last executing test programs: 2.908693798s ago: executing program 3 (id=4289): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) close(r5) close(r6) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003340)=@newtfilter={0x450, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0xfff2, 0xd}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x424, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x340, 0xe9fb, 0x1000005, 0x5b91, 0x4, 0x1, 0x800, 0x5, 0x3, 0x3, 0x8000, 0x4, 0xffffffff, 0x3, 0x0, 0x1ff, 0x7b, 0x43, 0x4, 0x2, 0x5d, 0x8, 0x8001, 0x4, 0x3, 0x0, 0xfffff985, 0x8, 0x6, 0x71dbd584, 0x2, 0x7, 0xd8, 0x9, 0x4, 0x3, 0xfffffffe, 0x5, 0x9a, 0x1, 0x7, 0x80000001, 0x1, 0x2, 0xfffffffb, 0x7fffffff, 0x2, 0x8, 0x8, 0x10, 0x10, 0x1, 0x2, 0x4, 0x8, 0x6, 0x5, 0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x3, 0x7, 0x0, 0x8b9d, 0xff, 0xfffffffe, 0xfffffffa, 0xb, 0x8000, 0xb26f, 0x6, 0x4c, 0xff, 0x7d, 0x36, 0x81, 0x80000000, 0xfc9, 0x6, 0xfffffff0, 0x9, 0x5, 0x9, 0x10, 0xe, 0x2, 0x80000000, 0xff, 0x3, 0x7, 0x1, 0xa6dd, 0x7, 0xfffffff9, 0x8, 0x82, 0xff, 0x9, 0x3, 0xbdb, 0x1ff, 0x1, 0xc, 0x40, 0xffff8001, 0xffff, 0x8, 0x7fff, 0x2, 0x2, 0x2, 0x7, 0x2, 0xbce, 0x8, 0xd, 0x80, 0x4, 0xacda, 0x4, 0x3542, 0x7, 0xf79, 0x7, 0x3, 0x6, 0x0, 0x7, 0x6, 0x5, 0x100, 0x4, 0x2, 0x80000001, 0x200, 0x1, 0x9, 0xc, 0x0, 0xe200000, 0x6, 0x80000001, 0xaf6, 0x3, 0x10001, 0xe47b, 0x8, 0x3, 0x4, 0x4, 0x5, 0x0, 0x985, 0x5, 0xd, 0xf4d, 0x7, 0x8001, 0x1c4fd68f, 0x1, 0x5, 0x7fff, 0x0, 0xc2, 0x0, 0x5, 0x81, 0x3, 0x1c37, 0x3, 0xab, 0x2, 0x3, 0xb171, 0x8, 0xf, 0x2cb6, 0x6, 0x2, 0x2, 0x70, 0x80, 0x2, 0xfd, 0x5, 0xb417, 0x2, 0x400, 0x6d, 0xb, 0x401, 0x4, 0x2223, 0x2, 0x1, 0x1, 0x4, 0x1, 0x1, 0xab0, 0xd, 0x80, 0x3ff, 0xcdf6, 0x7, 0x7, 0x7, 0xfffffffa, 0xc54, 0xfffffd18, 0x9, 0x7, 0x7, 0x2, 0x3, 0x9, 0x6, 0x7fff, 0x4, 0xffff, 0x1, 0x381, 0xffffffff, 0x4, 0x274, 0x8001, 0x5, 0x4, 0x5, 0x8, 0x1, 0x8000, 0x2, 0xc9a6, 0xfff, 0x0, 0x4, 0x9, 0x4a78, 0xdf5, 0x5, 0xfffffffe, 0x5, 0x7ff, 0x6, 0xdb, 0x4d, 0x19, 0x7ff, 0x2, 0x5, 0xff6d, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$unix(0x1, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) socket$caif_seqpacket(0x25, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r10 = accept4(r2, 0x0, 0x0, 0x81800) sendmsg$alg(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x8000) recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1004012}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000ffdbdf25350000000a00060050505050505000000a0034000202020202020000140055001f5b68beb2f4e905a066bdd6e3b6ccea05002001460000000a000600ffffffffffff00000500200138000000140055006f2fcb716d62c9c21ed770de478480bc14005500e18319287b39fd5c890530ec76106799"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) 2.849344337s ago: executing program 0 (id=4291): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000800}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async, rerun: 32) socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 32) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 32) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28", @ANYRES32=r5], 0xe0}], 0x1}, 0x40040) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 2.747236143s ago: executing program 3 (id=4292): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x280, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x280, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xd], 0x3, 0xdab9f66e79d89cfe}, {0x1, [0x0, 0x4, 0x2, 0x0, 0x5, 0x2], 0x1}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x410) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x12, 0x4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002ac311600080001000200"/32], 0x20}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1000}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r6, &(0x7f00000044c0)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001080)="67307cd5c87466cd1fe065514f6937a81853f5e4993687194cc964c9c2b245447cfab2bb529deb52ba6dae33afb49a33087a7827fa2239419b551ec51ff49bcc2e1dcb57225df2a078d07da930a77d4fdcf485aeae0bbf66d41455005581767ba4de8c927da64fa2ae9a354dc049485b98eff27eeb527f4ebb2f5791c464cf9cdfc812997bbfd543caa745067ad5ed500a5fb45d1c0d3f58f41bedb1feaad1310c31b9f0be7c16a3ad6ecd36244dada97fed468d11983c4843d976e734ec349a19480fc9abe431f3ab422dfe09e37e5d", 0xd0}, {&(0x7f0000000400)="93cd545bdc67703cea66f95238a6fef547250cf16a0961951b55f3ca9c8e4ee05e47dc02a2a32bae16df821a6d01f4b6bc0469f5f9e008eebbae5af238420efab9371633b54e0c6de223addce39ca862e87f19286208a5320aa8d6cf4acef466fb76509861ce190f1e0550", 0x6b}, {&(0x7f0000000580)="adabd96e0ea5504a41071c388b4923fe7e01a3092976064f8c565d88b88ef53333aae57ee32353640603312194acc820e1ccdbd8b01f0777bdb96a8dfebd23b6e1b0b710c43249d74e70eea5a6c6ad805581c8", 0x53}, {&(0x7f0000001180)="5418d87e00ede1bd43eb8b56f12ed095e383ab8f9fa4221bd265102688f2ed954443ef4e2f7fd7ddd27c228ed3fe8ecba68a7218cb8eedfcc726df619a9418568f82b43cec4db8f2a25aa2e57fbccd9eac176abfa39e3faa033c40c144da2f72", 0x60}, {&(0x7f0000001200)="cc490ffdcfeb10d8c1debdb069a01e39acb546cbe4da3d6160d34b4e94f055b9b46f403a6af405296283005a94d04c85dd8e6e4f249c579fbe21866ebe853a7ff3a4c30ac416aa18f0c2666e6d5772fd711163903570c76a082b678f9f7998292f4071115cb1547b53c9186ff796e7b4dda5c7bf60a7482817431b05fd701dc8d0c5e467d828c2d29c1e78c302d97426f1681e2832c69d2e09abda4a05cd9ff51390e34072f4cb4baca325e878d8259582aea76b319938713a04fcee366af8d9abe5211a9dc0b1f1a3a32f429044df783c0f78c83376c16fa179257edc86d6e1", 0xe0}], 0x5, &(0x7f0000000480)=[@init={0x18, 0x84, 0x0, {0x7, 0xbe, 0x5, 0x8}}], 0x18, 0x40004}, {&(0x7f0000000600)=@in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x22e}, 0x1c, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001580)}, {&(0x7f00000015c0)="f3c86affae65fe9a148e4bde4b61fceb509312e050e23dc87665216f900d587bd2c557614129812e", 0x28}, {&(0x7f0000001600)="313f7f436402b49a7f752209d05284be797ff4e9f9bb3bdc51b2e6c10a53c5a3b066edb7520f", 0x26}, {&(0x7f0000001640)="2de0b483c56c1078d682777c86c3d109ef9e688062eff548e3b1180cc08552aa8f1c715efb3cc369c7d942db4783f2fa0fdee3b07120528c252bb32fe736458b9e93edeab8e3b62a27842592ff178809cc90d87bb95c1c81e6a6179d06215175534b09d42a1343745f6cc52e549e7b84b726eaa6af37b95ea2e5f714d05f520a5664271b4272ebbabeabc66fd220d9d7819692340dba34f2e04c675da4449482c245f3f75ffe85cba7742fe49abc7d461d5da4fdd38db6b693c03ccb7095e553fcae069cad7015ec814de543c2bac41ea8aaf09dbd35caf2861963ace3c6c615fb", 0xe1}], 0x5, &(0x7f00000017c0)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @init={0x18, 0x84, 0x0, {0x2, 0x6, 0x8d, 0x9dc}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x68, 0x4040000}, {&(0x7f0000001840)=@in={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000001880)="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", 0xf00}, {&(0x7f0000002880)="3904ca86f1a4b8bc3eb21a1a63", 0xd}, {&(0x7f00000028c0)="204444191e8a8a7a24f53f271c8d9b53f5e24767b76b855b2c34df1421e71d8f501720ab6565df717d1be6cd524f2fb84d68630d3b39217cd7ff073df3047cc0ffc31020ca9097e80a1e395610dfb8574627ba86fe7ecfacd35b358179a15be53fbce1796810bbe5ef6e6fde7ea2e72879a21d3f8d0be8a3863dcf41123a8117389bff8e35829f7104e5026badb1e653a0a3f07fc93fbc01b89f60a695797936437c889dd1aa7ea49c6fbae707180cfbff9b9ae1fbc1bb6f060c4ef265d18cfac1903824e1a82070812940cb790a5265b8ba1ef3672ecb02d89e40c4f61b9efe557ebefccf34da48827d5251709927", 0xef}, {0x0}, {&(0x7f0000002a40)="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", 0x1000}], 0x5, &(0x7f0000003ac0)=[@init={0x18, 0x84, 0x0, {0x2, 0x3, 0x2, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x4000800}, {&(0x7f0000003b00)=@in6={0xa, 0x4e24, 0x6c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000003d40)=[{&(0x7f0000003b40)="5d0723555608e32ef435ec90a32c6e34b7ecc7eef4b3009934efa2dc6be18cf71f0533f0b99adcdb7c00d705ec526eb6140e67dd04c9677077124f80b0cb4324858c32cb1bdcf8d066d0419a08bce6823e143a9644c67e62e7b2719d339ad740c2e910e9e28015a5f73cbb55699556aa070c61c4b5ac742128c963370cfaaab924c8f4e81f52c3b467e5bc4c91ddd3431b915d6daf2230dfe2951441b2046e60ac1207c7600f34eac8b070438ec7bbf0eee97e3b8d811276764d2c3a399762f6505bf5", 0xc3}, {&(0x7f0000003c40)="3dd9974ae746566b871f06ee7d19680ea090a62469328db6513ec04276779ea48d69207e1c79827449eee83de8d3492510e3eb448610c69814af9a5b30bb022b435854b68128c18021fa376d152d3b92fc9d99b555059807d75a23a012bbd26b5f3124383a7ece386ec7a08a1e1abda3f35fd41a89a571a6bfd449e5760441e8a43e238b47540647812d4c3da099729f361b", 0x92}, {&(0x7f0000003d00)="95868ee5a3e911", 0x7}], 0x3, &(0x7f0000003d80)=ANY=[@ANYBLOB="200000000000000084000000020000000700090048000000a55d166b", @ANYRES32=r7, @ANYBLOB="20000000000000008400000002000000070002820100000005000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000060000000e00000000000000180000000000000084000000050000001000000002000000"], 0x70, 0xd5}, {&(0x7f0000003e00)=@in6={0xa, 0x4e22, 0x9, @mcast2, 0x7}, 0x1c, &(0x7f0000003f40)=[{&(0x7f0000003e80)="cce8b9b67ded87613971fbb844535ae4148768d7dddd8ee850c2a5d583e3a0949f27d8e5764d0ec44927121e99d4a80b98e647903d21286ad65149b12e7cebeac0a4c7f7b1a654404419f8c9871653216c21dad090947136edac5f54a2e95818b9725d87c75ec0ef235eb6b24125099e65d250810db18a4cbd0766dbf77b3b8a23b43a7008bcfc39b2dda5e10d5f1fe9f6a6a2f0041234e4d4257597ccdf29", 0x9f}], 0x1, &(0x7f0000004080)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xb7f}}, @sndrcv={0x30, 0x84, 0x1, {0xf69, 0x9da, 0x8000, 0x80000001, 0x0, 0xff6, 0x2}}], 0x48, 0x4000}, {&(0x7f0000004100)=@in6={0xa, 0x4e21, 0x4c63e1ee, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x7}, 0x1c, &(0x7f0000004200)=[{&(0x7f0000004140)="4cbc452f3d9090045753e0cad483b4157cc6f8c04c065afeedf4c6f49b884322595c45faea200cdf0fe4", 0x2a}, {&(0x7f0000004180)="2713538ae962885759e6779cc150d5c73b8b9890524ae6cc7bc82de8de0d54230f6352e461e543f05bfaddbe8aeb6d1c332a56d2a4b2f55bf29108825aaccbf784da3dc249053eb68b1103c3bffd7d81e228d456532b11bd834ce63df2145199215cc7541f", 0x65}], 0x2, &(0x7f00000042c0)=[@sndinfo={0x20, 0x84, 0x2, {0x9a, 0x204, 0x4, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @init={0x18, 0x84, 0x0, {0xd, 0x920, 0xb, 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @init={0x18, 0x84, 0x0, {0x7, 0x9, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0xfff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0xe0, 0x800}, {&(0x7f00000043c0)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000004440)=[{&(0x7f0000004400)="d4ffb1863f0319d5672538969072fa6e535fd65e01ffea3e0471b0719feaf9491733872baff647058c0cd5192e00395f1b06ad5c21594b3dddbe", 0x3a}], 0x1, &(0x7f0000000640)=[@authinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @authinfo={0x18, 0x84, 0x6, {0xcdd}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x5384, 0x3, 0x0, 0x4, 0x0, 0x87f, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x201, 0x7, 0x89, r7}}, @authinfo={0x18, 0x84, 0x6, {0xd97f}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x3, 0x8201, 0xdd817550, 0xffffff48, 0x4, 0x7, 0x2a, r8}}, @init={0x18, 0x84, 0x0, {0x3, 0x6, 0x23, 0x7}}], 0x110, 0x4000}], 0x7, 0x20000051) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/77, &(0x7f0000000100)=0x4d) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@rr={0x7, 0x3, 0xb}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x3a) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x11) 2.71844205s ago: executing program 0 (id=4293): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) unshare(0x6a040000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f00000008200000040000", @ANYRES32, @ANYBLOB="ae55"], 0x20) r5 = socket(0x8, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffe96) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1, &(0x7f0000000240)=@raw=[@alu={0x3, 0x1, 0x4, 0xa, 0x1, 0x2, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xc, 0x2d8, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)}, 0x94) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840), 0x0, 0x20044000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) 2.568214419s ago: executing program 4 (id=4295): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20055040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000004c0)={0x1a, 0x118, 0x4a, 0xe3, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) close(0x3) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 2.55791308s ago: executing program 3 (id=4296): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0xb9, 0x8}}}}}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.407083725s ago: executing program 3 (id=4299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0xb, 0x0, 0x1, 0x78b82f90}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0xda, 0x7fff, 0x2a, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x700, 0x9, 0xff}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xff01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0x22, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x0, 0xd, 0x1, 0x4, 0x9a238b1e3771f9ef, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x2, 0x5, 0x3, 0x18, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @call={0x85, 0x0, 0x0, 0xce}, @ldst={0x2, 0x0, 0x0, 0x8, 0xa, 0x50, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000540)=""/4096, 0x51944e9a9d7d8322, 0x30, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x200, 0xff}, 0x10, 0xb0b9, r1, 0x9, &(0x7f0000001540)=[r0], &(0x7f00000016c0)=[{0x2, 0x4, 0x4, 0x7}, {0x2, 0x9, 0xb}, {0x1, 0x5, 0x7}, {0x0, 0x3, 0xb, 0x9}, {0x5, 0x3, 0xf}, {0x0, 0x2, 0xd, 0x4}, {0x5, 0x4, 0x4}, {0x2, 0x4, 0x4, 0x6}, {0x0, 0x3, 0x1, 0x8}], 0x10, 0x7cd1}, 0x94) 2.136221634s ago: executing program 0 (id=4302): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0xd, 0x4) (async) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x4001) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084894) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc054) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) socket$unix(0x1, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x10) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) (async) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0200020000000000240012800b00010069703667726500001400028008000500070000000800040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.957419331s ago: executing program 0 (id=4305): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000) sendto$inet6(r1, &(0x7f0000000300)="f5", 0x1, 0x20001004, &(0x7f00000003c0)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)={0x40002003}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r10, @ANYRES16=r9, @ANYRESOCT=r2, @ANYRES64=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r11}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.892433057s ago: executing program 1 (id=4306): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = accept(r1, &(0x7f0000000000)=@hci, &(0x7f00000000c0)=0x80) socket$kcm(0x10, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000a80)={r5, 0x0, "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"}, &(0x7f0000000180)=0xfebd) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xad}, 0xe) sendmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000100)=@generic={0x11, "465738dda27d53fbe97f91e90dcfbbabbcc93aee6d1a17b07fc6c6a4f235776fc23b3fb92b5279eebd759a54a882a59c197a8b2e41f14af2776e9ef7d41376d6ac8184fb6a07ab644ff2aa4a8b15fc5232d6cab0bcf2af8bbde476bf3b7b567ddaf026bbd9eec10c399acf90a9d25010f23756acb6f93e1f964a1d7a4812"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=[{0x78, 0x111, 0x2, "179a8a3fcf94a01237528e3b51a9e33b9a476f52f39f0d8d9a4cd77f1e98ac782ea7b09c571d756e158415aacd939a7d0a56244a6fc5a2ad8067011d39472fed4c0e64438675884388cc88bb24c3b791bcfd04040d9d5f4528179241b5aaa885c90669bcb17a"}, {0x48, 0x1ca3263c2a61d8c9, 0x9d6, "2087f16f57451ff38e89e1cf3644ada3f24459c73296e1145eb8b2f565c8e0029783655544df43c6e74c92a37c55eac8e86af1a29b"}, {0xb8, 0xf, 0xffff8000, "c05f3a9d93dc8cc889d8ece96f322b20f96e1a4733b275dc275cc946f5c83a21d97c1fa686ed858a9719faa81d7a86f3e4c33dac891ca4635a3e98b1e6d5d6324464c63f423b9ee9070ac8f7ae47c9d8744882a0ca8a3012b25c7fb5666f8a313aa3b997b3cb8a89aaeff5a29dd50c73fab9a622b703afb80f4fef5ead669910ebbcd5cf6f0a3cfcc5d6d66dbe24a46749306d5275d061170425931673e130e58509b0bb"}, {0x100, 0x115, 0xe, "ef7710ef68bf04be5febbe3543bea639cb6aa2e5e1be2ca88a82e71a0466cd77ce3dccce659e0391c92ef942fcbb1aa5a61cb0c055b9b0bbd9f66df71f41f85b951c49565a93bd7ba03a32cf2ac3c9fee96ee717556d8232448fc6d208d9566225e63df8c26bdcdaab934a2c1bc1d7927734727172f32dba5e54b416cebe131b96c8b6918dcc54d2016ee0c27360a6ad214b8c098621395e6a0ed8d50b27a455440e9f3e6c9f58b3937c52f1ac6f7d83c438836a5ada804152c116d4673a0c580cb1237ce4ef4f831dd4a99aa5d991bbf367243aa604e7fa857b48328a82ea1b919e3be6f6949a9cb267"}, {0x20, 0x10b, 0xffff, "5ba0e799c6a54ec66f6c372fedeb55"}, {0x70, 0x19, 0x2, "2c4bc8d451075e0420f037e277174f24949b6c67eab0166cba1a730347173eb63ccac943d5c96ad4417c52bdb4c87656b22037d33a1040c5ce1f60fc7a2c1a6c47b278331808fdcbef8f9ca2a3ba35fe1e1828cce5eb07b6743c6f0fce1f045a"}, {0x108, 0x119, 0xff, "c53ec4aaf9f61284fb67286b32e677943d3cf3117cef2d690b06a5202dd1753d16d54771b1d7decc64b47eac331af967e28c8065c223d79076f2de80b61cd0b6a89d1c070c9ca15ce6d52b57aa6a697ae79d187cc6152bcd757f3013ad574a6841381d2c2f0860b52f8057dd7e21947ea1a67b5f2d430c7c0e51d156ed5e99220dfd674f2c15d9f8aa0ff1c6a0b7e0071b5aeda7f4a31b369134afaadb8cccc880f106db0e93e5d9c00ddd2d742a2c34a84eeebde3b93fd4b01a1e68e18a7b8b076dab552a1efbafc9df7a250a43945722fe09ebcc721c21c2b1202f2d8e241f5c65ea50af0658b2fe82abe3acadbc442c26a24f03"}], 0x410}}], 0x2, 0x40) 1.456950026s ago: executing program 3 (id=4309): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xa, 0x0, &(0x7f00000004c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) close(0x4) 1.368233498s ago: executing program 4 (id=4310): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000c31100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x1, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) socket$nl_route(0x10, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r3, 0xa1) r7 = accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000800)={0x1, 0x2, {0x7, @struct={0x5, 0x8}, 0x0, 0x2, 0x0, 0x3df7, 0x0, 0x4, 0x88, @struct={0xfffffffc, 0x1}, 0x1, 0x8, [0x5, 0x7fffffff, 0x40, 0x2, 0x2, 0xffffffffffffff00]}, {0x7fffffffffffffff, @usage=0xfff, 0x0, 0xc, 0x5a, 0x2, 0x8, 0xd84, 0xe3, @usage=0x8, 0x7f, 0x205, [0x3b, 0x1, 0x400, 0xb07, 0x2, 0x39]}, {0x8, @struct={0x6, 0x5}, 0x0, 0x2, 0x7fffffff, 0x8, 0x3ff, 0x9, 0x40, @usage=0xbfe, 0x100000, 0x7ff, [0x9, 0xb40, 0x8, 0x9, 0x792, 0x9]}, {0x9, 0x4, 0x3ff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000001500)={r8, @in={{0x2, 0xe20, @empty}}, 0xffff}, 0x90) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r7}, 0x8) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000240)=0x61, 0x4) socket(0x1d, 0x80000, 0x7fffffff) 1.288313424s ago: executing program 3 (id=4311): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x68}}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0xaf1, 0xa77a, {0x0, @in6={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x2, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.223695157s ago: executing program 2 (id=4312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x8, 0xc, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0xe0, 0x20, 0x5, 0x4ab0ee70}}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@generic={0x21, "dc9d4b84d95ed9a517fce118e44100702d8c2409ae819c244ba2d4c30874688e1422de644d200aa5b61fb307fe7970219402b2c0e030b42f5a5ecc2920e805b3040ae92069bf382da9c0c5bbd15d0ed4342b694b6f16c3f866c69b9a1b8c2d5830b8cefe03f5a9707d3947f89bc0f1372ef278a0df761760002449c113cc"}, 0x80, 0x0, 0x4a}, 0x4001) r2 = socket$kcm(0x2a, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r3, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000004c0)="d643", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001140)=[{0x10, 0x1, 0x8}], 0x10}}], 0x2, 0x4004804) ioctl$sock_ifreq(r2, 0x8920, &(0x7f0000000000)={'team0\x00', @ifru_flags=0x400}) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xfff}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xff}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x483e}]}}}]}, 0x70}}, 0x0) 1.152126655s ago: executing program 1 (id=4313): r0 = socket(0xf, 0x2, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x5}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@private0, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r3, 0x2f, 0x81, 0x9, 0x9, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x1, 0x4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x32}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x873f, 0x40, 0x3, 0x3, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x68, 0x0, 0xfe, 0x4, 0x0, @remote, @rand_addr, {[@end]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0xb, 0xc, 0x0, 0x2, 0xd, 0xf, 0x7, 0xf, 0xa, 0xd, 0xb, 0x9, 0xb, 0xa, 0x2, 0x3], 0x0, [0x6, 0x7, 0x4, 0xffff, 0xc, 0x7, 0xcb, 0xffff, 0xc10, 0x7a, 0x2ff1, 0x1, 0x426, 0x8ef5, 0x4, 0x3], [0x1ff6, 0xd1, 0x2, 0xfe00, 0xfff7, 0x6, 0x8, 0x8, 0x2, 0x2, 0x7, 0x3, 0x4, 0x401, 0x7, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)={[{0x2b, 'freezer'}]}, 0x9) 1.074744926s ago: executing program 1 (id=4314): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x6e, @local, 0x4e20, 0x2, 'lc\x00', 0x3a, 0xffff8001, 0x39}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$SIOCNRDECOBS(r2, 0x89e2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4890}, 0xc144) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0xeb, 0x7fffffff, {{0x18, 0x4, 0x3, 0x3f, 0x60, 0x67, 0x0, 0x8, 0x2f, 0x0, @loopback, @private=0xa010102, {[@generic={0x83, 0xa, "7b2ce7ab41474b03"}, @rr={0x7, 0x1f, 0x81, [@local, @multicast1, @loopback, @loopback, @empty, @private=0xa010102, @multicast1]}, @rr={0x7, 