2, 0x8) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) (async) unshare(0x40600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000001480)=0x5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x3, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.640571936s ago: executing program 0 (id=1782): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1, 0x7, [0xe, 0x8, 0x8, 0x5, 0xde86, 0x10, 0x1]}, &(0x7f0000000080)=0x16) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x3187, 0x5, 0x8008, 0x0, 0x4, 0x100, 0x9, 0x40, r0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000240)=0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000005000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8a}, 0x50) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x3]}}]}}]}, 0x94}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRESDEC=r7, @ANYBLOB='\x00'/105], 0xd4}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r7) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x2c, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0x2}, {0x7, 0xffff}, {0x0, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xaaf3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd00001200000000000000605c4afd00303afefe80001a49a51e31b42634aff1800000000000000000000000000000000000000000000000010401907800007471690405ce00073cfffc000000000000000000000000000000fe800000e5"], 0x66) 2.562494848s ago: executing program 4 (id=1783): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) syz_emit_ethernet(0x146, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000001102c00fc000000000000000000000000000000fe8000000000000000000000000000aa06030003", @ANYRES32=0x41424344], 0x0) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x4}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, r2, 0x3}, 0xc) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x12, 0x100000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400130100000000000000000000000000b991bc1e339f9384ff6fdaea986b543807ebcba1fd86510aadf15d8bd4111f2a66d73c024521da998863e6f400415f10091eece67b7e5fcfc93c380d76eb6fd80ba47af83ef5b62186ce835f7be2bee3767ca1f13e7c820de1b2779e4ce2f9a9cb470c4eeed41bf64aecf007bc9a55a46b76a81043e998b335ad1abf69b5b860932e1370a627697dddf2d7df272e7e078fd59a850da47d4862e3494c684b065914120f23", @ANYRES32=0x0, @ANYBLOB="0800018004008180"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'sit0\x00'}}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1807000000000000000000000040000018112000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000d0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a1619012cbd7000fedbdf250200000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFINDEX(r12, 0x400454da, &(0x7f0000000080)=r11) 2.193508818s ago: executing program 2 (id=1785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = socket(0x2, 0x3, 0xff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="03000000594feac4"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES64, @ANYRESDEC], 0xc0}, 0x1, 0x0, 0x0, 0x40400c0}, 0x8c4) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001"], 0x1c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) socket$netlink(0x10, 0x3, 0xe) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000001e340000003400000005000000030000000000001103000000000000000000000000000004000000000000000001000004000000000000000002000000000000000000002e00"], 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25OPTRT(r12, 0x89e7, &(0x7f0000001c00)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x20}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0x6, 0x9, 0x800}}]}, {}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.491376029s ago: executing program 0 (id=1786): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e0, 0x20a, 0x278, 0x1e0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2a}, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x1, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@rc={0x1f, @none, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="c3", 0x1}]}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0x24, 0x0, &(0x7f000000bac0)) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x20, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x81, 0x8, 0x7, 0x1, 0x2}, @jmp={0x5, 0x0, 0x4, 0x6, 0xb, 0xffffffffffffffe0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x0, 0x0, 0x4, 0x0, 0x100, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, &(0x7f0000000340), 0x41100, 0x16, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x10, 0x7, 0xc0000}, 0x10, 0x17bb0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x99, @void, @value}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r9, 0x0, 0x0, 0x300, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r10, &(0x7f00000003c0)='@', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={r12, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) (async) close(r8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r4}, 0x10) 1.365717135s ago: executing program 4 (id=1787): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x40000000015, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x0, 0x40, 0x18, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7817, 0x8, 0x8, 0x4}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f000001a440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x8, [@func={0xc, 0x0, 0x0, 0xc, 0x3}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x400}, {0x6, 0x7}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0xec2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x2}}]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x2e, 0x2e]}}, &(0x7f0000019440)=""/4096, 0x6c, 0x1000, 0x1, 0x4, 0x10000, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000001a7c0)={r2, 0xe0, &(0x7f000001a6c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f000001a500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f000001a540)=[0x0, 0x0], &(0x7f000001a580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f000001a5c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f000001a600), &(0x7f000001a640), 0x8, 0xe2, 0x8, 0x8, &(0x7f000001a680)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000001aa40)={0x16, 0x9, &(0x7f000001a800)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x29}, @alu={0x4, 0x1, 0xc, 0x0, 0x2, 0x10, 0xffffffffffffffff}], &(0x7f000001a880)='GPL\x00', 0x6, 0xdd, &(0x7f000001a8c0)=""/221, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f000001a9c0)={0x4, 0x3, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f000001aa00)=[{0x3, 0x1, 0x8, 0xc}, {0x3, 0x2, 0xb, 0x3}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x5, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000001ab40)={0x1a, 0x15, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x7, 0x51, &(0x7f0000000140)=""/81, 0x41100, 0x0, '\x00', r4, @fallback=0x29, r5, 0x8, &(0x7f000001a480)={0x8, 0x5}, 0x8, 0x10, &(0x7f000001a4c0)={0x1, 0x3, 0x5, 0x9}, 0x10, r6, r7, 0x0, &(0x7f000001ab00)=[r1, r8, r1], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060007000d101000", 0x24) 1.244405869s ago: executing program 2 (id=1788): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x10, 0x1405, 0x1, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x140f, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x6, 0x800}, &(0x7f0000000340)=0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x738, 0x738, 0xf0, 0x438, 0x738, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 1.221516354s ago: executing program 0 (id=1789): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) clock_gettime(0xa, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e00cd0214fffffffffffff80765", 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) socket$netlink(0x10, 0x3, 0x15) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(ccm(anubis))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x24000010) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 1.078188264s ago: executing program 2 (id=1790): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 1.077288364s ago: executing program 4 (id=1791): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) listen(r3, 0x0) close(r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) getsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x7) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0}, &(0x7f0000000e40)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000e80)={{{@in=@multicast2, @in=@local, 0x4e24, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x20, 0x49, r8, r10}, {0x4, 0x2, 0x64, 0x38, 0x5, 0x8270, 0x7, 0x1}, {0xb6, 0x2, 0x6, 0xb28a}, 0x80000001, 0x6e6bb3, 0x0, 0x1, 0x3, 0x3}, {{@in6=@local, 0x4d2, 0x6c}, 0x2, @in=@private=0xa010100, 0x3501, 0x2, 0x0, 0xf1, 0xade9, 0x2, 0x8}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140900}, 0xc, &(0x7f0000000340)={&(0x7f0000001000)=ANY=[@ANYBLOB="94040000170020002abd7000fddbdf25ac1414aa000000000000000000000000000004d3330000006401010200000000000000000000000064010101000000000000000000000000ff0200000000000000000000000000014e22113c4e21d0bf0a00a000bc000000101178499b1be162c254dcc72b843eeba52a924df6fd437bcd05756050bdf9cd507a11368a629a66e6000a9a897becc76b8c4c5cd136dcef4dc00632195e55d9e6a0d20339b69f0b77f7eaebb67214b440e47817d111df94618f8d0e2e4808e3fbd31e39f54a906c9bf271675266f198fe590658fc7c25336c78e6c0759976d550405a0ed75872822a12a7b32497a7b52c7c0473b4bd7e1db6117663d6aa404535e2c892e1831ff021d337050e104217c06ccba6e8a9a6219024d9ec24fb2e5c96745968a85624a569d0", @ANYRES32=r4, @ANYRES32=r10, @ANYBLOB="e0000001000000000000000000000000fe8000000000000000000000000000bb4e2200404e2400060e00a06033000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="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"], 0x494}, 0x1, 0x0, 0x0, 0x20084010}, 0x4000000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffff01, 0x9}) mmap(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r0, 0xcd44a000) 978.956133ms ago: executing program 2 (id=1792): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x89}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0xa, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0x101, 0xffc0, 0x8, 0x6}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x1d0, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x28, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xe0, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x3a, 0xc, "8360c45ead0a93280fc424dbe701ffbe496584bbd769d944bb3489716f4b3feb7d66bb89f67caf97a44bd5f781fe46761816b93b5f8f"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbda2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xe8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x26, 0x8, "50be7dd6a5eccc79fe03adfe1a7e5b0df04da1eeae1f227bf237b614b01e49697b1e"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "3dd5ec52659f717be83d396906fa1fe3270652e760c1444c6b406f99e39d290f770ef190b1c2ac49a5ec17cb4bb493a5ca88ad6ec2df0bd71420efc2dd16f8d4210d71051c90a10118eac1024a510013f510f9899c5a751d418dbc0193e7"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3e0}, 0x1, 0x0, 0x0, 0x10000010}, 0x20000000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0019007564703a73797a32000000000c"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) 934.877185ms ago: executing program 4 (id=1793): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0xc000) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0xc000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x18, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff847}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r13) syz_init_net_socket$x25(0x3, 0x5, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000018008001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb7020000080000007b03000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 742.018945ms ago: executing program 2 (id=1794): sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) 610.142172ms ago: executing program 2 (id=1795): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async) socket(0x15, 0x5, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0xf, 0x80, 0xe, 0x3, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf25120000004800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006772657461703c00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="5c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673000000000000000000008000300030000001400020076657468305f766972745f7769666900080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000700090000000c00018008000100", @ANYRES32=r7, @ANYBLOB="08000700050000000800070001000000080008000200000008000700090000000c0001800800030002000000"], 0xf8}, 0x1, 0x0, 0x0, 0x400c044}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async, rerun: 32) r8 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) r9 = socket(0x40000000015, 0x805, 0x0) getsockopt(r9, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) (async, rerun: 64) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, 0x0, 0x0) (async, rerun: 64) close(r8) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async, rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delroute={0x34, 0x19, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x10, 0x8, 0xfd, 0x1, 0x0, 0x1, 0x1c00}, [@RTA_MARK={0x8, 0x10, 0x8}, @RTA_FLOW={0x8, 0xb, 0x3}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (rerun: 32) 477.994301ms ago: executing program 1 (id=1796): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1, 0x7, [0xe, 0x8, 0x8, 0x5, 0xde86, 0x10, 0x1]}, &(0x7f0000000080)=0x16) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x3187, 0x5, 0x8008, 0x0, 0x4, 0x100, 0x9, 0x40, r0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000240)=0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000005000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8a}, 0x50) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x3]}}]}}]}, 0x94}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRESDEC=r7, @ANYBLOB='\x00'/105], 0xd4}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r7) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x2c, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0x2}, {0x7, 0xffff}, {0x0, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xaaf3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd00001200000000000000605c4afd00303afefe80001a49a51e31b42634aff1800000000000000000000000000000000000000000000000010401907800007471690405ce00073cfffc000000000000000000000000000000fe800000e5"], 0x66) 230.117985ms ago: executing program 0 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680100008800c000380050001"], 0x38}}, 0x0) unshare(0x22020400) r1 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) 0s ago: executing program 1 (id=1798): unshare(0x68040200) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$x25(r0, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$tun(0xffffffffffffffff, 0x0, 0xffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x20040810) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0xffffffffffffff10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='percpu_create_chunk\x00', r6, 0x0, 0x80000000}, 0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x20000007) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="9500000000000000000000000000000000000000010008008db7fb2f71b9bebfa1e7f1bd3a76c1b3381f8196188af670b52456a917f55f5aaa9849c990fbf7a012c133b072753f5a0d94e0e62adb5a09f6cb3370e5bdfe0242a5a29f2b14485b1bb49dfe83c770a60067a2000000004054a393a21c8e"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r7}, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200, 0x71bd29, 0x25dfdc03}, 0x10}, 0x1, 0x0, 0x0, 0x8054}, 0x80) kernel console output (not intermixed with test programs): 22259][ T6179] bridge0: port 3(batadv1) entered forwarding state [ 352.793480][ T6182] IPVS: length: 78 != 422621984 [ 352.820974][ T6190] IPVS: using max 19 ests per chain, 45600 per kthread [ 352.834171][ T6187] vxcan1 speed is unknown, defaulting to 1000 [ 352.886334][ T6182] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 352.893850][ T5914] IPVS: starting estimator thread 0... [ 353.004052][ T6196] IPVS: using max 22 ests per chain, 52800 per kthread [ 353.120917][ T5911] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 353.130656][ T5911] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 353.265050][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 353.656361][ T6234] Cannot find add_set index 1 as target [ 353.810213][ T6240] xt_cgroup: invalid path, errno=-2 [ 353.821116][ T6240] netlink: 'syz.3.77': attribute type 2 has an invalid length. [ 353.829144][ T6240] netlink: 'syz.3.77': attribute type 9 has an invalid length. [ 353.836894][ T6240] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.77'. [ 353.980159][ T6244] lo speed is unknown, defaulting to 1000 [ 354.027801][ T6244] lo speed is unknown, defaulting to 1000 [ 354.060033][ T6244] lo speed is unknown, defaulting to 1000 [ 354.117441][ T6254] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 354.126325][ T6254] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.81'. [ 354.139110][ T6256] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 354.146894][ T6256] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.81'. [ 354.281306][ T6262] netlink: 104 bytes leftover after parsing attributes in process `syz.3.82'. [ 354.352675][ T6267] xt_NFQUEUE: number of total queues is 0 [ 354.532007][ T6272] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 354.598092][ T6244] infiniband syz0: set active [ 354.617284][ T5914] lo speed is unknown, defaulting to 1000 [ 354.644204][ T6244] infiniband syz0: added lo [ 354.893342][ T6244] RDS/IB: syz0: added [ 354.921884][ T6244] smc: adding ib device syz0 with port count 1 [ 354.932572][ T6244] smc: ib device syz0 port 1 has pnetid [ 354.940902][ T4777] lo speed is unknown, defaulting to 1000 [ 354.965597][ T6244] lo speed is unknown, defaulting to 1000 [ 355.525428][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 355.544947][ T6305] netlink: 'syz.0.89': attribute type 11 has an invalid length. [ 355.552826][ T6305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.89'. [ 355.578278][ T6303] vxcan1 speed is unknown, defaulting to 1000 [ 355.584736][ T6244] lo speed is unknown, defaulting to 1000 [ 356.011706][ T6303] lo speed is unknown, defaulting to 1000 [ 356.065825][ T6312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.120673][ T6244] lo speed is unknown, defaulting to 1000 [ 356.471011][ T6244] lo speed is unknown, defaulting to 1000 [ 356.808006][ T6244] lo speed is unknown, defaulting to 1000 [ 356.908142][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 357.014916][ T6244] lo speed is unknown, defaulting to 1000 [ 357.277954][ T6329] vxcan1 speed is unknown, defaulting to 1000 [ 357.305581][ T6339] warning: `syz.4.