last executing test programs: 1m39.225770571s ago: executing program 1 (id=1232): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010026bd7000ffffffff0a140000030000070000000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x44, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x2c, 0x3, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @srh={0x6, 0x0, 0x4, 0x0, 0x2, 0x0, 0x81}], "1c0a76df08a4a5cb66b1f76192e8064ef7154b29"}}}}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x195b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xad}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x10) 1m39.128411027s ago: executing program 1 (id=1233): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) r3 = socket$inet6(0xa, 0x800, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) unshare(0x40020000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffff78}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r7 = socket$inet(0x2, 0x806, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x47) r8 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f0000000180)=[{r8}], 0x1, 0x107f) poll(&(0x7f0000000140)=[{r7, 0x8040}, {r2, 0x1010}, {r6, 0xa102}, {r4, 0x9082}, {r3, 0x4000}, {r6, 0x1010}], 0x6, 0x3) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 1m35.841737973s ago: executing program 1 (id=1250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffdc}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async, rerun: 64) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380050003"], 0x38}}, 0x0) r5 = socket(0x2c, 0x3, 0xbe) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) 1m34.314016427s ago: executing program 1 (id=1257): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8023, 0x20, 0x100, 0xb5, {{0x49, 0x4, 0x1, 0x33, 0x124, 0x66, 0x1ff, 0x77, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp={0x44, 0x20, 0x8, 0x0, 0x9, [0xfff, 0x8, 0x0, 0x2, 0xff000000, 0xfffffffa, 0x3]}, @cipso={0x86, 0x15, 0x3, [{0x0, 0xf, "449f601681b1d2632ebe2082ea"}]}, @timestamp_prespec={0x44, 0x14, 0xc9, 0x3, 0x2, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xc3}]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x1, 0xc, "719ff8b0e7930afd7637"}]}, @lsrr={0x83, 0xf, 0x32, [@remote, @local, @multicast2]}, @timestamp_addr={0x44, 0x34, 0x74, 0x1, 0x5, [{@empty}, {@multicast1, 0x80000001}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}, {@loopback, 0x4}, {@private=0xa010100, 0x800}]}, @cipso={0x86, 0x10, 0x1, [{0x5, 0x6, "d51517a7"}, {0x1, 0x4, "2ea9"}]}, @timestamp_prespec={0x44, 0x14, 0x2d, 0x3, 0xc, [{@remote, 0xfffffff7}, {@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0x4c, 0xc, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x7}, {@rand_addr=0x64010102, 0x7}, {@multicast2, 0x8}, {@private=0xa010101, 0x6}, {@local, 0x5}, {@multicast2, 0x355}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@delqdisc={0x60, 0x25, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff2, 0xf}, {0x5, 0x7}, {0x13, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0xbe}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4d}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4001) r2 = socket(0x18, 0x4, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000380), 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x1402, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv6_newrule={0x40, 0x20, 0x20, 0x70bd25, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x1, 0x8, 0x0, 0x0, 0x7, 0x17}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000005c0)={0x8, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={r8}, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x140c, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404001c}, 0x48000) clock_gettime(0x4, &(0x7f0000000740)) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000780)=0x83d7) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x103002, 0x0) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f0000000800)=0x61) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x178, r10, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x18, 0x5, "981a4afc7544380f7170cefb77bc78e2596ea5e6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "5e49ad4f0865a0afa9b453cea96bbc12ff68839cd9c0b388b60295a32c04695c7b050c77c9c3ae268ae1bd8b39f03c398ae616143c70b65f75fb9921a8229a055f3b007ae43482583387e7385e4c1e2779c718936b0000daf509eebcde2b860083e7c45e974880ca327a327110219b59841545c331b063aa4ccfdea94288e688b6f01514f1b6b88c6a367fa626184e2abe7185a808a5188cfc9f02b02e1567dbb2ddfb08e5"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000001}, 0x4084) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r2) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r11, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c00)={'gre0\x00', r1, 0x1, 0x80, 0x7, 0x1, {{0x26, 0x4, 0x1, 0x8, 0x98, 0x64, 0x0, 0x5, 0x4, 0x0, @empty, @broadcast, {[@noop, @end, @timestamp={0x44, 0x8, 0x63, 0x0, 0x4, [0x401]}, @timestamp_prespec={0x44, 0x14, 0x41, 0x3, 0x9, [{@local, 0x6}, {@empty, 0x3}]}, @lsrr={0x83, 0x1b, 0x47, [@private=0xa010102, @empty, @private=0xa010101, @multicast1, @loopback, @broadcast]}, @rr={0x7, 0x23, 0xb7, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x43}, @loopback]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x2, 0xe, "c6059a6a212335ae11adef3d"}]}, @lsrr={0x83, 0x13, 0x40, [@loopback, @multicast1, @rand_addr=0x64010101, @remote]}]}}}}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000d00)={r12, 0x1, 0x6, @multicast}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0xdee3f90f7bd1709a}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r11, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000800) poll(&(0x7f0000000e40)=[{r0, 0x9001}, {r5, 0x8021}, {r7, 0x8100}], 0x3, 0x400) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r13, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x35}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 1m33.379960829s ago: executing program 1 (id=1268): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000003f00), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x5fa, 0x9, 0xaaa, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x3}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2004890) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0020000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000d1b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) write$tun(r4, &(0x7f0000000540)={@void, @val={0x6, 0x1, 0xd, 0x4, 0x6, 0x4f4}, @ipv4=@generic={{0xa, 0x4, 0x1, 0x7, 0x6a, 0x67, 0x0, 0x7, 0x33, 0x0, @local, @broadcast, {[@timestamp={0x44, 0xc, 0xc0, 0x0, 0x7, [0x9, 0xc]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}, "77adf1db1c1960691567b0c66d8a01cdccd8d85aa628c369996896dd24f61732410a9115410c3824696fd97af41bab889ba66bb5da3da0cf3bf546796a9f58005679"}}, 0x74) vmsplice(r4, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1ff}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m33.170263497s ago: executing program 1 (id=1269): ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 64) writev(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2000000000000115, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000140)={0x2, 0x4, 0x0, 0x400}, 0x10}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004890) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f00000002c0)="039b80f386c12b8b8e8ca6a28897e201f595bb839ff9578e4587d691dfbcb370dcde06ea1ff86af8b50289c6844f70c79b5159414fb6a9729dc24e1a853e1532fb36c7558d40ddbc21d200e5478f71de7dc9", 0x52}}, 0xee) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r4, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) (async, rerun: 64) listen(r8, 0x3) (rerun: 64) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000030000000000006906664010101e000000200004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c02000090781000fe06e2d4c3d90000"], 0x0) 1m17.556148547s ago: executing program 32 (id=1269): ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 64) writev(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2000000000000115, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000140)={0x2, 0x4, 0x0, 0x400}, 0x10}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004890) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f00000002c0)="039b80f386c12b8b8e8ca6a28897e201f595bb839ff9578e4587d691dfbcb370dcde06ea1ff86af8b50289c6844f70c79b5159414fb6a9729dc24e1a853e1532fb36c7558d40ddbc21d200e5478f71de7dc9", 0x52}}, 0xee) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r4, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) (async, rerun: 64) listen(r8, 0x3) (rerun: 64) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000030000000000006906664010101e000000200004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c02000090781000fe06e2d4c3d90000"], 0x0) 6.559164986s ago: executing program 2 (id=2010): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbee1, 0x8031, 0xffffffffffffffff, 0x4ff72000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_route(0x10, 0x3, 0x0) 6.235373373s ago: executing program 2 (id=2012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) r1 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x400) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$xdp(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="399ce40f5c63d89d62310e03d99db13fe88a20007e128a75949546ce6785137be7fde0e2cac8268e2cd71ad0cebdc12cb63392cd52154e7cbebb2f9353888e09cd977d4639545a277680e997e1096194b224988b0fc075ae82f964417d7de7d4cc6429445c4631bac5c0f87f6cbbda8de619473a1ab9e723079cd4cf4035", 0x7e}, {&(0x7f0000000000)="0fae97f7b5b337cbde2215c079851cdc4bdaa7e28e94e6c7c508ef", 0x1b}, {&(0x7f0000000340)="b34200978b3a28b557d65efab8f8ba322cce609c151d05664ee7df4525a6b1f709b82d2cea31f182d877df7244394cdc434808d0465d74af381a989074d79d398a1446b30e0aaec17a5cea0c8ced00aab7a8901291cee5f849848d08d1a35e4f55e47c50d7ae8cb6e079e537e0849ffadaec96c4271ddab2ccfc339103304617467c38e51648645ff9d9613c076e6e75b9630f4d1dd0507e42486e7594ed6cf4bd0dc7", 0xa3}], 0x3, 0x0, 0x0, 0x40}, 0x0) 6.030294658s ago: executing program 2 (id=2014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$xdp(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='C', 0x1}, {&(0x7f0000000140)="98", 0x1}], 0x2, 0x0, 0x0, 0x20004000}, 0x5880) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) accept4(r3, 0x0, 0x0, 0x800) (async) sendmsg$xdp(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='C', 0x1}, {&(0x7f0000000140)="98", 0x1}], 0x2, 0x0, 0x0, 0x20004000}, 0x5880) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r1, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r0, 0x0) (async) 5.841376573s ago: executing program 2 (id=2017): unshare(0x6a040000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596", @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000080)='syzkaller\x00', 