0x1f, 0x60, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x80, 0xb8fbedc75f1e9e01, 0x8001, 0x0, {{0x1d, 0x4, 0x0, 0x1, 0x74, 0x65, 0x0, 0xc8, 0x2f, 0x0, @empty, @local, {[@cipso={0x86, 0x3c, 0x0, [{0x0, 0x4, "f463"}, {0x2, 0xd, "807ab3c487c761f8b0a090"}, {0x2, 0xe, "c909008d8fddc32482dbe36a"}, {0x5, 0x8, "b140befba44d"}, {0x7, 0x8, "39781a334ed7"}, {0x6, 0x7, "8f64ebe1f0"}]}, @timestamp={0x44, 0x14, 0xfe, 0x0, 0x7, [0x1cfb66ff, 0x78695764, 0xf, 0xfffffff5]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xd4, 0x0, 0x0, [0x98]}, @noop]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000640)={@private, @rand_addr, 0x0}, &(0x7f0000000680)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x9, 0x5, 0x43, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8000, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x16, 0x4, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x80, 0x8000, 0x1, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x8000, 0xff, {{0x10, 0x4, 0x2, 0x27, 0x40, 0x65, 0x0, 0x7f, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x29, 0x1, [{0x5, 0xa, "28c7222cf7badb5b"}, {0x1, 0xf, "a6e6ea80a64c1dde193942b389"}, {0x6, 0xa, "8a3bd9898ea4db56"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000900)={'gre0\x00', 0x0, 0x80, 0x8, 0x3, 0xfffffff8, {{0x2d, 0x4, 0x3, 0x33, 0xb4, 0x65, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, {[@cipso={0x86, 0x32, 0xffffffffffffffff, [{0x7, 0xc, "aae33f15a461f32824f8"}, {0x2, 0xc, "55ab171ab64e7e21b49a"}, {0x1, 0x6, "9230fa5f"}, {0x1, 0xe, "8e6f93b07fb447fdd6ab5239"}]}, @generic={0x9f, 0x3, "8b"}, @timestamp={0x44, 0x10, 0x15, 0x0, 0x3, [0x9b2, 0xfff, 0x7]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xcc, 0x1, 0x0, [{@multicast2, 0x94}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x6}, {@private=0xa010100, 0x5}, {@rand_addr=0x64010101, 0x1ff}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x97f0}, {@private=0xa010100, 0xa}, {@local, 0x4}, {@remote, 0x4}, {@local, 0x3}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x13c, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x13c}}, 0x841) recvmmsg$unix(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/198, 0xc6}, {&(0x7f0000000d00)=""/240, 0xf0}], 0x2, &(0x7f0000000e40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000001200)=[{&(0x7f0000000f00)=""/222, 0xde}, {&(0x7f0000001000)=""/53, 0x35}, {&(0x7f0000001040)=""/164, 0xa4}, {&(0x7f0000001100)=""/98, 0x62}, {&(0x7f0000001180)=""/79, 0x4f}], 0x5, &(0x7f0000001280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001300)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001380)=""/168, 0xa8}, {&(0x7f0000001440)=""/109, 0x6d}, {&(0x7f00000014c0)=""/104, 0x68}, {&(0x7f0000001540)=""/134, 0x86}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f0000001700)=""/28, 0x1c}, {&(0x7f0000001740)=""/84, 0x54}, {&(0x7f00000017c0)=""/15, 0xf}, {&(0x7f0000001800)=""/112, 0x70}, {&(0x7f0000001880)=""/38, 0x26}], 0xa, &(0x7f0000001980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1, &(0x7f0000002ac0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x4, 0x8000, &(0x7f0000002c00)={0x0, 0x989680}) getsockopt$inet_mreqsrc(r20, 0x0, 0x27, &(0x7f0000002c40)={@initdev, @initdev, @broadcast}, &(0x7f0000002c80)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=@base={0x13, 0x4, 0x4, 0x401, 0x1200, 0x1, 0xf3aa, '\x00', r11, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002d40)={{0x0, 0x5, 0xcdff, 0x4, 0x3, 0x3, 0x8, 0x3, 0xc6c3, 0x7, 0x174e9b67, 0xfffffffffffffffa, 0x8, 0x7, 0x6}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r17, 0xc0709411, &(0x7f0000003d40)={{r21, 0x5e4, 0x67af, 0x4, 0x7, 0xffffffffffffff81, 0x3, 0x40, 0x9, 0x7, 0x7f, 0x81, 0x1000, 0xfffffffffffffff6, 0xff}, 0x8, [0x0]}) ioctl$TUNSETIFF(r18, 0x400454ca, &(0x7f0000003dc0)={'sit0\x00', 0x2}) openat$cgroup_ro(r19, &(0x7f0000003e00)='blkio.bfq.time\x00', 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r16, 0x65, 0x1, &(0x7f0000003e40)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x1}}], 0x10) 1.074119999s ago: executing program 2 (id=4315): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89b0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x2bc, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x298, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x294, 0x1, {{0x0, {0x0, 0x0, 0x4, 0xe, 0x4}}, [@loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2, @remote, @loopback, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, @remote, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @remote, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x2b}, @loopback, @mcast2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}}}]}, 0x2bc}}, 0x0) 927.442456ms ago: executing program 0 (id=4316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0x2000}], 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg$unix(r5, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0x10a}, {r5, 0x212bdb8c3662ab0c}], 0x2, 0x0, 0x0, 0x0) close(0x3) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) r7 = accept$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x1, @broadcast}, 0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 'wg1\x00'}) 796.225208ms ago: executing program 1 (id=4317): socketpair(0x15, 0xa, 0x5, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200020c0}, 0x48000) r1 = socket(0x2, 0x3, 0xff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x4}]}]}, 0x23c}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r4, 0x3}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000008500000005008000a700309b2ced3d4e75dd0000100000"], &(0x7f00000002c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18) recvmmsg(r5, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r5, 0xd3) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r7, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r6, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=0x1, r6, 0x7, 0x34, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) shutdown(r1, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x44881}, 0xc4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r13, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r13, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r11}, 0x10) 788.630678ms ago: executing program 2 (id=4318): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe0001000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) (async) close(0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r1, 0x5, 0x100000001, 0xbd0d}) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000790116005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xe0, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 714.527848ms ago: executing program 2 (id=4319): openat$tun(0xffffffffffffff9c, 0x0, 0x602040, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r2 = socket(0x1e, 0x1, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 575.941295ms ago: executing program 1 (id=4320): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x8e, 0x1}, 0x6) unshare(0x6020400) socket(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000440)={0x60002010}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r7, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 539.375514ms ago: executing program 2 (id=4321): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, 0x0, &(0x7f0000001000)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept(r5, &(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000440)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd700021ab28b8cf7bcd056dfcdb0200010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a169cee4fe972fb3f9ecae1d0419011fbcb6133383796a098d74dfe1f561a4affb0ad0066fb9dc1c4be4b"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="160000006700000000100000100400000001", @ANYBLOB="0200"/20, @ANYBLOB], 0x50) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, 0x0, 0x8) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000b508ea59970b35710c978967ec72b793183fdb45447fea", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf254a0000000800030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x41000) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r12, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 516.206822ms ago: executing program 4 (id=4322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000240)={0x9, 0xb}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10410100}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x258, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "4aca2c6b5677ed1afe74a480a062efe4d8f551d7cc12b0d0d52b96ded8803efe6593c0445db11801eee6230eb4fce97933d6643603ff22b9b53d5bc9882a112939e4116a510d1dc65a41d5cdbbb9092ac6d490033137891ccf46c3f76961afe3329276f7f24e387b"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "550a24c71128fc79bd18b89788e8de6d4f83ff7c2ac76fef609e5a2cbf45094a82b91c74060cffb913d51089056336a011bfd550f4be3e6204f3d3494b3fd7baddb0541d9b67562a602256b43867abdceca4"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "336057752669b08977ba9ffaddd3d11a7a119c8258c8d30c"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff6a56}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x40}, 0x40000010) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4815}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000280)={@loopback}, &(0x7f00000005c0)=0x8) 267.686215ms ago: executing program 4 (id=4323): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x2e) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@null, @bcast, @bcast, @netrom, @default, @bcast, @default, @bcast]}, &(0x7f0000000180)=0x48) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)={0x39c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x7}, {0x7, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x6}, {0x3, 0x4}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x5}, {0x6, 0x7}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0x1}]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x1b, 0xc, 0x0, 0x24, 0x12, 0x12, 0x48, 0x5, 0x60, 0x5, 0x58, 0x5, 0x36, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0xb, 0x5, 0x2, 0x2, 0x60, 0xb, 0x9, 0x60, 0x60, 0x9, 0x2, 0x4, 0x16, 0x48, 0x2, 0x24, 0x16, 0x3, 0x1b, 0x6, 0x6, 0x18, 0x1, 0x4, 0x23, 0x12]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5}, {0x0, 0x4}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x7}, {0x6, 0x3}, {0x4}, {0x5, 0x8}, {0x5}, {0x2, 0xa}, {0x3, 0x4}, {0x5, 0x3}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x4, 0x0, 0x9, 0x2, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x62, 0x1, 0x6, 0x400, 0x8, 0x5]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x5, 0x100, 0x1ff, 0x3, 0x6, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x0, 0x60, 0x36, 0x38, 0x6c, 0x16, 0xb, 0x1b, 0x48, 0x1, 0x12, 0x1b, 0x48, 0x9, 0x4c, 0x2, 0x36, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9, 0x0, 0x2, 0x4, 0x8, 0x5, 0x2]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf, 0xb7, 0xe8, 0x4, 0x7, 0x101, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x7, 0x3c2c, 0x8000, 0x2, 0xaacc, 0xa18f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x1, 0x12, 0xb, 0x16, 0xb, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x5, 0xe9a8, 0x7, 0xe, 0x3, 0x9, 0x7]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x8}, {0x6}, {0x6}, {0x3, 0x9}, {0x1, 0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x2}, {0x5, 0x2}, {0x6}, {0x5, 0x7}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x4}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x2}, {0x6, 0x8}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0x3}]}]}, @NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6fa, 0x1d5, 0x466, 0x7, 0x7, 0x243, 0x1]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x6}, {0x4, 0x9}, {0x7}, {0x4, 0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x5, 0x8}, {0x5}, {0x6, 0x7}, {0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x4, 0x8}, {0x2, 0x3}, {0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x3}, {}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x9, 0x8000, 0x401, 0x9, 0x458, 0x9, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x1b, 0x9, 0x1, 0x30, 0x24, 0x1, 0x24]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x77, 0x24, 0x48, 0x36, 0x36, 0x12, 0x2, 0x5, 0xc, 0x48, 0x2, 0x0, 0x0, 0x24, 0x16, 0x4, 0x30, 0x4, 0x6, 0x30, 0x24, 0x10]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x1, 0x1, 0x6c, 0x30, 0x16, 0x1, 0x48, 0x18, 0xb, 0x18, 0x3, 0x24, 0xc, 0x6c, 0x36]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x7}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x4}, {0x6, 0x5}, {0x6, 0x3}, {0x2}, {0x2, 0x1}, {0x6, 0x8}, {0x5, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x5}, {0x3, 0x5}, {0x2}, {0x1, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x2, 0x5}, {0x7, 0xa}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0x5, 0x4}, {0x3}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0xc, 0x1c, 0x1, 0x1b, 0x6c, 0x24, 0x6c, 0x48, 0x6c, 0xb, 0x1b, 0x30, 0x6c, 0x60, 0x51, 0x60, 0x30, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0xc, 0x1b, 0x30, 0x12, 0x36, 0x6c, 0x24, 0x8, 0x60, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x2, 0xcb2b, 0xc9d, 0x8001, 0x9, 0xe]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x65, 0x0, 0x9, 0x9, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x4, 0x2}, {0x7, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x3, 0xa}, {0x2}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0x8}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x7, 0x7}, {0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0xa}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x1}, {0x7}, {0x1, 0x3}, {}, {0x5}, {0x4}, {0x4, 0x6}, {0x4, 0x9}, {0x1, 0x3}, {0x2, 0x4}, {0x2, 0x9}, {}, {0x5, 0x6}, {0x5, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x7, 0xa}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x8000, 0x0, 0x0, 0x7, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x19, 0x60, 0x60, 0x48, 0x12, 0x24, 0xb, 0x4, 0x5, 0x1b, 0x4, 0xc, 0x6, 0x5, 0x24, 0x1, 0x6, 0xb, 0x4]}]}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='rxrpc_rx_discard_ack\x00', 0xffffffffffffffff, 0x0, 0xe6}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0xb94, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xb5c, 0x3, 0x0, 0x1, [{0x4ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x94, 0x6, 0x1, 0x0, "8a01dc0c02b1195bf046ba46b60d12ee5061e44ea4df03679723bac3b75cd76f192f7e8b7414d477fedd23de9b5562c53d83957799f53b91b104d4bc9c1bc846946a938556425ddd9a8483dab1b1844109b219f7acbb13008576dee29a60f9d7cacfd47b617c91c85b1d442c32397e3b7472802da038b82780259ab6b7280d5f5d711d75df0e4d39bb0eac94d6112935"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0xb8, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x5a, 0x3, "c5078b0770ac66b55830aba1ecd2e5380da6337f5e705b9ec71223930c2335da66e24ceb1dcc73d3aa8ee5ab6b0516d918ac4b388ca58e0439887ada16a558f081729afacd68b7481c68559a551a7a3c4607ca885b5a"}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xfa, 0x6, 0x1, 0x0, "d27a014a9feba46658f98989117ffc30ba902b2ea3ad4c75dad65f314f10237431b2a2cfb5921053872c5f6c224ed055664eb5a5297e3874a445353a2a24a3983d1e1bba760002bb1c92511cba66fbd198e714182dfd5b4ffa6ea8756c76b3e90c3a105b99b776b2293dabb6964676c20f5a62d094ff4a10e3eb4d51fca886b5207054fe220d7460c0ebc82176f77b4c40e9c319c552d0e24180901ce63bb8cda57dd3c5508858c1ffda87730278daf7e660029908dbfcb1e98f1d7d9f23b3ab7f9cac6df001857d3dcd355aba2b3524080e4a8879a49a3ccb6ad285d396696d9001946793c362cfa4f1219cd6494065e77493a4bd2b"}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd2}, @NFTA_SET_ELEM_USERDATA={0xb1, 0x6, 0x1, 0x0, "8857a75f04043c43966d67c212567c4333e1e180e44678b84f09fe90e6b2faf0d7c26bb588efe0fc6ad3658db8d3af555f908a970ec723ae7a4b876d9292d2998450c044dacb83f448ff9e2e057e92cf5f49aa69f43a25df5243cbd7f4239a8bc9677a6ba7c30b6bd964cb39ab2c4314fcae4bd606d0979d563d202550dc8cdcc3fb028479525716e0b7b8c232f3200afef60103f920dd4952da734765a9353c82967fa58c7ca9ec846e433470"}, @NFTA_SET_ELEM_USERDATA={0xd7, 0x6, 0x1, 0x0, "ebd3e0a28bc5446c6a93b307ffb8eb58e87b5d4c359b8dcddb657391fb9eba5c6b74e7eccd1ba346117058300523a3d69d4ef65525e7e27e1ce301b6128e864a4c015683125ae05711bc2644f76e5bbdbcb6ad09139cd8c4b642d03646d3f693046a5c35cc207ee7be42110d6f62848fcc5a214e1881590fb35be4ad93a678fec6dc770d5bd7f5b45e0e3afd0b05b908cf826b69e3b576ab102bcff0b43fc6c04795e8164564ba052ad7177ae47776a8c443349488c8af418bdd30d49c250031e159ec491790fa11af6e3c9d76cd434a2116b3"}]}, {0x66c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x500, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x4a8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x498, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x34, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_MASK={0x284, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "9056b803ff6e82db83175ff6a83f52bf52ef39af7f015ac56db666396cf2e776c1bd2cbe82cb7649b64cb2a483287451872df4f3e22cd1c92ad27018a2660acc28e5fd841af9217f417fdb859134d3e2e07c85bd807a57a40b3d8ef27100a7c664858e58e47649df94e5892f9e4222cdc7674edd9545ec37df78565ab285f55a84"}, @NFTA_DATA_VALUE={0x5c, 0x1, "485c9fcbc483d87f83ad27cc5ca71a4a5bc6f85bee3dfc849d875896f385cd079708da8921c256571c7c1eb3e55fc39c2e0164511244c52ecf7214cc5b7e9f814df107f8db7ccd5b417e31342ed14e93537982af8efabbb5"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "441242e2e3597755baf52d7fc566c91806a637858426b33995f49787a6e92c89b582bbeb76ee9ca659f6c062f8acf4bf3a9deb4f6c7d01ee85278df516b1807a48e2dbdde8c6258ea8e3a2725a9b88d766de318b8621557dae1e780a04d93c5b939c340c07bb99923249adf97b02b72b3ef0a33621b9a49f0294e50f6db48aace056c4b50f8b1405f6960cf2d83261ad1007a06699d0b22e12317cc1205ccfa2e70933d47dada8e4451e25f72b6f53c013b14e8dc39212bffc835b0b464b330ac92147f3c38f437d51e7d192036f5b3d1bbc95e8b852d1e5e351e18b25f0f203597b8fc81c0725bbe6aadaba40a8239869"}, @NFTA_DATA_VALUE={0x5f, 0x1, "9b11ea9107e02dd88533305bece332cc00ede19b873198cccbd84c0f915e67cd6fc6760495b92c4c60c49f92d442f4e6bc9efc14ad99f79c9932a25f20a4a16f2cfd11f9c0d07a8778d79994938fbf3d54ddbfd60df77176ed30ae"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_BITWISE_XOR={0x28, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_MASK={0x1a4, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "b751798b85eff0682112f5939a363fa8bb9d7996600e11070c94ae1a3d64e55973072ddafcc8f16884b7b05fde76d2654215c0e7c8df032691a7fa03251084f0472ccad5e8db57600a076418a5dd583e106e4e049737404fc21ef468ab8dd48d4ad698d0b3055859c2f5149f61a066c8adb8d9cc4519625673805107e3bf56a898d47246a2b435464ab3567f6618194bb3500da1e35f5611ef437dce7608160e56a1c7ea5340c0a06f42528a54e2949c3c84aa7f85"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "a2bcc97a62bbff7391ffa14624f7dc7953678b07eaebe55c9d07db673408d14229b944645f57e9e9ef2cc40fb8e1b83892c6"}, @NFTA_DATA_VALUE={0x9a, 0x1, "69e1b26ce321acaa7d69180a40a179c64c30fcdb45fa5c2df7498bf0f978d4c525bc61fd394c980e6b13eb4468274b4e4a6ba1f3053a7787f643f41faff5a00314988b0ae11755ccd84db7b03e8750c7da2010044c2360e1dab38ac1b8176bb90b7728f03f817f8058579d1e6406fd9c7f0b82362e1bb6f6aa31c7ad8309c6eeef63f8db6db45d28505fae8a7e4a734ed782e5eb1625"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x7}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x32, 0x6, 0x1, 0x0, "e5f0c3b0e1fd91fa490994cd343cb5f2b1f86240fb6034562b2af9a0efc0c1e083b774da8ff87150950e1b0039c2"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "2c0025be7d"}, @NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "42d49cb74bb1a1f9b332c66ad5e18e92606431cc7e436182d97e8a6409187ee712b57f5de2e83dc055a50e9b547d3c2b76f15584816f83d3c7c912b6eb0d357095c2ac05a073f06d8de1da6b9ecb97c2bd4765f85c478732cc6ef3cce23b771d66435fd8a70db7da17e2c3d2a4daae73e411caf4ca0954b17e9670c3687c06c0ff1e08ecc6a1202850a3b77c58cecd3720fdd7553724928d3f369d890e2545a59133f33487e6dddda6d051debc3bb0cec3a03260601d7195af1a8c5fb0f3833f80ef3c4af8e4e194af6224319f0b2365dd3c"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0xf0, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xbe, 0x6, "0f82d9e5a9e513c6689f95fc1ad3f350782fcc2a0e226e8f146819e1d79769ac951d81b1be65a1a6d6fedbf0f1946c3decdbda3c537d24f0744f9562b7ab734825fbd332c60f553b9f4bfc3512e89fa8e773cdc94e18666359f6bbf36e31003b66b13bad57941635765207e9d1fc1e190f9f801a30f9b5a4b3e78daa0f5a1763bee19017db149004dae0de89b0fa1e0aecfd1ead604cbf33708adb1c7298daac3329c05f91ebdb66c40355fd5ec9332faf2bd857d5b4cf63eba6"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x9c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x79, 0x8, "bd970fc6751353329a5ce8f53d79b1845491a829ae587aa1123e67a62701c0f85e6471a950dd5551c0e18ea5f56cf8a1ff77f31083ececa9a1a91f97a352f1478012a7474aef497dd26ed8dbb7739cfa9ae21c4dbbd7c82f269e402b6073f1990a6e2ee3ad03d64df5ab724dc12241ad5fe25b2d62"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELSET={0x450, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_USERDATA={0x1e, 0xd, 0x1, 0x0, "20948dfb71cc8d243a5c26acffe08027255ea9e4eaadc1ee64ce"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x260, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_DESC_CONCAT={0x1a4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x188d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4f7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb772}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x175}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe75}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_USERDATA={0xa3, 0xd, 0x1, 