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 357.960745][ T6350] syzkaller0: entered promiscuous mode [ 357.966368][ T6350] syzkaller0: entered allmulticast mode [ 358.754757][ T5876] Bluetooth: hci4: command 0x0405 tx timeout [ 359.351857][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 360.118549][ T6361] vxcan1 speed is unknown, defaulting to 1000 [ 360.324601][ T6371] vxcan1 speed is unknown, defaulting to 1000 [ 360.463315][ T6383] xt_cgroup: invalid path, errno=-2 [ 360.491201][ T6383] batman_adv: batadv0: Adding interface: gretap1 [ 360.498322][ T6383] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.525012][ T6383] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 360.539581][ T6371] lo speed is unknown, defaulting to 1000 [ 360.717847][ T6361] lo speed is unknown, defaulting to 1000 [ 361.049981][ T6396] netlink: 232 bytes leftover after parsing attributes in process `syz.0.111'. [ 361.077763][ T6396] macvtap1: entered promiscuous mode [ 361.144360][ T6396] vlan0: entered promiscuous mode [ 361.161710][ T6396] team0: Device macvtap1 failed to register rx_handler [ 361.177478][ T6396] vlan0: left promiscuous mode [ 362.224935][ T6438] netlink: 'syz.1.123': attribute type 10 has an invalid length. [ 362.232717][ T6438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.123'. [ 362.416468][ T6438] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 362.456463][ T6438] team0: Failed to send options change via netlink (err -105) [ 362.471476][ T6438] team0: Port device geneve0 added [ 362.867708][ T6471] netlink: 'syz.0.132': attribute type 3 has an invalid length. [ 363.265686][ T6485] vxcan1 speed is unknown, defaulting to 1000 [ 363.368266][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 363.633124][ T6485] lo speed is unknown, defaulting to 1000 [ 363.633142][ T6489] vxcan1 speed is unknown, defaulting to 1000 [ 363.640624][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 363.662049][ T6492] 8021q: adding VLAN 0 to HW filter on device team1 [ 363.971666][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 363.988637][ T6506] netlink: 'syz.4.140': attribute type 10 has an invalid length. [ 364.020079][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 364.362613][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 364.371774][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 364.380869][ T6516] netlink: 332 bytes leftover after parsing attributes in process `syz.3.144'. [ 364.412033][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'. [ 364.432833][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 364.658869][ T6520] tipc: Started in network mode [ 364.677155][ T6520] tipc: Node identity 62fb1281393a, cluster identity 4711 [ 364.690409][ T6520] tipc: Enabled bearer , priority 0 [ 364.762208][ T6489] lo speed is unknown, defaulting to 1000 [ 364.817271][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 364.940660][ T6528] syzkaller0: entered promiscuous mode [ 364.948439][ T6528] syzkaller0: entered allmulticast mode [ 364.964846][ T6528] tipc: Resetting bearer [ 365.040887][ T6519] tipc: Resetting bearer [ 365.758494][ T975] tipc: Node number set to 1539379841 [ 366.462803][ T6519] tipc: Disabling bearer [ 366.485380][ T6550] netlink: 'syz.3.152': attribute type 21 has an invalid length. [ 366.512843][ T6552] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 366.920611][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 367.341984][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 367.364002][ T6580] bridge_slave_1: left allmulticast mode [ 367.375512][ T6580] bridge_slave_1: left promiscuous mode [ 367.381364][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.391351][ T6580] bridge_slave_0: left allmulticast mode [ 367.400154][ T6580] bridge_slave_0: left promiscuous mode [ 367.411735][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.652375][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.162'. [ 367.711095][ T6586] vxcan1 speed is unknown, defaulting to 1000 [ 367.838150][ T6586] lo speed is unknown, defaulting to 1000 [ 368.082727][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.166'. [ 368.135244][ T6603] netlink: 'syz.0.166': attribute type 3 has an invalid length. [ 368.162447][ T6609] macvlan1: entered promiscuous mode [ 368.566317][ T6609] macvlan1 (unregistering): left promiscuous mode [ 368.598136][ T6622] bond0: (slave bond_slave_0): Releasing backup interface [ 368.608831][ T6622] bond0: (slave bond_slave_1): Releasing backup interface [ 368.645558][ T6622] team0: Port device team_slave_0 removed [ 368.656876][ T6622] team0: Port device team_slave_1 removed [ 368.664710][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.682699][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.731357][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.740006][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.771277][ T6622] team0: Port device gretap1 removed [ 368.896666][ T6634] x_tables: duplicate underflow at hook 1 [ 368.911040][ T6611] vxcan1 speed is unknown, defaulting to 1000 [ 369.100713][ T6611] lo speed is unknown, defaulting to 1000 [ 369.218653][ T6641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.375451][ T6650] __nla_validate_parse: 4 callbacks suppressed [ 369.375469][ T6650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.178'. [ 369.572418][ T6645] vxcan1 speed is unknown, defaulting to 1000 [ 369.614812][ T6654] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 369.624928][ T6654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.993338][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.187'. [ 370.169714][ T6677] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 370.235305][ T6677] team0: Device veth1_macvtap failed to register rx_handler [ 370.287435][ T6645] lo speed is unknown, defaulting to 1000 [ 370.478905][ T6686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.869641][ T6704] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 370.878246][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.197'. [ 370.908219][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 370.928636][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 370.968050][ T6705] netlink: 40 bytes leftover after parsing attributes in process `syz.4.197'. [ 371.241521][ T6713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 371.243159][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 371.307875][ T6714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.198'. [ 371.434678][ T6719] netlink: 'syz.1.201': attribute type 8 has an invalid length. [ 371.460675][ T6725] veth0_to_bond: entered promiscuous mode [ 371.467614][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 371.616468][ T6725] veth0_to_bond (unregistering): left promiscuous mode [ 371.641658][ T6725] bond0: (slave bond_slave_0): Releasing backup interface [ 371.678724][ T6733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.823596][ T6737] Bluetooth: MGMT ver 1.23 [ 372.060127][ T6744] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 372.117093][ T6744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.160745][ T6746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.168034][ T6746] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 372.186044][ T6746] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 372.259181][ T6744] ip6erspan0: entered promiscuous mode [ 372.268936][ T6744] bond2: (slave ip6erspan0): making interface the new active one [ 372.277814][ T6744] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 372.535341][ T6771] Cannot find add_set index 0 as target [ 372.773703][ T6788] sctp: [Deprecated]: syz.3.218 (pid 6788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.773703][ T6788] Use struct sctp_sack_info instead [ 372.885434][ T6793] vlan0: entered allmulticast mode [ 372.890923][ T6793] veth0_to_batadv: entered allmulticast mode [ 372.927642][ T6791] vlan0: entered promiscuous mode [ 372.958672][ T6791] batman_adv: batadv0: Adding interface: vlan0 [ 373.017864][ T6791] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.060554][ T6791] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 373.376543][ T6821] netlink: ct family unspecified [ 373.438277][ T6821] openvswitch: netlink: Actions may not be safe on all matching packets [ 373.785464][ T6828] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 373.931160][ T6828] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 374.546540][ T6834] team0 (unregistering): Port device team_slave_0 removed [ 374.559504][ T6834] team0 (unregistering): Port device team_slave_1 removed [ 374.581777][ T6833] __nla_validate_parse: 5 callbacks suppressed [ 374.581789][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 374.597338][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 374.783600][ T6847] vxcan1 speed is unknown, defaulting to 1000 [ 374.811582][ T6849] nr0: entered promiscuous mode [ 374.920746][ T6851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'. [ 375.064062][ T6847] lo speed is unknown, defaulting to 1000 [ 375.065678][ T6843] vxcan1 speed is unknown, defaulting to 1000 [ 375.526903][ T6879] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.237'. [ 375.536244][ T6879] openvswitch: netlink: Missing key (keys=40, expected=80) [ 375.629116][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 375.714368][ T6883] Bluetooth: MGMT ver 1.23 [ 375.799649][ T6843] lo speed is unknown, defaulting to 1000 [ 375.884568][ T6898] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 375.897274][ T6898] dccp_invalid_packet: P.Data Offset(0) too small [ 375.985647][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 376.383784][ T6925] netlink: 228 bytes leftover after parsing attributes in process `syz.3.249'. [ 376.675362][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 376.811413][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 376.822730][ T6937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.251'. [ 376.972479][ T6942] Cannot find set identified by id 0 to match [ 377.010430][ T6942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.384558][ T6942] pim6reg: entered allmulticast mode [ 378.322308][ T7007] netlink: 'syz.3.267': attribute type 2 has an invalid length. [ 378.333139][ T7007] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 378.448476][ T7013] bridge0: entered promiscuous mode [ 378.455189][ T7013] macvlan0: entered promiscuous mode [ 378.461996][ T7013] bridge0: port 3(macvlan0) entered blocking state [ 378.470527][ T7013] bridge0: port 3(macvlan0) entered disabled state [ 378.479779][ T7013] macvlan0: entered allmulticast mode [ 378.485330][ T7013] bridge0: entered allmulticast mode [ 378.525717][ T7013] macvlan0: left allmulticast mode [ 378.530889][ T7013] bridge0: left allmulticast mode [ 378.538290][ T7013] bridge0: left promiscuous mode [ 378.827098][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858109][ T7026] netlink: 'syz.3.273': attribute type 12 has an invalid length. [ 379.575328][ T7053] vxcan1 speed is unknown, defaulting to 1000 [ 380.076527][ T7063] __nla_validate_parse: 7 callbacks suppressed [ 380.076544][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 380.419720][ T7053] lo speed is unknown, defaulting to 1000 [ 380.821300][ T7097] pim6reg1: entered promiscuous mode [ 380.826861][ T7097] pim6reg1: entered allmulticast mode [ 380.836300][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 380.847254][ T7091] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 380.855085][ T7091] netlink: 'syz.3.288': attribute type 2 has an invalid length. [ 380.862735][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 381.051755][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 382.041532][ T5914] IPVS: starting estimator thread 0... [ 382.244114][ T7145] IPVS: using max 23 ests per chain, 55200 per kthread [ 382.312484][ T7156] netlink: 243 bytes leftover after parsing attributes in process `syz.3.304'. [ 382.321948][ T7157] netlink: 243 bytes leftover after parsing attributes in process `syz.3.304'. [ 382.331165][ T7157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.340343][ T7156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.482004][ T7164] netlink: 'syz.3.307': attribute type 2 has an invalid length. [ 382.490293][ T7164] netlink: 119 bytes leftover after parsing attributes in process `syz.3.307'. [ 382.510805][ T7164] netlink: 96 bytes leftover after parsing attributes in process `syz.3.307'. [ 382.524282][ T7164] vlan1: entered allmulticast mode [ 382.620743][ T7167] vxcan1 speed is unknown, defaulting to 1000 [ 382.744773][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 382.778754][ T7172] netlink: 'syz.0.308': attribute type 5 has an invalid length. [ 382.799276][ T7170] vlan1: entered allmulticast mode [ 382.804624][ T7170] bond0: entered allmulticast mode [ 382.809843][ T7170] bond_slave_1: entered allmulticast mode [ 382.821454][ T7170] tipc: Enabling of bearer rejected, failed to enable media [ 382.857541][ T7172] ip6erspan0: entered promiscuous mode [ 382.898777][ T7172] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 382.921812][ T7172] netlink: 183 bytes leftover after parsing attributes in process `syz.0.308'. [ 383.311409][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.375489][ T7193] bridge_slave_1 (unregistering): left allmulticast mode [ 383.382581][ T7193] bridge_slave_1 (unregistering): left promiscuous mode [ 383.390324][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.417944][ T7196] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 383.989684][ T7167] lo speed is unknown, defaulting to 1000 [ 384.027120][ T7173] vxcan1 speed is unknown, defaulting to 1000 [ 384.118980][ T7236] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 384.164865][ T7236] bond3: entered promiscuous mode [ 384.169947][ T7236] bond3: entered allmulticast mode [ 384.175861][ T7236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.204395][ T7236] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 385.167965][ T7268] __nla_validate_parse: 4 callbacks suppressed [ 385.167983][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 385.356596][ T7282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 385.511343][ T7292] netlink: 'syz.0.332': attribute type 9 has an invalid length. [ 385.525845][ T7292] netlink: 'syz.0.332': attribute type 6 has an invalid length. [ 385.653046][ T7250] vxcan1 speed is unknown, defaulting to 1000 [ 385.671616][ T7173] lo speed is unknown, defaulting to 1000 [ 385.825818][ T7299] netlink: 'syz.0.333': attribute type 6 has an invalid length. [ 386.126423][ T7311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.235494][ T7250] lo speed is unknown, defaulting to 1000 [ 386.825693][ T7342] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 387.044817][ T7342] team0: Port device wlan1 added [ 387.316715][ T7356] vxcan1 speed is unknown, defaulting to 1000 [ 387.434517][ T7356] lo speed is unknown, defaulting to 1000 [ 387.573417][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 387.594414][ T7357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.626202][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 387.654289][ T7363] tipc: Enabling of bearer rejected, media not registered [ 387.997677][ T7375] openvswitch: netlink: IP tunnel dst address not specified [ 388.170367][ T7377] bond4: entered promiscuous mode [ 388.177880][ T7377] bond4: entered allmulticast mode [ 388.203271][ T7377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.690521][ T7412] netlink: 'syz.1.361': attribute type 10 has an invalid length. [ 388.748068][ T7412] netlink: 2 bytes leftover after parsing attributes in process `syz.1.361'. [ 388.761971][ T7409] batman_adv: batadv0: Adding interface: dummy0 [ 388.783464][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 388.796518][ T7409] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.887667][ T7409] batman_adv: batadv0: Interface activated: dummy0 [ 388.950832][ T7425] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20002 [ 388.994480][ T7412] team0: entered promiscuous mode [ 389.007360][ T7412] team_slave_0: entered promiscuous mode [ 389.023087][ T7412] team_slave_1: entered promiscuous mode [ 389.029525][ T7412] geneve0: entered promiscuous mode [ 389.040986][ T7415] batadv1: left allmulticast mode [ 389.050954][ T7415] batadv1: left promiscuous mode [ 389.077497][ T7415] bridge0: port 3(batadv1) entered disabled state [ 389.135525][ T7415] bridge_slave_1: left allmulticast mode [ 389.141226][ T7415] bridge_slave_1: left promiscuous mode [ 389.167917][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.221611][ T7415] bridge_slave_0: left allmulticast mode [ 389.245500][ T7415] bridge_slave_0: left promiscuous mode [ 389.268211][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.293098][ T7438] syz.1.364 uses old SIOCAX25GETINFO [ 389.440890][ T7442] sctp: [Deprecated]: syz.3.367 (pid 7442) Use of int in max_burst socket option. [ 389.440890][ T7442] Use struct sctp_assoc_value instead [ 389.457418][ T7442] netlink: 'syz.3.367': attribute type 3 has an invalid length. [ 389.465259][ T7442] netlink: 'syz.3.367': attribute type 3 has an invalid length. [ 389.476267][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'. [ 389.595046][ T7450] x_tables: duplicate underflow at hook 3 [ 389.630536][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 389.644037][ T29] audit: type=1800 audit(1739950662.977:2): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.366" name="memory.events" dev="tmpfs" ino=401 res=0 errno=0 [ 389.666954][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 389.719022][ T7455] netlink: 'syz.3.370': attribute type 30 has an invalid length. [ 389.876056][ T7459] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 389.932831][ T7459] netlink: 244 bytes leftover after parsing attributes in process `syz.2.369'. [ 390.242305][ T7478] pim6reg: entered allmulticast mode [ 390.278569][ T7484] pim6reg: left allmulticast mode [ 390.382035][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 390.460068][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 390.763487][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 390.963123][ T7515] ax25_connect(): syz.3.386 uses autobind, please contact jreuter@yaina.de [ 391.259494][ T7533] netlink: 'syz.3.392': attribute type 11 has an invalid length. [ 391.269100][ T7533] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.392'. [ 391.336041][ T7536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 391.481807][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'. [ 391.536293][ T7549] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.545321][ T7549] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.554156][ T7549] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.563007][ T7549] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.881457][ T7558] netlink: 256 bytes leftover after parsing attributes in process `syz.2.398'. [ 391.924074][ T7558] netlink: 136 bytes leftover after parsing attributes in process `syz.2.398'. [ 392.017642][ T7577] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 392.100708][ T7577] siw: device registration error -23 [ 392.113622][ T7581] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.162645][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.405'. [ 392.638111][ T7613] vxcan1 speed is unknown, defaulting to 1000 [ 392.672555][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 393.001032][ T7633] sock: sock_timestamping_bind_phc: sock not bind to device [ 393.075858][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.414'. [ 393.410978][ T7613] lo speed is unknown, defaulting to 1000 [ 394.572716][ T7679] openvswitch: netlink: Message has 1263 unknown bytes. [ 394.582006][ T7679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.920041][ T7691] netlink: 'syz.4.430': attribute type 15 has an invalid length. [ 395.021311][ T7694] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.627480][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 395.741080][ T7712] openvswitch: netlink: Missing valid actions attribute. [ 395.764949][ T7712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.160241][ T7725] bond0: (slave bond_slave_0): Releasing backup interface [ 396.193173][ T7725] bond0: (slave bond_slave_1): Releasing backup interface [ 396.216600][ T7725] team_slave_0: left promiscuous mode [ 396.242551][ T7725] team0: Port device team_slave_0 removed [ 396.272369][ T7725] team_slave_1: left promiscuous mode [ 396.289365][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 396.319032][ T7725] team0: Port device team_slave_1 removed [ 396.327316][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.341422][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.357775][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.366504][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.383827][ T7725] geneve0: left promiscuous mode [ 396.400022][ T7725] team0: Port device geneve0 removed [ 396.411427][ T5864] lo speed is unknown, defaulting to 1000 [ 396.442856][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 396.452205][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 396.525333][ T7735] vxcan1 speed is unknown, defaulting to 1000 [ 396.662329][ T7735] lo speed is unknown, defaulting to 1000 [ 397.003115][ T7741] Driver unsupported XDP return value 0 on prog (id 145) dev N/A, expect packet loss! [ 397.072693][ T7752] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 397.110557][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 397.121579][ T7751] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 397.136069][ T7749] netlink: 'syz.0.446': attribute type 7 has an invalid length. [ 397.210870][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.445'. [ 397.434308][ T7752] bond2: entered promiscuous mode [ 397.444665][ T7752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.584933][ T7766] netlink: 'syz.2.449': attribute type 16 has an invalid length. [ 397.756883][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 397.991162][ T7828] netlink: 'syz.1.457': attribute type 9 has an invalid length. [ 398.080206][ T7844] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 398.105542][ T7828] netlink: 'syz.1.457': attribute type 6 has an invalid length. [ 398.257891][ T7847] netlink: 'syz.1.457': attribute type 7 has an invalid length. [ 398.284587][ T7826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.458'. [ 398.293530][ T7826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 398.324118][ T7869] macsec0: entered promiscuous mode [ 398.435303][ T7847] netlink: 'syz.1.457': attribute type 8 has an invalid length. [ 398.465120][ T7826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.458'. [ 398.504642][ T7869] veth1_macvtap: left promiscuous mode [ 398.586379][ T7869] macsec0 (unregistering): left promiscuous mode [ 398.918857][ T7894] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 398.994546][ T7893] netlink: 'syz.3.466': attribute type 2 has an invalid length. [ 399.023743][ T7883] vxcan1 speed is unknown, defaulting to 1000 [ 399.290265][ T7910] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 399.614786][ T7889] vxcan1 speed is unknown, defaulting to 1000 [ 399.628697][ T7883] lo speed is unknown, defaulting to 1000 [ 399.771944][ T7884] vxcan1 speed is unknown, defaulting to 1000 [ 399.797159][ T7925] raw_sendmsg: syz.1.474 forgot to set AF_INET. Fix it! [ 400.029653][ T7934] netlink: 'syz.1.475': attribute type 11 has an invalid length. [ 400.049636][ T7934] netlink: 'syz.1.475': attribute type 10 has an invalid length. [ 400.068633][ T7934] netlink: 'syz.1.475': attribute type 11 has an invalid length. [ 400.189779][ T7941] nbd: illegal input index -381222912 [ 400.210048][ T7950] nbd: illegal input index -381222912 [ 400.419743][ T7889] lo speed is unknown, defaulting to 1000 [ 400.765440][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.772782][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.799359][ T7969] batman_adv: batadv0: Interface deactivated: dummy0 [ 400.893135][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.910131][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.970911][ T7969] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.985308][ T7969] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.000333][ T7969] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.010704][ T7969] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.052021][ T7969] ip6erspan0: left promiscuous mode [ 401.107994][ T7974] bond5: entered promiscuous mode [ 401.113395][ T7974] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.137891][ T7884] lo speed is unknown, defaulting to 1000 [ 401.138719][ T975] vxcan1 speed is unknown, defaulting to 1000 [ 401.238739][ T5914] vxcan1 speed is unknown, defaulting to 1000 [ 401.598191][ T8007] __nla_validate_parse: 38 callbacks suppressed [ 401.598204][ T8007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.489'. [ 402.114912][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 402.139880][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 402.194173][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 402.200749][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 402.204910][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 404.180743][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 404.385927][ T8058] syzkaller0: entered promiscuous mode [ 404.391638][ T8058] syzkaller0: entered allmulticast mode [ 404.395686][ T8063] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.502'. [ 404.398254][ T8064] netlink: 100 bytes leftover after parsing attributes in process `syz.0.502'. [ 404.619277][ T8074] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.626020][ T8074] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.981548][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 406.444308][ T8096] vxcan1 speed is unknown, defaulting to 1000 [ 406.460758][ T8098] vlan1: entered promiscuous mode [ 406.489389][ T8098] dummy0: entered promiscuous mode [ 406.511356][ T8098] dummy0: left promiscuous mode [ 406.520234][ T8109] netlink: 'syz.4.512': attribute type 10 has an invalid length. [ 406.624473][ T8109] syz_tun: entered promiscuous mode [ 406.677861][ T8109] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 406.717453][ T8096] lo speed is unknown, defaulting to 1000 [ 406.752868][ T8114] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 406.812879][ T8111] vxcan1 speed is unknown, defaulting to 1000 [ 406.831970][ T8117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.515'. [ 407.405955][ T8148] netlink: 188 bytes leftover after parsing attributes in process `syz.4.521'. [ 407.424018][ T8148] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 407.673105][ T8111] lo speed is unknown, defaulting to 1000 [ 407.872917][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 407.965705][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 408.109906][ T8180] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.527'. [ 408.127428][ T8180] openvswitch: netlink: Message has 44053 unknown bytes. [ 408.376934][ T8186] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 408.480369][ T8190] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 408.498583][ T8190] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 408.802847][ T8202] tipc: Started in network mode [ 408.809251][ T8202] tipc: Node identity 268b70cd22c, cluster identity 4711 [ 408.818010][ T8202] tipc: Enabled bearer , priority 0 [ 408.868175][ T8202] syzkaller0: entered promiscuous mode [ 408.873709][ T8202] syzkaller0: entered allmulticast mode [ 408.880025][ T8202] tipc: Resetting bearer [ 408.900372][ T8205] bond0: entered promiscuous mode [ 408.905951][ T8205] bond_slave_0: entered promiscuous mode [ 408.911856][ T8205] bond_slave_1: entered promiscuous mode [ 408.933559][ T8205] bond0: left promiscuous mode [ 408.947441][ T8205] bond_slave_0: left promiscuous mode [ 408.958354][ T8205] bond_slave_1: left promiscuous mode [ 409.018759][ T8201] tipc: Resetting bearer [ 409.869375][ T4777] tipc: Node number set to 72052941 [ 410.768770][ T8201] tipc: Disabling bearer [ 410.781047][ T8211] C: renamed from team_slave_0 [ 410.788363][ T8211] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 410.796378][ T8211] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 410.982640][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 411.074178][ T8239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.026354][ T8292] vxcan1 speed is unknown, defaulting to 1000 [ 412.252920][ T8304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.272265][ T8304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.305202][ T8304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.361927][ T8304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.389287][ T8304] geneve2: entered promiscuous mode [ 412.396082][ T8292] lo speed is unknown, defaulting to 1000 [ 412.475029][ T8304] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 412.638895][ T8315] netlink: 'syz.4.567': attribute type 33 has an invalid length. [ 412.647498][ T8315] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.567'. [ 412.680693][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 412.990326][ T8322] lo speed is unknown, defaulting to 1000 [ 413.249191][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 413.496423][ T8345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.575'. [ 413.573199][ T8347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.576'. [ 413.577010][ T8345] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 413.708582][ T8353] dccp_invalid_packet: P.Data Offset(4) too small [ 413.768200][ T8351] pim6reg: entered allmulticast mode [ 413.785037][ T8351] pim6reg: left allmulticast mode [ 413.967035][ T8367] netlink: 'syz.0.579': attribute type 2 has an invalid length. [ 413.993950][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 414.250997][ T8375] netlink: 14 bytes leftover after parsing attributes in process `syz.3.582'. [ 414.555964][ T8369] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 414.579321][ T8374] bridge_slave_0: left allmulticast mode [ 414.585157][ T8374] bridge_slave_0: left promiscuous mode [ 414.591012][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.679928][ T8374] bond0: (slave bond_slave_1): Releasing backup interface [ 414.739400][ T8374] bond_slave_1: left allmulticast mode [ 414.811437][ T8374] team0: Port device team_slave_0 removed [ 414.822898][ T8374] team0: Port device team_slave_1 removed [ 414.829808][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.839057][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.859480][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.867613][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.891115][ T8374] team0: Port device wlan1 removed [ 414.900574][ T8374] bond2: (slave ip6erspan0): Releasing active interface [ 414.955306][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 415.009062][ T8384] netlink: 243 bytes leftover after parsing attributes in process `syz.2.585'. [ 415.020860][ T8384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.253539][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 415.288590][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 415.363017][ T8395] vxcan1 speed is unknown, defaulting to 1000 [ 415.394430][ T8402] ip6tnl1: entered promiscuous mode [ 415.399703][ T8402] ip6tnl1: entered allmulticast mode [ 415.654186][ T8414] xt_HMARK: spi-set and port-set can't be combined [ 415.740175][ T8402] team0 (unregistering): Port device team_slave_0 removed [ 415.753198][ T8402] team0 (unregistering): Port device team_slave_1 removed [ 415.774656][ T8411] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 415.783366][ T8411] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 415.799485][ T8395] lo speed is unknown, defaulting to 1000 [ 416.087127][ T8432] vxcan1 speed is unknown, defaulting to 1000 [ 416.260917][ T8432] lo speed is unknown, defaulting to 1000 [ 417.625312][ T8475] vxcan1 speed is unknown, defaulting to 1000 [ 417.780526][ T8491] netdevsim netdevsim3: Direct firmware load for / [ 417.780526][ T8491] failed with error -2 [ 417.799176][ T8491] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 417.799176][ T8491] [ 418.386011][ T8475] lo speed is unknown, defaulting to 1000 [ 419.838172][ T8544] __nla_validate_parse: 3 callbacks suppressed [ 419.838189][ T8544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.629'. [ 419.864136][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 420.028974][ T8563] trusted_key: syz.0.630 sent an empty control message without MSG_MORE. [ 420.033246][ T8561] vxcan1 speed is unknown, defaulting to 1000 [ 420.224307][ T29] audit: type=1804 audit(1739950693.547:3): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.630" name="/newroot/125/cgroup.controllers" dev="tmpfs" ino=659 res=1 errno=0 [ 420.273506][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.635'. [ 420.293006][ T8570] delete_channel: no stack [ 420.310028][ T29] audit: type=1800 audit(1739950693.547:4): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.630" name="cgroup.controllers" dev="tmpfs" ino=659 res=0 errno=0 [ 420.568417][ T8561] lo speed is unknown, defaulting to 1000 [ 420.586268][ T8578] sctp: [Deprecated]: syz.4.637 (pid 8578) Use of int in max_burst socket option. [ 420.586268][ T8578] Use struct sctp_assoc_value instead [ 420.983190][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.638'. [ 421.034376][ T8585] netlink: 'syz.4.638': attribute type 7 has an invalid length. [ 421.042177][ T8585] netlink: 'syz.4.638': attribute type 8 has an invalid length. [ 421.126482][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 421.172000][ T8592] netlink: 'syz.3.640': attribute type 11 has an invalid length. [ 421.411584][ T8597] netlink: 80 bytes leftover after parsing attributes in process `syz.3.642'. [ 421.595537][ T8601] Cannot find add_set index 0 as target [ 421.688751][ T8608] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 421.750332][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 421.821980][ T8612] bridge0: port 1(hsr0) entered blocking state [ 421.841044][ T8612] bridge0: port 1(hsr0) entered disabled state [ 421.902468][ T8612] hsr0: entered allmulticast mode [ 421.955070][ T8612] hsr_slave_0: entered allmulticast mode [ 421.962567][ T8612] hsr_slave_1: entered allmulticast mode [ 421.976528][ T8612] hsr0: entered promiscuous mode [ 421.985104][ T8612] bridge0: port 1(hsr0) entered blocking state [ 421.991568][ T8612] bridge0: port 1(hsr0) entered forwarding state [ 422.324515][ T8627] netlink: 18 bytes leftover after parsing attributes in process `syz.4.649'. [ 423.088772][ T8684] tipc: Enabled bearer , priority 0 [ 423.129404][ T8684] syzkaller0: entered promiscuous mode [ 423.135177][ T8684] syzkaller0: entered allmulticast mode [ 423.141331][ T8684] tipc: Resetting bearer [ 423.194320][ T8683] tipc: Resetting bearer [ 423.701116][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 423.795922][ T8708] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 425.378262][ T8683] tipc: Disabling bearer [ 425.409881][ T8716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.665'. [ 425.583995][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 425.782708][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.671'. [ 426.054390][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 426.098009][ T8744] batadv1: entered promiscuous mode [ 426.230263][ T8761] netlink: 68 bytes leftover after parsing attributes in process `syz.0.680'. [ 426.239569][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'. [ 426.481123][ T8766] netlink: 128 bytes leftover after parsing attributes in process `syz.4.682'. [ 426.512599][ T8768] gretap1: entered allmulticast mode [ 426.814809][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 426.892305][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 427.050504][ T8788] vxcan1 speed is unknown, defaulting to 1000 [ 427.155975][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.691'. [ 427.240555][ T8796] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 427.632758][ T8817] netlink: 'syz.4.695': attribute type 4 has an invalid length. [ 427.814298][ T8788] lo speed is unknown, defaulting to 1000 [ 427.997364][ T8837] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 428.393666][ T8862] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 428.666004][ T8877] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 428.812056][ T8883] vxcan1 speed is unknown, defaulting to 1000 [ 428.837575][ T8886] bond0: entered promiscuous mode [ 428.846001][ T8886] bond0: left promiscuous mode [ 428.914850][ T8887] xt_TPROXY: Can be used only with -p tcp or -p udp [ 428.928005][ T8888] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 429.095340][ T8888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.166077][ T8894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.182765][ T8894] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 429.208306][ T8894] bond2: (slave vcan1): Error -95 calling set_mac_address [ 429.222603][ T8887] vxcan1 speed is unknown, defaulting to 1000 [ 429.223269][ T8883] lo speed is unknown, defaulting to 1000 [ 429.453021][ T8897] vxcan1 speed is unknown, defaulting to 1000 [ 429.503829][ T8887] lo speed is unknown, defaulting to 1000 [ 429.591342][ T8911] vxcan1 speed is unknown, defaulting to 1000 [ 429.893492][ T8897] lo speed is unknown, defaulting to 1000 [ 430.016779][ T8911] lo speed is unknown, defaulting to 1000 [ 431.401567][ T8956] netlink: 'syz.2.738': attribute type 4 has an invalid length. [ 431.434571][ T8956] vlan1: entered allmulticast mode [ 431.451026][ T8956] hsr0: entered allmulticast mode [ 431.477076][ T8956] hsr_slave_0: entered allmulticast mode [ 431.497376][ T8956] hsr_slave_1: entered allmulticast mode [ 431.542525][ T8956] hsr0: left allmulticast mode [ 431.558920][ T8956] hsr_slave_0: left allmulticast mode [ 431.566567][ T8956] hsr_slave_1: left allmulticast mode [ 431.602042][ T8958] __nla_validate_parse: 17 callbacks suppressed [ 431.602059][ T8958] netlink: 404 bytes leftover after parsing attributes in process `syz.3.740'. [ 431.617746][ T8958] netlink: 88 bytes leftover after parsing attributes in process `syz.3.740'. [ 431.626806][ T8958] netlink: 88 bytes leftover after parsing attributes in process `syz.3.740'. [ 431.639846][ T8956] vlan1: entered allmulticast mode [ 431.645416][ T8956] hsr0: entered allmulticast mode [ 431.651367][ T8956] hsr_slave_0: entered allmulticast mode [ 431.657317][ T8956] hsr_slave_1: entered allmulticast mode [ 431.665267][ T8956] hsr0: left allmulticast mode [ 431.670202][ T8956] hsr_slave_0: left allmulticast mode [ 431.675755][ T8956] hsr_slave_1: left allmulticast mode [ 431.916669][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.745'. [ 432.019331][ T8980] xt_TCPMSS: Only works on TCP SYN packets [ 432.050914][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 432.136672][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 432.176262][ T8987] vxcan1 speed is unknown, defaulting to 1000 [ 432.192359][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 432.516346][ T8987] lo speed is unknown, defaulting to 1000 [ 432.536439][ T9016] netlink: 72 bytes leftover after parsing attributes in process `syz.1.756'. [ 432.601928][ T9020] x_tables: duplicate underflow at hook 3 [ 432.610533][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'. [ 432.622374][ T9020] netlink: 'syz.0.759': attribute type 1 has an invalid length. [ 432.639794][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.759'. [ 432.661672][ T9020] macvlan2: entered promiscuous mode [ 432.667637][ T9020] macvlan2: entered allmulticast mode [ 432.681123][ T9022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.902920][ T9036] vxcan1 speed is unknown, defaulting to 1000 [ 432.908291][ T9032] netlink: 'syz.4.762': attribute type 21 has an invalid length. [ 432.958393][ T9032] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.983235][ T9032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.990930][ T9032] IPv6: NLM_F_CREATE should be set when creating new route [ 432.998265][ T9032] IPv6: NLM_F_CREATE should be set when creating new route [ 433.005526][ T9032] IPv6: NLM_F_CREATE should be set when creating new route [ 433.133289][ T9051] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 433.171567][ T9039] vxcan1 speed is unknown, defaulting to 1000 [ 433.183375][ T9036] lo speed is unknown, defaulting to 1000 [ 433.317374][ T9059] netlink: 'syz.2.766': attribute type 2 has an invalid length. [ 433.634952][ T9040] vxcan1 speed is unknown, defaulting to 1000 [ 433.816666][ T9040] lo speed is unknown, defaulting to 1000 [ 433.929402][ T9039] lo speed is unknown, defaulting to 1000 [ 433.936808][ T9072] vxcan1 speed is unknown, defaulting to 1000 [ 434.464329][ T9072] lo speed is unknown, defaulting to 1000 [ 434.568546][ T9087] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 434.622090][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.630400][ T9087] batadv0: entered allmulticast mode [ 434.636268][ T9087] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 434.660457][ T9086] bond0: (slave batadv0): Releasing backup interface [ 434.671996][ T9086] batadv0 (unregistering): left allmulticast mode [ 434.878910][ T9090] bridge0: port 1(gretap0) entered blocking state [ 434.885943][ T9090] bridge0: port 1(gretap0) entered disabled state [ 434.892511][ T9090] gretap0: entered allmulticast mode [ 434.936084][ T9090] gretap0: entered promiscuous mode [ 434.962668][ T9091] gretap0: left allmulticast mode [ 434.971423][ T9091] gretap0: left promiscuous mode [ 434.983716][ T9091] bridge0: port 1(gretap0) entered disabled state [ 435.347149][ T9098] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 436.049626][ T9119] vxcan1 speed is unknown, defaulting to 1000 [ 436.688660][ T9150] sctp: [Deprecated]: syz.2.792 (pid 9150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.688660][ T9150] Use struct sctp_sack_info instead [ 436.787460][ T9148] vxcan1 speed is unknown, defaulting to 1000 [ 436.795051][ T9119] lo speed is unknown, defaulting to 1000 [ 437.135202][ T9159] __nla_validate_parse: 14 callbacks suppressed [ 437.135222][ T9159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.794'. [ 437.152608][ T9148] lo speed is unknown, defaulting to 1000 [ 437.538987][ T9172] vxcan1 speed is unknown, defaulting to 1000 [ 437.618883][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 437.971387][ T9172] lo speed is unknown, defaulting to 1000 [ 437.987324][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 438.479723][ T9208] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 438.730635][ T9209] netlink: 168 bytes leftover after parsing attributes in process `syz.2.809'. [ 438.765419][ T9209] netlink: 440 bytes leftover after parsing attributes in process `syz.2.809'. [ 438.854964][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 439.478247][ T9240] ªªªªª: renamed from bridge0 [ 439.517045][ T9240] ªªªªª: entered promiscuous mode [ 439.522368][ T9240] ªªªªª: entered allmulticast mode [ 439.592161][ T9244] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 439.632335][ T9247] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 439.665942][ T9244] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 439.715400][ T9247] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 439.740684][ T9256] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 439.822678][ T9245] vxcan1 speed is unknown, defaulting to 1000 [ 439.851240][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 440.143669][ T9272] netlink: 52 bytes leftover after parsing attributes in process `syz.4.826'. [ 440.216665][ T9275] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 440.236696][ T9275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.274782][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.393736][ T9245] lo speed is unknown, defaulting to 1000 [ 440.619697][ T9291] xt_bpf: check failed: parse error [ 441.099213][ T9313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.838'. [ 441.335510][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 441.564297][ T9326] Cannot find del_set index 65534 as target [ 441.924389][ T9346] netlink: 'syz.0.851': attribute type 10 has an invalid length. [ 442.070880][ T9357] bond0: entered promiscuous mode [ 442.098982][ T9357] bond0: left allmulticast mode [ 442.167474][ T9360] __nla_validate_parse: 3 callbacks suppressed [ 442.167502][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 442.215442][ T9363] veth4: entered promiscuous mode [ 442.254407][ T9364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.263228][ T9364] bond0: (slave bond2): Enslaving as an active interface with an up link [ 442.379259][ T9370] dvmrp0: entered allmulticast mode [ 442.387522][ T9370] dvmrp0: left allmulticast mode [ 442.391570][ T9373] netlink: 96 bytes leftover after parsing attributes in process `syz.3.862'. [ 442.511047][ T9374] vxcan1 speed is unknown, defaulting to 1000 [ 442.610916][ T9374] lo speed is unknown, defaulting to 1000 [ 442.624745][ T9377] vxcan1 speed is unknown, defaulting to 1000 [ 442.754796][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 442.839613][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 443.017069][ T9377] lo speed is unknown, defaulting to 1000 [ 443.044296][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.869'. [ 443.593649][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.874'. [ 443.722467][ T9433] netlink: 60 bytes leftover after parsing attributes in process `syz.3.876'. [ 444.231243][ T9449] veth0_to_bridge: entered promiscuous mode [ 444.267959][ T9448] veth0_to_bridge: left promiscuous mode [ 444.280093][ T9456] netlink: 'syz.1.882': attribute type 6 has an invalid length. [ 444.433733][ T9467] sctp: [Deprecated]: syz.3.886 (pid 9467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.433733][ T9467] Use struct sctp_sack_info instead [ 444.458511][ T9466] vxcan1 speed is unknown, defaulting to 1000 [ 444.512636][ T9471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'. [ 444.782408][ T9466] lo speed is unknown, defaulting to 1000 [ 444.952172][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.891'. [ 445.098156][ T9492] vxcan1 speed is unknown, defaulting to 1000 [ 445.256181][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 445.340548][ T9504] sock: sock_timestamping_bind_phc: sock not bind to device [ 445.459070][ T9507] netlink: 'syz.3.897': attribute type 10 has an invalid length. [ 445.709959][ T9492] lo speed is unknown, defaulting to 1000 [ 445.710639][ T9514] tipc: New replicast peer: 255.255.255.255 [ 445.723862][ T9514] tipc: Enabled bearer , priority 10 [ 445.738724][ T9511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 446.124236][ T9524] vxcan1 speed is unknown, defaulting to 1000 [ 446.339364][ T9537] IPv6: sit2: Disabled Multicast RS [ 446.506222][ T9524] lo speed is unknown, defaulting to 1000 [ 446.515428][ T9529] vxcan1 speed is unknown, defaulting to 1000 [ 446.802772][ T9493] ip6gre1: entered promiscuous mode [ 446.899088][ T9555] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 447.077080][ T9559] syz.3.911: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 447.092456][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.3.911 Not tainted 6.14.0-rc2-syzkaller-00535-g4991b88c2514 #0 [ 447.092481][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 447.092496][ T9559] Call Trace: [ 447.092502][ T9559] [ 447.092510][ T9559] dump_stack_lvl+0x241/0x360 [ 447.092544][ T9559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.092563][ T9559] ? __pfx__printk+0x10/0x10 [ 447.092585][ T9559] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 447.092608][ T9559] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 447.092631][ T9559] warn_alloc+0x278/0x410 [ 447.092650][ T9559] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 447.092677][ T9559] ? __pfx_warn_alloc+0x10/0x10 [ 447.092695][ T9559] ? kasan_save_track+0x3f/0x80 [ 447.092711][ T9559] ? __kasan_kmalloc+0x98/0xb0 [ 447.092729][ T9559] ? xsk_setsockopt+0x4aa/0x810 [ 447.092751][ T9559] ? do_sock_setsockopt+0x3af/0x720 [ 447.092772][ T9559] ? __x64_sys_setsockopt+0x1ee/0x280 [ 447.092792][ T9559] ? do_syscall_64+0xf3/0x230 [ 447.092810][ T9559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.092850][ T9559] __vmalloc_node_range_noprof+0x126/0x1380 [ 447.092904][ T9559] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.092936][ T9559] ? __kasan_kmalloc+0x98/0xb0 [ 447.092959][ T9559] vmalloc_user_noprof+0x74/0x80 [ 447.092984][ T9559] ? xskq_create+0xb6/0x170 [ 447.092999][ T9559] xskq_create+0xb6/0x170 [ 447.093017][ T9559] xsk_init_queue+0xa1/0x100 [ 447.093043][ T9559] xsk_setsockopt+0x4aa/0x810 [ 447.093069][ T9559] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.093092][ T9559] ? __pfx_aa_sk_perm+0x10/0x10 [ 447.093118][ T9559] ? aa_sock_opt_perm+0x79/0x120 [ 447.093145][ T9559] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.093167][ T9559] do_sock_setsockopt+0x3af/0x720 [ 447.093195][ T9559] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 447.093222][ T9559] ? __fget_files+0x395/0x410 [ 447.093242][ T9559] ? __fget_files+0x2a/0x410 [ 447.093272][ T9559] __x64_sys_setsockopt+0x1ee/0x280 [ 447.093301][ T9559] do_syscall_64+0xf3/0x230 [ 447.093321][ T9559] ? clear_bhb_loop+0x35/0x90 [ 447.093346][ T9559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.093367][ T9559] RIP: 0033:0x7f46d438cde9 [ 447.093391][ T9559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.093405][ T9559] RSP: 002b:00007f46d5108038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.093427][ T9559] RAX: ffffffffffffffda RBX: 00007f46d45a5fa0 RCX: 00007f46d438cde9 [ 447.093440][ T9559] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 447.093450][ T9559] RBP: 00007f46d440e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 447.093461][ T9559] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.093471][ T9559] R13: 0000000000000000 R14: 00007f46d45a5fa0 R15: 00007ffc059f4808 [ 447.093499][ T9559] [ 447.093541][ T9559] Mem-Info: [ 447.395497][ T9559] active_anon:17506 inactive_anon:0 isolated_anon:0 [ 447.395497][ T9559] active_file:1380 inactive_file:38350 isolated_file:0 [ 447.395497][ T9559] unevictable:768 dirty:274 writeback:0 [ 447.395497][ T9559] slab_reclaimable:10934 slab_unreclaimable:106468 [ 447.395497][ T9559] mapped:35581 shmem:9772 pagetables:838 [ 447.395497][ T9559] sec_pagetables:0 bounce:0 [ 447.395497][ T9559] kernel_misc_reclaimable:0 [ 447.395497][ T9559] free:1314589 free_pcp:745 free_cma:0 [ 447.440986][ T9559] Node 0 active_anon:69424kB inactive_anon:0kB active_file:5520kB inactive_file:153324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144024kB dirty:1096kB writeback:0kB shmem:36952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12292kB pagetables:3352kB sec_pagetables:0kB all_unreclaimable? no [ 447.474161][ T9559] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 447.527220][ T9559] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.554905][ T9559] lowmem_reserve[]: 0 2490 2490 0 0 [ 447.560213][ T9559] Node 0 DMA32 free:1341420kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:65288kB inactive_anon:0kB active_file:5520kB inactive_file:152996kB unevictable:1536kB writepending:1096kB present:3129332kB managed:2549860kB mlocked:0kB bounce:0kB free_pcp:7664kB local_pcp:248kB free_cma:0kB [ 447.581279][ T9565] No such timeout policy "syz0" [ 447.591011][ T9559] lowmem_reserve[]: 0 0 0 0 0 [ 447.600192][ T9559] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.627323][ T9559] lowmem_reserve[]: 0 0 0 0 0 [ 447.632455][ T9559] Node 1 Normal free:3902008kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.661223][ T9559] lowmem_reserve[]: 0 0 0 0 0 [ 447.666047][ T9559] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 447.679373][ T9559] Node 0 DMA32: 162*4kB (UE) 290*8kB (UE) 54*16kB (UME) 89*32kB (UE) 100*64kB (UE) 69*128kB (UME) 29*256kB (UE) 4*512kB (UME) 11*1024kB (UME) 14*2048kB (UME) 310*4096kB (UM) = 1341080kB [ 447.704343][ T9559] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 447.718973][ T9559] Node 1 Normal: 222*4kB (UE) 60*8kB (UME) 48*16kB (UME) 219*32kB (UME) 96*64kB (UME) 37*128kB (UME) 18*256kB (UME) 13*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3902008kB [ 447.744245][ T9559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.753828][ T9559] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.763970][ T9559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.773637][ T9559] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.783554][ T9559] 46902 total pagecache pages [ 447.788405][ T9559] 0 pages in swap cache [ 447.792571][ T9559] Free swap = 124996kB [ 447.796835][ T9559] Total swap = 124996kB [ 447.801084][ T9559] 2097051 pages RAM [ 447.804978][ T9559] 0 pages HighMem/MovableOnly [ 447.809670][ T9559] 427864 pages reserved [ 447.814014][ T9559] 0 pages cma reserved [ 447.898544][ T9529] lo speed is unknown, defaulting to 1000 [ 447.898675][ T9548] vxcan1 speed is unknown, defaulting to 1000 [ 448.341735][ T9548] lo speed is unknown, defaulting to 1000 [ 448.366060][ T9578] __nla_validate_parse: 7 callbacks suppressed [ 448.366077][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 448.579419][ T9580] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 448.590292][ T9581] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 448.650528][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 449.350430][ T9594] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.470455][ T9594] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.638070][ T9594] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.820666][ T9617] netlink: 32 bytes leftover after parsing attributes in process `syz.3.921'. [ 449.957604][ T9594] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.008925][ T9617] vxcan1 speed is unknown, defaulting to 1000 [ 450.134855][ T9617] lo speed is unknown, defaulting to 1000 [ 450.339520][ T9594] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.479213][ T9594] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.506777][ T9594] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.822549][ T9644] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.902248][ T9594] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.917537][ T9659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.931'. [ 451.104124][ T9644] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.281802][ T9665] vxcan1 speed is unknown, defaulting to 1000 [ 451.527151][ T9675] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 451.547773][ T9675] netlink: 'syz.2.935': attribute type 3 has an invalid length. [ 451.564776][ T9675] netlink: 216 bytes leftover after parsing attributes in process `syz.2.935'. [ 451.570182][ T9644] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.574206][ T9675] NCSI netlink: No device for ifindex 813332851 [ 451.591805][ T9665] lo speed is unknown, defaulting to 1000 [ 451.723095][ T9644] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.029137][ T9644] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.119639][ T9644] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.152764][ T9694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.185528][ T9644] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.216725][ T9644] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.632890][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 452.645731][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 452.657286][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 452.667191][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 452.676295][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 452.778683][ T9731] netlink: 'syz.4.951': attribute type 13 has an invalid length. [ 452.795813][ T9731] gretap0: refused to change device tx_queue_len [ 452.802233][ T9731] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 453.025322][ T9742] vxcan1 speed is unknown, defaulting to 1000 [ 453.171073][ T9742] lo speed is unknown, defaulting to 1000 [ 453.429957][ T9766] bridge1: entered promiscuous mode [ 453.474837][ T9763] netlink: 'syz.2.963': attribute type 10 has an invalid length. [ 453.482198][ T9766] bridge1: entered allmulticast mode [ 453.518255][ T9763] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 453.568784][ T9763] bridge0: port 1(ip6gretap0) entered blocking state [ 453.575873][ T9763] bridge0: port 1(ip6gretap0) entered disabled state [ 453.582750][ T9763] ip6gretap0: entered allmulticast mode [ 453.678987][ T9763] ip6gretap0: entered promiscuous mode [ 453.813641][ T9793] x_tables: ip6_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 453.915415][ T9799] __nla_validate_parse: 32 callbacks suppressed [ 453.915433][ T9799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.972'. [ 453.965143][ T9801] ipt_REJECT: TCP_RESET invalid for non-tcp [ 454.037515][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.974'. [ 454.145059][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 454.225119][ T9809] vxcan1 speed is unknown, defaulting to 1000 [ 454.278937][ T9815] IPVS: length: 118 != 24 [ 454.326754][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 454.424709][ T9825] netlink: 734 bytes leftover after parsing attributes in process `syz.2.982'. [ 454.811214][ T9809] lo speed is unknown, defaulting to 1000 [ 454.934870][ T9844] netlink: 'syz.1.986': attribute type 3 has an invalid length. [ 454.977654][ T9844] netlink: 'syz.1.986': attribute type 3 has an invalid length. [ 454.999999][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.986'. [ 455.025885][ T9848] x_tables: duplicate underflow at hook 3 [ 455.095844][ T9853] netlink: 188 bytes leftover after parsing attributes in process `syz.3.989'. [ 455.186269][ T9855] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 455.210415][ T9855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 455.235854][ T9855] bond6: (slave gretap1): making interface the new active one [ 455.245625][ T9855] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 455.335886][ T9855] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 455.457481][ T9855] syz.3.990 (9855) used greatest stack depth: 18304 bytes left [ 455.508130][ T9873] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 455.539793][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.993'. [ 455.607977][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.996'. [ 455.855846][ T9894] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.878910][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 455.953602][ T9893] vlan2: entered allmulticast mode [ 456.027637][ T9894] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.139535][ T9894] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.213313][ T9906] netem: incorrect ge model size [ 456.226644][ T9906] netem: change failed [ 456.250274][ T9894] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.429214][ T9894] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.459005][ T9894] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.474732][ T9894] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.512675][ T9894] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.530524][ T9930] vxcan1 speed is unknown, defaulting to 1000 [ 456.842054][ T9930] lo speed is unknown, defaulting to 1000 [ 456.886340][ T9947] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.898540][ T9947] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.995793][ T9947] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.013371][ T9947] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.084034][ T9947] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.095201][ T9947] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.161464][ T9947] bond0: (slave netdevsim0): Releasing backup interface [ 457.176604][ T9947] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.188389][ T9947] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.303185][ T9947] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.324113][ T9947] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.351474][ T9947] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.404130][ T9947] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.439353][ T9955] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 457.439362][ T9956] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 457.522329][ T9947] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.544204][ T54] Bluetooth: hci0: command tx timeout [ 457.560849][ T9947] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.631708][ T9947] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.689418][ T9947] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.826374][ T9968] vxcan1 speed is unknown, defaulting to 1000 [ 458.005124][ T9968] lo speed is unknown, defaulting to 1000 [ 458.635440][ T9997] syzkaller0: entered promiscuous mode [ 458.640963][ T9997] syzkaller0: entered allmulticast mode [ 458.657116][ T9999] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 458.833496][T10007] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 458.917998][T10004] vxcan1 speed is unknown, defaulting to 1000 [ 459.048795][T10004] lo speed is unknown, defaulting to 1000 [ 459.468868][T10034] __nla_validate_parse: 3 callbacks suppressed [ 459.468884][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1037'. [ 459.781595][T10043] vxcan1 speed is unknown, defaulting to 1000 [ 459.822721][T10048] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 459.879425][T10053] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 459.896196][T10043] lo speed is unknown, defaulting to 1000 [ 460.128020][T10063] IPVS: set_ctl: invalid protocol: 80 127.0.0.1:20002 [ 460.723785][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 460.832899][T10100] syz.3.1054 (10100) used obsolete PPPIOCDETACH ioctl [ 460.842171][T10100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.854332][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1054'. [ 460.879640][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 461.042718][T10108] netlink: 'syz.4.1051': attribute type 4 has an invalid length. [ 461.154404][T10112] netlink: 'syz.4.1051': attribute type 4 has an invalid length. [ 461.210962][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 461.258997][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1059'. [ 461.329212][T10108] bridge_slave_1: entered promiscuous mode [ 461.343072][T10114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1057'. [ 461.474164][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 461.574806][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 461.575368][T10108] bridge_slave_1 (unregistering): left promiscuous mode [ 461.584833][T10140] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1058'. [ 461.724600][T10136] nbd0: detected capacity change from 0 to 256 [ 461.732842][ T5869] block nbd0: Receive control failed (result -32) [ 461.818221][T10154] netlink: 'syz.3.1067': attribute type 30 has an invalid length. [ 462.099467][T10167] IPVS: length: 208 != 8 [ 462.162585][T10168] netlink: zone id is out of range [ 462.197179][T10168] netlink: set zone limit has 8 unknown bytes [ 462.347685][T10178] netlink: 'syz.2.1076': attribute type 11 has an invalid length. [ 462.527572][T10185] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.709020][T10190] vxcan1 speed is unknown, defaulting to 1000 [ 