0x9}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 32) unshare(0x600) (async, rerun: 32) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) (async) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 4.53204951s ago: executing program 4 (id=2026): unshare(0x20000400) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x20000042, 0x1, 0x3}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r2, 0x0) close(0x3) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)={@val={0x0, 0xf6}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x68, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @md5sig={0x13, 0x12, "4c4b87e502f4faa38d629a87cca98bf0"}, @fastopen={0x22, 0xe, "5e2a264473053c8d6ef98c0c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x0]}, @sack={0x5, 0xe, [0x8, 0x7ff, 0x101]}]}}}}}}}}, 0x7a) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0x11, 0x0, 0xac0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.882301256s ago: executing program 4 (id=2032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000100000008500000082000000850000001100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000100000008500000082000000850000001100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 3.665426304s ago: executing program 3 (id=2035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r5, 0x8008b705, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 3.586371704s ago: executing program 4 (id=2036): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000022c0)=""/4092, 0x0, 0xffc, 0xb, 0x4}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a008421"], 0x24}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r2, &(0x7f0000000240)="f20424b1dd0e038028a4942092e5a38b9b4b41c634849d2851b33bd3612a2745e903ba47e3750b7069f3ebe4377e1efbea173a11b78deb3237e032640844f3070a241f336bbb3af0dd9f8004ec8f82817ee4a5a7f47acd401a1f393864647d10cf82a6345fbecf5323d0bd5c15cc07901b5aecb7194b197e72ce68504381a6cc20fd432d663fca49690ab082a636d7e7839f74e14b821027de9d8cb3b03d36431b5e1d69a296a8c6c1e59e3840238ad71e242d3349", 0xb5, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x10, 0x80, 0x5, 0x2, {{0x1f, 0x4, 0x0, 0x7, 0x7c, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x9, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x7}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2, 0x7}, {@loopback, 0x3}, {@private=0xa010101, 0xff}, {@broadcast}, {@private=0xa010101, 0x5}]}, @timestamp={0x44, 0x1c, 0xaa, 0x0, 0x5, [0xe, 0x4, 0x10, 0x80000000, 0x28f71453, 0x11000000]}, @end, @rr={0x7, 0x7, 0x61, [@remote]}]}}}}}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x400, 0x4, 0x4, 0x40060, r0, 0xfffffff9, '\x00', r4, r5, 0x5, 0x0, 0x5, 0xc}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 3.507164506s ago: executing program 4 (id=2038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd9f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x1, 0x20, 0xff, 0x2, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x68, 0x0, 0x80, 0x2f, 0x0, @loopback, @remote, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) sendto$packet(r4, &(0x7f0000000100)="bedf28beca169fd86605417bd5fa0409d5d12f53df920ae58fcdc94d1304a1cdff14ff323755d0c9c721f09ce6d3458c5902da10db3eded91b00e9a23e31785b45693c0d55a7d4", 0x47, 0x4000040, &(0x7f0000000200)={0x11, 0x17, r5, 0x1, 0xb, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.361128671s ago: executing program 4 (id=2039): socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x3}}) (async) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r4, 0xffffffffffffff00, 0x2, 0x8}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="51a0bea8a0091696815512574cc4a8832cb2ae6f7571c1018c748768a945fa3f851748c61a73297150e87d81b271435e0c3eed258d81f9fcdcfc808dceb8de066fa4642a3b656a42aed2efa3e1"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 3.057159091s ago: executing program 4 (id=2041): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') socket$kcm(0x11, 0xa, 0x300) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x81) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8004b706, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/243, 0xf3}, {&(0x7f0000000100)=""/36, 0x24}], 0x2, 0x0, 0xfffffffa) 2.958678556s ago: executing program 0 (id=2042): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @local, 'ip6_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000300)="98e5de69e69ed8e4e6175da60af3d7d4c43524adf3b015c31db18aa63ea6c59f6f71388c9f4764af9d6066b5f6e780366dd93b0d9adcfb392d211874ca18c64768062248c95086ba6b39ec586f479c87c93ab7e52ba6b3a15b85e6cf69cb55064c2f5c14fc7ab3883fcc4d0632ad9f21d587c6fd78cd1582ce5f1c4184d2fdebe90dc257de7f03a05a90254bd515b70a656ec2bc8bc0a0a93eb3dad47dde85ca6088636792e19b9be7f18925fd1879cc8b5424845b33206bcb534547d6436d0cf91d22c36af87a62290d4b19c7ae8a3d85d9a446abab8562f2883312601ebc3778fabbfb568122d5dd1862aeaa82", 0xee}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="af6b", 0x2}, {&(0x7f0000001480)="97b53e6d9cc4d734868c669292bb46a2280e5bb30f9508f71ee30e4e7d3fcf781982594c1741d79c7b0a88c5d9a7dff93f677bbcde47e3adc4c688028abf61998a89a31891a814cf44c522d9a24804bdaf2407623d0a58f34f25323026765f561011677098b4ce1d470387832c84da6d15852edea9548be311e8571dbab253318ef2898d81b4e20d0c2d7a063cfea5165741adb11f574da46b8303c20813f1cc568192b5d3e3c5a5374002743fe38f749f372442e9a857e1dd7f9fdfd5ade80626f237b7d3", 0xc5}, {&(0x7f0000000200)="a76d53e5d8a2cfe47de679a9d0ba191af89322ede5a265b56a9df44a1e88be1e835d8288b934762045d00b29e8d86dbd48cb99359cc62d06ba33261ace2b931e951de20a95e1c43378453998f4c52180f5852d70d4c979e9a579b92fdb347d06b49b3155e4c073d21bc2313eb4a2989613702a31541d6691023a21e169bd28202dcd3deaf66adee8cb94", 0x8a}], 0x5, &(0x7f0000001600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010101, @multicast2}}}], 0x68}}], 0x1, 0x40400) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="5677dee5a538", 'ip_vti0\x00'}}, 0x1e) close(0x3) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) 2.770264791s ago: executing program 0 (id=2043): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @netrom, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) recvfrom$netrom(r0, &(0x7f0000000300)=""/67, 0x43, 0x20, &(0x7f0000000380)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x2, @dev}, 0x10) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0xffffffff, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0x7ffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000540)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.768908427s ago: executing program 2 (id=2044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r3, 0x0, 0x4}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x24020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r6, r2, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r7, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r2, r6, 0x2f, 0x2000, 0x4, @value=r8}, 0x20) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0xf}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) 2.66576679s ago: executing program 3 (id=2045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x970b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r1, &(0x7f0000001180)=[{{&(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="832467675d2edd083efcf69b3cb4ae5925898762385267b91daf9b0451f7d13edb5848a586d1ba46f0b88b6aa788596311050360c58a70e30313bb15dc9c1a9314709a946c6bd1c5da908045b0fd555cab63377e07656c22d056dc1008f08ff5039fe7e91e0911ddacc44767ec1872ce2ef003d7cfe8a26c8277fb4bc6b6148a90e4033bac191efd6fee5a6c126a7083dd3cd04374c8ad990722b3a0c0b871f5a081306a6a13eecbf7120441d220e96b5b106e1eb0cda28f406cfc82b8ffded714dbc2c02503485531bad01ba2b16f108ad93a316e1e4c33b190838ca1389d9a0d49cab623beccf4120f8aea648d", 0xee}, {&(0x7f00000005c0)="9390ead84811d906926f7bb84a1bedb3e96b01f4780e5ccd2bced9eb014b9624fdea07c464c2eeb95f8ea6b94e9478184f66ba27a74cd7dbb68961", 0x3b}, {&(0x7f0000000740)="723842d687fcc8569d39eb340b4991abfc74ea4b803eb74c242309b033e9dde4b02fbeb5a6b994bb63c762e36bdb0114517c78db819a17b1f76ed6bbec1d3870a6504e45b320f0a50551d903f649d64e491f27bc748ccaae0b77fd0dc61f26809957ab2e608b58c87b50b3e8a732131f1725dc4289bed081f55eb2242da308f2448466284a0b5e5a89553b7d3bae2a6c7130ba1a79cf7d2905d5eb23f1d68de10a238274c69b7cc1d4e336f97db9d2c7300df5c0ee2d3dcaf539a8c082dd0a5c492f89d23b4331ab4b841f4b9c0da21d83", 0xd1}, {&(0x7f0000000640)}], 0x5, &(0x7f00000008c0)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xec, 0x1, 0xa, [{@multicast2, 0x9}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@empty, 0x8}]}, @noop, @rr={0x7, 0x7, 0x28, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @lsrr={0x83, 0x3, 0xa5}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x0, 0x6, "fe1f208a"}, {0x6, 0x11, "02d1cea709da0de3ef764cff98f4cb"}, {0x1, 0xc, "aa7fa23a604e238781ff"}, {0x6, 0x5, "2bf351"}, {0x9d24193aae18f836, 0x10, "fef5e36b4f46541d3b064d9da36a"}, {0x6b1dd22084d6ee8c, 0x6, "92ea6271"}, {0x0, 0x4, "eb17"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0xf0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)="fcca60f33c4e31fda35e89601ebcf70e78932383b074bf09a0d205f8e5934718a1bef98e7b3c682687cb1dad9dbb27d546ab3346d580299a7973c36e6bcfa7b39f79c4fe0e654ae7c5932393e76ee7a79ecef3155f27c85aa4771731ff28f3c06962c44b654638f1aa4ffb79f96394deef65bf9eea7897855658ee64b76eb503748942be02bb20daac85306b1b09b561af8ed620f093db787181f2e98d3c2a9eae4a9aa4c5394b21d1bccf66fcc747ebe953bf98f92f87c0e606ef3cd49ab9d9ec4357def561a02361280727df648eda4e44291e7037f9228ddf5194ec41a26919c21ea81eb4117d60a98a97571028856e1d1d874979a836cae4abe5d51f07", 0xff}, {&(0x7f0000000c00)="af68f80537d035853c19ec892e938363f2abff9aa9bb53dfdbc40e4929683e33ae9d522d9dc4df8cf6f7cf7274513c2333c029f8fd3c09bec49a676f8357e33c6b2273124a1ed32234464c762cf1e3284b00413f11966be4dfc0a18a8b6a5d03ce9932d9872f641ba4aa9a40b5d6f637b8fd6b369b493e3c4a0531be1f66d704cb", 0x81}], 0x2, &(0x7f0000000cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x22a7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x90}}, {{&(0x7f0000000ac0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000d80)="4e70ca31ae4492aec08079d36e90cc8120a4040f5d5ff6f3b4f01e6bb1f7336fca6b02140bcfdbdad9e738f4a34c6f8fe16a24fc138f7b02b83c4aa0a71a61c39b93bc74f991c9bd8f615db953a5974c429bdd448b5d90d2bcd8dcf95723f8891c6f48693720882377eeb339ff1cd6", 0x6f}, {&(0x7f0000000e00)="8246182f42c5ca72c598ffc4174941b0c4e19eba8ae64063e153a0e3722e004862d18291c528c4c175a0d84fe81d37bf6bb5819c7528bb431c884f733db4f4f544fe7d989804fe80867e0ef2e3280269148a3ee1595695f0c5343ad35c23155beae7c1599465110a4ba0a0a4ecb9ee89a78e561684a15fc2ba824f87dd333997e8ef7f00fd0bbdb6f074dba0cdd7373657c7f9b4205c06bc4420ae074cc1be49eac39443228214801f644b051622d90f08bb7e13626a7cf6af2127d1d1dff4fbd71e1ec0308a69af0729887ec4e011d454b1383d2d2a4c53e110d9f33c327f6bf9b83c407cb2114ff957e8db657d5231", 0xf0}], 