0x0, "e0f7abd0c19158dc89d7783f663a905e9312bfdda10c8863693d148d0a745e70ad25934eb26603ed565f2fd75a474003627b8d31ae676f037af24a0d068747ff8129fd4289334be5eca1668eb1859cb69c1b1360bfc42b0d5dca8afba5fe3109830b74e390e0c338ba4bdef6d87f85c1cc1f7b7292011bf5cf96a5fa88be4f5b73df3add98f7313b6ecb4e52047ebeea58b8b1350bb90445364cd76312655f"}, @NFTA_SET_USERDATA={0xfd, 0xd, 0x1, 0x0, "fefeacf1d199e45d78e969c7520b0903958165aa5b1a52f04554bf11ecdc93d79c726d1bdb0e43ee0c5a3c4147d8705c7cd3b26f2a001fd3645cbfc96195ebb0ed0c1dfd938b4607cf2e9a45f5b6ba88235539ba3420ea15b56d5662ec85e1e58e54d4d5fb85c6fb962481504e1c6ae80bff18015ce81750c4014983a9f342b83cee54dec2730eb83e75854ef26065ce6c94bc8de7580dfaef4c1922214bceb41d678729b39639fb82383b6611047e359302726b1163f971aa18723685e9258403a5487c46b1a673fa0f9452f68ef1a26ef412c94b58a60c6c4970c66857a6a8dc1269c4fa63eba844858ff26e92c6810d8c54e9364f843de8"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4080) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x16, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpu.stat\x00', 0x0, 0x0) write$ppp(r6, &(0x7f0000001b40)="e5857a05a09270998da4cff5b9b62547a6f61812dba791ae5809ec5c2ea6eea11c67f3c3cf11d8ad853f84ad6bf81ba5170c7d7b465ec4fa351568f58b61f653d4733933cc4ef9d19a6f7063561bed10268c991532f3b7987bdcdcf0d006bb866dba31ebb8724c2fd69e622fe737d295d7121ddaeaaa779d89d03d2b321327f6aee86ce35d09512604e4a73527a0a9f4f490c45342a1a5", 0x97) socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r6) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x48, r7, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x48}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001d80)={0x0, 0x2, 0x2}, &(0x7f0000001dc0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000001e00)={r8, @in6={{0xa, 0x4e24, 0x3ba, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, [0x8000000000000001, 0x19, 0x8, 0x400, 0xfbca, 0x1, 0x0, 0x7, 0x1, 0x3, 0x8, 0xfffffffffffffada, 0x36bfb9e9, 0x5, 0x1]}, &(0x7f0000001f00)=0x100) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x30, r9, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xf0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000002180)={&(0x7f00000020c0), 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x38, 0x0, 0xa02, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004044) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002280)={r6, &(0x7f00000021c0)="98bd6476c88ed1db85c0291bf5e4b0ec9fa77632d9886058b583dbddc738e4b732ef5ce40ba0078c95c6bfa5d6b9318e643289f8d446191eabebda1486968fe74871b77b3aff4f7592ca41f0", &(0x7f0000002240)=""/52}, 0x20) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000024c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0x100, r12, 0x8, 0x9, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x44, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfa}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8ab1fdd7c76e74b80be5a497612fa144"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cca9c94ee8d224c08213b0ab014fe043e4f6131350282c4c3fddba8318cf054d"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ec66469c184e0c315c02549cb038419"}]}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xcc}]}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x39443cf6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9b}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfa}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "41ad3793143a07b1d00e6ee9dc0e726f77c6a3753de17113a3a25825fb3fbbd3"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x100}, 0x1, 0x0, 0x0, 0xc800}, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x3c, r9, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 200.301837ms ago: executing program 4 (id=4324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x63, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207104e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x50}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 158.251858ms ago: executing program 4 (id=4325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async, rerun: 32) r2 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) getsockopt$inet6_mreq(r2, 0x29, 0x7, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) shutdown(r4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) (async) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f00000001c0)='0', 0x1) r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async) r11 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 119.315745ms ago: executing program 2 (id=4326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x6) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=0x4) (async) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r6, 0x0, 0x417}, 0x18) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="15", 0x1}], 0x1}, 0x4000080) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e25, 0x0, 0x3, 0x0, 0x2}, {0x2, 0x53, 0xfff, 0x0, 0xfffffffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@remote, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3439, 0x400009}}, 0xe8) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000002daad000a"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) (async) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000002daad000a"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42) (async) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42) 8.310875ms ago: executing program 1 (id=4327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000051118010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7f7ffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 0s ago: executing program 0 (id=4328): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000180)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7}, {0xd, 0xc}, {0xf, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048801}, 0x20048054) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000740)="fe", 0x1}], 0x2}}], 0x1, 0x4000800) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): eleased all slaves [ 330.619849][T16721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.791589][ T37] tipc: Disabling bearer [ 330.804049][ T37] tipc: Disabling bearer [ 330.807671][ T5862] Bluetooth: hci3: command tx timeout [ 330.832347][ T37] tipc: Left network mode [ 330.840010][T16721] team0: Port device team_slave_0 added [ 330.871238][T16721] team0: Port device team_slave_1 added [ 330.908800][T16820] netlink: 'syz.4.2959': attribute type 11 has an invalid length. [ 330.937505][ T37] IPVS: stopping backup sync thread 11264 ... [ 330.958873][T16721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.967395][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.015400][T16721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.028899][T16721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.036223][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.062453][T16721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.119861][T16833] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 331.201986][T16721] hsr_slave_0: entered promiscuous mode [ 331.212221][T16721] hsr_slave_1: entered promiscuous mode [ 331.220048][T16721] debugfs: 'hsr0' already exists in 'hsr' [ 331.227807][T16721] Cannot create hsr debugfs directory [ 331.281323][T16838] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 331.299554][T16844] openvswitch: netlink: IPv4 tunnel dst address is zero [ 331.301567][T16838] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 331.321528][T16838] bond0: (slave ipvlan4): Error -95 calling set_mac_address [ 331.537756][ T37] pim6reg99999999 (unregistering): left allmulticast mode [ 331.914675][T16882] __nla_validate_parse: 10 callbacks suppressed [ 331.914697][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'. [ 332.088742][T16883] macvlan0: entered promiscuous mode [ 332.094445][T16883] macvlan0: entered allmulticast mode [ 332.100835][T16883] bond13: (slave macvlan0): Opening slave failed [ 332.175708][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2980'. [ 332.212679][T16862] lo speed is unknown, defaulting to 1000 [ 332.242307][T16891] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2980'. [ 332.310956][T16891] smc: net device bond0 applied user defined pnetid SYZ2 [ 332.604058][T16907] netlink: 'syz.3.2983': attribute type 12 has an invalid length. [ 332.618924][T16907] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2983'. [ 332.636149][ T37] IPVS: stop unused estimator thread 0... [ 332.716870][T16721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.777068][T16721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.808243][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 332.826710][T16721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.875750][ T5862] Bluetooth: hci3: command tx timeout [ 332.899511][T16721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.068291][T16721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.111775][T16721] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.145973][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.153144][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.219308][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.226520][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.294757][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2997'. [ 333.742739][T16721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.826809][T16721] veth0_vlan: entered promiscuous mode [ 333.860355][T16721] veth1_vlan: entered promiscuous mode [ 333.950151][T16721] veth0_macvtap: entered promiscuous mode [ 333.991148][T16721] veth1_macvtap: entered promiscuous mode [ 334.035247][T16721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.066980][T16721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.094132][ T3532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.103509][ T3532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.148714][T16990] lo speed is unknown, defaulting to 1000 [ 334.192548][ T3532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.215386][ T3532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.269236][T16995] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 334.303757][T16993] lo speed is unknown, defaulting to 1000 [ 334.423100][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.435165][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.524655][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.551789][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.964259][ T5862] Bluetooth: hci3: command tx timeout [ 335.141132][T17040] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3017'. [ 335.816370][T17078] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 335.840390][T17081] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3031'. [ 335.850034][T17078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3030'. [ 335.924241][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.933513][T17089] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3032'. [ 335.944361][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.958032][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.987958][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.998416][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.062377][T17087] lo speed is unknown, defaulting to 1000 [ 336.322942][T17087] chnl_net:caif_netlink_parms(): no params data found [ 336.479589][T17087] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.487446][T17087] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.494928][T17087] bridge_slave_0: entered allmulticast mode [ 336.502501][T17087] bridge_slave_0: entered promiscuous mode [ 336.515959][T17087] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.530892][T17087] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.546792][T17087] bridge_slave_1: entered allmulticast mode [ 336.558012][T17087] bridge_slave_1: entered promiscuous mode [ 336.602347][T17087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.633088][T17087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.675944][T17087] team0: Port device team_slave_0 added [ 336.683939][T17087] team0: Port device team_slave_1 added [ 336.742674][T17087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.755408][T17087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.786869][T17087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.807901][T17087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.816552][T17087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.861620][T17087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.950797][T17146] __nla_validate_parse: 8 callbacks suppressed [ 336.950816][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3049'. [ 336.969881][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3049'. [ 336.979886][T17144] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3044'. [ 337.023205][T17087] hsr_slave_0: entered promiscuous mode [ 337.034538][ T5862] Bluetooth: hci3: command tx timeout [ 337.038200][T17087] hsr_slave_1: entered promiscuous mode [ 337.052778][T17087] debugfs: 'hsr0' already exists in 'hsr' [ 337.061821][T17087] Cannot create hsr debugfs directory [ 337.070336][T17148] lo speed is unknown, defaulting to 1000 [ 337.263437][T17164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.407657][T17171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3057'. [ 337.626745][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'. [ 337.642934][T17182] dvmrp1: left allmulticast mode [ 337.694488][T17180] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3060'. [ 337.720213][T17185] bridge_slave_0: left allmulticast mode [ 337.726485][T17185] bridge_slave_0: left promiscuous mode [ 337.732273][T17185] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.742848][T17185] bridge_slave_1: left allmulticast mode [ 337.749847][T17185] bridge_slave_1: left promiscuous mode [ 337.756699][T17185] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.787725][T17185] bond0: (slave bond_slave_0): Releasing backup interface [ 337.841864][T17185] bond0: (slave bond_slave_1): Releasing backup interface [ 337.910801][T17185] team0: Port device team_slave_0 removed [ 338.016766][T17185] team0: Port device team_slave_1 removed [ 338.030186][T17197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3064'. [ 338.035898][T17185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.052612][T17185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.062534][T17185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.074519][ T5862] Bluetooth: hci0: command tx timeout [ 338.080382][T17185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.179002][T17087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.192180][T17087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.211515][T17087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.261105][T17087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.276244][T17212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3069'. [ 338.355544][T17224] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3070'. [ 338.457960][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 338.566142][T17087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.622100][T17087] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.661741][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.668947][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.681560][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.688825][ T6142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.858937][T17244] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.909291][ T30] audit: type=1804 audit(1756323483.734:71): pid=17244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3075" name="/newroot/10/cgroup.controllers" dev="tmpfs" ino=69 res=1 errno=0 [ 338.932223][ T30] audit: type=1800 audit(1756323483.734:72): pid=17244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3075" name="cgroup.controllers" dev="tmpfs" ino=69 res=0 errno=0 [ 338.961386][ T30] audit: type=1800 audit(1756323483.734:73): pid=17244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3075" name="cgroup.controllers" dev="tmpfs" ino=69 res=0 errno=0 [ 338.974157][T17087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.016542][T17249] lo speed is unknown, defaulting to 1000 [ 339.106916][T17087] veth0_vlan: entered promiscuous mode [ 339.138787][T17087] veth1_vlan: entered promiscuous mode [ 339.196730][T17087] veth0_macvtap: entered promiscuous mode [ 339.207518][T17087] veth1_macvtap: entered promiscuous mode [ 339.228472][T17087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.246793][T17087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.258682][ T6142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.278547][ T6142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.328262][ T6142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.344836][ T6142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.454468][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.462579][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.556217][ T6160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.603898][ T6160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.638922][T17272] lo speed is unknown, defaulting to 1000 [ 339.749886][T17265] openvswitch: netlink: Key type 10502 is out of range max 32 [ 340.155021][ T5862] Bluetooth: hci0: command tx timeout [ 340.300225][T17316] netlink: 'syz.1.3090': attribute type 10 has an invalid length. [ 340.323508][T17316] dummy0: entered promiscuous mode [ 340.342512][T17316] bridge0: port 3(dummy0) entered blocking state [ 340.374120][T17316] bridge0: port 3(dummy0) entered disabled state [ 340.397893][T17316] dummy0: entered allmulticast mode [ 340.428159][T17316] bridge0: port 3(dummy0) entered blocking state [ 340.434708][T17316] bridge0: port 3(dummy0) entered forwarding state [ 340.466713][T17323] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 340.524568][T17325] netlink: 'syz.4.3092': attribute type 17 has an invalid length. [ 340.547460][T17325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.888123][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.898204][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.906642][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.916884][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.925531][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.192472][ T2934] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.293123][ T2934] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.327955][ T2934] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.348108][T17338] lo speed is unknown, defaulting to 1000 [ 341.355855][ T2934] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.805574][T17373] netlink: 'syz.4.3105': attribute type 4 has an invalid length. [ 341.965267][T17387] openvswitch: netlink: Multiple metadata blocks provided [ 341.970040][T17338] chnl_net:caif_netlink_parms(): no params data found [ 342.115873][T17398] __nla_validate_parse: 7 callbacks suppressed [ 342.115894][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'. [ 342.135231][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 342.172775][T17338] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.181377][T17338] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.192983][T17338] bridge_slave_0: entered allmulticast mode [ 342.200259][T17338] bridge_slave_0: entered promiscuous mode [ 342.211240][T17402] macsec1: entered allmulticast mode [ 342.217178][T17402] macvlan1: entered allmulticast mode [ 342.226164][T17402] macvlan1: left allmulticast mode [ 342.234984][ T51] Bluetooth: hci0: command tx timeout [ 342.245529][T17338] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.253079][T17338] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.261272][T17338] bridge_slave_1: entered allmulticast mode [ 342.270574][T17338] bridge_slave_1: entered promiscuous mode [ 342.387845][T17338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.409512][T17412] lo speed is unknown, defaulting to 1000 [ 342.423065][T17338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.459871][T17417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3116'. [ 342.503066][T17338] team0: Port device team_slave_0 added [ 342.537697][T17338] team0: Port device team_slave_1 added [ 342.601150][T17338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.611579][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.638067][T17338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.657788][T17425] netlink: 'syz.4.3118': attribute type 1 has an invalid length. [ 342.660026][T17422] tipc: Enabled bearer , priority 0 [ 342.677674][T17338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.684798][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.712803][T17338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.732149][T17422] syzkaller0: entered promiscuous mode [ 342.738068][T17422] syzkaller0: entered allmulticast mode [ 342.767900][T17426] bond3 (unregistering): Released all slaves [ 342.788631][T17422] tipc: Resetting bearer [ 342.813426][T17421] tipc: Resetting bearer [ 342.827788][T17421] tipc: Disabling bearer [ 342.842115][T17338] hsr_slave_0: entered promiscuous mode [ 342.849915][T17338] hsr_slave_1: entered promiscuous mode [ 342.856297][T17338] debugfs: 'hsr0' already exists in 'hsr' [ 342.862077][T17338] Cannot create hsr debugfs directory [ 342.952330][T17435] netlink: 'syz.3.3121': attribute type 3 has an invalid length. [ 342.954633][ T51] Bluetooth: hci1: command tx timeout [ 342.967594][T17435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3121'. [ 343.002111][T17439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3122'. [ 