462.732555][T10185] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.834956][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 462.834978][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 462.835015][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 462.856066][T10185] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.961620][T10185] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.017444][T10190] lo speed is unknown, defaulting to 1000 [ 463.115638][T10185] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.152313][T10185] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.175982][T10206] tap0: tun_chr_ioctl cmd 1074025681 [ 463.183247][T10206] tap0: tun_chr_ioctl cmd 3223385353 [ 463.258664][T10185] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.281112][T10185] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.797861][T10229] lo: entered promiscuous mode [ 464.178917][T10239] netlink: 'syz.4.1097': attribute type 6 has an invalid length. [ 464.362415][T10248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 464.585032][T10259] __nla_validate_parse: 9 callbacks suppressed [ 464.585051][T10259] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1100'. [ 464.615780][T10256] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1100'. [ 464.789338][T10266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1102'. [ 465.193437][T10284] vxcan1 speed is unknown, defaulting to 1000 [ 465.309020][T10284] lo speed is unknown, defaulting to 1000 [ 466.126875][T10304] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 466.145956][T10304] netlink: 'syz.2.1112': attribute type 11 has an invalid length. [ 466.153819][T10304] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1112'. [ 466.252075][T10313] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 466.276105][T10316] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 466.410444][T10323] xfrm0: entered promiscuous mode [ 466.462547][T10313] vxcan1 speed is unknown, defaulting to 1000 [ 466.596543][T10313] lo speed is unknown, defaulting to 1000 [ 466.651620][T10338] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1117'. [ 466.694161][T10338] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1117'. [ 466.707434][T10338] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1117'. [ 466.736311][T10341] vxcan1 speed is unknown, defaulting to 1000 [ 466.757158][T10338] tipc: Started in network mode [ 466.776855][T10338] tipc: Node identity a24c8139fda1, cluster identity 4711 [ 466.789563][T10338] tipc: Enabled bearer , priority 0 [ 466.907953][T10338] syzkaller0: entered promiscuous mode [ 466.943192][T10338] syzkaller0: entered allmulticast mode [ 466.964970][T10338] tipc: Resetting bearer [ 466.985554][T10341] lo speed is unknown, defaulting to 1000 [ 467.062247][T10337] tipc: Resetting bearer [ 467.135757][T10353] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1119'. [ 467.909028][ T5864] tipc: Node number set to 1609400633 [ 468.954288][T10337] tipc: Disabling bearer [ 469.080220][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.094691][T10362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.128540][T10362] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.137996][T10362] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.146570][T10362] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.155387][T10362] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.177955][T10362] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.186992][T10362] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.195676][T10362] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.204108][T10362] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.279921][T10385] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 469.282645][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.293999][T10385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1122'. [ 469.328789][T10359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.370375][T10359] syz.2.1119 (10359) used greatest stack depth: 18000 bytes left [ 469.483437][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1123'. [ 469.680952][T10392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.688253][T10392] IPv6: NLM_F_CREATE should be set when creating new route [ 469.695575][T10392] IPv6: NLM_F_CREATE should be set when creating new route [ 469.702811][T10392] IPv6: NLM_F_CREATE should be set when creating new route [ 469.860558][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 469.953683][T10408] x_tables: duplicate underflow at hook 1 [ 470.214350][T10414] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 470.565492][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 470.656753][T10445] vxcan1 speed is unknown, defaulting to 1000 [ 470.686296][T10448] IPv6: syztnl0: Disabled Multicast RS [ 470.836973][T10458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.844731][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 470.850026][T10455] SET target dimension over the limit! [ 470.856832][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1142'. [ 470.862099][T10458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.977516][T10468] netlink: 'syz.0.1141': attribute type 4 has an invalid length. [ 471.105868][T10458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.116638][T10458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.219728][T10445] lo speed is unknown, defaulting to 1000 [ 471.334318][T10458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.344971][T10458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.404711][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 471.432618][T10458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.443088][T10458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.468934][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 471.559668][T10458] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.568901][T10458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.587881][T10458] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.596924][T10458] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.612104][T10458] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.620997][T10458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.651420][T10458] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.660500][T10458] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.735891][T10499] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1150'. [ 471.820831][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 471.908023][T10501] vxcan1 speed is unknown, defaulting to 1000 [ 472.491634][T10516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1155'. [ 472.501249][T10501] lo speed is unknown, defaulting to 1000 [ 472.501458][T10516] netlink: 'syz.3.1155': attribute type 7 has an invalid length. [ 472.515297][T10516] netlink: 'syz.3.1155': attribute type 8 has an invalid length. [ 472.523047][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 472.870339][T10518] vxcan1 speed is unknown, defaulting to 1000 [ 472.889976][T10521] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 473.162230][T10527] netlink: 'syz.0.1158': attribute type 39 has an invalid length. [ 473.187954][T10518] lo speed is unknown, defaulting to 1000 [ 474.362495][T10569] netlink: 'syz.3.1168': attribute type 30 has an invalid length. [ 474.374873][T10569] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 474.384537][T10569] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 474.462254][T10569] bond0: option xmit_hash_policy: invalid value (71) [ 474.506014][T10569] syzkaller1: entered promiscuous mode [ 474.511646][T10569] syzkaller1: entered allmulticast mode [ 474.923194][T10584] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 474.925253][T10581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.975825][T10581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.059490][T10590] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.108803][T10594] __nla_validate_parse: 6 callbacks suppressed [ 475.108822][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 475.139854][T10590] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.161440][T10597] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1178'. [ 475.186421][T10595] unknown channel width for channel at 909000KHz? [ 475.195075][T10597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1178'. [ 475.239531][T10595] unknown channel width for channel at 909000KHz? [ 475.260100][T10595] unknown channel width for channel at 909000KHz? [ 475.261793][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1179'. [ 475.285302][T10601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.317264][T10590] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.414976][T10603] netlink: 'syz.1.1180': attribute type 10 has an invalid length. [ 475.448787][T10590] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.490761][T10603] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 475.642742][T10590] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.709097][T10590] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.738890][T10614] netlink: 'syz.0.1183': attribute type 21 has an invalid length. [ 475.782477][T10590] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.840122][T10590] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.860150][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1185'. [ 476.212664][T10636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 476.323353][T10632] sctp: [Deprecated]: syz.3.1188 (pid 10632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.323353][T10632] Use struct sctp_sack_info instead [ 476.398136][T10637] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1188'. [ 476.541891][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 476.555064][T10643] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 476.715117][T10647] pim6reg: entered allmulticast mode [ 477.191349][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 477.261891][T10663] rose2: entered allmulticast mode [ 477.412318][T10690] vxcan1 speed is unknown, defaulting to 1000 [ 477.444968][T10695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.461804][T10695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.487734][T10697] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 477.512149][T10697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.572395][T10697] bond4: (slave veth5): Enslaving as an active interface with a down link [ 477.649150][T10697] bridge0: port 1(batadv0) entered blocking state [ 477.660569][T10697] bridge0: port 1(batadv0) entered disabled state [ 477.667944][T10697] batadv0: entered allmulticast mode [ 477.675376][T10697] batadv0: entered promiscuous mode [ 477.681820][T10690] lo speed is unknown, defaulting to 1000 [ 478.133411][T10710] tipc: Failed to obtain node identity [ 478.139297][T10710] tipc: Enabling of bearer rejected, failed to enable media [ 478.154096][ T7825] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 478.163368][ T7825] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 479.036082][T10737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.052581][T10737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35479 - 0 [ 479.089642][T10737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 46264 - 0 [ 479.213075][T10737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.271011][T10737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35479 - 0 [ 479.299378][T10737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 46264 - 0 [ 479.344723][T10747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1224'. [ 479.484521][T10737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.513094][T10737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35479 - 0 [ 479.576630][T10737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 46264 - 0 [ 479.748038][T10737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.774788][T10737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35479 - 0 [ 479.863434][T10737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 46264 - 0 [ 480.027444][T10737] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 46264 - 0 [ 480.062832][T10737] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 35479 - 0 [ 480.076680][T10737] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 480.097781][T10769] vxcan1 speed is unknown, defaulting to 1000 [ 480.132754][T10737] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 46264 - 0 [ 480.164551][T10737] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 35479 - 0 [ 480.173130][T10737] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 480.193112][T10737] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 46264 - 0 [ 480.210454][T10776] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.217972][T10737] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 35479 - 0 [ 480.233406][T10737] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 480.263752][T10737] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 46264 - 0 [ 480.288269][T10737] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 35479 - 0 [ 480.323801][T10737] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 480.332663][T10769] lo speed is unknown, defaulting to 1000 [ 480.573962][T10786] __nla_validate_parse: 3 callbacks suppressed [ 480.573980][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 480.603433][T10788] netlink: 'syz.0.1235': attribute type 30 has an invalid length. [ 480.624307][T10786] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1236'. [ 480.636534][T10786] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 480.668777][T10786] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.685306][T10786] team0: entered promiscuous mode [ 480.690928][T10786] bond0: (slave team0): Enslaving as an active interface with an up link [ 480.968078][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 481.205011][T10814] set match dimension is over the limit! [ 481.222482][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1244'. [ 481.247436][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'. [ 481.296879][T10814] pim6reg: entered allmulticast mode [ 481.303748][T10813] xt_ecn: cannot match TCP bits for non-tcp packets [ 481.977735][T10857] IPv6: sit4: Disabled Multicast RS [ 482.058178][T10862] IPv6: sit1: Disabled Multicast RS [ 482.215855][T10871] netlink: 'syz.2.1260': attribute type 1 has an invalid length. [ 482.266165][T10871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1260'. [ 482.375750][T10873] netlink: 'syz.0.1261': attribute type 10 has an invalid length. [ 482.383584][T10873] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1261'. [ 482.834473][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1262'. [ 482.853856][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 482.866569][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 482.892966][T10886] vxcan1 speed is unknown, defaulting to 1000 [ 483.392801][T10886] lo speed is unknown, defaulting to 1000 [ 486.043450][T10975] __nla_validate_parse: 1 callbacks suppressed [ 486.043471][T10975] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1282'. [ 487.101525][T11003] syzkaller1: entered promiscuous mode [ 487.124064][T11003] syzkaller1: entered allmulticast mode [ 487.664368][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 487.791136][T11028] siw: device registration error -23 [ 487.938577][T11046] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1311'. [ 487.948413][T11046] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1311'. [ 487.960530][T11046] netlink: 'syz.3.1311': attribute type 6 has an invalid length. [ 487.969640][T11046] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1311'. [ 488.099021][T11056] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1313'. [ 488.114477][T11056] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 488.138337][T11056] netlink: 'syz.3.1313': attribute type 2 has an invalid length. [ 488.157677][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 488.187351][T11057] netlink: 'syz.2.1310': attribute type 21 has an invalid length. [ 488.386083][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1315'. [ 488.414893][T11067] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 488.431082][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1315'. [ 488.673548][T11075] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1320'. [ 488.803118][T11081] netlink: 'syz.3.1321': attribute type 10 has an invalid length. [ 489.340093][T11109] vlan1: entered allmulticast mode [ 489.424858][T11114] can: request_module (can-proto-4) failed. [ 489.442433][T11117] sctp: [Deprecated]: syz.0.1331 (pid 11117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.442433][T11117] Use struct sctp_sack_info instead [ 489.463203][T11117] netlink: 'syz.0.1331': attribute type 8 has an invalid length. [ 489.587975][T11124] sctp: [Deprecated]: syz.0.1334 (pid 11124) Use of int in max_burst socket option. [ 489.587975][T11124] Use struct sctp_assoc_value instead [ 489.631044][T11127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.648549][T11129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.665342][T11130] x_tables: duplicate underflow at hook 1 [ 489.861921][T11134] netlink: 'syz.4.1338': attribute type 19 has an invalid length. [ 490.219642][T11150] can: request_module (can-proto-3) failed. [ 490.303825][T11157] vxcan1 speed is unknown, defaulting to 1000 [ 490.401601][T11157] lo speed is unknown, defaulting to 1000 [ 490.608760][ T29] audit: type=1804 audit(1739950763.947:5): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1344" name="/newroot/414/cgroup.controllers" dev="tmpfs" ino=2144 res=1 errno=0 [ 490.738627][ T29] audit: type=1800 audit(1739950763.947:6): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1344" name="cgroup.controllers" dev="tmpfs" ino=2144 res=0 errno=0 [ 490.840914][ T29] audit: type=1804 audit(1739950763.947:7): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1344" name="/newroot/414/cgroup.controllers" dev="tmpfs" ino=2144 res=1 errno=0 [ 490.900017][ T29] audit: type=1800 audit(1739950763.947:8): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1344" name="cgroup.controllers" dev="tmpfs" ino=2144 res=0 errno=0 [ 491.511748][T11188] netlink: 'syz.2.1356': attribute type 21 has an invalid length. [ 491.530229][T11188] __nla_validate_parse: 4 callbacks suppressed [ 491.530247][T11188] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1356'. [ 491.559668][T11188] netlink: 'syz.2.1356': attribute type 4 has an invalid length. [ 491.569629][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1356'. [ 491.578979][T11188] netlink: 'syz.2.1356': attribute type 3 has an invalid length. [ 491.587332][T11188] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1356'. [ 491.606296][T11191] vti0: entered promiscuous mode [ 491.768965][T11201] vxcan1 speed is unknown, defaulting to 1000 [ 491.842287][T11203] netlink: 'syz.2.1358': attribute type 11 has an invalid length. [ 491.865764][T11201] lo speed is unknown, defaulting to 1000 [ 492.011619][T11203] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1358'. [ 492.046115][T11209] netlink: 'syz.2.1358': attribute type 11 has an invalid length. [ 492.070371][T11209] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1358'. [ 492.230584][T11224] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1364'. [ 492.344517][T11230] dvmrp0: entered allmulticast mode [ 492.354022][T11230] dvmrp0: left allmulticast mode [ 492.738223][T11252] vxcan1 speed is unknown, defaulting to 1000 [ 493.022105][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 493.031402][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'. [ 493.129188][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 493.144209][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'. [ 493.551251][T11252] lo speed is unknown, defaulting to 1000 [ 493.557826][T11276] vxcan1 speed is unknown, defaulting to 1000 [ 493.685238][T11253] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 493.912705][T11296] xt_connbytes: Forcing CT accounting to be enabled [ 493.927282][T11296] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 494.016431][T11276] lo speed is unknown, defaulting to 1000 [ 494.514516][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 494.647505][T11318] netlink: 'syz.4.1390': attribute type 1 has an invalid length. [ 494.780597][T11322] syzkaller0: entered promiscuous mode [ 494.804363][T11322] syzkaller0: entered allmulticast mode [ 494.892752][T11328] netlink: 'syz.4.1394': attribute type 6 has an invalid length. [ 494.944176][T11328] netlink: 'syz.4.1394': attribute type 7 has an invalid length. [ 494.951961][T11328] netlink: 'syz.4.1394': attribute type 8 has an invalid length. [ 495.497703][T11350] netlink: 'syz.4.1398': attribute type 1 has an invalid length. [ 497.085896][T11332] pim6reg1: entered promiscuous mode [ 497.091300][T11332] pim6reg1: entered allmulticast mode [ 497.097738][T11351] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 497.347464][T11360] __nla_validate_parse: 23 callbacks suppressed [ 497.347484][T11360] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1401'. [ 497.402618][T11370] macvlan0: entered promiscuous mode [ 497.409152][T11370] bridge0: entered promiscuous mode [ 497.417568][T11370] bridge0: port 1(macvlan0) entered blocking state [ 497.426578][T11370] bridge0: port 1(macvlan0) entered disabled state [ 497.433469][T11370] macvlan0: entered allmulticast mode [ 497.439462][T11370] bridge0: entered allmulticast mode [ 497.448502][T11370] macvlan0: left allmulticast mode [ 497.455246][T11370] bridge0: left allmulticast mode [ 497.465113][T11370] bridge0: left promiscuous mode [ 497.497484][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 497.531146][T11365] macvlan0: entered promiscuous mode [ 497.537254][T11365] macvlan0: entered allmulticast mode [ 497.588956][T11367] vxcan1 speed is unknown, defaulting to 1000 [ 497.827644][T11367] lo speed is unknown, defaulting to 1000 [ 498.408259][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 498.417805][T11398] bond0: (slave syz_tun): Releasing backup interface [ 498.519562][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1415'. [ 498.637047][T11402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.772137][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 498.951761][T11426] netlink: 'syz.2.1421': attribute type 4 has an invalid length. [ 498.981980][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 499.010923][T11429] netlink: 'syz.2.1421': attribute type 4 has an invalid length. [ 499.055948][T11431] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 499.162718][T11431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.303846][T11446] vxcan1 speed is unknown, defaulting to 1000 [ 499.718221][T11446] lo speed is unknown, defaulting to 1000 [ 499.746057][T11475] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 499.949401][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 499.984558][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 500.015125][T11489] sctp: [Deprecated]: syz.0.1437 (pid 11489) Use of int in maxseg socket option. [ 500.015125][T11489] Use struct sctp_assoc_value instead [ 500.187466][T11490] vxcan1 speed is unknown, defaulting to 1000 [ 500.291503][T11490] lo speed is unknown, defaulting to 1000 [ 500.452319][T11496] No such timeout policy "syz0" [ 500.916957][T11508] sctp: [Deprecated]: syz.0.1443 (pid 11508) Use of int in maxseg socket option. [ 500.916957][T11508] Use struct sctp_assoc_value instead [ 500.992891][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 501.024262][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 501.086727][T11512] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 501.581292][T11532] vxcan1 speed is unknown, defaulting to 1000 [ 501.682895][T11532] lo speed is unknown, defaulting to 1000 [ 502.099696][T11549] vxcan1 speed is unknown, defaulting to 1000 [ 502.105768][T11553] ªªªªª: renamed from bridge0 (while UP) [ 502.115749][T11553] ªªªªª: port 1(hsr0) entered disabled state [ 502.122440][T11553] ªªªªª: entered promiscuous mode [ 502.131619][T11553] ªªªªª: entered allmulticast mode [ 502.361955][T11563] __nla_validate_parse: 3 callbacks suppressed [ 502.361974][T11563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1457'. [ 502.411278][T11563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1457'. [ 502.651993][T11571] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.1460'. [ 502.702028][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.755143][T11573] netlink: 'syz.1.1460': attribute type 4 has an invalid length. [ 502.786953][T11567] vxcan1 speed is unknown, defaulting to 1000 [ 502.812255][T11577] netlink: 'syz.2.1463': attribute type 2 has an invalid length. [ 502.834267][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 502.886504][ T5912] lo speed is unknown, defaulting to 1000 [ 502.936783][ T975] lo speed is unknown, defaulting to 1000 [ 503.012085][T11586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1465'. [ 503.035465][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1465'. [ 503.088709][T11586] openvswitch: netlink: Message has 8 unknown bytes. [ 503.204516][T11567] lo speed is unknown, defaulting to 1000 [ 503.847880][T11632] netlink: 'syz.2.1476': attribute type 21 has an invalid length. [ 503.874346][T11632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1476'. [ 503.899088][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 504.044158][T11640] netlink: 'syz.3.1480': attribute type 11 has an invalid length. [ 504.111673][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 504.122794][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 504.194158][ T29] audit: type=1804 audit(1739950777.517:9): pid=11642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1479" name="/newroot/255/cgroup.controllers" dev="tmpfs" ino=1324 res=1 errno=0 [ 504.294218][ T29] audit: type=1800 audit(1739950777.517:10): pid=11642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1479" name="cgroup.controllers" dev="tmpfs" ino=1324 res=0 errno=0 [ 504.823275][T11667] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 505.395622][T11699] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 505.743627][T11702] netlink: zone id is out of range [ 505.794259][T11702] netlink: zone id is out of range [ 505.802567][T11702] netlink: zone id is out of range [ 505.809128][T11702] netlink: zone id is out of range [ 506.003537][T11711] vxcan1 speed is unknown, defaulting to 1000 [ 506.129195][T11722] IPv6: syztnl0: Disabled Multicast RS [ 506.206969][T11711] lo speed is unknown, defaulting to 1000 [ 506.416694][T11729] xt_hashlimit: max too large, truncated to 1048576 [ 506.612395][T11731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.622625][T11731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.651129][T11731] bond0 (unregistering): (slave bond2): Releasing backup interface [ 506.664624][T11731] bond0 (unregistering): Released all slaves [ 506.939643][T11748] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 507.013226][T11748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.047604][T11757] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 507.337483][T11766] vxcan1 speed is unknown, defaulting to 1000 [ 507.815143][T11781] __nla_validate_parse: 15 callbacks suppressed [ 507.815162][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 507.922902][T11788] ip6gretap0: entered promiscuous mode [ 507.952846][T11788] batadv_slave_0: entered promiscuous mode [ 508.040110][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 508.185723][T11766] lo speed is unknown, defaulting to 1000 [ 508.206757][T11784] vxcan1 speed is unknown, defaulting to 1000 [ 508.266736][T11794] x_tables: ip6_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 508.421817][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 508.616202][T11784] lo speed is unknown, defaulting to 1000 [ 509.047927][T11781] smc: removing ib device syz0 [ 509.145240][T11804] vxcan1 speed is unknown, defaulting to 1000 [ 509.620575][T11814] xt_nfacct: accounting object `syz1' does not exists [ 509.780702][T11819] x_tables: duplicate underflow at hook 3 [ 510.337085][T11837] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 510.346557][T11837] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1539'. [ 510.467834][T11839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1541'. [ 510.477061][T11839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1541'. [ 510.491694][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1541'. [ 510.503158][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1541'. [ 510.531399][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 510.612556][T11850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1544'. [ 510.814983][T11854] vxcan1 speed is unknown, defaulting to 1000 [ 511.556485][T11870] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 511.660506][T11876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.926811][T11890] netlink: 'syz.3.1553': attribute type 10 has an invalid length. [ 511.937008][T11890] ieee802154 phy0 wpan0: entered promiscuous mode [ 511.944455][T11890] team0: Port device wpan0 added [ 512.039070][T11898] netlink: 'syz.3.1556': attribute type 10 has an invalid length. [ 512.136200][T11893] netlink: 'syz.0.1554': attribute type 25 has an invalid length. [ 512.148219][T11898] team0: Device geneve0 is of different type [ 512.156609][T11898] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 512.255804][T11907] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 512.284495][T11910] syz_tun: entered allmulticast mode [ 512.926069][T11900] syz_tun: left allmulticast mode [ 513.168424][T11964] netlink: 'syz.4.1576': attribute type 10 has an invalid length. [ 513.216962][T11964] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 513.236648][T11973] macvlan0: entered promiscuous mode [ 513.254361][T11973] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 513.268121][T11973] netlink: 'syz.0.1578': attribute type 2 has an invalid length. [ 513.325586][T11964] tun0: tun_chr_ioctl cmd 1074025677 [ 513.331046][T11964] tun0: linktype set to 512 [ 513.693107][T12003] x_tables: duplicate underflow at hook 1 [ 514.099920][T12029] __nla_validate_parse: 39 callbacks suppressed [ 514.099938][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 514.146634][T12028] vxcan1 speed is unknown, defaulting to 1000 [ 514.378963][T12044] netlink: 'syz.3.1600': attribute type 2 has an invalid length. [ 514.588212][T12050] vxcan1 speed is unknown, defaulting to 1000 [ 514.674411][T12049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1601'. [ 514.706754][T12049] lo: left promiscuous mode [ 514.818949][T12049] ªªªªª: left promiscuous mode [ 514.834039][T12049] ªªªªª: left allmulticast mode [ 514.847150][T12049] batman_adv: batadv0: Interface activated: dummy0 [ 514.865868][T12049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.078433][T12055] vxcan1 speed is unknown, defaulting to 1000 [ 558.402599][T12058] xt_hashlimit: max too large, truncated to 1048576 [ 558.531801][T12068] can: request_module (can-proto-5) failed. [ 558.541041][T12066] vxcan1 speed is unknown, defaulting to 1000 [ 558.646042][T12084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1610'. [ 558.886639][ T29] audit: type=1800 audit(1739950832.227:11): pid=12092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1613" name="(" dev="tmpfs" ino=1460 res=0 errno=0 [ 559.108017][T12101] ipt_rpfilter: unknown options [ 559.299406][ T51] IPVS: starting estimator thread 0... [ 559.394696][T12114] IPVS: using max 29 ests per chain, 69600 per kthread [ 559.430365][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'. [ 559.773287][T12134] vxcan1 speed is unknown, defaulting to 1000 [ 560.028152][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 560.219011][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 560.279257][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 560.290439][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 560.341961][T12168] netlink: 'syz.3.1630': attribute type 10 has an invalid length. [ 560.353023][T12168] bond0: (slave team0): Releasing backup interface [ 560.362356][T12168] team0: left promiscuous mode [ 560.368638][T12168] ieee802154 phy0 wpan0: left promiscuous mode [ 560.438865][ T5916] IPVS: stop unused estimator thread 0... [ 560.709866][T12177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1632'. [ 561.117965][T12204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'. [ 561.132140][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 561.201740][T12211] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1641'. [ 561.355840][T12219] netlink: 'syz.2.1643': attribute type 30 has an invalid length. [ 561.625735][T12238] netlink: 'syz.0.1648': attribute type 29 has an invalid length. [ 561.689051][T12240] netlink: 'syz.0.1648': attribute type 29 has an invalid length. [ 562.109762][T12268] lo speed is unknown, defaulting