0x2}}, {{&(0x7f0000000f40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x30}}, {{&(0x7f0000001000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000001040)="82fb3a80c0ae0174ba890ebc89ae88421b3315f6d8a2e3c02d8c8d137f126558a81ac7fdb06984599fe4b63377c403af49bb524f92c473681b77c484fe5c735e234b158a860b1f549ed450b83ff7080f", 0x50}], 0x1, &(0x7f0000001100)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x7, 0xb3, [@loopback]}, @timestamp={0x44, 0x10, 0x52, 0x0, 0xb, [0x10001, 0x2, 0x5a1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xae}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x80}}], 0x5, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b40)={0x88, 0x0, 0x0, 0x70bd25, 0x5, {{}, {@void, @val={0xc, 0x99, {0x6, 0x58}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "62879c61ba7f7d22319d0ae44ce778728599932438828a51a574d053695141521a58cd1c2d065093223c0906deb4791d47a55dac284f238df5df05106be03f2e0432d407f588aaa1b288b11e9d"}, @NL80211_ATTR_FRAME_MATCH={0xb, 0x5b, "34934eec560e37"}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16], 0x6f4}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000217b406e269a6f9170403620a31434002c866af7d721ada94e1def0e20d3a6ffe336e2f4cfaa9ab665ff5124916f56767f47b39f68a1c8d9b899ca634ed7b09a1ebdaabb35cd7460afcb03ead0d6f29949062ce66288e869e6db5751cc3b0e87eb1bbc98803e42e76620c6245cdf1df81178a7e9b9a5c591d37872c90353d9e844baa5effd68e3f37b4173c67a9882f31d7dc282a3bd3e5e"], 0x5c}}, 0x20008800) sendto$inet(r1, &(0x7f0000000080)="dfcabf2add32c46efa702199dac63cabdaa0", 0x12, 0x10, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) 2.2617289s ago: executing program 3 (id=2046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 2.194304926s ago: executing program 2 (id=2047): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000380)=@netrom={'nr', 0x0}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000800000004000000094000000a010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000003f00000000000000000000007d63572f46dc73"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0xc1, &(0x7f0000000480)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%UN\xd4\x83\xf7\xccP\xe1\xef\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'~\xd6\xbdoB\xaa#\x1eWC\xf8s3\x01V\x13E\xb7>\xa2\x01\x16\xba/b\xe63o\x7f\xe9\x1c\xe3\x8f/r\x9b\xb5\x10\xfen\x92\xcf\x99\x03\x84\x15\xb3\r@\xe5z\x16\xcd\bi\x90\x7f\x91[\xd1\xda\x9d\x12\xe1\xc6~\x18\xf8\x17\r)_\x143~\x97\n\x03\x88$\xde@\xff\x83C(\xea`B=\xb2\xd4\xa9CN\x80;\xc1a1\xba\x9f\xe5\xb7\xe4r\xcf\xab\x85r\x16\x84\x1d\xd8\xed\v\x90\xd1h\xcd\x13\xafw#9\xd7nP\xd7\x0f\xf2\xf4\xadg'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00e0ff0f000104fcffffff8010000000feff00", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) socket$inet6(0xa, 0x800, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28) unshare(0x40020000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.950408529s ago: executing program 3 (id=2048): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x20, @private=0xa010100}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, [0x12c, 0x5, 0x85, 0x83, 0xdd, 0x1, 0x100000000, 0xfff, 0x2, 0x0, 0x0, 0xc6, 0x6, 0x8, 0xffffffffffffff75]}, &(0x7f00000004c0)=0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="10d9dccf5d94ea455000000046af52621df1f3adeb0ec0c3495cdce08ce0ddd1c08c16c68998"], 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="172886a40a171c6dccd0c75dc86ebd227509001000000000000001000000050007000000000008000900e400000008000a0000000000060002000100000014001f000008000000000000000000000000000014002000"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x4}, 0x4) mmap(&(0x7f0000ba5000/0x3000)=nil, 0x3000, 0x8, 0x22051, r4, 0x0) 1.784923292s ago: executing program 0 (id=2049): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1850c1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="f801000010000100ffffff0700001000fe80000000000000000000000000000c000000000000bf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000003c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000290d00000000000000000000000000000a00010000000000000000004c0012"], 0x1f8}}, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3}, {0x1, 0x1, 0x1}}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x8b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x3d) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.489285637s ago: executing program 5 (id=2051): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x9, 0x165, &(0x7f0000000300)="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", 0x2, 0x5, 0xf, 0x2, 0x400, 0x1, 0x6, 'syz1\x00'}) r1 = epoll_create1(0x80000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r6, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffdc}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x60004080) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 1.241402054s ago: executing program 5 (id=2052): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="f78d9ca38fff48fbbe52163448412ba809b150756bfc68992619a82eeea08e7d4118e01c14eca5f4fc45c0fbb8c4fb90f1434e0b81882a3ab12d124e08656c79e8265039f239b3e2f30c94fd41b6db1a3c9b6016ac7bc45db9ab83b74a7f6bbc6e40bc221b51d43fd737364d789acf0bebdaf35119254a69", 0x78}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, r4, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 1.026343048s ago: executing program 5 (id=2053): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x1}, {0x6}, 0x50, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)="4e756bcf122fa7d50696d9a70da9dc5dfb79fb0a36c911eec390ce8682f5cd59f927caed4ed7bc32931a5067e6e77eb946f07b07db805e18f408b4f252f4736bf824a43d46db6a8530cc5fc8c88bd3991304b24bee4cd8cff08c82673e40e9c8b04f78f23e9f7bc02c68bc596e70d1637a284c7901581b445ce19df6f523afcc2c7940358ed54ffc0527817e2994212f585e2f62e3c9b0ca848a2382868e2d787bf61fab3d96e45a8b53cd86cacb2f4a5370405c598e668509134973621b75a309bf5e263cea8b4e574365ed63a498cda72aeec02de80f090fec05b6265a9972a137d0af1eb9a14904d2", 0xea, 0x0, &(0x7f0000000500)={0x2, 0xad, {0x0, 0xc, 0x13, "5abe41e7c441d002740c51fcda21e3c1499986", 0x8d, "79d52e0a7d3f813f0112ea98d95ff855fc054f18e0840aa4f9b6c012931dd0aa43aec724879bb4ce0c236678b85fe532dd52058f79319988d984480fafc8a48866297226cbd11f37d2b4eeb134e811efc9e0301cad88e9d94ca051d26b8f62496b55cfa4ea71e5f95f2fabb3286d038129fd89221049b18bc9438e2eef7567fa46c38410435a4a8976509e7cf5"}, 0x3e, "60479986c37dfb4c41cd47e2e224f33a6bc882e168e4fa940484764db8e67377b3b7e658976e26832160d3db974aec6ff3db153b90ab9d0f1a533fc3d94d"}, 0xf7}) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008"], 0x30}}, 0x0) (async, rerun: 64) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000400)=0x6e) (async) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x9, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x11, '\x00', r3}, 0x94) 835.505666ms ago: executing program 5 (id=2054): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='scalable\x00', 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x3, [@datasec={0x1, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x2, 0x3546}, {0x2, 0xffffff55, 0xffffff80}, {0x4, 0x7, 0xa2}, {0x4, 0x9, 0x5}, {0x4, 0x3, 0x5ea}], '`C'}, @union={0x9, 0x9, 0x0, 0x5, 0x0, 0x9a, [{0xa, 0x5, 0x10001}, {0x3, 0x0, 0x7}, {0x8, 0x3, 0xffffffff}, {0x8, 0x4, 0x9}, {0xd, 0x1}, {0x7, 0x2, 0x1}, {0x5, 0x2, 0x80000001}, {0x6, 0x0, 0xfffffffd}, {0x0, 0x4, 0x7}]}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/133, 0xdf, 0x85, 0x1, 0x3}, 0x28) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0xf}, &(0x7f0000000300)=0xc) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000340)) r5 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000609}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x20010}, 0x4) recvmsg(r1, &(0x7f0000000740)={&(0x7f00000004c0)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)=""/66, 0x42}, {&(0x7f00000005c0)=""/148, 0x94}], 0x2, &(0x7f00000006c0)=""/95, 0x5f}, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000780)={r4, 0x7ff}, &(0x7f00000007c0)=0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000800)="817cd941cc1dcb8d0ecc91c58f108cca", 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) write$tcp_congestion(r7, &(0x7f0000000880)='htcp\x00', 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r9, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x1}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x24044848) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000b40)={r6, 0x17, 0x1f3, 0x7, 0x200, 0x7b}, &(0x7f0000000b80)=0x14) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r9, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20000840) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000cc0)={r6, 0x6, 0xfc42, 0x3, 0xfffffffa, 0xf0}, &(0x7f0000000d00)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000d40)={r12, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x6, 0x7}, &(0x7f0000000e00)=0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e80), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000ec0)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r13, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, r14, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r15}, @GTPA_TID={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000044) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000fc0)={r12, 0x9, 0x10, 0x6, 0x7ff}, &(0x7f0000001000)=0x18) 762.519937ms ago: executing program 0 (id=2055): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000007c0), &(0x7f0000000800)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004"], 0x48) (async) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x2f4}], 0x1, 0x9) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000002"], 0x50) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) (async) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x82, &(0x7f0000000300)={r9, 0x10, 0x4}, 0x8) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) nanosleep(&(0x7f0000000080), 0x0) 626.260071ms ago: executing program 3 (id=2056): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080)=0x9, 0x4) (async) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080)=0x9, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="00008800000304000000020004007f6d7eecb23daaaaaaaaaaaa810134000600"], 0x20) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000001100)="b2eecd2296d77e3b4bf1139ff5d2d839fc6965bd470730a44d6ade0120b6f705126695f2a3fd29071cd0237ef06d91745b0179f1e4bc479983986df3282361a28b8510dc724b2bcec457bd744e7c9071c89095b7b6c77534f7b43e6d8679945e2128105ada5004d144c14010a24136cf39054f2bb1dce5fd81562dd1e3554edb11569ee96100e5e6b99f60db5907be08055e6b8bee8e2844", 0x98) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) 521.40686ms ago: executing program 0 (id=2057): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000022380300fb0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0xffff79c4, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0x4d35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000041, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x7fffffff, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0xb, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x8, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 314.059117ms ago: executing program 5 (id=2058): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x40) (async) socket$unix(0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) (async) r2 = socket(0x26, 0x5, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0xffffffff, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3, 0x0, 0x5}, 0x18) (async) socket(0x2b, 0x80801, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r6], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) 90.180206ms ago: executing program 5 (id=2059): r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) accept$inet(r0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000002060103000000000000000203"], 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x24028801) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c0000001000010000000000000000000000000a74000000060a09040000000000000000020000070900020073797a32000000000900010073797a3000000000480004804400ac45447760f46b8e3aef042c4a1a01800b00010065787468647200003400028008000440000000000500020000000000080006400000000108000340fffffffd080007400000000c0800054000000001140000001100010000000000000000000000000a"], 0x9c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x49200}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, 0x56}) 32.980226ms ago: executing program 0 (id=2060): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=2061): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1411, 0x931, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0xc011) socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) socket(0x10, 0x3, 0x0) shutdown(r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket(0x11, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) shutdown(r4, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = accept(r5, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000080)="5ebd740b", 0x4, 0x4080, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @broadcast}, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): > 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.925041][ T8032] RSP: 002b:00007fe36ace4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.925063][ T8032] RAX: ffffffffffffffda RBX: 00007fe369fc5fa0 RCX: 00007fe369d8ebe9 [ 185.925086][ T8032] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 185.925098][ T8032] RBP: 00007fe369e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 185.925109][ T8032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.925121][ T8032] R13: 00007fe369fc6038 R14: 00007fe369fc5fa0 R15: 00007fff25816238 [ 185.925155][ T8032] [ 185.925164][ T8032] Mem-Info: [ 186.224682][ T8034] Bluetooth: MGMT ver 1.23 [ 186.238534][ T8032] active_anon:4506 inactive_anon:0 isolated_anon:0 [ 186.238534][ T8032] active_file:3345 inactive_file:39876 isolated_file:0 [ 186.238534][ T8032] unevictable:768 dirty:79 writeback:0 [ 186.238534][ T8032] slab_reclaimable:11337 slab_unreclaimable:139731 [ 186.238534][ T8032] mapped:29234 shmem:1365 pagetables:1182 [ 186.238534][ T8032] sec_pagetables:0 bounce:0 [ 186.238534][ T8032] kernel_misc_reclaimable:0 [ 186.238534][ T8032] free:1281667 free_pcp:19304 free_cma:0 [ 186.379416][ T8032] Node 0 active_anon:17972kB inactive_anon:0kB active_file:13380kB inactive_file:159300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116816kB dirty:332kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12500kB pagetables:4340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 186.439487][ T8044] netlink: 108 bytes leftover after parsing attributes in process `syz.0.524'. [ 186.460587][ T8044] netlink: 108 bytes leftover after parsing attributes in process `syz.0.524'. [ 186.473863][ T8032] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 186.505050][ T8044] netlink: 76 bytes leftover after parsing attributes in process `syz.0.524'. [ 186.514582][ T8042] netlink: 108 bytes leftover after parsing attributes in process `syz.0.524'. [ 186.517110][ T8032] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.564004][ T8042] netlink: 108 bytes leftover after parsing attributes in process `syz.0.524'. [ 186.569422][ T8051] netlink: 'syz.1.525': attribute type 7 has an invalid length. [ 186.597346][ T8042] netlink: 76 bytes leftover after parsing attributes in process `syz.0.524'. [ 186.598508][ T8052] netlink: 'syz.1.525': attribute type 7 has an invalid length. [ 186.633481][ T8056] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 186.643928][ T8032] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 186.648215][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 186.663143][ T8055] tipc: Enabled bearer , priority 0 [ 186.676080][ T8032] Node 0 DMA32 free:1219376kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17924kB inactive_anon:0kB active_file:13380kB inactive_file:157724kB unevictable:1536kB writepending:332kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:54244kB local_pcp:22776kB free_cma:0kB [ 186.725244][ T8032] lowmem_reserve[]: 0 0 1 1 1 [ 186.731033][ T8032] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 186.772309][ T8032] lowmem_reserve[]: 0 0 0 0 0 [ 186.804964][ T8032] Node 1 Normal free:3888208kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20192kB local_pcp:10240kB free_cma:0kB [ 186.858660][ T8054] tipc: Disabling bearer [ 186.861073][ T8032] lowmem_reserve[]: 0 0 0 0 0 [ 186.894911][ T8032] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.908246][ T8032] Node 0 DMA32: 1973*4kB (UME) 478*8kB (UME) 311*16kB (UME) 763*32kB (UME) 329*64kB (UME) 140*128kB (UME) 62*256kB (UME) 35*512kB (UM) 12*1024kB (UM) 3*2048kB (UME) 268*4096kB (M) = 1230036kB [ 186.933042][ T8032] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 186.947196][ T8032] Node 1 Normal: 178*4kB (UME) 41*8kB (UME) [ 186.958910][ T8062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.043825][ T8064] wg1 speed is unknown, defaulting to 1000 [ 187.064078][ T8032] 38*16kB (UME) 111*32kB (UME) 22*64kB (UME) 11*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3888208kB [ 187.080111][ T8032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.149440][ T8032] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.193176][ T8032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.217543][ T8032] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.253054][ T8032] 44571 total pagecache pages [ 187.258922][ T8032] 0 pages in swap cache [ 187.263398][ T8032] Free swap = 124996kB [ 187.290729][ T8032] Total swap = 124996kB [ 187.298591][ T8032] 2097051 pages RAM [ 187.302456][ T8032] 0 pages HighMem/MovableOnly [ 187.336354][ T8032] 425669 pages reserved [ 187.343220][ T8032] 0 pages cma reserved [ 187.456790][ T8081] vxcan1: entered allmulticast mode [ 187.462876][ T8081] vxcan1: left allmulticast mode [ 187.522759][ T8084] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 187.665818][ T8084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.036482][ T8103] wg1 speed is unknown, defaulting to 1000 [ 188.711946][ T8123] syzkaller0: entered promiscuous mode [ 188.735753][ T8123] syzkaller0: entered allmulticast mode [ 189.192427][ T8136] netlink: 'syz.4.552': attribute type 18 has an invalid length. [ 189.491440][ T8143] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.772126][ T8162] sit0: entered promiscuous mode [ 189.799443][ T8162] sit0: entered allmulticast mode [ 189.815699][ T8161] wg1 speed is unknown, defaulting to 1000 [ 190.699532][ T8184] __nla_validate_parse: 24 callbacks suppressed [ 190.699553][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 191.169574][ T8189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.185038][ T8188] tipc: Enabled bearer , priority 0 [ 191.290842][ T8188] syzkaller0: entered promiscuous mode [ 191.291670][ T8196] trusted_key: syz.3.569 sent an empty control message without MSG_MORE. [ 191.296552][ T8188] syzkaller0: entered allmulticast mode [ 191.368004][ T8188] tipc: Resetting bearer [ 191.377641][ T8178] tipc: Resetting bearer [ 191.418247][ T8178] tipc: Disabling bearer [ 191.592496][ T8202] netlink: 'syz.3.570': attribute type 13 has an invalid length. [ 191.625746][ T8202] netlink: 'syz.3.570': attribute type 17 has an invalid length. [ 191.809237][ T8202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.883682][ T8197] syzkaller0: entered allmulticast mode [ 191.915862][ T8205] wg1 speed is unknown, defaulting to 1000 [ 191.947789][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.572'. [ 191.967016][ T8208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.444429][ T8191] syzkaller0: left allmulticast mode [ 192.630007][ T8230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.577'. [ 192.840253][ T8242] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.579'. [ 193.036372][ T8245] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 193.073819][ T8245] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 193.104380][ T8245] netlink: 160 bytes leftover after parsing attributes in process `syz.2.581'. [ 193.148580][ T8245] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 193.173054][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 193.201316][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 193.703383][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 193.961103][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 194.105906][ T8274] macvlan2: entered promiscuous mode [ 194.134190][ T8274] macvlan2: entered allmulticast mode [ 194.141511][ T8274] bond2: (slave macvlan2): Opening slave failed [ 194.174921][ T8280] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 194.182844][ T8280] netlink: 'syz.2.591': attribute type 2 has an invalid length. [ 194.191729][ T8281] tipc: Enabled bearer , priority 0 [ 194.203085][ T8278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.212165][ T8280] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 194.243900][ T8280] netlink: 'syz.2.591': attribute type 2 has an invalid length. [ 194.263754][ T8272] syzkaller0: entered promiscuous mode [ 194.305338][ T8272] syzkaller0: entered allmulticast mode [ 194.474011][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 194.679116][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.749127][ T8289] wg1 speed is unknown, defaulting to 1000 [ 194.782904][ T8292] wg1 speed is unknown, defaulting to 1000 [ 194.939650][ T8304] syzkaller0: left promiscuous mode [ 194.965090][ T8304] syzkaller0: left allmulticast mode [ 195.719370][ T8334] __nla_validate_parse: 4 callbacks suppressed [ 195.719391][ T8334] netlink: 224 bytes leftover after parsing attributes in