343.163171][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'. [ 343.218986][T17443] netlink: 464 bytes leftover after parsing attributes in process `syz.3.3123'. [ 343.283171][T17338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.298460][T17338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.318503][T17338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.331774][T17338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.402951][T17457] veth3: entered allmulticast mode [ 343.483128][T17338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.526853][T17338] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.560041][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.567355][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.578275][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3130'. [ 343.585514][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.594407][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.683306][T17476] lo speed is unknown, defaulting to 1000 [ 343.824110][ T30] audit: type=1107 audit(1756323488.654:74): pid=17485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 343.902194][T17491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.045439][T17495] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 344.183100][T17338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.307997][T17508] syzkaller0: entered promiscuous mode [ 344.314092][ T51] Bluetooth: hci0: command tx timeout [ 344.322601][T17508] syzkaller0: entered allmulticast mode [ 344.378206][T17338] veth0_vlan: entered promiscuous mode [ 344.385980][T17512] netlink: 'syz.2.3139': attribute type 2 has an invalid length. [ 344.427841][T17338] veth1_vlan: entered promiscuous mode [ 344.462809][T17512] k*]: entered promiscuous mode [ 344.512596][T17514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.522035][T17514] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.536962][T17514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.620489][T17338] veth0_macvtap: entered promiscuous mode [ 344.651705][T17512] veth0_to_team: entered promiscuous mode [ 344.658307][T17512] veth0_to_team: entered allmulticast mode [ 344.743157][T17338] veth1_macvtap: entered promiscuous mode [ 344.756329][T17523] Bluetooth: MGMT ver 1.23 [ 344.780917][T17338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.828877][T17338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.884773][ T6166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.900187][T17527] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 344.982129][ T6166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.993226][ T6166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.014045][ T6166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.034170][ T51] Bluetooth: hci1: command tx timeout [ 345.052415][T17531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3146'. [ 345.080188][ T6160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.117906][ T6160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.191000][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.205878][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.221651][T17540] lo speed is unknown, defaulting to 1000 [ 345.311204][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 345.331540][T17548] netlink: 'syz.3.3149': attribute type 14 has an invalid length. [ 345.334410][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.351262][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.362331][T17548] netlink: 'syz.3.3149': attribute type 11 has an invalid length. [ 345.656402][T17559] netlink: 'syz.3.3152': attribute type 21 has an invalid length. [ 345.731921][T17562] lo speed is unknown, defaulting to 1000 [ 346.466266][T17597] netlink: 'syz.0.3163': attribute type 8 has an invalid length. [ 346.777137][T17618] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 346.971489][T17491] Set syz1 is full, maxelem 65536 reached [ 347.115176][ T51] Bluetooth: hci1: command tx timeout [ 347.472607][T17636] __nla_validate_parse: 8 callbacks suppressed [ 347.472630][T17636] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3170'. [ 347.491871][T17634] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3169'. [ 347.524523][T17634] lo speed is unknown, defaulting to 1000 [ 347.689901][T17649] netlink: 'syz.2.3174': attribute type 3 has an invalid length. [ 347.710987][T17649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.727733][T17651] netlink: 'syz.1.3173': attribute type 1 has an invalid length. [ 347.759125][T17652] erspan0: entered promiscuous mode [ 347.788686][T17653] pimreg: entered allmulticast mode [ 347.842391][T17653] pimreg: left allmulticast mode [ 347.919176][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'. [ 347.929584][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 348.103528][T17675] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3179'. [ 348.119815][T17675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3179'. [ 348.477059][T17690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.909993][T17712] tipc: Started in network mode [ 348.924450][T17712] tipc: Node identity 16cf5a212f0f, cluster identity 4711 [ 348.945244][T17712] tipc: Enabled bearer , priority 0 [ 348.986088][T17714] syzkaller0: entered promiscuous mode [ 349.010096][T17714] syzkaller0: entered allmulticast mode [ 349.098805][T17714] tipc: Resetting bearer [ 349.111237][T17714] tipc: Disabling bearer [ 349.132130][T17723] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 349.175121][T17723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.193970][ T5862] Bluetooth: hci1: command tx timeout [ 349.207853][T17723] bond1: (slave geneve2): making interface the new active one [ 349.217093][T17723] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 349.371494][T17749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.400496][T17746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3198'. [ 349.559782][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'. [ 349.597568][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 349.612046][T17763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3204'. [ 349.660827][T17763] bridge0: port 1(vlan1) entered blocking state [ 349.737292][T17763] bridge0: port 1(vlan1) entered disabled state [ 349.748833][T17763] vlan1: entered allmulticast mode [ 349.755907][T17763] bridge0: entered allmulticast mode [ 349.770186][T17763] vlan1: left allmulticast mode [ 349.777675][T17763] bridge0: left allmulticast mode [ 349.968058][T17795] netlink: 'syz.4.3213': attribute type 1 has an invalid length. [ 350.010864][T17795] netlink: 'syz.4.3213': attribute type 2 has an invalid length. [ 350.062893][T17795] netlink: zone id is out of range [ 350.112796][T17795] netlink: zone id is out of range [ 350.130661][T17795] netlink: zone id is out of range [ 350.171495][T17795] netlink: zone id is out of range [ 350.187851][T17795] netlink: zone id is out of range [ 350.216874][T17795] netlink: zone id is out of range [ 350.240578][T17795] netlink: zone id is out of range [ 350.262392][T17795] netlink: zone id is out of range [ 350.277380][T17795] netlink: del zone limit has 4 unknown bytes [ 350.292824][T17817] vxcan2: entered promiscuous mode [ 350.529013][T17834] netlink: 'syz.4.3224': attribute type 11 has an invalid length. [ 350.685550][T17841] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.817925][T17841] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.926436][T17841] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.049647][T17841] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.206119][ T2934] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.243686][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.273962][ T5862] Bluetooth: hci1: command 0x0405 tx timeout [ 351.293284][ T2934] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.313469][T17882] lo speed is unknown, defaulting to 1000 [ 351.319554][ T2934] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.440885][T17892] tipc: Enabled bearer , priority 0 [ 351.452547][T17892] syzkaller0: entered promiscuous mode [ 351.461741][T17892] syzkaller0: entered allmulticast mode [ 351.500667][T17882] tipc: Resetting bearer [ 351.517707][T17893] team0: Port device team_slave_0 removed [ 351.529666][T17881] tipc: Resetting bearer [ 351.538699][T17881] tipc: Disabling bearer [ 351.734983][T17907] validate_nla: 1 callbacks suppressed [ 351.735004][T17907] netlink: 'syz.4.3241': attribute type 6 has an invalid length. [ 351.759916][T17909] netlink: 'syz.3.3242': attribute type 3 has an invalid length. [ 351.951896][T17919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.378463][T17949] bond0: (slave bond_slave_1): Releasing backup interface [ 352.404445][T17952] lo speed is unknown, defaulting to 1000 [ 352.479488][T17957] lo speed is unknown, defaulting to 1000 [ 352.690500][T17965] __nla_validate_parse: 7 callbacks suppressed [ 352.690516][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3256'. [ 352.764858][T17970] netlink: 'syz.3.3259': attribute type 3 has an invalid length. [ 352.802064][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'. [ 353.279926][T17995] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.287532][T17995] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.560548][T17995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.598185][T17995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.700543][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.708071][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.723686][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.738811][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.748276][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.806792][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.826743][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.839529][ T6154] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.852479][ T6154] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.866935][T18005] lo speed is unknown, defaulting to 1000 [ 354.160108][T18024] lo speed is unknown, defaulting to 1000 [ 354.170830][T18005] chnl_net:caif_netlink_parms(): no params data found [ 354.373660][T18005] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.402379][T18005] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.409956][T18005] bridge_slave_0: entered allmulticast mode [ 354.417422][T18005] bridge_slave_0: entered promiscuous mode [ 354.431408][T18005] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.439561][T18005] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.446988][T18005] bridge_slave_1: entered allmulticast mode [ 354.454376][T18005] bridge_slave_1: entered promiscuous mode [ 354.488599][T18005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.501528][T18005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.611812][T18005] team0: Port device team_slave_0 added [ 354.620172][T18005] team0: Port device team_slave_1 added [ 354.679005][T18045] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 354.691475][T18045] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 354.704011][T18045] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 354.717211][T18005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.725330][T18005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.752403][T18005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.776617][T18005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.808878][T18005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.838797][T18005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.924739][T18005] hsr_slave_0: entered promiscuous mode [ 354.960051][T18005] hsr_slave_1: entered promiscuous mode [ 354.978623][T18005] debugfs: 'hsr0' already exists in 'hsr' [ 354.991227][T18005] Cannot create hsr debugfs directory [ 355.188815][T18085] netlink: 'syz.3.3284': attribute type 10 has an invalid length. [ 355.218568][T18085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.276299][T18085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.291305][T18085] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 355.367507][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3290'. [ 355.526536][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 355.726057][T18122] netlink: 'syz.0.3294': attribute type 2 has an invalid length. [ 355.784573][T18127] netlink: 428 bytes leftover after parsing attributes in process `syz.1.3296'. [ 355.785672][T18005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.803593][T18127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3296'. [ 355.806637][T18005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.821938][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 355.822859][T18005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.834378][ T5862] Bluetooth: hci4: command tx timeout [ 355.850261][T18127] netlink: 'syz.1.3296': attribute type 25 has an invalid length. [ 355.858760][T18005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.965847][T18005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.987605][T18005] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.007268][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.014531][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.024495][T18141] lo speed is unknown, defaulting to 1000 [ 356.028548][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.037392][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.330227][T18005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.342675][T18157] netlink: 'syz.1.3302': attribute type 19 has an invalid length. [ 356.351413][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'. [ 356.367808][T18157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3302'. [ 356.377855][T18157] netlink: 'syz.1.3302': attribute type 3 has an invalid length. [ 356.530386][T18167] net_ratelimit: 2 callbacks suppressed [ 356.530408][T18167] openvswitch: netlink: Duplicate or invalid key (type 0). [ 356.546599][T18167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.634649][T18005] veth0_vlan: entered promiscuous mode [ 356.653436][T18005] veth1_vlan: entered promiscuous mode [ 356.662990][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3307'. [ 356.709641][T18005] veth0_macvtap: entered promiscuous mode [ 356.742495][T18005] veth1_macvtap: entered promiscuous mode [ 356.768355][T18005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.801073][T18005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.823613][ T6154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.860832][ T6154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.880578][ T6154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.920366][ T6154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.025192][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.038845][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.145416][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.153418][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.298878][T18190] pimreg: entered allmulticast mode [ 357.339004][T18190] dvmrp8: entered allmulticast mode [ 357.346843][T18190] pimreg: left allmulticast mode [ 357.354448][T18190] dvmrp8: left allmulticast mode [ 357.770427][T18220] lo speed is unknown, defaulting to 1000 [ 357.827261][T15383] IPVS: starting estimator thread 0... [ 357.837656][T18226] __nla_validate_parse: 2 callbacks suppressed [ 357.837677][T18226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3319'. [ 357.867724][T18226] netlink: 'syz.2.3319': attribute type 1 has an invalid length. [ 357.878952][T18226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3319'. [ 357.914114][ T5862] Bluetooth: hci4: command tx timeout [ 357.922447][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3320'. [ 357.931843][T18228] IPVS: using max 35 ests per chain, 84000 per kthread [ 358.102829][T18238] netlink: 'syz.4.3322': attribute type 5 has an invalid length. [ 358.261994][T18246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3323'. [ 358.329371][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 358.383420][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 358.430172][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 358.523961][T18250] netlink: 'syz.3.3324': attribute type 6 has an invalid length. [ 358.540102][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 358.746424][T18280] netlink: 'syz.0.3331': attribute type 11 has an invalid length. [ 358.826552][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'. [ 358.905178][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3333'. [ 358.988780][T18296] lo speed is unknown, defaulting to 1000 [ 359.071517][T18307] netlink: 'syz.4.3337': attribute type 13 has an invalid length. [ 359.103642][T18304] gretap1: entered promiscuous mode [ 359.167607][T18307] gretap0: refused to change device tx_queue_len [ 359.174991][T18307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 359.545556][T18326] netlink: 'syz.4.3344': attribute type 3 has an invalid length. [ 359.994118][ T5862] Bluetooth: hci4: command tx timeout [ 360.285012][T18375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.349912][T18375] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 360.358926][T18375] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 360.412039][T18378] tipc: Started in network mode [ 360.430899][T18378] tipc: Node identity da2511c42c7a, cluster identity 4711 [ 360.481291][T18378] tipc: Enabled bearer , priority 0 [ 360.488781][T18383] syzkaller0: entered promiscuous mode [ 360.499045][T18383] syzkaller0: entered allmulticast mode [ 361.120055][T18378] tipc: Resetting bearer [ 361.138393][T18378] tipc: Disabling bearer [ 361.382124][T18423] lo speed is unknown, defaulting to 1000 [ 361.555792][T18433] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.563255][T18433] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.630754][T18433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.643172][T18433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.720537][ T6142] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.729646][ T6142] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.741732][ T6142] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.751522][ T6142] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.820991][T18441] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 361.822013][T18442] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 361.988018][T18447] netlink: 'syz.2.3375': attribute type 1 has an invalid length. [ 362.005000][T18447] sctp: [Deprecated]: syz.2.3375 (pid 18447) Use of int in max_burst socket option deprecated. [ 362.005000][T18447] Use struct sctp_assoc_value instead [ 362.074288][ T5862] Bluetooth: hci4: command tx timeout [ 362.147418][T18452] tipc: Enabling of bearer rejected, failed to enable media [ 362.626909][T18484] pim6reg1: entered promiscuous mode [ 362.632475][T18484] pim6reg1: entered allmulticast mode [ 362.743068][T18492] syzkaller1: entered promiscuous mode [ 362.749779][T18492] syzkaller1: entered allmulticast mode [ 363.084003][T18514] __nla_validate_parse: 9 callbacks suppressed [ 363.084024][T18514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3395'. [ 363.121775][T18497] bridge0: port 3(dummy0) entered disabled state [ 363.128291][T18497] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.135745][T18497] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.373489][T18528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3397'. [ 363.400448][T18497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.527068][T18497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.626326][T18497] mac80211_hwsim hwsim46 wlan0: left promiscuous mode [ 363.669226][ T6142] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.694839][ T6142] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.723568][T18527] lo speed is unknown, defaulting to 1000 [ 363.729940][ T6142] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.756926][ T6142] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.847978][T18540] netlink: 'syz.3.3399': attribute type 13 has an invalid length. [ 363.856857][T18540] netlink: 'syz.3.3399': attribute type 17 has an invalid length. [ 363.866275][T18541] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3398'. [ 364.008732][T18540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.168071][T18546] netlink: 75 bytes leftover after parsing attributes in process `syz.2.3401'. [ 364.180422][T18544] lo speed is unknown, defaulting to 1000 [ 364.210589][T18552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.424256][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3405'. [ 364.450892][T18563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.468761][T18567] netlink: 'syz.0.3406': attribute type 1 has an invalid length. [ 364.478176][T18567] netlink: 'syz.0.3406': attribute type 1 has an invalid length. [ 364.638584][T18567] netlink: 'syz.0.3406': attribute type 1 has an invalid length. [ 364.663988][T18567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.711391][T18567] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 364.726108][T18577] dvmrp0: entered allmulticast mode [ 364.748136][T18567] vlan2: entered allmulticast mode [ 364.753502][T18567] veth1: entered allmulticast mode [ 364.763379][T18567] bond1: (slave vlan2): Opening slave failed [ 364.815569][T18580] !: renamed from dummy0 [ 365.038183][T18589] lo speed is unknown, defaulting to 1000 [ 365.278207][T18605] netlink: 