to 1000 [ 562.136453][T12268] lo speed is unknown, defaulting to 1000 [ 562.141887][T12271] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 562.146065][T12268] lo speed is unknown, defaulting to 1000 [ 562.175464][T12268] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 562.199339][T12250] bond0: (slave gretap3): making interface the new active one [ 562.242199][T12250] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 562.253017][T12268] lo speed is unknown, defaulting to 1000 [ 562.256306][T12275] IPv6: syztnl0: Disabled Multicast RS [ 562.278625][T12268] lo speed is unknown, defaulting to 1000 [ 562.300522][T12268] lo speed is unknown, defaulting to 1000 [ 562.323380][T12268] lo speed is unknown, defaulting to 1000 [ 562.339312][T12268] lo speed is unknown, defaulting to 1000 [ 562.545865][T12295] netlink: 'syz.1.1658': attribute type 4 has an invalid length. [ 562.575959][T12295] ip6t_srh: unknown srh invflags 4000 [ 562.635429][T12300] netlink: 'syz.2.1664': attribute type 2 has an invalid length. [ 562.660863][T12293] syzkaller1: entered promiscuous mode [ 562.667697][T12293] syzkaller1: entered allmulticast mode [ 562.676781][T12300] xt_TPROXY: Can be used only with -p tcp or -p udp [ 563.430087][T12354] sctp: [Deprecated]: syz.3.1682 (pid 12354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.430087][T12354] Use struct sctp_sack_info instead [ 563.764853][T12374] macsec1: entered promiscuous mode [ 563.770082][T12374] macsec1: entered allmulticast mode [ 563.796968][ T51] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 563.806201][ T51] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 564.193117][T12398] __nla_validate_parse: 7 callbacks suppressed [ 564.193143][T12398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1692'. [ 564.296968][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 564.445691][T12408] atomic_op ffff888057e96198 conn xmit_atomic 0000000000000000 [ 564.562228][T12419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1699'. [ 564.641328][T12422] vxcan1 speed is unknown, defaulting to 1000 [ 564.758032][T12426] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 565.036799][T12422] lo speed is unknown, defaulting to 1000 [ 565.060202][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 565.097474][T12446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.201996][T12457] netlink: 'syz.1.1707': attribute type 64 has an invalid length. [ 565.248082][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 565.433687][T12463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1709'. [ 565.987003][T12489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1713'. [ 566.653380][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1718'. [ 567.168682][T12521] No such timeout policy "syz1" [ 567.222449][T12526] netlink: 'syz.3.1728': attribute type 2 has an invalid length. [ 567.230558][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 567.498052][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1730'. [ 567.520817][ T29] audit: type=1804 audit(1739950840.857:12): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1733" name="/newroot/300/cgroup.controllers" dev="tmpfs" ino=1559 res=1 errno=0 [ 567.609384][ T29] audit: type=1800 audit(1739950840.857:13): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1733" name="cgroup.controllers" dev="tmpfs" ino=1559 res=0 errno=0 [ 567.693867][ T29] audit: type=1804 audit(1739950840.887:14): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1733" name="/newroot/300/cgroup.controllers" dev="tmpfs" ino=1559 res=1 errno=0 [ 567.794451][ T29] audit: type=1804 audit(1739950840.887:15): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1733" name="/newroot/300/cgroup.controllers" dev="tmpfs" ino=1559 res=1 errno=0 [ 567.831130][T12557] pimreg: entered allmulticast mode [ 568.487487][T12550] pimreg: left allmulticast mode [ 568.798061][T12565] IPv6: addrconf: prefix option has invalid lifetime [ 568.814561][T12564] lo speed is unknown, defaulting to 1000 [ 568.820953][T12564] lo speed is unknown, defaulting to 1000 [ 568.828487][T12564] lo speed is unknown, defaulting to 1000 [ 568.845175][T12564] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 568.865985][T12564] lo speed is unknown, defaulting to 1000 [ 568.872986][T12564] lo speed is unknown, defaulting to 1000 [ 568.879902][T12564] lo speed is unknown, defaulting to 1000 [ 568.886734][T12564] lo speed is unknown, defaulting to 1000 [ 568.893488][T12564] lo speed is unknown, defaulting to 1000 [ 569.263093][T12555] sctp: [Deprecated]: syz.0.1735 (pid 12555) Use of int in max_burst socket option deprecated. [ 569.263093][T12555] Use struct sctp_assoc_value instead [ 569.405620][T12585] vxcan1 speed is unknown, defaulting to 1000 [ 569.583637][T12604] xt_hashlimit: size too large, truncated to 1048576 [ 569.661228][T12609] : renamed from bond0 (while UP) [ 569.839744][T12615] netlink: 'syz.2.1751': attribute type 11 has an invalid length. [ 569.889844][T12615] __nla_validate_parse: 2 callbacks suppressed [ 569.889888][T12615] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1751'. [ 570.062955][T12620] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1753'. [ 570.588826][T12635] netlink: 'syz.2.1758': attribute type 21 has an invalid length. [ 570.614034][T12585] lo speed is unknown, defaulting to 1000 [ 570.646781][T12638] netlink: 'syz.1.1757': attribute type 21 has an invalid length. [ 570.734036][T12585] lo speed is unknown, defaulting to 1000 [ 570.740458][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 570.751163][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 571.032145][T12657] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1765'. [ 571.302510][ T8085] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.334096][ T8085] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.390512][T12657] vxcan1 speed is unknown, defaulting to 1000 [ 571.444131][ T8085] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.474065][ T8085] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.660497][ T8085] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.686347][ T8085] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.778919][ T8085] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.819788][ T8085] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.884687][T12657] lo speed is unknown, defaulting to 1000 [ 571.945122][T12657] lo speed is unknown, defaulting to 1000 [ 572.023198][T12677] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 572.038881][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.060246][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.070464][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.080186][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.088842][ T5876] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 572.096547][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.426162][ T8085] bond6 (unregistering): (slave gretap1): Releasing active interface [ 572.842670][ T8085] bond0 (unregistering): Released all slaves [ 572.853579][ T8085] bond1 (unregistering): Released all slaves [ 572.992466][ T8085] bond2 (unregistering): Released all slaves [ 573.191110][ T8085] bond3 (unregistering): Released all slaves [ 573.327456][ T8085] bond4 (unregistering): Released all slaves [ 573.441796][ T8085] bond5 (unregistering): Released all slaves [ 573.560484][ T8085] bond6 (unregistering): Released all slaves [ 573.571228][ T8085] bond7 (unregistering): Released all slaves [ 573.591800][T12678] vxcan1 speed is unknown, defaulting to 1000 [ 573.762935][ T8085] tipc: Disabling bearer [ 573.774591][ T8085] tipc: Left network mode [ 573.940318][T12688] vxcan1 speed is unknown, defaulting to 1000 [ 573.956135][T12678] lo speed is unknown, defaulting to 1000 [ 573.963072][T12678] lo speed is unknown, defaulting to 1000 [ 574.186454][ T5876] Bluetooth: hci4: command tx timeout [ 574.247198][T12704] netlink: 'syz.4.1778': attribute type 10 has an invalid length. [ 574.341234][T12688] lo speed is unknown, defaulting to 1000 [ 574.348173][T12688] lo speed is unknown, defaulting to 1000 [ 574.469709][T12710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1781'. [ 574.730230][ T8085] team0: Port device wpan0 removed [ 574.818327][ T8085] hsr_slave_0: left promiscuous mode [ 574.836865][ T8085] hsr_slave_1: left promiscuous mode [ 574.849060][ T8085] veth0_to_batadv: left allmulticast mode [ 574.864139][ T8085] veth0_macvtap: left promiscuous mode [ 575.811943][T12739] xt_TCPMSS: Only works on TCP SYN packets [ 575.857811][T12678] chnl_net:caif_netlink_parms(): no params data found [ 576.083725][T12746] netlink: 'syz.4.1787': attribute type 7 has an invalid length. [ 576.269278][ T5876] Bluetooth: hci4: command tx timeout [ 576.293846][T12678] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.301042][T12678] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.351862][T12678] bridge_slave_0: entered allmulticast mode [ 576.370630][T12678] bridge_slave_0: entered promiscuous mode [ 576.387671][T12678] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.409014][T12678] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.421891][T12678] bridge_slave_1: entered allmulticast mode [ 576.431418][T12678] bridge_slave_1: entered promiscuous mode [ 576.502152][T12678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.553788][T12678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.577951][T12780] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 576.595314][T12780] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1794'. [ 576.615432][T12780] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1794'. [ 577.285934][T12784] vxcan1 speed is unknown, defaulting to 1000 [ 577.302076][T12678] team0: Port device team_slave_0 added [ 577.336157][ T8085] ------------[ cut here ]------------ [ 577.341668][ T8085] WARNING: CPU: 0 PID: 8085 at fs/proc/proc_sysctl.c:1555 retire_sysctl_set+0x47/0x50 [ 577.351356][ T8085] Modules linked in: [ 577.355341][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: kworker/u8:27 Not tainted 6.14.0-rc2-syzkaller-00535-g4991b88c2514 #0 [ 577.366337][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 577.376600][ T8085] Workqueue: netns cleanup_net [ 577.381393][ T8085] RIP: 0010:retire_sysctl_set+0x47/0x50 [ 577.387117][ T8085] Code: 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 f0 95 c3 ff 48 83 3b 00 75 0b e8 95 58 5c ff 5b c3 cc cc cc cc e8 8a 58 5c ff 90 <0f> 0b 90 5b c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 577.398369][T12678] team0: Port device team_slave_1 added [ 577.406838][ T8085] RSP: 0018:ffffc9000482fa10 EFLAGS: 00010293 [ 577.406875][ T8085] RAX: ffffffff82655ed6 RBX: ffff88806079a130 RCX: ffff88802d05bc00 [ 577.406891][ T8085] RDX: 0000000000000000 RSI: ffff88802d05bc00 RDI: ffff88806079a0d0 [ 577.406905][ T8085] RBP: ffffc9000482fb10 R08: ffffffff9454484f R09: 1ffffffff28a8909 [ 577.443051][ T8085] R10: dffffc0000000000 R11: ffffffff8bc1d7c0 R12: ffff888060799e40 [ 577.451217][ T8085] R13: 1ffffffff203a3c0 R14: ffffffff901d1de0 R15: ffffffff901d1e00 [ 577.459302][ T8085] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 577.468399][ T8085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.475068][ T8085] CR2: 00007ffe67655f78 CR3: 00000000636ba000 CR4: 00000000003526f0 [ 577.483062][ T8085] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.491125][ T8085] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 577.499168][ T8085] Call Trace: [ 577.502469][ T8085] [ 577.505515][ T8085] ? __warn+0x165/0x4d0 [ 577.509698][ T8085] ? retire_sysctl_set+0x47/0x50 [ 577.514726][ T8085] ? report_bug+0x2b3/0x500 [ 577.519263][ T8085] ? retire_sysctl_set+0x47/0x50 [ 577.524326][ T8085] ? handle_bug+0x60/0x90 [ 577.528670][ T8085] ? exc_invalid_op+0x1a/0x50 [ 577.533338][ T8085] ? asm_exc_invalid_op+0x1a/0x20 [ 577.538488][ T8085] ? __pfx_sysctl_net_exit+0x10/0x10 [ 577.543800][ T8085] ? retire_sysctl_set+0x46/0x50 [ 577.548812][ T8085] ? retire_sysctl_set+0x47/0x50 [ 577.553771][ T8085] cleanup_net+0x812/0xd60 [ 577.558283][ T8085] ? __pfx_cleanup_net+0x10/0x10 [ 577.563237][ T8085] ? process_scheduled_works+0x9c6/0x18e0 [ 577.569028][ T8085] process_scheduled_works+0xabe/0x18e0 [ 577.574683][ T8085] ? __pfx_process_scheduled_works+0x10/0x10 [ 577.580698][ T8085] ? assign_work+0x364/0x3d0 [ 577.585380][ T8085] worker_thread+0x870/0xd30 [ 577.590000][ T8085] ? __kthread_parkme+0x169/0x1d0 [ 577.595108][ T8085] ? __pfx_worker_thread+0x10/0x10 [ 577.600244][ T8085] kthread+0x7a9/0x920 [ 577.604393][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.609016][ T8085] ? __pfx_worker_thread+0x10/0x10 [ 577.614217][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.618833][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.623434][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.628189][ T8085] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.633420][ T8085] ? lockdep_hardirqs_on+0x99/0x150 [ 577.638686][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.643293][ T8085] ret_from_fork+0x4b/0x80 [ 577.647769][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.652369][ T8085] ret_from_fork_asm+0x1a/0x30 [ 577.657217][ T8085] [ 577.660254][ T8085] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 577.667527][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: kworker/u8:27 Not tainted 6.14.0-rc2-syzkaller-00535-g4991b88c2514 #0 [ 577.678448][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 577.688495][ T8085] Workqueue: netns cleanup_net [ 577.693262][ T8085] Call Trace: [ 577.696535][ T8085] [ 577.699456][ T8085] dump_stack_lvl+0x241/0x360 [ 577.704127][ T8085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.709407][ T8085] ? __pfx__printk+0x10/0x10 [ 577.714006][ T8085] ? vscnprintf+0x5d/0x90 [ 577.718335][ T8085] panic+0x349/0x880 [ 577.722237][ T8085] ? __warn+0x174/0x4d0 [ 577.726388][ T8085] ? __pfx_panic+0x10/0x10 [ 577.730811][ T8085] ? ret_from_fork_asm+0x1a/0x30 [ 577.735752][ T8085] __warn+0x344/0x4d0 [ 577.739737][ T8085] ? retire_sysctl_set+0x47/0x50 [ 577.744670][ T8085] report_bug+0x2b3/0x500 [ 577.748995][ T8085] ? retire_sysctl_set+0x47/0x50 [ 577.753930][ T8085] handle_bug+0x60/0x90 [ 577.758079][ T8085] exc_invalid_op+0x1a/0x50 [ 577.762572][ T8085] asm_exc_invalid_op+0x1a/0x20 [ 577.767414][ T8085] RIP: 0010:retire_sysctl_set+0x47/0x50 [ 577.772953][ T8085] Code: 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 f0 95 c3 ff 48 83 3b 00 75 0b e8 95 58 5c ff 5b c3 cc cc cc cc e8 8a 58 5c ff 90 <0f> 0b 90 5b c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 577.792549][ T8085] RSP: 0018:ffffc9000482fa10 EFLAGS: 00010293 [ 577.798609][ T8085] RAX: ffffffff82655ed6 RBX: ffff88806079a130 RCX: ffff88802d05bc00 [ 577.806568][ T8085] RDX: 0000000000000000 RSI: ffff88802d05bc00 RDI: ffff88806079a0d0 [ 577.814529][ T8085] RBP: ffffc9000482fb10 R08: ffffffff9454484f R09: 1ffffffff28a8909 [ 577.822488][ T8085] R10: dffffc0000000000 R11: ffffffff8bc1d7c0 R12: ffff888060799e40 [ 577.830449][ T8085] R13: 1ffffffff203a3c0 R14: ffffffff901d1de0 R15: ffffffff901d1e00 [ 577.838417][ T8085] ? __pfx_sysctl_net_exit+0x10/0x10 [ 577.843708][ T8085] ? retire_sysctl_set+0x46/0x50 [ 577.848645][ T8085] cleanup_net+0x812/0xd60 [ 577.853056][ T8085] ? __pfx_cleanup_net+0x10/0x10 [ 577.857995][ T8085] ? process_scheduled_works+0x9c6/0x18e0 [ 577.863705][ T8085] process_scheduled_works+0xabe/0x18e0 [ 577.869268][ T8085] ? __pfx_process_scheduled_works+0x10/0x10 [ 577.875248][ T8085] ? assign_work+0x364/0x3d0 [ 577.879832][ T8085] worker_thread+0x870/0xd30 [ 577.884427][ T8085] ? __kthread_parkme+0x169/0x1d0 [ 577.889451][ T8085] ? __pfx_worker_thread+0x10/0x10 [ 577.894557][ T8085] kthread+0x7a9/0x920 [ 577.898618][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.903201][ T8085] ? __pfx_worker_thread+0x10/0x10 [ 577.908304][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.912894][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.917481][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.922075][ T8085] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.927262][ T8085] ? lockdep_hardirqs_on+0x99/0x150 [ 577.932452][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.937037][ T8085] ret_from_fork+0x4b/0x80 [ 577.941444][ T8085] ? __pfx_kthread+0x10/0x10 [ 577.946028][ T8085] ret_from_fork_asm+0x1a/0x30 [ 577.950802][ T8085] [ 577.954089][ T8085] Kernel Offset: disabled [ 577.958442][ T8085] Rebooting in 86400 seconds..