process `syz.3.608'. [ 195.745482][ T8332] tipc: Enabling of bearer rejected, already enabled [ 195.786209][ T8332] tipc: Resetting bearer [ 195.828777][ T8334] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 195.884763][ T8334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.932200][ T8337] bond3: (slave gretap2): making interface the new active one [ 195.950800][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 195.971363][ T8337] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 196.173130][ T8334] macsec1: entered promiscuous mode [ 196.182647][ T8334] bond0: entered promiscuous mode [ 196.193765][ T8334] bond0: left promiscuous mode [ 196.591215][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'. [ 196.836112][ T8373] netlink: 128 bytes leftover after parsing attributes in process `syz.2.619'. [ 197.027741][ T8378] tipc: Enabled bearer , priority 0 [ 197.049048][ T8375] syzkaller0: entered promiscuous mode [ 197.056869][ T8375] syzkaller0: entered allmulticast mode [ 197.188921][ T8375] tipc: Resetting bearer [ 197.233120][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 197.255368][ T8385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.269978][ T8374] tipc: Resetting bearer [ 197.302432][ T8374] tipc: Disabling bearer [ 197.316485][ T8391] netlink: 72 bytes leftover after parsing attributes in process `syz.4.623'. [ 197.366446][ T8390] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 197.417796][ T8386] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 197.429580][ T8386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.451279][ T8386] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 197.521555][ T8385] bond0: (slave wlan1): Releasing backup interface [ 197.552290][ T8385] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 197.587389][ T8385] bond2: (slave macvlan2): Releasing backup interface [ 197.643921][ T8390] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 197.850738][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 197.851648][ T8401] wg1 speed is unknown, defaulting to 1000 [ 197.878961][ T8411] netlink: 'syz.4.628': attribute type 13 has an invalid length. [ 212.113624][ T5182] Bluetooth: hci2: command 0x0406 tx timeout [ 212.113776][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 212.119955][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 224.860212][ T8440] tipc: Enabling of bearer rejected, already enabled [ 224.901476][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 224.906232][ T8442] can: request_module (can-proto-0) failed. [ 224.932069][ T8445] openvswitch: netlink: Flow actions attr not present in new flow. [ 224.965100][ T8440] syzkaller0: Caught tx_queue_len zero misconfig [ 225.069017][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 225.079191][ T8453] netlink: 56 bytes leftover after parsing attributes in process `syz.4.640'. [ 225.126576][ T8453] wg1 speed is unknown, defaulting to 1000 [ 225.278012][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 225.328373][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 225.564765][ T8476] wg1 speed is unknown, defaulting to 1000 [ 225.565353][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.604709][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.630085][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.661407][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.683546][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.735128][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.783099][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.812819][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.850635][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 225.886551][ T8485] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 226.074792][ T8497] syzkaller0: entered promiscuous mode [ 226.116201][ T8497] syzkaller0: entered allmulticast mode [ 226.635502][ T8509] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 226.693176][ T8509] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 226.716634][ T8509] bond4: (slave vcan0): making interface the new active one [ 226.728092][ T8509] bond4: (slave vcan0): Enslaving as an active interface with an up link [ 226.746575][ T8516] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 226.766195][ T8516] bond4: (slave vcan1): Enslaving as a backup interface with an up link [ 227.376839][ T8524] siw: device registration error -23 [ 228.769040][ T8509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.777973][ T8522] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 228.853356][ T8520] vlan3: entered allmulticast mode [ 228.883584][ T8520] veth1: entered allmulticast mode [ 228.953807][ T8529] bond0: entered promiscuous mode [ 228.980015][ T8529] bond0: entered allmulticast mode [ 229.215940][ T8540] siw: device registration error -23 [ 229.311234][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 229.361414][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 229.548443][ T8546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.659'. [ 230.476574][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 230.749868][ T8585] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 230.878087][ T8576] wg1 speed is unknown, defaulting to 1000 [ 230.886001][ T8579] wg1 speed is unknown, defaulting to 1000 [ 230.984365][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.674'. [ 231.016646][ T8599] tipc: Enabling of bearer rejected, already enabled [ 231.188052][ T8608] syzkaller0: entered promiscuous mode [ 231.194144][ T8608] syzkaller0: entered allmulticast mode [ 231.309156][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 231.404141][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 232.318667][ T8655] netlink: 64 bytes leftover after parsing attributes in process `syz.4.688'. [ 232.657088][ T8665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.230537][ T8692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.698'. [ 233.304215][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'. [ 233.463622][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 233.487826][ T8705] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.535356][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 233.557005][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 233.713682][ T8712] bridge_slave_0: left allmulticast mode [ 233.734938][ T8712] bridge_slave_0: left promiscuous mode [ 233.751804][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.821886][ T8712] bridge_slave_1: left allmulticast mode [ 233.861873][ T8712] bridge_slave_1: left promiscuous mode [ 233.879357][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.893622][ T8712] bond0: (slave bond_slave_0): Releasing backup interface [ 233.914793][ T8712] bond0: (slave bond_slave_1): Releasing backup interface [ 233.946537][ T8712] team0: Failed to send options change via netlink (err -105) [ 233.955578][ T8712] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 233.966499][ T8712] team0: Port device team_slave_0 removed [ 233.978734][ T8712] team0: Failed to send options change via netlink (err -105) [ 233.986757][ T8712] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 233.996758][ T8712] team0: Port device team_slave_1 removed [ 234.003818][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.011626][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.030153][ T8712] bond1: (slave veth3): Releasing active interface [ 234.037126][ T8712] bond1: (slave veth3): the permanent HWaddr of slave - 16:0c:26:5b:af:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 234.069739][ T8712] bond1: (slave gretap1): Releasing active interface [ 234.087523][ T8715] team0: Failed to send options change via netlink (err -105) [ 234.095221][ T8715] team0: Mode changed to "loadbalance" [ 234.130572][ T6207] syz2: Port: 1 Link DOWN [ 234.243476][ T8729] validate_nla: 26 callbacks suppressed [ 234.243500][ T8729] netlink: 'syz.2.707': attribute type 5 has an invalid length. [ 234.275293][ T8733] veth0_to_bridge: entered promiscuous mode [ 234.396906][ T8730] veth0_to_bridge: left promiscuous mode [ 234.617672][ T8743] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.640911][ T8743] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.993428][ T8743] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.022917][ T8743] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.123192][ T8756] wg1 speed is unknown, defaulting to 1000 [ 235.285080][ T8743] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.336178][ T8743] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.417545][ T8789] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 235.540991][ T8790] __nla_validate_parse: 3 callbacks suppressed [ 235.541014][ T8790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.721'. [ 235.570796][ T8743] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.603622][ T8743] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.608478][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 236.071843][ T8477] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.102183][ T8477] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.149976][ T7334] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.167556][ T7334] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.264082][ T7334] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.281171][ T7334] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.316206][ T7334] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.334009][ T7334] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.349802][ T8813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.729'. [ 236.379015][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 236.744780][ T8828] netlink: 'syz.3.732': attribute type 29 has an invalid length. [ 236.985768][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 237.023672][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'. [ 237.197894][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 237.348844][ T8852] unknown channel width for channel at 909000KHz? [ 237.579614][ T5866] Bluetooth: hci4: link tx timeout [ 237.585153][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.595367][ T5867] Bluetooth: hci4: link tx timeout [ 237.600636][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.608700][ T5867] Bluetooth: hci4: link tx timeout [ 237.613846][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.622570][ T5867] Bluetooth: hci4: link tx timeout [ 237.629141][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.638791][ T5867] Bluetooth: hci4: link tx timeout [ 237.644230][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.732135][ T8871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.776034][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 237.975983][ T8881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 