'syz.0.3414': attribute type 3 has an invalid length. [ 365.573558][T18630] lo speed is unknown, defaulting to 1000 [ 365.654069][T18634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3419'. [ 365.700610][T18629] lo speed is unknown, defaulting to 1000 [ 365.839846][T18646] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3425'. [ 366.408057][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3430'. [ 366.448468][T18673] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 366.454007][T18672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3430'. [ 366.474438][T18672] netlink: 'syz.4.3430': attribute type 5 has an invalid length. [ 366.496221][T18671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3428'. [ 366.848615][T18665] wg1 speed is unknown, defaulting to 1000 [ 366.925143][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.007283][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.024125][ T6142] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.033221][ T6142] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.042608][ T6142] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.057258][T18686] netlink: 'syz.0.3433': attribute type 18 has an invalid length. [ 367.060584][T18665] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 367.097395][ T6142] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.168120][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.191637][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.220139][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.231579][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.241499][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.282118][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.302093][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.334851][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.341690][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.384166][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.404100][T18665] wg1 speed is unknown, defaulting to 1000 [ 367.653588][T18711] lo speed is unknown, defaulting to 1000 [ 367.671479][T18711] wg1 speed is unknown, defaulting to 1000 [ 367.709662][T18721] netlink: 'syz.0.3441': attribute type 13 has an invalid length. [ 367.738044][T18716] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 367.803276][T18721] erspan0: left promiscuous mode [ 367.885459][T18721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.907558][T18721] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.930345][T18721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.000460][T18733] tipc: Enabled bearer , priority 0 [ 368.046203][T18738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.057970][T18733] tipc: Disabling bearer [ 368.187121][T18744] __nla_validate_parse: 5 callbacks suppressed [ 368.187141][T18744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3452'. [ 368.317650][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3455'. [ 368.389999][T18750] bridge1: port 1(veth3) entered blocking state [ 368.404995][T18750] bridge1: port 1(veth3) entered disabled state [ 368.414916][T18750] veth3: entered allmulticast mode [ 368.429043][T18750] veth3: entered promiscuous mode [ 368.456600][T18754] bridge1: port 2(veth0_to_bond) entered blocking state [ 368.474114][T18754] bridge1: port 2(veth0_to_bond) entered disabled state [ 368.481655][T18754] veth0_to_bond: entered allmulticast mode [ 368.514255][T18754] veth0_to_bond: entered promiscuous mode [ 368.774050][T18784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.781301][T18784] IPv6: NLM_F_CREATE should be set when creating new route [ 368.892291][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'. [ 368.916028][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 368.924181][T18802] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3467'. [ 368.934166][T18802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3467'. [ 368.953515][T18802] rdma_rxe: rxe_newlink: failed to add lo [ 368.985278][T18802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.179539][T18806] tap0: tun_chr_ioctl cmd 1074025677 [ 369.203266][T18806] tap0: linktype set to 768 [ 369.213430][T18822] dummy0: left allmulticast mode [ 369.237173][T18822] dummy0: left promiscuous mode [ 369.242260][T18822] bridge0: port 3(dummy0) entered disabled state [ 369.252521][T18822] bridge_slave_0: left allmulticast mode [ 369.264645][T18822] bridge_slave_0: left promiscuous mode [ 369.273076][T18822] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.289571][T18822] bridge_slave_1: left allmulticast mode [ 369.295555][T18822] bridge_slave_1: left promiscuous mode [ 369.301280][T18822] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.339965][T18822] bond0: (slave bond_slave_0): Releasing backup interface [ 369.361713][T18822] bond0: (slave bond_slave_1): Releasing backup interface [ 369.384506][T18822] team0: Port device team_slave_0 removed [ 369.396883][T18822] team0: Port device team_slave_1 removed [ 369.402939][T18822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.437123][T18822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.467062][T18838] tipc: Enabled bearer , priority 0 [ 369.503324][T18824] lo speed is unknown, defaulting to 1000 [ 369.547663][T18824] wg1 speed is unknown, defaulting to 1000 [ 369.612436][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3481'. [ 369.663624][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3481'. [ 369.850824][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.881141][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.905665][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 369.910381][T18887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3489'. [ 370.029772][T18901] macsec2: entered allmulticast mode [ 370.037729][T18901] macvlan1: entered allmulticast mode [ 370.044691][T18901] macvlan1: left allmulticast mode [ 370.081927][T18838] tipc: Disabling bearer [ 370.214255][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 370.260410][T18917] syzkaller0: entered promiscuous mode [ 370.266311][T18917] syzkaller0: entered allmulticast mode [ 370.288137][T18920] lo speed is unknown, defaulting to 1000 [ 370.294668][T18920] wg1 speed is unknown, defaulting to 1000 [ 370.334401][ T6154] bond1: (slave wlan0): failed to get link speed/duplex [ 370.360097][T18924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3497'. [ 370.444420][ T37] bond1: (slave wlan0): failed to get link speed/duplex [ 370.563947][ T2934] bond1: (slave wlan0): failed to get link speed/duplex [ 370.684400][ T37] bond1: (slave wlan0): failed to get link speed/duplex [ 370.734336][T18913] validate_nla: 4 callbacks suppressed [ 370.734358][T18913] netlink: 'syz.3.3497': attribute type 1 has an invalid length. [ 370.877536][T18928] netlink: zone id is out of range [ 371.094852][T18938] syzkaller0: entered promiscuous mode [ 371.101671][T18938] syzkaller0: entered allmulticast mode [ 371.130159][T18936] tipc: Started in network mode [ 371.147957][T18936] tipc: Node identity f2894c5718c6, cluster identity 4711 [ 371.175160][T18936] tipc: Enabled bearer , priority 0 [ 371.248169][T18944] tipc: Resetting bearer [ 371.266505][T18944] tipc: Disabling bearer [ 371.577659][T18982] netlink: 'syz.4.3513': attribute type 5 has an invalid length. [ 371.591018][T18982] netlink: 'syz.4.3513': attribute type 7 has an invalid length. [ 371.611805][T18982] : entered promiscuous mode [ 372.181137][T18992] bridge3: entered promiscuous mode [ 372.191757][T18992] macsec1: entered promiscuous mode [ 372.214439][T18992] macsec1: entered allmulticast mode [ 372.223112][T18992] bridge3: entered allmulticast mode [ 372.229676][T18992] bridge3: port 1(macsec1) entered blocking state [ 372.242442][T18992] bridge3: port 1(macsec1) entered disabled state [ 372.273314][T18992] bridge3: left allmulticast mode [ 372.303478][T18992] bridge3: left promiscuous mode [ 372.717830][T19022] lo speed is unknown, defaulting to 1000 [ 372.731965][T19022] wg1 speed is unknown, defaulting to 1000 [ 372.768627][T19025] lo speed is unknown, defaulting to 1000 [ 372.786107][T19025] wg1 speed is unknown, defaulting to 1000 [ 372.787440][T19018] lo speed is unknown, defaulting to 1000 [ 372.829136][T19026] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 372.859861][T19018] wg1 speed is unknown, defaulting to 1000 [ 372.994419][ T37] net_ratelimit: 17 callbacks suppressed [ 372.994439][ T37] bond1: (slave wlan0): failed to get link speed/duplex [ 373.170124][ T6154] bond1: (slave wlan0): failed to get link speed/duplex [ 373.338874][T19043] __nla_validate_parse: 13 callbacks suppressed [ 373.338896][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'. [ 373.408251][ T6148] bond1: (slave wlan0): failed to get link speed/duplex [ 373.415591][T19025] netlink: 'syz.0.3526': attribute type 6 has an invalid length. [ 373.554891][ T6148] bond1: (slave wlan0): failed to get link speed/duplex [ 373.665644][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 373.832680][T19063] lo speed is unknown, defaulting to 1000 [ 373.841633][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3537'. [ 373.857925][T19063] wg1 speed is unknown, defaulting to 1000 [ 373.864478][ T6142] bond1: (slave wlan0): failed to get link speed/duplex [ 373.901196][T19064] lo speed is unknown, defaulting to 1000 [ 373.925819][T19064] wg1 speed is unknown, defaulting to 1000 [ 373.927351][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 373.997181][T19078] tipc: Started in network mode [ 374.002082][T19078] tipc: Node identity 22f505eab243, cluster identity 4711 [ 374.036140][T19078] tipc: Enabled bearer , priority 0 [ 374.081617][T19072] syzkaller0: entered promiscuous mode [ 374.090374][T19072] syzkaller0: entered allmulticast mode [ 374.204276][ T6154] bond1: (slave wlan0): failed to get link speed/duplex [ 374.223101][T19072] tipc: Resetting bearer [ 374.292350][T19073] lo speed is unknown, defaulting to 1000 [ 374.305645][T19072] tipc: Resetting bearer [ 374.313010][T19072] tipc: Disabling bearer [ 374.330922][T19073] wg1 speed is unknown, defaulting to 1000 [ 374.524253][ T6142] bond1: (slave wlan0): failed to get link speed/duplex [ 374.647354][ T37] bond1: (slave wlan0): failed to get link speed/duplex [ 374.667401][T19123] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3548'. [ 374.695866][T19124] syzkaller1: entered promiscuous mode [ 374.711764][T19124] syzkaller1: entered allmulticast mode [ 374.798907][ T6154] bond1: (slave wlan0): failed to get link speed/duplex [ 374.817525][T19130] netlink: 'syz.1.3551': attribute type 4 has an invalid length. [ 374.930847][T19134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3553'. [ 375.049851][T19145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'. [ 375.127211][T19151] netlink: 'syz.1.3551': attribute type 4 has an invalid length. [ 375.196054][T19154] netlink: 'syz.2.3557': attribute type 13 has an invalid length. [ 375.244250][T19154] netlink: 'syz.2.3557': attribute type 17 has an invalid length. [ 375.405603][T19154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.435820][T19154] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.509889][T19155] lo speed is unknown, defaulting to 1000 [ 375.525416][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3560'. [ 375.546547][T19166] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 375.586553][T19155] wg1 speed is unknown, defaulting to 1000 [ 375.594958][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 375.610784][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 376.151577][T19209] netlink: 'syz.1.3571': attribute type 4 has an invalid length. [ 376.165584][T19209] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3571'. [ 376.189103][T19213] netlink: 'syz.1.3571': attribute type 4 has an invalid length. [ 376.673234][T19238] sctp: [Deprecated]: syz.0.3576 (pid 19238) Use of int in max_burst socket option. [ 376.673234][T19238] Use struct sctp_assoc_value instead [ 376.708336][T19238] netlink: 'syz.0.3576': attribute type 2 has an invalid length. [ 377.316478][T19266] tap0: tun_chr_ioctl cmd 1074025680 [ 378.188069][ T6160] net_ratelimit: 24 callbacks suppressed [ 378.188090][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 378.787575][ T6163] bond1: (slave wlan0): failed to get link speed/duplex [ 378.987321][T19309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.994986][T19313] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 379.064994][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 379.155907][T19327] __nla_validate_parse: 3 callbacks suppressed [ 379.155927][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3592'. [ 379.195434][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 379.216502][T19328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3592'. [ 379.325711][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 379.387834][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 379.430488][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3596'. [ 379.504128][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 379.545704][T19347] macvtap1: entered promiscuous mode [ 379.551074][T19347] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 379.568706][ T30] audit: type=1800 audit(1756323524.404:75): pid=19343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3599" name="memory.events" dev="tmpfs" ino=378 res=0 errno=0 [ 379.610663][T19347] mac80211_hwsim hwsim43 wlan1: left promiscuous mode [ 379.634846][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3600'. [ 379.694707][ T6160] bond1: (slave wlan0): failed to get link speed/duplex [ 379.835952][ T6148] bond1: (slave wlan0): failed to get link speed/duplex [ 379.954121][ T6163] bond1: (slave wlan0): failed to get link speed/duplex [ 380.063219][T19378] lo speed is unknown, defaulting to 1000 [ 380.069255][ T6148] bond1: (slave wlan0): failed to get link speed/duplex [ 380.092988][T19378] wg1 speed is unknown, defaulting to 1000 [ 380.506973][T19392] "syz.3.3611" (19392) uses obsolete ecb(arc4) skcipher [ 380.565974][T19390] syzkaller1: entered allmulticast mode [ 380.600504][T19395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3612'. [ 380.713376][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3613'. [ 380.754614][T19400] sctp: [Deprecated]: syz.3.3614 (pid 19400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.754614][T19400] Use struct sctp_sack_info instead [ 381.038179][T19407] : renamed from wg2 (while UP) [ 381.074669][T19405] delete_channel: no stack [ 381.168556][T19409] netlink: 'syz.3.3618': attribute type 1 has an invalid length. [ 381.216145][T19409] bond3: entered promiscuous mode [ 381.221496][T19409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.270651][T19413] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3617'. [ 381.281627][T19412] bond3: (slave bridge3): making interface the new active one [ 381.297078][T19412] bridge3: entered promiscuous mode [ 381.312562][T19412] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 381.367561][T19413] tipc: New replicast peer: 255.255.255.255 [ 381.377270][T19413] tipc: Enabled bearer , priority 10 [ 381.400153][T19415] tipc: Enabled bearer , priority 0 [ 381.482755][T19415] syzkaller0: entered promiscuous mode [ 381.498502][T19415] syzkaller0: entered allmulticast mode [ 381.643705][T19422] lo speed is unknown, defaulting to 1000 [ 381.649088][T19416] tipc: Resetting bearer [ 381.659641][T19414] tipc: Resetting bearer [ 381.667920][T19414] tipc: Disabling bearer [ 381.682492][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 381.687667][T19422] lo speed is unknown, defaulting to 1000 [ 381.697974][T19424] netlink: 'syz.1.3624': attribute type 1 has an invalid length. [ 381.701585][T19422] lo speed is unknown, defaulting to 1000 [ 381.711859][T19431] netlink: 'syz.3.3621': attribute type 21 has an invalid length. [ 381.723975][T19431] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3621'. [ 381.729922][T19422] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 381.769837][T19424] veth3: entered promiscuous mode [ 381.803685][T19431] netlink: 'syz.3.3621': attribute type 4 has an invalid length. [ 381.817375][T19431] netlink: 'syz.3.3621': attribute type 5 has an invalid length. [ 381.828434][T19422] lo speed is unknown, defaulting to 1000 [ 381.829978][T19426] team0: Port device bridge_slave_1 added [ 381.865135][T19422] lo speed is unknown, defaulting to 1000 [ 381.876465][T19422] lo speed is unknown, defaulting to 1000 [ 381.893398][T19422] lo speed is unknown, defaulting to 1000 [ 381.911758][T19422] lo speed is unknown, defaulting to 1000 [ 381.942121][T19422] lo speed is unknown, defaulting to 1000 [ 381.967867][T19422] lo speed is unknown, defaulting to 1000 [ 381.985195][T19422] lo speed is unknown, defaulting to 1000 [ 381.992164][T19422] lo speed is unknown, defaulting to 1000 [ 382.073776][T19443] lo speed is unknown, defaulting to 1000 [ 382.097595][T19441] tipc: Started in network mode [ 382.103562][T19441] tipc: Node identity e6ce1f321163, cluster identity 4711 [ 382.118200][T19441] tipc: Enabled bearer , priority 0 [ 382.138255][T19443] wg1 speed is unknown, defaulting to 1000 [ 382.156900][T19441] syzkaller0: entered promiscuous mode [ 382.181064][T19441] syzkaller0: entered allmulticast mode [ 382.213777][T19457] netlink: 'syz.2.3629': attribute type 11 has an invalid length. [ 382.229177][T19443] lo speed is unknown, defaulting to 1000 [ 382.257182][T19454] syzkaller0: entered promiscuous mode [ 382.268970][T19454] syzkaller0: entered allmulticast mode [ 382.283738][T19441] tipc: Resetting bearer [ 382.488682][T10490] tipc: Node number set to 3931065431 [ 382.492008][T19441] tipc: Resetting bearer [ 382.554279][T19441] tipc: Disabling bearer [ 382.884559][T19484] lo speed is unknown, defaulting to 1000 [ 382.907332][T19484] wg1 speed is unknown, defaulting to 1000 [ 382.924329][T19484] lo speed is unknown, defaulting to 1000 [ 383.159396][T19504] tipc: Enabling of bearer rejected, failed to enable media [ 383.214639][ T6152] net_ratelimit: 19 callbacks suppressed [ 383.214662][ T6152] bond1: (slave wlan0): failed to get link speed/duplex [ 383.344702][ T2934] bond1: (slave wlan0): failed to get link speed/duplex [ 383.464472][ T6148] bond1: (slave wlan0): failed to get link speed/duplex [ 383.480860][T19517] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 383.584061][ T6163] bond1: (slave wlan0): failed to get link speed/duplex [ 383.703185][T19541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.765332][ T6148] bond1: (slave wlan0): failed to get link speed/duplex [ 383.782916][T19538] lo speed is unknown, defaulting to 1000 [ 383.792708][T19543] nbd: must specify a size in bytes for the device [ 383.796614][T19545] netlink: 'syz.4.3651': attribute type 10 has an invalid length. [ 383.804739][T19538] wg1 speed is unknown, defaulting to 1000 [ 383.818144][T19538] lo speed is unknown, defaulting to 1000 [ 383.828811][T19545] team0: Device hsr_slave_0 failed to register rx_handler [ 383.917156][T19551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.924572][T19551] IPv6: NLM_F_CREATE should be set when creating new route [ 383.931813][T19551] IPv6: NLM_F_CREATE should be set when creating new route [ 383.960726][T19551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.055056][ T2934] bond1: (slave wlan0): failed to get link speed/duplex [ 384.165324][ T6163] bond1: (slave wlan0): failed to get link speed/duplex [ 384.263253][T19567] netlink: 'syz.4.3659': attribute type 4 has an invalid length. [ 384.294957][ T6163] bond1: (slave wlan0): failed to get link speed/duplex [ 384.338892][T19576] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 384.361853][T19575] lo speed is unknown, defaulting to 1000 [ 384.370434][T19575] wg1 speed is unknown, defaulting to 1000 [ 384.380143][T19575] lo speed is unknown, defaulting to 1000 [ 384.771298][T19603] __nla_validate_parse: 7 callbacks suppressed [ 384.771319][T19603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3668'. [ 384.886315][T19607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3666'. [ 384.896140][T19607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3666'. [ 384.917061][T19607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3666'. [ 384.923244][T19611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3670'. [ 384.929460][T19607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3666'. [ 384.994342][T19616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3670'. [ 385.015680][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'. [ 385.031043][T19614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3671'. [ 385.048124][T19614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3671'. [ 385.214552][T19630] bridge0: entered promiscuous mode [ 385.244953][T19630] bridge0: entered allmulticast mode [ 385.256405][T19630] team0: Port device bridge0 added [ 385.362169][T19640] bridge_slave_0: left allmulticast mode [ 385.369458][T19640] bridge_slave_0: left promiscuous mode [ 385.375967][T19640] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.387699][T19640] bridge_slave_1: left allmulticast mode [ 385.393646][T19640] bridge_slave_1: left promiscuous mode [ 385.405766][T19640] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.425596][T19640] bond0: (slave bond_slave_0): Releasing backup interface [ 385.458300][T19640] bond0: (slave bond_slave_1): Releasing backup interface [ 385.478622][T19640] team0: Port device team_slave_0 removed [ 385.487270][T19640] team0: Port device team_slave_1 removed [ 385.494712][T19640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.504069][T19640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.512930][T19640] bond1: (slave wlan0): Releasing active interface [ 385.609261][T19654] lo speed is unknown, defaulting to 1000 [ 385.619994][T19655] lo speed is unknown, defaulting to 1000 [ 385.640788][T19654] wg1 speed is unknown, defaulting to 1000 [ 385.661475][T10490] lo speed is unknown, defaulting to 1000 [ 385.664013][T19640] netlink: 'syz.0.3679': attribute type 10 has an invalid length. [ 385.685886][T19655] wg1 speed is unknown, defaulting to 1000 [ 385.694286][T19654] lo speed is unknown, defaulting to 1000 [ 385.767467][T19640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.781915][T19640] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 385.792212][T19655] lo speed is unknown, defaulting to 1000 [ 386.000744][T19673] syzkaller0: entered promiscuous mode [ 386.008366][T19673] syzkaller0: entered allmulticast mode [ 386.570787][T19716] netlink: 'syz.2.3697': attribute type 11 has an invalid length. [ 386.934689][T19738] netlink: 'syz.2.3707': attribute type 1 has an invalid length. [ 386.993492][T19739] lo speed is unknown, defaulting to 1000 [ 387.009794][T19743] tipc: Enabled bearer , priority 0 [ 387.119319][T19743] tipc: Resetting bearer [ 387.141003][T19739] wg1 speed is unknown, defaulting to 1000 [ 387.192449][T19739] lo speed is unknown, defaulting to 1000 [ 387.193517][T19745] netlink: 'syz.0.3706': attribute type 13 has an invalid length. [ 387.208818][T19745] netlink: 'syz.0.3706': attribute type 17 has an invalid length. [ 387.217483][T19742] tipc: Resetting bearer [ 387.260953][T19742] tipc: Disabling bearer [ 387.278645][T19757] team0: No ports can be present during mode change [ 387.978175][T19790] netlink: 'syz.2.3720': attribute type 1 has an invalid length. [ 388.771377][T19830] netem: change failed [ 388.957709][T19837] netlink: 'syz.3.3737': attribute type 29 has an invalid length. [ 389.048997][T19848] syz_tun: entered allmulticast mode [ 389.068772][T19849] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 389.090253][T19851] netlink: 'syz.1.3742': attribute type 2 has an invalid length. [ 389.107213][T19853] netlink: 'syz.1.3742': attribute type 2 has an invalid length. [ 389.170023][T19846] syzkaller0: entered promiscuous mode [ 389.189614][T19846] syzkaller0: entered allmulticast mode [ 389.205932][T19854] syz_tun (unregistering): left allmulticast mode [ 389.432471][T19875] lo speed is unknown, defaulting to 1000 [ 389.508399][T19875] wg1 speed is unknown, defaulting to 1000 [ 389.555555][T19875] lo speed is unknown, defaulting to 1000 [ 389.762699][T19887] vlan2: entered promiscuous mode [ 389.770212][T19887] bridge0: entered promiscuous mode [ 389.918627][T19892] netlink: 'syz.4.3752': attribute type 1 has an invalid length. [ 389.983375][T19892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.991569][T19897] __nla_validate_parse: 25 callbacks suppressed [ 389.991590][T19897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3752'. [ 390.027629][T19892] gretap1: entered promiscuous mode [ 390.039222][T19892] bond1: (slave gretap1): making interface the new active one [ 390.049302][T19892] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 390.090585][T19892] macvlan2: entered promiscuous mode [ 390.135183][T19892] macvlan2: entered allmulticast mode [ 390.146796][T19892] bond1: entered promiscuous mode [ 390.152795][T19892] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 390.165155][T19892] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 390.182891][T19892] bond1: left promiscuous mode [ 390.541906][T19936] bridge0: entered promiscuous mode [ 390.548389][T19936] vlan2: entered promiscuous mode [ 390.560497][T19936] bridge0: port 1(vlan2) entered blocking state [ 390.580401][T19936] bridge0: port 1(vlan2) entered disabled state [ 390.587874][T19936] vlan2: entered allmulticast mode [ 390.596889][T19936] bridge0: entered allmulticast mode [ 390.606077][T19936] vlan2: left allmulticast mode [ 390.611769][T19936] bridge0: left allmulticast mode [ 390.751285][T19961] sctp: [Deprecated]: syz.3.3771 (pid 19961) Use of int in max_burst socket option deprecated. [ 390.751285][T19961] Use struct sctp_assoc_value instead [ 390.799007][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3771'. [ 390.948813][T19969] netlink: 'syz.3.3774': attribute type 74 has an invalid length. [ 391.046135][T19976] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3776'. [ 391.093456][T19979] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!' [ 391.114450][T19979] CPU: 0 UID: 0 PID: 19979 Comm: syz.3.3775 Not tainted syzkaller #0 PREEMPT(full) [ 391.114497][T19979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.114523][T19979] Call Trace: [ 391.114532][T19979] [ 391.114542][T19979] dump_stack_lvl+0x189/0x250 [ 391.114576][T19979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.114602][T19979] ? __pfx__printk+0x10/0x10 [ 391.114630][T19979] ? kernfs_root+0x1c/0x230 [ 391.114656][T19979] ? kernfs_path_from_node+0x2f/0x290 [ 391.114679][T19979] ? kernfs_path_from_node+0x250/0x290 [ 391.114701][T19979] ? kernfs_path_from_node+0x2f/0x290 [ 391.114727][T19979] sysfs_warn_dup+0x8e/0xa0 [ 391.114748][T19979] sysfs_do_create_link_sd+0xc0/0x110 [ 391.114772][T19979] device_add_class_symlinks+0x1cf/0x240 [ 391.114798][T19979] device_add+0x475/0xb50 [ 391.114821][T19979] wiphy_register+0x1ba6/0x28d0 [ 391.114873][T19979] ? __pfx_wiphy_register+0x10/0x10 [ 391.114903][T19979] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 391.114932][T19979] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 391.114958][T19979] ieee80211_register_hw+0x3425/0x4080 [ 391.114994][T19979] ? ieee80211_register_hw+0x14c1/0x4080 [ 391.115023][T19979] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 391.115050][T19979] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 391.115083][T19979] ? __hrtimer_setup+0x187/0x210 [ 391.115103][T19979] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 391.115136][T19979] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 391.115181][T19979] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 391.115208][T19979] ? trace_kmalloc+0x1f/0xd0 [ 391.115238][T19979] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 391.115269][T19979] ? kstrndup+0xbf/0x160 [ 391.115296][T19979] hwsim_new_radio_nl+0xea4/0x1b10 [ 391.115325][T19979] ? __pfx___nla_validate_parse+0x10/0x10 [ 391.115365][T19979] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 391.115400][T19979] ? __nla_parse+0x40/0x60 [ 391.115432][T19979] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 391.115464][T19979] genl_family_rcv_msg_doit+0x212/0x300 [ 391.115496][T19979] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 391.115530][T19979] ? bpf_lsm_capable+0x9/0x20 [ 391.115560][T19979] ? security_capable+0x7e/0x2e0 [ 391.115594][T19979] genl_rcv_msg+0x60e/0x790 [ 391.115623][T19979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.115646][T19979] ? __kasan_slab_alloc+0x6c/0x80 [ 391.115674][T19979] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 391.115702][T19979] ? __netlink_lookup+0xbd/0x810 [ 391.115720][T19979] ? rcu_is_watching+0x15/0xb0 [ 391.115746][T19979] netlink_rcv_skb+0x208/0x470 [ 391.115778][T19979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.115803][T19979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.115836][T19979] ? lock_release+0x4b/0x3e0 [ 391.115874][T19979] ? down_read+0x1ad/0x2e0 [ 391.115892][T19979] genl_rcv+0x28/0x40 [ 391.115912][T19979] netlink_unicast+0x82f/0x9e0 [ 391.115942][T19979] ? __pfx_netlink_unicast+0x10/0x10 [ 391.115968][T19979] ? netlink_sendmsg+0x642/0xb30 [ 391.115983][T19979] ? skb_put+0x11b/0x210 [ 391.116003][T19979] netlink_sendmsg+0x805/0xb30 [ 391.116024][T19979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.116043][T19979] ? aa_sock_msg_perm+0xf1/0x1d0 [ 391.116061][T19979] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.116080][T19979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.116097][T19979] __sock_sendmsg+0x219/0x270 [ 391.116122][T19979] ____sys_sendmsg+0x505/0x830 [ 391.116144][T19979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.116168][T19979] ? import_iovec+0x74/0xa0 [ 391.116191][T19979] ___sys_sendmsg+0x21f/0x2a0 [ 391.116211][T19979] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.116233][T19979] ? futex_wake+0x4b2/0x560 [ 391.116274][T19979] ? __fget_files+0x2a/0x420 [ 391.116289][T19979] ? __fget_files+0x3a0/0x420 [ 391.116310][T19979] __x64_sys_sendmsg+0x19b/0x260 [ 391.116331][T19979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.116356][T19979] ? rcu_is_watching+0x15/0xb0 [ 391.116376][T19979] ? rcu_is_watching+0x15/0xb0 [ 391.116395][T19979] do_syscall_64+0xfa/0x3b0 [ 391.116412][T19979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.116430][T19979] ? clear_bhb_loop+0x60/0xb0 [ 391.116451][T19979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.116476][T19979] RIP: 0033:0x7f221078ebe9 [ 391.116494][T19979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.116511][T19979] RSP: 002b:00007f2211636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.116531][T19979] RAX: ffffffffffffffda RBX: 00007f22109b6090 RCX: 00007f221078ebe9 [ 391.116546][T19979] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d [ 391.116558][T19979] RBP: 00007f2210811e19 R08: 0000000000000000 R09: 0000000000000000 [ 391.116570][T19979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.116581][T19979] R13: 00007f22109b6128 R14: 00007f22109b6090 R15: 00007ffc86719538 [ 391.116605][T19979] [ 391.899390][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3784'. [ 391.931002][T20008] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3779'. [ 392.257999][T20033] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 392.270009][T20033] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 392.398768][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3794'. [ 392.409681][T20042] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 392.486094][T20044] lo speed is unknown, defaulting to 1000 [ 392.492736][T20044] wg1 speed is unknown, defaulting to 1000 [ 392.500968][T20044] lo speed is unknown, defaulting to 1000 [ 392.642259][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3796'. [ 392.653388][T20051] netlink: 'syz.2.3796': attribute type 3 has an invalid length. [ 392.657866][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3797'. [ 392.830978][T20070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3802'. [ 392.843272][T20070] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 392.856974][T20070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'. [ 392.881218][T20072] lo speed is unknown, defaulting to 1000 [ 392.891651][T20072] wg1 speed is unknown, defaulting to 1000 [ 392.903678][T20072] lo speed is unknown, defaulting to 1000 [ 393.202626][T20081] syzkaller1: entered promiscuous mode [ 393.230512][T20081] syzkaller1: entered allmulticast mode [ 393.464896][T20095] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 393.470129][T20101] net_ratelimit: 11 callbacks suppressed [ 393.470154][T20101] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 393.593312][T20095] bridge_slave_0: left allmulticast mode [ 393.623226][T20110] sctp: [Deprecated]: syz.3.3815 (pid 20110) Use of int in max_burst socket option deprecated. [ 393.623226][T20110] Use struct sctp_assoc_value instead [ 393.639956][T20095] bridge_slave_0: left promiscuous mode [ 393.655868][T20095] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.705236][T20114] netlink: 'syz.4.3811': attribute type 10 has an invalid length. [ 393.721561][T20095] bridge_slave_1: left allmulticast mode [ 393.740590][T20095] bridge_slave_1: left promiscuous mode [ 393.777635][T20095] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.804386][T20095] veth0_to_bond: left allmulticast mode [ 393.813753][T20095] veth0_to_bond: left promiscuous mode [ 393.826741][T20095] bridge1: port 2(veth0_to_bond) entered disabled state [ 393.857203][T20095] bond0: (slave bond_slave_0): Releasing backup interface [ 393.871414][T20095] bond0: (slave bond_slave_1): Releasing backup interface [ 393.891031][T20095] team0: Port device team_slave_0 removed [ 393.900071][T20095] team0: Port device team_slave_1 removed [ 393.907042][T20095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.920173][T20095] veth3: left allmulticast mode [ 393.926409][T20095] veth3: left promiscuous mode [ 393.932227][T20095] bridge1: port 1(veth3) entered disabled state [ 393.952139][T20095] bond1: (slave gretap1): Releasing active interface [ 393.990027][T20114] mac80211_hwsim hwsim54 wlan1: left allmulticast mode [ 394.015519][T20114] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 394.171311][T20134] Bluetooth: MGMT ver 1.23 [ 394.209894][T20134] geneve2: entered promiscuous mode [ 394.221861][ T6142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.255588][ T6142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.255917][T20142] netlink: 'syz.1.3822': attribute type 10 has an invalid length. [ 394.265896][ T6142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.334583][ T6142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.516555][T20152] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 394.523351][ T1208] IPVS: starting estimator thread 0... [ 394.555855][T20154] netlink: 'syz.0.3826': attribute type 5 has an invalid length. [ 394.563711][T10490] IPVS: starting estimator thread 0... [ 394.627294][T20153] lo speed is unknown, defaulting to 1000 [ 394.634359][T20155] IPVS: using max 40 ests per chain, 96000 per kthread [ 394.654187][T20153] wg1 speed is unknown, defaulting to 1000 [ 394.660926][T20153] lo speed is unknown, defaulting to 1000 [ 394.674501][T20159] IPVS: using max 35 ests per chain, 84000 per kthread [ 395.212915][T20189] batadv1: entered allmulticast mode [ 395.229791][T20189] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 395.295725][T20196] netlink: 'syz.3.3834': attribute type 1 has an invalid length. [ 395.322608][T20196] __nla_validate_parse: 8 callbacks suppressed [ 395.322626][T20196] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3834'. [ 395.377689][T20195] syzkaller0: entered promiscuous mode [ 395.383441][T20195] syzkaller0: entered allmulticast mode [ 395.405523][T20199] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3837'. [ 395.422207][T20201] netlink: 4208 bytes leftover after parsing attributes in process `syz.4.3836'. [ 395.462605][T20199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3837'. [ 395.496422][T20187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3834'. [ 395.621298][T20199] macvtap1: entered promiscuous mode [ 395.654244][T20199] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 395.725462][T20212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.737524][T20212] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.750498][T20212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.775630][T20220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3842'. [ 395.789341][T20222] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 395.832970][T20213] lo speed is unknown, defaulting to 1000 [ 395.868814][T20213] wg1 speed is unknown, defaulting to 1000 [ 395.875863][T20213] lo speed is unknown, defaulting to 1000 [ 395.910520][T20230] netem: incorrect gi model size [ 395.920105][T20230] netem: change failed [ 396.103285][T20248] IPVS: length: 4096 != 8 [ 396.134588][T20248] dvmrp8: entered allmulticast mode [ 396.192059][T20248] team0: Port device bridge_slave_1 removed [ 396.223951][T20247] dvmrp8: left allmulticast mode [ 396.232089][ T37] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 396.325919][T20263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3849'. [ 396.537768][T20279] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3853'. [ 396.604563][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3853'. [ 396.696454][T20286] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 396.726522][T20286] team0: Port device bridge0 removed [ 396.751842][T20286] netlink: 'syz.2.3855': attribute type 10 has an invalid length. [ 396.760831][T20286] mac80211_hwsim hwsim43 wlan1: left allmulticast mode [ 396.929758][T20301] nbd: must specify a size in bytes for the device [ 397.091337][T20311] lo speed is unknown, defaulting to 1000 [ 397.111452][T20317] netlink: 'syz.3.3866': attribute type 1 has an invalid length. [ 397.125584][T20311] wg1 speed is unknown, defaulting to 1000 [ 397.132344][T20311] lo speed is unknown, defaulting to 1000 [ 397.157584][T20317] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3866'. [ 397.544618][T20311] netlink: 'syz.1.3863': attribute type 14 has an invalid length. [ 397.686588][T20352] 8021q: VLANs not supported on bond0 [ 397.750197][T20351] lo speed is unknown, defaulting to 1000 [ 397.785010][T20351] wg1 speed is unknown, defaulting to 1000 [ 397.825276][T20351] lo speed is unknown, defaulting to 1000 [ 398.114926][T20375] netlink: 'syz.0.3880': attribute type 21 has an invalid length. [ 398.143549][T20377] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 398.234380][T20377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 398.320359][T20377] vlan0: entered allmulticast mode [ 398.347558][T20377] batadv0: entered allmulticast mode [ 398.367599][T20377] bond4: (slave vlan0): making interface the new active one [ 398.387361][T20377] bond4: (slave vlan0): Enslaving as an active interface with an up link [ 398.407782][T20399] netlink: 'syz.2.3887': attribute type 5 has an invalid length. [ 398.684925][T20419] netlink: 'syz.0.3890': attribute type 1 has an invalid length. [ 398.833277][T20403] netlink: 'syz.2.3887': attribute type 2 has an invalid length. [ 398.834279][T20419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.869383][ T1208] IPVS: starting estimator thread 0... [ 398.881248][T20417] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.964009][T20423] IPVS: using max 34 ests per chain, 81600 per kthread [ 399.110419][T20440] lo speed is unknown, defaulting to 1000 [ 399.131419][T20440] wg1 speed is unknown, defaulting to 1000 [ 399.150671][T20440] lo speed is unknown, defaulting to 1000 [ 399.483701][T20455] dvmrp8: entered allmulticast mode [ 399.520808][T20457] dvmrp8: left allmulticast mode [ 399.641786][T20470] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 399.651141][T20470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.689848][T20467] lo speed is unknown, defaulting to 1000 [ 399.700178][T20467] wg1 speed is unknown, defaulting to 1000 [ 399.711578][T20467] lo speed is unknown, defaulting to 1000 [ 399.792426][T20478] bridge_slave_0: left allmulticast mode [ 399.799021][T20478] bridge_slave_0: left promiscuous mode [ 399.806894][T20478] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.819352][T20478] bridge_slave_1: left allmulticast mode [ 399.833479][T20478] bridge_slave_1: left promiscuous mode [ 399.839728][T20478] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.853498][T20478] bond0: (slave bond_slave_0): Releasing backup interface [ 399.875432][T20478] team0: Port device team_slave_1 removed [ 399.891398][T20478] bond0: (slave batadv_slave_0): Releasing backup interface [ 399.921007][T20478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.950051][T20478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.976508][T20478] bond1: (slave geneve2): Releasing active interface [ 400.049899][T20478] bond3: (slave bridge3): Releasing backup interface [ 400.066694][T20478] bridge3: left promiscuous mode [ 400.078298][T20478] bond4: (slave vlan0): Releasing active interface [ 400.393013][T20510] pimreg: entered allmulticast mode [ 400.530758][T20519] netlink: 'syz.4.3916': attribute type 1 has an invalid length. [ 400.607232][T20519] bond2: (slave bridge6): Enslaving as a backup interface with an up link [ 400.687364][ T6142] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.702198][ T6142] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.729542][ T6152] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.739559][ T6152] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.750784][ T6152] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.751037][T20529] __nla_validate_parse: 9 callbacks suppressed [ 400.751055][T20529] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3920'. [ 400.780712][ T6152] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.798577][ T6152] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.808320][ T6152] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.028550][T20545] lo speed is unknown, defaulting to 1000 [ 401.048149][T20545] wg1 speed is unknown, defaulting to 1000 [ 401.058104][T20545] lo speed is unknown, defaulting to 1000 [ 401.265751][T20547] netlink: 'syz.1.3925': attribute type 13 has an invalid length. [ 401.275631][T20547] netlink: 'syz.1.3925': attribute type 17 has an invalid length. [ 401.301320][T20568] netlink: 'syz.0.3929': attribute type 10 has an invalid length. [ 401.351897][T20567] netlink: 'syz.0.3929': attribute type 10 has an invalid length. [ 401.363646][T20547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.388224][T20568] team0: Port device dummy0 added [ 401.438634][T20567] team0: Port device dummy0 removed [ 401.581177][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3931'. [ 401.673528][T20579] tun0: tun_chr_ioctl cmd 1074025672 [ 401.680482][T20579] tun0: ignored: set checksum disabled [ 401.897296][T20589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 401.961453][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3938'. [ 402.001906][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3938'. [ 402.039614][T20593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3938'. [ 402.051942][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3938'. [ 402.145848][T20606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3942'. [ 402.155961][T20610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3943'. [ 402.165727][T20610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3943'. [ 402.194702][T20606] macsec2: entered promiscuous mode [ 402.204089][T20606] macvlan1: entered promiscuous mode [ 402.229370][T20606] macvlan1: left promiscuous mode [ 402.389757][T20625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.416441][T20627] bond3: (slave veth5): Enslaving as an active interface with a down link [ 402.567099][T20636] lo speed is unknown, defaulting to 1000 [ 402.587548][T20636] wg1 speed is unknown, defaulting to 1000 [ 402.635068][T20636] lo speed is unknown, defaulting to 1000 [ 402.720268][ T6033] nci: nci_rx_work: unknown MT 0x1 [ 402.798112][T20660] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 402.805472][T20660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.428011][T20676] validate_nla: 5 callbacks suppressed [ 403.428048][T20676] netlink: 'syz.0.3957': attribute type 32 has an invalid length. [ 403.586743][T20683] netlink: 'syz.3.3959': attribute type 4 has an invalid length. [ 403.970812][T20700] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 407.089713][T20715] netlink: 'syz.3.3970': attribute type 29 has an invalid length. [ 407.109498][T20722] sit0: entered promiscuous mode [ 407.122773][T20722] netlink: 'syz.3.3970': attribute type 1 has an invalid length. [ 407.132597][T20722] __nla_validate_parse: 5 callbacks suppressed [ 407.132618][T20722] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3970'. [ 407.149181][T20728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3974'. [ 407.187328][T20738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3975'. [ 407.326092][T20751] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 407.361823][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 407.449339][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 407.570228][T20769] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 407.603859][T20769] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 407.675745][T20769] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 407.890316][T20767] lo speed is unknown, defaulting to 1000 [ 407.898487][T20767] wg1 speed is unknown, defaulting to 1000 [ 408.107196][T20767] lo speed is unknown, defaulting to 1000 [ 408.589781][T20786] lo speed is unknown, defaulting to 1000 [ 408.594792][T20792] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 408.616910][T20790] smc: net device bond0 applied user defined pnetid SYZ2 [ 408.625930][T20792] netlink: 'syz.3.3988': attribute type 2 has an invalid length. [ 408.646037][T20786] wg1 speed is unknown, defaulting to 1000 [ 408.652806][T20786] lo speed is unknown, defaulting to 1000 [ 408.873522][T20802] ip6gre1: entered allmulticast mode [ 408.952931][T20805] lo speed is unknown, defaulting to 1000 [ 408.960529][T20805] wg1 speed is unknown, defaulting to 1000 [ 408.968272][T20805] lo speed is unknown, defaulting to 1000 [ 409.421341][T20826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3998'. [ 409.431961][T20826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3998'. [ 409.446867][T20826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3998'. [ 409.599559][T20831] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 409.618928][T20831] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 409.751738][T20843] pim6reg1: entered promiscuous mode [ 409.764841][T20843] pim6reg1: entered allmulticast mode [ 409.841349][T20844] team0: Port device sit1 added [ 410.016014][T20852] tipc: Enabled bearer , priority 0 [ 410.217902][T20862] lo speed is unknown, defaulting to 1000 [ 410.229723][T20862] wg1 speed is unknown, defaulting to 1000 [ 410.273581][T20862] lo speed is unknown, defaulting to 1000 [ 410.528960][T20880] netlink: 'syz.4.4010': attribute type 4 has an invalid length. [ 410.540670][T20881] netlink: 'syz.4.4010': attribute type 4 has an invalid length. [ 410.799991][T20851] tipc: Disabling bearer [ 410.826957][T20891] netlink: 'syz.0.4014': attribute type 1 has an invalid length. [ 410.852877][T20891] bond4: entered promiscuous mode [ 410.859742][T20891] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.871284][T20891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4014'. [ 410.907055][T20894] IPVS: dh: FWM 3 0x00000003 - no destination available [ 410.982434][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4016'. [ 410.994989][T20894] lo speed is unknown, defaulting to 1000 [ 411.026094][T20894] wg1 speed is unknown, defaulting to 1000 [ 411.063332][T20894] lo speed is unknown, defaulting to 1000 [ 411.168640][ T5862] Bluetooth: hci4: link tx timeout [ 411.174903][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 411.183120][ T5862] Bluetooth: hci4: link tx timeout [ 411.190671][ T5862] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 411.208442][T20904] Bluetooth: hci4: link tx timeout [ 411.213772][T20904] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 411.221787][T20904] Bluetooth: hci4: link tx timeout [ 411.227826][T20904] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 411.235859][T20904] Bluetooth: hci4: link tx timeout [ 411.241178][T20904] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 411.249105][T20904] Bluetooth: hci4: link tx timeout [ 411.255116][T20904] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 411.486230][T20909] netlink: 'syz.1.4019': attribute type 1 has an invalid length. [ 412.188953][T20932] __nla_validate_parse: 2 callbacks suppressed [ 412.188975][T20932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4023'. [ 412.236806][T20784] Set syz1 is full, maxelem 65536 reached [ 412.281147][T20936] lo speed is unknown, defaulting to 1000 [ 412.292063][T20936] wg1 speed is unknown, defaulting to 1000 [ 412.307636][T20936] lo speed is unknown, defaulting to 1000 [ 412.585057][T20951] lo speed is unknown, defaulting to 1000 [ 412.620687][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'. [ 412.652150][T20953] netlink: 'syz.3.4027': attribute type 1 has an invalid length. [ 412.673630][T20956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4028'. [ 412.677561][T20951] wg1 speed is unknown, defaulting to 1000 [ 412.737467][T20951] lo speed is unknown, defaulting to 1000 [ 412.959543][ T6142] bond0 (unregistering): Released all slaves [ 413.082423][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'. [ 413.082448][T20973] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.4032'. [ 413.092021][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'. [ 413.131722][T20973] netlink: 'syz.0.4032': attribute type 10 has an invalid length. [ 413.277037][T20904] Bluetooth: hci4: command 0x0406 tx timeout [ 413.383624][T20991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4037'. [ 413.470703][T20994] netlink: 'syz.0.4039': attribute type 4 has an invalid length. [ 413.519073][T20994] netlink: 'syz.0.4039': attribute type 4 has an invalid length. [ 413.536103][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4039'. [ 413.933507][T21012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4044'. [ 414.122085][T21022] nbd: nbd0 already in use [ 414.128256][T21022] block nbd0: NBD_DISCONNECT [ 414.132904][T21022] block nbd0: Send disconnect failed -32 [ 414.179224][T21021] tipc: Enabled bearer , priority 0 [ 414.230825][ T4535] ip6gretap0 (unregistering): left promiscuous mode [ 414.251220][ T4535] bond12 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 414.260984][ T4535] bond12 (unregistering): (slave ip6gretap1): Releasing backup interface [ 414.289585][T21027] netlink: 1360 bytes leftover after parsing attributes in process `syz.4.4048'. [ 414.362368][ T4535] bond11 (unregistering): (slave geneve3): Releasing active interface [ 414.780223][ T4535] bond1 (unregistering): Released all slaves [ 414.793166][ T4535] bond2 (unregistering): Released all slaves [ 414.805154][ T4535] bond3 (unregistering): Released all slaves [ 414.823388][ T4535] bond4 (unregistering): Released all slaves [ 414.841167][ T4535] bond5 (unregistering): Released all slaves [ 414.858919][ T4535] bond6 (unregistering): Released all slaves [ 414.871578][ T4535] bond7 (unregistering): Released all slaves [ 414.886756][ T4535] bond8 (unregistering): Released all slaves [ 414.905352][ T4535] bond9 (unregistering): Released all slaves [ 414.922111][ T4535] bond0 (unregistering): Released all slaves [ 414.938491][ T4535] bond10 (unregistering): Released all slaves [ 414.952149][ T4535] bond11 (unregistering): Released all slaves [ 414.967393][ T4535] bond12 (unregistering): Released all slaves [ 415.007035][T21021] syzkaller0: entered promiscuous mode [ 415.012633][T21021] syzkaller0: entered allmulticast mode [ 415.024884][T21022] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 415.052847][T21028] tipc: Resetting bearer [ 415.089831][T21017] tipc: Resetting bearer [ 415.185820][T21017] tipc: Disabling bearer [ 415.258319][ T4535] tipc: Disabling bearer [ 415.268657][ T4535] tipc: Left network mode [ 415.353895][T20904] Bluetooth: hci4: command 0x0406 tx timeout [ 415.926130][T21068] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 415.968116][ T4535] hsr_slave_0: left promiscuous mode [ 415.981501][ T4535] hsr_slave_1: left promiscuous mode [ 416.010951][ T4535] pimreg (unregistering): left allmulticast mode [ 416.014601][T21084] validate_nla: 2 callbacks suppressed [ 416.014623][T21084] netlink: 'syz.3.4064': attribute type 11 has an invalid length. [ 416.542100][T21085] lo speed is unknown, defaulting to 1000 [ 416.576273][T21085] wg1 speed is unknown, defaulting to 1000 [ 416.602077][T21080] lo speed is unknown, defaulting to 1000 [ 416.606452][T21085] lo speed is unknown, defaulting to 1000 [ 416.707059][T21102] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 416.728593][T21102] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 416.792910][T21102] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 416.837192][T21080] wg1 speed is unknown, defaulting to 1000 [ 416.861856][T21080] lo speed is unknown, defaulting to 1000 [ 417.133955][T21125] Dead loop on virtual device ip6_vti0, fix it urgently! [ 417.268184][T21130] __nla_validate_parse: 5 callbacks suppressed [ 417.268205][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'. [ 417.347013][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'. [ 417.501192][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 417.557154][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 417.632160][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 417.842882][ T4535] IPVS: stop unused estimator thread 0... [ 417.989382][T21160] sit0: entered promiscuous mode [ 418.057285][T21160] netlink: 'syz.2.4081': attribute type 1 has an invalid length. [ 418.087335][T21169] nbd0: detected capacity change from 0 to 127 [ 418.108799][T21160] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4081'. [ 418.134403][T21177] tipc: Enabling of bearer rejected, failed to enable media [ 418.144511][T21174] netlink: 'syz.4.4084': attribute type 8 has an invalid length. [ 418.161510][T21179] tipc: Enabling of bearer rejected, failed to enable media [ 418.457590][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4089'. [ 418.587099][T21203] hsr_slave_1 (unregistering): left promiscuous mode [ 418.798077][ T5862] block nbd0: Receive control failed (result -32) [ 418.863098][T21216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4095'. [ 418.875458][T21216] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4095'. [ 418.902486][T21216] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4095'. [ 418.917410][T21216] netlink: 'syz.0.4095': attribute type 21 has an invalid length. [ 418.927189][T21220] netlink: 'syz.4.4096': attribute type 10 has an invalid length. [ 418.988369][T21220] team0: Port device 0! added [ 419.049652][T21227] veth1_to_team: entered allmulticast mode [ 419.815482][T21243] tipc: Enabled bearer , priority 0 [ 419.923434][T21243] syzkaller0: entered promiscuous mode [ 419.931361][T21243] syzkaller0: entered allmulticast mode [ 419.971447][T21243] tipc: Resetting bearer [ 420.012786][T21255] syzkaller1: entered promiscuous mode [ 420.027864][T21255] syzkaller1: entered allmulticast mode [ 420.046870][T21243] tipc: Resetting bearer [ 420.201765][T21242] tipc: Resetting bearer [ 420.260746][T21242] tipc: Disabling bearer [ 420.463948][T21273] tipc: Enabled bearer , priority 0 [ 420.479754][T21273] tipc: Resetting bearer [ 420.512575][T21271] tipc: Disabling bearer [ 420.556281][T21289] netlink: 'syz.4.4115': attribute type 1 has an invalid length. [ 420.615650][T21289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.650641][T21299] bond3: (slave geneve3): making interface the new active one [ 420.660623][T21299] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 420.689619][ T6519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.709939][ T6519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.730364][ T6519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.743600][ T6519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.793384][T21312] sit0: left promiscuous mode [ 420.824597][T21312] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 421.202155][T21323] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 421.432390][T21330] netlink: 'syz.4.4130': attribute type 1 has an invalid length. [ 421.513115][T21330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.585581][T21330] macvlan2: entered promiscuous mode [ 421.595182][T21330] macvlan2: entered allmulticast mode [ 421.595259][T21328] netlink: 'syz.2.4129': attribute type 1 has an invalid length. [ 421.601970][T21330] bond4: entered promiscuous mode [ 421.619165][T21330] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.638305][T21330] bond4: left promiscuous mode [ 421.678748][T21328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.690046][T21331] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 421.711742][T21328] vlan1: entered allmulticast mode [ 421.717038][T21328] veth1: entered allmulticast mode [ 421.722883][T21328] bond3: (slave vlan1): Opening slave failed [ 421.842240][T21349] wg1 speed is unknown, defaulting to 1000 [ 421.853484][T21349] lo speed is unknown, defaulting to 1000 [ 421.953220][T21356] wg1 speed is unknown, defaulting to 1000 [ 421.960140][T21356] lo speed is unknown, defaulting to 1000 [ 422.048023][T21363] pim6reg1: entered promiscuous mode [ 422.053506][T21363] pim6reg1: entered allmulticast mode [ 422.139228][T21367] netlink: 'syz.3.4142': attribute type 1 has an invalid length. [ 422.192370][T21363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 422.220307][T21363] team0: Port device bond5 added [ 422.343925][T21371] netlink: 'syz.3.4143': attribute type 1 has an invalid length. [ 422.351831][T21371] __nla_validate_parse: 18 callbacks suppressed [ 422.351848][T21371] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4143'. [ 422.377968][T21371] tipc: Enabled bearer , priority 0 [ 422.385514][T21371] syzkaller0: entered promiscuous mode [ 422.391014][T21371] syzkaller0: entered allmulticast mode [ 422.397851][T21356] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4140'. [ 422.468485][T21371] syzkaller0: mtu less than device minimum [ 422.509581][T21356] Bluetooth: MGMT ver 1.23 [ 422.537335][T21370] tipc: Resetting bearer [ 422.586246][T21370] tipc: Disabling bearer [ 422.626760][T21388] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 422.709000][T21388] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4146'. [ 422.728970][T21393] IPVS: Error connecting to the multicast addr [ 422.889648][T21398] wg1 speed is unknown, defaulting to 1000 [ 422.898547][T21403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4148'. [ 422.942565][T21403] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.003569][T21398] lo speed is unknown, defaulting to 1000 [ 423.031706][T21408] macvlan2: entered promiscuous mode [ 423.038551][T21408] macvlan2: entered allmulticast mode [ 423.097678][T21414] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4152'. [ 423.112048][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4152'. [ 423.207305][T21418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4154'. [ 423.305060][T21423] netlink: 'syz.4.4156': attribute type 1 has an invalid length. [ 423.317718][T21426] vlan2: entered allmulticast mode [ 423.322950][T21426] dummy0: entered allmulticast mode [ 423.326092][T21424] netlink: 'syz.4.4156': attribute type 1 has an invalid length. [ 423.429199][T21423] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 423.430317][T21424] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 423.553405][T21444] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4161'. [ 423.589751][T21445] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4161'. [ 423.607060][T21444] delete_channel: no stack [ 423.622203][T21445] netlink: 'syz.0.4161': attribute type 10 has an invalid length. [ 423.631906][T21451] netlink: 'syz.0.4161': attribute type 10 has an invalid length. [ 423.646961][T21451] syz_tun: entered promiscuous mode [ 423.683670][T21444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4161'. [ 423.700428][T21444] netlink: 'syz.0.4161': attribute type 1 has an invalid length. [ 424.132917][T21483] pimreg: entered allmulticast mode [ 424.156239][ T45] IPVS: starting estimator thread 0... [ 424.247428][T21488] IPVS: using max 40 ests per chain, 96000 per kthread [ 424.328744][T21495] netlink: zone id is out of range [ 424.347160][T21495] netlink: zone id is out of range [ 424.362942][T21495] netlink: zone id is out of range [ 424.377326][T21495] netlink: zone id is out of range [ 424.382676][T21495] netlink: zone id is out of range [ 424.393662][T21495] netlink: zone id is out of range [ 424.402018][T21495] netlink: zone id is out of range [ 424.556714][T21508] netlink: 'syz.4.4177': attribute type 13 has an invalid length. [ 424.697311][T21508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.707236][T21508] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.782201][T21514] wg1 speed is unknown, defaulting to 1000 [ 424.809442][T21514] lo speed is unknown, defaulting to 1000 [ 424.907885][T21522] : entered promiscuous mode [ 425.261486][T21545] wg1 speed is unknown, defaulting to 1000 [ 425.291305][T21549] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 425.307349][T21549] syzkaller1: linktype set to 778 [ 425.312790][T21545] lo speed is unknown, defaulting to 1000 [ 425.481227][T21561] sctp: [Deprecated]: syz.4.4193 (pid 21561) Use of int in max_burst socket option. [ 425.481227][T21561] Use struct sctp_assoc_value instead [ 425.795275][T21581] mac80211_hwsim hwsim48 ;: renamed from wlan0 [ 425.919417][T21590] tipc: MTU too low for tipc bearer [ 425.928307][T21590] tipc: MTU too low for tipc bearer [ 425.953006][T21590] tipc: MTU too low for tipc bearer [ 425.960129][T21590] tipc: MTU too low for tipc bearer [ 425.982799][T21591] veth3: entered promiscuous mode [ 426.006848][T21590] tipc: MTU too low for tipc bearer [ 426.012258][T21590] tipc: MTU too low for tipc bearer [ 426.017864][T21590] tipc: MTU too low for tipc bearer [ 426.023297][T21590] tipc: MTU too low for tipc bearer [ 426.032229][T21590] tipc: MTU too low for tipc bearer [ 426.038742][T21590] tipc: MTU too low for tipc bearer [ 426.044190][T21590] tipc: MTU too low for tipc bearer [ 426.057302][T21590] tipc: MTU too low for tipc bearer [ 426.062951][T21590] tipc: MTU too low for tipc bearer [ 426.068390][T21590] tipc: MTU too low for tipc bearer [ 426.073763][T21590] tipc: MTU too low for tipc bearer [ 426.082851][T21590] tipc: MTU too low for tipc bearer [ 426.088917][T21590] tipc: MTU too low for tipc bearer [ 426.094367][T21590] tipc: MTU too low for tipc bearer [ 426.099734][T21590] tipc: MTU too low for tipc bearer [ 426.105177][T21590] tipc: MTU too low for tipc bearer [ 426.110896][T21590] tipc: MTU too low for tipc bearer [ 426.140178][T21590] tipc: MTU too low for tipc bearer [ 426.149720][T21590] tipc: MTU too low for tipc bearer [ 426.176726][T21590] tipc: MTU too low for tipc bearer [ 426.185350][T21590] tipc: MTU too low for tipc bearer [ 426.190878][T21590] tipc: MTU too low for tipc bearer [ 426.197260][T21590] tipc: MTU too low for tipc bearer [ 426.202882][T21590] tipc: MTU too low for tipc bearer [ 426.209187][T21590] tipc: MTU too low for tipc bearer [ 426.216272][T21590] tipc: MTU too low for tipc bearer [ 426.221783][T21590] tipc: MTU too low for tipc bearer [ 426.227863][T21590] tipc: MTU too low for tipc bearer [ 426.233386][T21590] tipc: MTU too low for tipc bearer [ 426.240528][T21590] tipc: MTU too low for tipc bearer [ 426.247208][T21590] tipc: MTU too low for tipc bearer [ 426.252642][T21590] tipc: MTU too low for tipc bearer [ 426.259275][T21590] tipc: MTU too low for tipc bearer [ 426.278061][T21590] tipc: MTU too low for tipc bearer [ 426.283479][T21590] tipc: MTU too low for tipc bearer [ 426.294657][T21590] tipc: MTU too low for tipc bearer [ 426.300079][T21590] tipc: MTU too low for tipc bearer [ 426.306519][T21590] tipc: MTU too low for tipc bearer [ 426.311924][T21590] tipc: MTU too low for tipc