238.063820][ T8887] tipc: Enabling of bearer rejected, already enabled [ 238.123785][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'. [ 238.329470][ T8897] bond0: entered promiscuous mode [ 238.349144][ T8897] bond0: entered allmulticast mode [ 238.377877][ T8897] lo: entered allmulticast mode [ 238.423642][ T8897] dvmrp8: entered allmulticast mode [ 238.516077][ T8897] wg1 speed is unknown, defaulting to 1000 [ 238.955877][ T8922] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 239.072771][ T8920] syzkaller1: entered allmulticast mode [ 239.204183][ T8896] lo: left allmulticast mode [ 239.251252][ T8896] dvmrp8: left allmulticast mode [ 239.634145][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 240.070176][ T8928] wg1 speed is unknown, defaulting to 1000 [ 240.173402][ T8956] wg1 speed is unknown, defaulting to 1000 [ 240.455841][ T8974] syzkaller1: entered promiscuous mode [ 240.462031][ T8974] syzkaller1: entered allmulticast mode [ 242.214943][ T9013] netlink: 'syz.2.776': attribute type 1 has an invalid length. [ 242.231050][ T9013] __nla_validate_parse: 5 callbacks suppressed [ 242.231069][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 242.306600][ T9015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.777'. [ 242.321502][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.777'. [ 242.528041][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 242.972242][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 243.193701][ T9050] netlink: 256 bytes leftover after parsing attributes in process `syz.2.782'. [ 243.346260][ T9055] netlink: 276 bytes leftover after parsing attributes in process `syz.3.786'. [ 243.755477][ T9059] wg1 speed is unknown, defaulting to 1000 [ 243.776244][ T9061] tipc: Enabled bearer , priority 0 [ 243.800315][ T9061] syzkaller0: entered promiscuous mode [ 243.805943][ T9061] syzkaller0: entered allmulticast mode [ 243.863793][ T9060] tipc: Resetting bearer [ 243.889990][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 244.040640][ T9060] tipc: Disabling bearer [ 244.281603][ T9083] team0: Mode changed to "activebackup" [ 244.455297][ T9086] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 245.456300][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 245.550403][ T9119] netlink: 68 bytes leftover after parsing attributes in process `syz.3.806'. [ 245.811902][ T10] IPVS: starting estimator thread 0... [ 245.883319][ T9129] wg1 speed is unknown, defaulting to 1000 [ 245.907626][ T9137] IPVS: using max 28 ests per chain, 67200 per kthread [ 246.360626][ T9145] Bluetooth: MGMT ver 1.23 [ 246.404686][ T9147] pimreg: entered allmulticast mode [ 246.494582][ T9151] syzkaller1: entered allmulticast mode [ 246.713496][ T9157] netlink: 'syz.4.812': attribute type 11 has an invalid length. [ 246.850406][ T9160] syzkaller1: left promiscuous mode [ 246.866450][ T9160] syzkaller1: left allmulticast mode [ 246.965777][ T9156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.292735][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.324247][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.329960][ T9172] wg1 speed is unknown, defaulting to 1000 [ 247.345227][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.364831][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.387125][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.411915][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.426119][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.435109][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.449981][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.456801][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.473845][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.493681][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.510146][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.549054][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.580884][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.604214][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.632020][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.661087][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.691153][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.711506][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.741167][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.769305][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.790879][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.809056][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.824755][ T9185] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 247.824895][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.843129][ T9186] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 247.862041][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.884866][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.901554][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.917452][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.934481][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.964770][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.991858][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.031111][ T9180] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.179515][ T9197] __nla_validate_parse: 5 callbacks suppressed [ 248.179537][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 248.255676][ T9202] bridge_slave_0: left allmulticast mode [ 248.268509][ T9202] bridge_slave_0: left promiscuous mode [ 248.275344][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.378878][ T9202] bridge_slave_1: left allmulticast mode [ 248.406632][ T9202] bridge_slave_1: left promiscuous mode [ 248.450417][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.516260][ T9202] bond0: (slave bond_slave_0): Releasing backup interface [ 248.574306][ T9202] bond0: (slave bond_slave_1): Releasing backup interface [ 248.620836][ T9202] team_slave_0: left promiscuous mode [ 248.659478][ T9213] netlink: 'syz.2.827': attribute type 16 has an invalid length. [ 248.660615][ T9202] team0: Port device team_slave_0 removed [ 248.679183][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'. [ 248.714687][ T9202] team_slave_1: left promiscuous mode [ 248.758777][ T9202] team0: Port device team_slave_1 removed [ 248.798210][ T9202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.835765][ T9202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.949180][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 249.342895][ T9227] syz_tun: entered allmulticast mode [ 249.362705][ T9228] dvmrp8: entered allmulticast mode [ 249.386083][ T9224] ip6gre3: entered allmulticast mode [ 249.394164][ T9204] wg1 speed is unknown, defaulting to 1000 [ 249.470027][ T9224] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 249.512067][ T9223] syz_tun: left allmulticast mode [ 249.544202][ T9223] dvmrp8: left allmulticast mode [ 249.554434][ T9233] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 249.642211][ T9236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.833'. [ 249.657396][ T9239] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 249.657440][ T9239] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 249.723132][ T9239] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 249.849997][ T9244] syzkaller0: entered promiscuous mode [ 249.881598][ T9244] syzkaller0: entered allmulticast mode [ 249.924565][ T9248] tipc: Enabled bearer , priority 0 [ 249.933675][ T9248] syzkaller0: entered promiscuous mode [ 249.939315][ T9248] syzkaller0: entered allmulticast mode [ 249.954062][ T9248] tipc: Resetting bearer [ 249.962370][ T9246] tipc: Resetting bearer [ 249.998439][ T9246] tipc: Disabling bearer [ 250.070863][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 250.291118][ T9260] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 250.350422][ T9268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.844'. [ 250.382022][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.841'. [ 250.406994][ T9260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.602526][ T9260] veth5: entered promiscuous mode [ 250.631380][ T9260] bond1: (slave veth5): Enslaving as an active interface with a down link [ 250.936734][ T9293] netlink: 48 bytes leftover after parsing attributes in process `syz.2.847'. [ 251.041282][ T9297] netlink: 128 bytes leftover after parsing attributes in process `syz.3.849'. [ 251.187597][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 251.513114][ T9316] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 251.805146][ T9326] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 251.845394][ T9336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.903451][ T9329] .70·: renamed from hsr0 (while UP) [ 251.963795][ T9329] .70·: entered allmulticast mode [ 251.989339][ T9329] hsr_slave_0: entered allmulticast mode [ 252.004276][ T9329] hsr_slave_1: entered allmulticast mode [ 252.015426][ T9329] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 252.658210][ T9365] syzkaller1: entered promiscuous mode [ 252.680464][ T9365] syzkaller1: entered allmulticast mode [ 253.278705][ T9383] bond0: left promiscuous mode [ 253.292033][ T9383] bond0: left allmulticast mode [ 253.293097][ T9385] __nla_validate_parse: 6 callbacks suppressed [ 253.293116][ T9385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.875'. [ 253.337095][ T9383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.871743][ T9397] wg1 speed is unknown, defaulting to 1000 [ 254.024082][ T6206] IPVS: starting estimator thread 0... [ 254.072992][ T9406] nbd: must specify at least one socket [ 254.129831][ T9404] IPVS: using max 28 ests per chain, 67200 per kthread [ 254.314870][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'. [ 254.382236][ T9419] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 254.402497][ T9413] bridge0: entered allmulticast mode [ 254.432811][ T9417] wg1 speed is unknown, defaulting to 1000 [ 254.440375][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 254.527318][ T9423] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.534919][ T9423] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.545044][ T9413] bridge0 (unregistering): left allmulticast mode [ 254.905825][ T9431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.053765][ T9441] netlink: 'syz.4.889': attribute type 46 has an invalid length. [ 255.059613][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.888'. [ 255.456814][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 256.113718][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.415572][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 256.427820][ T5866] Bluetooth: hci0: command tx timeout [ 256.526370][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 256.865200][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 256.908713][ T9458] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 256.999705][ T9458] team1: entered promiscuous mode [ 257.006701][ T9458] team1: entered allmulticast mode [ 257.108912][ T9496] wg1 speed is unknown, defaulting to 1000 [ 257.318572][ T9497] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 257.336143][ T9497] netlink: 232 bytes leftover after parsing attributes in process `syz.0.903'. [ 257.431106][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 257.505153][ T9508] wg1 speed is unknown, defaulting to 1000 [ 257.530034][ T9499] netlink: 'syz.4.904': attribute type 3 has an invalid length. [ 258.568397][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 258.625248][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.914'. [ 258.798317][ T9561] tc_dump_action: action bad kind [ 258.885309][ T9553] wg1 speed is unknown, defaulting to 1000 [ 258.948168][ T9563] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 259.078851][ T9561] netlink: 'syz.1.916': attribute type 3 has an invalid length. [ 259.099476][ T9561] netlink: 666 bytes leftover after parsing attributes in process `syz.1.916'. [ 259.118967][ T9563] veth0_vlan: left promiscuous mode [ 259.131731][ T9563] veth0_vlan: entered promiscuous mode [ 259.143865][ T9563] team0: Device veth0_vlan failed to register rx_handler [ 259.617169][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.921'. [ 259.648748][ T9582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.921'. [ 259.882955][ T9596] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 259.935404][ T9596] bond0: (slave gretap0): Opening slave failed [ 260.003613][ T9596] netlink: 'syz.0.926': attribute type 7 has an invalid length. [ 260.619827][ T9610] wg1 speed is unknown, defaulting to 1000 [ 261.192392][ T9626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.933'. [ 261.283927][ T9626] gre0: entered promiscuous mode [ 261.314617][ T9626] gre0: entered allmulticast mode [ 261.533540][ T9634] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 261.553547][ T9634] syzkaller1: linktype set to 778 [ 261.649076][ T9637] netlink: 55 bytes leftover after parsing attributes in process `syz.3.936'. [ 262.233410][ T9655] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20001 [ 262.275884][ T9655] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20003 [ 262.396699][ T9663] gretap0: entered promiscuous mode [ 262.403533][ T9663] vlan2: entered promiscuous mode [ 262.490343][ T9657] wg1 speed is unknown, defaulting to 1000 [ 262.688539][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 262.723918][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 262.728420][ T9674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.944'. [ 263.148079][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 264.265237][ T9715] __nla_validate_parse: 2 callbacks suppressed [ 264.265260][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 264.580827][ T9717] wg1 speed is unknown, defaulting to 1000 [ 264.725131][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 264.830591][ T9722] macvtap1: entered promiscuous mode [ 264.866484][ T9722] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 264.926154][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 265.249848][ T9738] sctp: [Deprecated]: syz.3.961 (pid 9738) Use of int in maxseg socket option. [ 265.249848][ T9738] Use struct sctp_assoc_value instead [ 265.287096][ T9740] netlink: 'syz.0.960': attribute type 21 has an invalid length. [ 265.315904][ T9740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.960'. [ 265.471578][ T9735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.960'. [ 265.871326][ T9755] syzkaller1: entered promiscuous mode [ 265.886636][ T9755] syzkaller1: entered allmulticast mode [ 265.974903][ T9753] siw: device registration error -23 [ 266.022889][ T9763] openvswitch: netlink: Flow actions attr not present in new flow. [ 266.043149][ T9759] wg1 speed is unknown, defaulting to 1000 [ 266.550959][ T9784] netlink: 124 bytes leftover after parsing attributes in process `syz.3.971'. [ 266.627465][ T9787] openvswitch: netlink: Multiple metadata blocks provided [ 266.681264][ T9788] netlink: 'syz.0.974': attribute type 3 has an invalid length. [ 267.086888][ T9807] netlink: 'syz.4.979': attribute type 27 has an invalid length. [ 267.095316][ T9807] netlink: 'syz.4.979': attribute type 27 has an invalid length. [ 267.608184][ T9824] syz.3.982: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.627917][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: syz.3.982 Not tainted syzkaller #0 PREEMPT(full) [ 267.627945][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.627957][ T9824] Call Trace: [ 267.627964][ T9824] [ 267.627973][ T9824] dump_stack_lvl+0x189/0x250 [ 267.628004][ T9824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.628042][ T9824] ? __pfx__printk+0x10/0x10 [ 267.628070][ T9824] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 267.628095][ T9824] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 267.628130][ T9824] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 267.628156][ T9824] warn_alloc+0x214/0x310 [ 267.628192][ T9824] ? __pfx_warn_alloc+0x10/0x10 [ 267.628231][ T9824] ? __get_vm_area_node+0x28f/0x300 [ 267.628259][ T9824] ? hash_netport_create+0x358/0xfe0 [ 267.628287][ T9824] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 267.628314][ T9824] ? do_syscall_64+0xfa/0x3b0 [ 267.628368][ T9824] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.628401][ T9824] ? rcu_is_watching+0x15/0xb0 [ 267.628423][ T9824] ? hash_netport_create+0x358/0xfe0 [ 267.628444][ T9824] ? hash_netport_create+0x358/0xfe0 [ 267.628463][ T9824] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 267.628489][ T9824] ? hash_netport_create+0x358/0xfe0 [ 267.628510][ T9824] ? hash_netport_create+0x2fe/0xfe0 [ 267.628537][ T9824] hash_netport_create+0x358/0xfe0 [ 267.628567][ T9824] ? __nla_parse+0x40/0x60 [ 267.628595][ T9824] ? __pfx_hash_netport_create+0x10/0x10 [ 267.628620][ T9824] ip_set_create+0xa97/0x1940 [ 267.628648][ T9824] ? ip_set_create+0x4a2/0x1940 [ 267.628690][ T9824] ? __pfx_ip_set_create+0x10/0x10 [ 267.628761][ T9824] nfnetlink_rcv_msg+0xb4d/0x1130 [ 267.628791][ T9824] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 267.628843][ T9824] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 267.628866][ T9824] ? kasan_save_free_info+0x46/0x50 [ 267.628945][ T9824] netlink_rcv_skb+0x208/0x470 [ 267.628968][ T9824] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 267.628997][ T9824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.629032][ T9824] ? bpf_lsm_capable+0x9/0x20 [ 267.629055][ T9824] ? security_capable+0x7e/0x2e0 [ 267.629093][ T9824] nfnetlink_rcv+0x26a/0x2520 [ 267.629137][ T9824] ? __dev_queue_xmit+0x1d79/0x3b50 [ 267.629175][ T9824] ? __dev_queue_xmit+0x27b/0x3b50 [ 267.629215][ T9824] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 267.629242][ T9824] ? __pfx___dev_queue_xmit+0x10/0x10 [ 267.629285][ T9824] ? ref_tracker_free+0x63a/0x7d0 [ 267.629313][ T9824] ? __asan_memcpy+0x40/0x70 [ 267.629334][ T9824] ? __pfx_ref_tracker_free+0x10/0x10 [ 267.629378][ T9824] ? skb_clone+0x246/0x3a0 [ 267.629403][ T9824] ? __netlink_deliver_tap+0x807/0x850 [ 267.629419][ T9824] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.629442][ T9824] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.629472][ T9824] netlink_unicast+0x82c/0x9e0 [ 267.629513][ T9824] ? __pfx_netlink_unicast+0x10/0x10 [ 267.629544][ T9824] ? netlink_sendmsg+0x642/0xb30 [ 267.629561][ T9824] ? skb_put+0x11b/0x210 [ 267.629587][ T9824] netlink_sendmsg+0x805/0xb30 [ 267.629619][ T9824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.629643][ T9824] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.629665][ T9824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.629686][ T9824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.629706][ T9824] __sock_sendmsg+0x21c/0x270 [ 267.629737][ T9824] ____sys_sendmsg+0x505/0x830 [ 267.629765][ T9824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.629799][ T9824] ? import_iovec+0x74/0xa0 [ 267.629826][ T9824] ___sys_sendmsg+0x21f/0x2a0 [ 267.629850][ T9824] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.629914][ T9824] ? __fget_files+0x2a/0x420 [ 267.629930][ T9824] ? __fget_files+0x3a0/0x420 [ 267.629959][ T9824] __x64_sys_sendmsg+0x19b/0x260 [ 267.629986][ T9824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.630020][ T9824] ? rcu_is_watching+0x15/0xb0 [ 267.630045][ T9824] ? do_syscall_64+0xbe/0x3b0 [ 267.630069][ T9824] do_syscall_64+0xfa/0x3b0 [ 267.630087][ T9824] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.630115][ T9824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.630133][ T9824] ? clear_bhb_loop+0x60/0xb0 [ 267.630158][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.630176][ T9824] RIP: 0033:0x7fe369d8ebe9 [ 267.630195][ T9824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.630212][ T9824] RSP: 002b:00007fe36ace4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.630234][ T9824] RAX: ffffffffffffffda RBX: 00007fe369fc5fa0 RCX: 00007fe369d8ebe9 [ 267.630248][ T9824] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 267.630260][ T9824] RBP: 00007fe369e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 267.630271][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.630283][ T9824] R13: 00007fe369fc6038 R14: 00007fe369fc5fa0 R15: 00007fff25816238 [ 267.630316][ T9824] [ 267.630325][ T9824] Mem-Info: [ 268.122908][ T9824] active_anon:7429 inactive_anon:0 isolated_anon:0 [ 268.122908][ T9824] active_file:3410 inactive_file:39906 isolated_file:0 [ 268.122908][ T9824] unevictable:768 dirty:140 writeback:0 [ 268.122908][ T9824] slab_reclaimable:11800 slab_unreclaimable:139694 [ 268.122908][ T9824] mapped:40376 shmem:4224 pagetables:1132 [ 268.122908][ T9824] sec_pagetables:0 bounce:0 [ 268.122908][ T9824] kernel_misc_reclaimable:0 [ 268.122908][ T9824] free:1276278 free_pcp:20558 free_cma:0 [ 268.123391][ T9813] batadv_slave_0: entered promiscuous mode [ 268.178217][ T9817] batadv_slave_0: left promiscuous mode [ 268.184305][ T9824] Node 0 active_anon:29716kB inactive_anon:0kB active_file:13640kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161504kB dirty:556kB writeback:0kB shmem:15360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13356kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 268.221836][ T9824] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 268.258871][ T9824] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.294479][ T9824] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 268.302621][ T9824] Node 0 DMA32 free:1206612kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29388kB inactive_anon:0kB active_file:13640kB inactive_file:157844kB