bearer [ 426.318226][T21590] tipc: MTU too low for tipc bearer [ 426.323606][T21590] tipc: MTU too low for tipc bearer [ 426.330830][T21590] tipc: MTU too low for tipc bearer [ 426.339554][T21590] tipc: MTU too low for tipc bearer [ 426.346649][T21590] tipc: MTU too low for tipc bearer [ 426.352267][T21590] tipc: MTU too low for tipc bearer [ 426.361972][T21590] tipc: MTU too low for tipc bearer [ 426.369075][T21590] tipc: MTU too low for tipc bearer [ 426.378021][T21590] tipc: MTU too low for tipc bearer [ 426.383402][T21590] tipc: MTU too low for tipc bearer [ 426.390456][T21590] tipc: MTU too low for tipc bearer [ 426.399189][T21590] tipc: MTU too low for tipc bearer [ 426.405407][T21590] tipc: MTU too low for tipc bearer [ 426.410796][T21590] tipc: MTU too low for tipc bearer [ 426.421075][T21614] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 426.433250][T21590] tipc: MTU too low for tipc bearer [ 426.439746][T21590] tipc: MTU too low for tipc bearer [ 426.445489][T21590] tipc: MTU too low for tipc bearer [ 426.451026][T21590] tipc: MTU too low for tipc bearer [ 426.458120][T21590] tipc: MTU too low for tipc bearer [ 426.463614][T21590] tipc: MTU too low for tipc bearer [ 426.469673][T21590] tipc: MTU too low for tipc bearer [ 426.475872][T21590] tipc: MTU too low for tipc bearer [ 426.532688][T21617] validate_nla: 2 callbacks suppressed [ 426.532707][T21617] netlink: 'syz.1.4208': attribute type 1 has an invalid length. [ 426.642821][ T6519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.664762][ T6519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.765574][T21634] lo speed is unknown, defaulting to 1000 [ 426.798304][T21634] lo speed is unknown, defaulting to 1000 [ 426.828897][T21634] lo speed is unknown, defaulting to 1000 [ 426.868261][T21634] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 426.908036][T21634] lo speed is unknown, defaulting to 1000 [ 426.937442][T21634] lo speed is unknown, defaulting to 1000 [ 426.945378][T21634] lo speed is unknown, defaulting to 1000 [ 426.957911][T21634] lo speed is unknown, defaulting to 1000 [ 426.964931][T21634] lo speed is unknown, defaulting to 1000 [ 426.971729][T21634] lo speed is unknown, defaulting to 1000 [ 427.003529][T21634] lo speed is unknown, defaulting to 1000 [ 427.038415][T21634] lo speed is unknown, defaulting to 1000 [ 427.057334][T21654] wg1 speed is unknown, defaulting to 1000 [ 427.128316][T21654] lo speed is unknown, defaulting to 1000 [ 427.136319][T21654] lo speed is unknown, defaulting to 1000 [ 427.503753][T21667] gretap1: left promiscuous mode [ 427.517631][T21667] geneve2: left promiscuous mode [ 427.541141][T18530] lo speed is unknown, defaulting to 1000 [ 427.548198][T18530] syz2: Port: 1 Link DOWN [ 427.572001][ T6524] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.590675][ T6524] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.632570][ T6524] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.652960][ T6524] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.683212][T21674] wg1 speed is unknown, defaulting to 1000 [ 427.692980][T21674] lo speed is unknown, defaulting to 1000 [ 427.713257][T21674] lo speed is unknown, defaulting to 1000 [ 427.735621][T21678] netlink: 'syz.0.4226': attribute type 21 has an invalid length. [ 427.778025][T21678] erspan0: Device is already in use. [ 427.932982][T21694] __nla_validate_parse: 19 callbacks suppressed [ 427.933002][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4232'. [ 427.965655][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4233'. [ 428.040285][T21703] bridge8: entered promiscuous mode [ 428.058406][T21703] bridge8: entered allmulticast mode [ 428.063488][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4235'. [ 428.070537][T21703] team0: Port device bridge8 added [ 428.092811][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4232'. [ 428.216023][T21716] netlink: 'syz.3.4237': attribute type 20 has an invalid length. [ 428.246599][T21716] : entered promiscuous mode [ 428.432997][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 428.491285][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4243'. [ 428.506121][T21737] tipc: Enabled bearer , priority 0 [ 428.515185][T21737] syzkaller0: entered promiscuous mode [ 428.520998][T21737] syzkaller0: entered allmulticast mode [ 428.539437][T21742] netlink: 'syz.1.4244': attribute type 1 has an invalid length. [ 428.550669][T21742] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 428.565574][T21748] netlink: 'syz.4.4245': attribute type 30 has an invalid length. [ 428.583456][T21735] tipc: Resetting bearer [ 428.594633][T21735] tipc: Disabling bearer [ 428.680438][T21755] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4247'. [ 428.942430][ T30] audit: type=1107 audit(1756323573.774:76): pid=21775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='n#Ƴd7qH [ 428.942430][ T30] ΗI1|qBz(6(UuE' [ 428.984960][T21779] netlink: 'syz.3.4256': attribute type 4 has an invalid length. [ 429.070791][T21790] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4260'. [ 429.158825][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4262'. [ 429.259335][T21801] Unsupported ieee802154 address type: 0 [ 429.360566][T21802] tipc: Enabled bearer , priority 0 [ 429.370439][T21802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4263'. [ 429.382428][T21799] tipc: Resetting bearer [ 429.432041][T21799] tipc: Disabling bearer [ 429.470690][T21813] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 429.499117][ T4535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 429.512036][ T4535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 429.531727][ T4535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 429.543575][ T4535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 429.882896][T21842] wg1 speed is unknown, defaulting to 1000 [ 429.890553][T21842] lo speed is unknown, defaulting to 1000 [ 429.900902][T21842] lo speed is unknown, defaulting to 1000 [ 430.526459][T21887] syzkaller1: entered promiscuous mode [ 430.539388][T21887] syzkaller1: entered allmulticast mode [ 430.554001][ T5862] block nbd1: Receive control failed (result -32) [ 430.648547][T21896] wg1 speed is unknown, defaulting to 1000 [ 430.667395][T21896] lo speed is unknown, defaulting to 1000 [ 430.676933][T21897] wg1 speed is unknown, defaulting to 1000 [ 430.722008][T21897] lo speed is unknown, defaulting to 1000 [ 430.736003][T21896] lo speed is unknown, defaulting to 1000 [ 430.784636][T21897] lo speed is unknown, defaulting to 1000 [ 430.871405][T21910] net_ratelimit: 15 callbacks suppressed [ 430.871424][T21910] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 431.166588][T21928] wg1 speed is unknown, defaulting to 1000 [ 431.180379][T21928] lo speed is unknown, defaulting to 1000 [ 431.194970][T21928] lo speed is unknown, defaulting to 1000 [ 431.311536][T21937] bond0: Error: Cannot enslave bond to itself. [ 431.432990][T21937] wg1 speed is unknown, defaulting to 1000 [ 431.495081][T21937] lo speed is unknown, defaulting to 1000 [ 431.501811][T21937] lo speed is unknown, defaulting to 1000 [ 431.847736][T21953] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 432.008646][T21961] wg1 speed is unknown, defaulting to 1000 [ 432.098680][T21961] lo speed is unknown, defaulting to 1000 [ 432.108917][T21961] lo speed is unknown, defaulting to 1000 [ 432.428481][T21982] vxcan1: entered allmulticast mode [ 432.440864][T21982] vxcan1: left allmulticast mode [ 432.734690][T21999] netlink: 'syz.2.4321': attribute type 1 has an invalid length. [ 432.771324][T21999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.936448][T22003] bond4: (slave geneve2): making interface the new active one [ 432.972567][T22003] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 432.995941][ T6033] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.015866][ T6033] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.050295][ T6033] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.087172][ T4535] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.228059][T22009] wg1 speed is unknown, defaulting to 1000 [ 433.261266][T22009] lo speed is unknown, defaulting to 1000 [ 433.263706][T22022] team0: entered promiscuous mode [ 433.272513][T22022] bond5: entered promiscuous mode [ 433.285948][T22009] lo speed is unknown, defaulting to 1000 [ 433.292406][T22022] __nla_validate_parse: 14 callbacks suppressed [ 433.292425][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4328'. [ 433.367414][T22022] team0 (unregistering): left promiscuous mode [ 433.374776][T22022] bond5: left promiscuous mode [ 433.401226][T22022] team0 (unregistering): Port device bond5 removed [ 433.446835][T22026] netlink: 'syz.3.4329': attribute type 3 has an invalid length. [ 433.591886][T22035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4333'. [ 433.701646][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'. [ 434.940954][ T6142] bond8 (unregistering): (slave gretap1): Releasing active interface [ 434.960465][ T6142] dvmrp1 (unregistering): left allmulticast mode [ 435.267795][ T6142] bond0 (unregistering): left promiscuous mode [ 435.277071][ T6142] bond0 (unregistering): Released all slaves [ 435.286905][ T6142] bond1 (unregistering): Released all slaves [ 435.298544][ T6142] bond2 (unregistering): Released all slaves [ 435.309792][ T6142] bond3 (unregistering): Released all slaves [ 435.323073][ T6142] bond4 (unregistering): Released all slaves [ 435.338633][ T6142] bond5 (unregistering): Released all slaves [ 435.350081][ T6142] bond6 (unregistering): Released all slaves [ 435.365228][ T6142] bond7 (unregistering): Released all slaves [ 435.378376][ T6142] bond8 (unregistering): Released all slaves [ 435.433316][ T6142] k*]: left promiscuous mode [ 435.485012][ T6142] : left promiscuous mode [ 435.516018][ T6142] tipc: Disabling bearer [ 435.521492][ T6142] tipc: Left network mode [ 435.528886][ T6142] IPVS: stopping backup sync thread 7664 ... [ 435.749071][ T6142] batadv0: left promiscuous mode [ 435.759960][ T6142] pimreg (unregistering): left allmulticast mode [ 436.139827][ T6142] IPVS: stop unused estimator thread 0... [ 439.994426][ C1] ================================================================== [ 440.002541][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 440.010449][ C1] Read of size 2 at addr ffff8880566f5c2a by task swapper/1/0 [ 440.017904][ C1] [ 440.020243][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 440.020262][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.020272][ C1] Call Trace: [ 440.020280][ C1] [ 440.020288][ C1] dump_stack_lvl+0x189/0x250 [ 440.020309][ C1] ? rcu_is_watching+0x15/0xb0 [ 440.020326][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.020343][ C1] ? rcu_is_watching+0x15/0xb0 [ 440.020357][ C1] ? lock_release+0x4b/0x3e0 [ 440.020387][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 440.020407][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 440.020428][ C1] print_report+0xca/0x240 [ 440.020443][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 440.020464][ C1] kasan_report+0x118/0x150 [ 440.020487][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 440.020512][ C1] rose_timer_expiry+0x471/0x4b0 [ 440.020534][ C1] call_timer_fn+0x17e/0x5f0 [ 440.020556][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 440.020577][ C1] ? call_timer_fn+0xbe/0x5f0 [ 440.020599][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 440.020625][ C1] ? rcu_is_watching+0x15/0xb0 [ 440.020640][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 440.020662][ C1] __run_timer_base+0x61a/0x860 [ 440.020682][ C1] ? ktime_get+0x3e/0x1f0 [ 440.020704][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 440.020723][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 440.020749][ C1] run_timer_softirq+0xb7/0x180 [ 440.020770][ C1] handle_softirqs+0x283/0x870 [ 440.020787][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 440.020804][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 440.020822][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 440.020843][ C1] __irq_exit_rcu+0xca/0x1f0 [ 440.020857][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 440.020876][ C1] irq_exit_rcu+0x9/0x30 [ 440.020889][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 440.020912][ C1] [ 440.020918][ C1] [ 440.020924][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.020941][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 440.020964][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 440.020979][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 440.020993][ C1] RAX: 3fe448f66ccf2f00 RBX: ffffffff819683b8 RCX: 3fe448f66ccf2f00 [ 440.021005][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 440.021016][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 440.021028][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38430 [ 440.021040][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 440.021052][ C1] ? do_idle+0x1e8/0x510 [ 440.021068][ C1] ? do_idle+0x1e8/0x510 [ 440.021083][ C1] default_idle+0x13/0x20 [ 440.021097][ C1] default_idle_call+0x74/0xb0 [ 440.021112][ C1] do_idle+0x1e8/0x510 [ 440.021129][ C1] ? __pfx_do_idle+0x10/0x10 [ 440.021150][ C1] cpu_startup_entry+0x44/0x60 [ 440.021165][ C1] start_secondary+0x101/0x110 [ 440.021188][ C1] common_startup_64+0x13e/0x147 [ 440.021216][ C1] [ 440.021222][ C1] [ 440.328930][ C1] Allocated by task 21356: [ 440.333351][ C1] kasan_save_track+0x3e/0x80 [ 440.338036][ C1] __kasan_kmalloc+0x93/0xb0 [ 440.342636][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 440.347492][ C1] ops_init+0x7b/0x5c0 [ 440.351561][ C1] setup_net+0x10c/0x320 [ 440.355812][ C1] copy_net_ns+0x31b/0x4d0 [ 440.360235][ C1] create_new_namespaces+0x3f3/0x720 [ 440.365531][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 440.371250][ C1] ksys_unshare+0x4c8/0x8c0 [ 440.376019][ C1] __x64_sys_unshare+0x38/0x50 [ 440.380789][ C1] do_syscall_64+0xfa/0x3b0 [ 440.385315][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.391216][ C1] [ 440.393544][ C1] Freed by task 6519: [ 440.397521][ C1] kasan_save_track+0x3e/0x80 [ 440.402213][ C1] kasan_save_free_info+0x46/0x50 [ 440.407517][ C1] __kasan_slab_free+0x5b/0x80 [ 440.412432][ C1] kfree+0x18e/0x440 [ 440.416764][ C1] ops_undo_list+0x856/0x990 [ 440.421381][ C1] cleanup_net+0x4c5/0x800 [ 440.425796][ C1] process_scheduled_works+0xae1/0x17b0 [ 440.431351][ C1] worker_thread+0x8a0/0xda0 [ 440.435943][ C1] kthread+0x70e/0x8a0 [ 440.440040][ C1] ret_from_fork+0x3f9/0x770 [ 440.444638][ C1] ret_from_fork_asm+0x1a/0x30 [ 440.449413][ C1] [ 440.451742][ C1] The buggy address belongs to the object at ffff8880566f5c00 [ 440.451742][ C1] which belongs to the cache kmalloc-512 of size 512 [ 440.465795][ C1] The buggy address is located 42 bytes inside of [ 440.465795][ C1] freed 512-byte region [ffff8880566f5c00, ffff8880566f5e00) [ 440.479525][ C1] [ 440.481854][ C1] The buggy address belongs to the physical page: [ 440.488274][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880566f5c00 pfn:0x566f4 [ 440.498352][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 440.506875][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 440.515385][ C1] page_type: f5(slab) [ 440.519376][ C1] raw: 00fff00000000240 ffff88801a441c80 ffffea000109d610 ffffea0002547610 [ 440.527977][ C1] raw: ffff8880566f5c00 0000000000100007 00000000f5000000 0000000000000000 [ 440.536579][ C1] head: 00fff00000000240 ffff88801a441c80 ffffea000109d610 ffffea0002547610 [ 440.545272][ C1] head: ffff8880566f5c00 0000000000100007 00000000f5000000 0000000000000000 [ 440.553953][ C1] head: 00fff00000000002 ffffea000159bd01 00000000ffffffff 00000000ffffffff [ 440.562640][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 440.571314][ C1] page dumped because: kasan: bad access detected [ 440.577751][ C1] page_owner tracks the page as allocated [ 440.583491][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10715, tgid 10714 (syz.3.1253), ts 166026807341, free_ts 164818309149 [ 440.605035][ C1] post_alloc_hook+0x240/0x2a0 [ 440.609846][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 440.615397][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 440.621207][ C1] alloc_pages_mpol+0x232/0x4a0 [ 440.626072][ C1] allocate_slab+0x8a/0x370 [ 440.630579][ C1] ___slab_alloc+0xbeb/0x1410 [ 440.635477][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 440.640864][ C1] __genradix_ptr_alloc+0x352/0x4a0 [ 440.646069][ C1] __genradix_prealloc+0x44/0x90 [ 440.651016][ C1] sctp_stream_init+0x14b/0x440 [ 440.655972][ C1] sctp_association_new+0x10dd/0x25f0 [ 440.661359][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 440.666647][ C1] sctp_sendmsg+0x155c/0x2810 [ 440.671326][ C1] __sock_sendmsg+0x19c/0x270 [ 440.676014][ C1] __sys_sendto+0x3bd/0x520 [ 440.680516][ C1] __x64_sys_sendto+0xde/0x100 [ 440.685278][ C1] page last free pid 5856 tgid 5856 stack trace: [ 440.691608][ C1] __free_frozen_pages+0xbc4/0xd30 [ 440.696735][ C1] __slab_free+0x303/0x3c0 [ 440.701160][ C1] qlist_free_all+0x97/0x140 [ 440.705757][ C1] kasan_quarantine_reduce+0x148/0x160 [ 440.711240][ C1] __kasan_slab_alloc+0x22/0x80 [ 440.716102][ C1] __kmalloc_noprof+0x224/0x4f0 [ 440.721055][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 440.726616][ C1] tomoyo_path_perm+0x213/0x4b0 [ 440.731481][ C1] security_inode_getattr+0x12f/0x330 [ 440.736878][ C1] vfs_fstatat+0xb1/0x170 [ 440.741254][ C1] __x64_sys_newfstatat+0x116/0x190 [ 440.746468][ C1] do_syscall_64+0xfa/0x3b0 [ 440.750982][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.756907][ C1] [ 440.759231][ C1] Memory state around the buggy address: [ 440.764856][ C1] ffff8880566f5b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.772912][ C1] ffff8880566f5b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.781060][ C1] >ffff8880566f5c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.789117][ C1] ^ [ 440.794519][ C1] ffff8880566f5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.802579][ C1] ffff8880566f5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.810638][ C1] ================================================================== [ 440.818763][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 440.825974][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 440.834920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.844997][ C1] Call Trace: [ 440.848296][ C1] [ 440.851180][ C1] dump_stack_lvl+0x99/0x250 [ 440.855899][ C1] ? __asan_memcpy+0x40/0x70 [ 440.860516][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.865759][ C1] ? __pfx__printk+0x10/0x10 [ 440.870369][ C1] vpanic+0x281/0x750 [ 440.874359][ C1] ? __pfx_vpanic+0x10/0x10 [ 440.878870][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 440.883473][ C1] panic+0xb9/0xc0 [ 440.887226][ C1] ? __pfx_panic+0x10/0x10 [ 440.891657][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 440.897559][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 440.903467][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 440.908589][ C1] check_panic_on_warn+0x89/0xb0 [ 440.913540][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 440.918659][ C1] end_report+0x78/0x160 [ 440.922917][ C1] kasan_report+0x129/0x150 [ 440.927475][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 440.932609][ C1] rose_timer_expiry+0x471/0x4b0 [ 440.937564][ C1] call_timer_fn+0x17e/0x5f0 [ 440.942169][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 440.947639][ C1] ? call_timer_fn+0xbe/0x5f0 [ 440.952330][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 440.957455][ C1] ? rcu_is_watching+0x15/0xb0 [ 440.962254][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 440.967736][ C1] __run_timer_base+0x61a/0x860 [ 440.972596][ C1] ? ktime_get+0x3e/0x1f0 [ 440.976940][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 440.982335][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 440.988674][ C1] run_timer_softirq+0xb7/0x180 [ 440.993615][ C1] handle_softirqs+0x283/0x870 [ 440.998385][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 441.003156][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 441.008448][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 441.013660][ C1] __irq_exit_rcu+0xca/0x1f0 [ 441.018249][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 441.023462][ C1] irq_exit_rcu+0x9/0x30 [ 441.027706][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 441.033379][ C1] [ 441.036315][ C1] [ 441.039248][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.045329][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 441.051061][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 441.070670][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 441.076745][ C1] RAX: 3fe448f66ccf2f00 RBX: ffffffff819683b8 RCX: 3fe448f66ccf2f00 [ 441.084723][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 441.092705][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 441.100677][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38430 [ 441.108653][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 441.116631][ C1] ? do_idle+0x1e8/0x510 [ 441.120885][ C1] ? do_idle+0x1e8/0x510 [ 441.125130][ C1] default_idle+0x13/0x20 [ 441.129899][ C1] default_idle_call+0x74/0xb0 [ 441.134665][ C1] do_idle+0x1e8/0x510 [ 441.138745][ C1] ? __pfx_do_idle+0x10/0x10 [ 441.143363][ C1] cpu_startup_entry+0x44/0x60 [ 441.148127][ C1] start_secondary+0x101/0x110 [ 441.152900][ C1] common_startup_64+0x13e/0x147 [ 441.157856][ C1] [ 441.161257][ C1] Kernel Offset: disabled [ 441.165582][ C1] Rebooting in 86400 seconds..