unevictable:1536kB writepending:556kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:57308kB local_pcp:25736kB free_cma:0kB [ 268.358416][ T9824] lowmem_reserve[]: 0 0 1 1 1 [ 268.363237][ T9824] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 268.416014][ T9824] lowmem_reserve[]: 0 0 0 0 0 [ 268.431162][ T9824] Node 1 Normal free:3889488kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:9472kB free_cma:0kB [ 268.468739][ T9824] lowmem_reserve[]: 0 0 0 0 0 [ 268.473836][ T9824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 268.493579][ T9824] Node 0 DMA32: 1823*4kB (UM) 938*8kB (UM) 584*16kB (UME) 609*32kB (UME) 246*64kB (UME) 148*128kB (UM) 79*256kB (UM) 23*512kB (UME) 7*1024kB (UM) 5*2048kB (UM) 264*4096kB (M) = 1209068kB [ 268.523149][ T9824] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 268.556486][ T9824] Node 1 Normal: 178*4kB (UME) 41*8kB (UME) 38*16kB (UME) 127*32kB (UME) 32*64kB (UME) 12*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3889488kB [ 268.586196][ T9824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.604377][ T9824] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.622683][ T9824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.662058][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.986'. [ 268.668211][ T9824] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.698222][ T9824] 47536 total pagecache pages [ 268.715935][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 268.726653][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 268.744612][ T9824] 0 pages in swap cache [ 268.772677][ T9824] Free swap = 124996kB [ 268.800087][ T9824] Total swap = 124996kB [ 268.804315][ T9824] 2097051 pages RAM [ 268.867361][ T9824] 0 pages HighMem/MovableOnly [ 268.888324][ T9824] 425669 pages reserved [ 268.893332][ T9824] 0 pages cma reserved [ 269.118167][ T9864] netlink: 'syz.3.990': attribute type 6 has an invalid length. [ 269.266364][ T9864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.990'. [ 269.353418][ T9870] wg1 speed is unknown, defaulting to 1000 [ 269.452754][ T9874] netlink: 48 bytes leftover after parsing attributes in process `syz.4.992'. [ 269.469631][ T9873] netlink: 'syz.3.993': attribute type 10 has an invalid length. [ 269.512702][ T9871] wg1 speed is unknown, defaulting to 1000 [ 269.783213][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.996'. [ 270.679265][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 270.798627][ T9903] netlink: 'syz.3.1001': attribute type 4 has an invalid length. [ 270.927884][ T9908] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 270.965889][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 271.177830][ T9918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.255209][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 271.265166][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 271.334869][ T9918] siw: device registration error -23 [ 272.034570][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1010'. [ 272.074365][ T9934] pimreg: entered allmulticast mode [ 272.391275][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'. [ 272.447506][ T9943] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1012'. [ 272.612374][ T9956] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 272.626026][ T9955] IPVS: stopping master sync thread 9956 ... [ 272.678214][ T9954] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 272.758708][ T9954] team0: Port device dummy0 added [ 273.113123][ T9964] netlink: 'syz.3.1019': attribute type 32 has an invalid length. [ 273.145222][ T9968] netlink: 'syz.3.1019': attribute type 32 has an invalid length. [ 273.203924][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 273.306223][ T9968] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 273.344986][ T9968] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 273.349641][ T9964] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 273.428609][ T9964] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 273.713759][ T9984] block nbd0: server does not support multiple connections per device. [ 273.787988][ T9984] block nbd0: shutting down sockets [ 274.040077][ T9987] wg1 speed is unknown, defaulting to 1000 [ 274.148522][T10008] netlink: 'syz.3.1029': attribute type 1 has an invalid length. [ 274.396751][T10008] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.520442][T10011] bond5: (slave geneve2): making interface the new active one [ 274.531858][T10011] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 274.654036][T10024] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 274.662064][T10025] __nla_validate_parse: 2 callbacks suppressed [ 274.662084][T10025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1032'. [ 274.679177][T10025] netlink: 'syz.3.1032': attribute type 4 has an invalid length. [ 274.755888][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 274.769865][T10026] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 274.819257][T10028] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 275.414115][T10029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1032'. [ 275.434023][T10029] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 275.860352][T10042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1038'. [ 276.374139][T10055] netlink: 'syz.2.1041': attribute type 4 has an invalid length. [ 276.583094][T10058] C: renamed from team_slave_0 [ 276.593325][T10058] netlink: 'syz.2.1042': attribute type 3 has an invalid length. [ 276.602456][T10058] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1042'. [ 276.611827][T10058] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 277.074975][T10079] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 277.076979][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 277.097493][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1046'. [ 277.121172][T10079] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 277.141335][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1046'. [ 277.162695][T10079] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 277.177107][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1046'. [ 277.192053][T10079] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 277.200418][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1046'. [ 277.215089][T10079] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 277.223746][T10079] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 277.242892][T10079] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 277.254318][T10079] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 277.813937][T10098] delete_channel: no stack [ 278.017083][T10107] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.036489][T10107] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 278.541532][T10125] lo: entered allmulticast mode [ 278.586682][T10125] dvmrp8: entered allmulticast mode [ 278.751753][T10131] lo: left allmulticast mode [ 278.758787][T10131] dvmrp8: left allmulticast mode [ 278.821090][T10138] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 278.934001][T10142] 8021q: VLANs not supported on syzkaller1 [ 279.379027][T10159] bond0 (unregistering): Released all slaves [ 279.502472][T10162] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.518072][T10162] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.640203][T10162] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.655104][T10162] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.677117][T10172] syz_tun: entered allmulticast mode [ 279.712423][T10172] dvmrp8: entered allmulticast mode [ 279.734130][T10162] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.748384][T10162] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.788414][T10172] syz_tun: left allmulticast mode [ 279.793803][T10172] dvmrp8: left allmulticast mode [ 279.838819][T10162] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.850982][T10162] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.993863][T10173] wg1 speed is unknown, defaulting to 1000 [ 280.033968][ T7330] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.050536][ T7330] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.069184][T10172] wg1 speed is unknown, defaulting to 1000 [ 280.198058][ T7343] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.220135][ T7343] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.244073][ T7343] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.257593][ T7343] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.298656][ T7343] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.307087][ T7343] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.396489][T10192] __nla_validate_parse: 88 callbacks suppressed [ 280.396512][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 280.651418][T10202] sctp: [Deprecated]: syz.0.1079 (pid 10202) Use of int in maxseg socket option. [ 280.651418][T10202] Use struct sctp_assoc_value instead [ 280.880843][T10206] wg1 speed is unknown, defaulting to 1000 [ 281.094725][T10213] team0: Port device vxlan1 added [ 281.348416][T10219] bond3: entered promiscuous mode [ 281.356402][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 281.356831][T10219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.366699][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1086'. [ 281.808999][T10238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 282.068032][T10236] wg1 speed is unknown, defaulting to 1000 [ 282.784256][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 282.952908][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 284.251835][T10293] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1107'. [ 284.486210][T10293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.545616][T10310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1112'. [ 284.558516][T10310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1112'. [ 284.573667][T10293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.576524][T10310] validate_nla: 83 callbacks suppressed [ 284.576541][T10310] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 284.596413][T10310] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1112'. [ 284.606158][T10293] bond0 (unregistering): (slave team0): Releasing backup interface [ 284.631249][T10293] bond0 (unregistering): Released all slaves [ 284.690735][T10310] bridge0: port 1(team0) entered blocking state [ 284.706058][T10310] bridge0: port 1(team0) entered disabled state [ 284.713179][T10310] team0: entered allmulticast mode [ 284.721521][T10310] team0: left allmulticast mode [ 284.786407][T10308] wg1 speed is unknown, defaulting to 1000 [ 285.527462][T10349] __nla_validate_parse: 3 callbacks suppressed [ 285.527483][T10349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1122'. [ 285.593012][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 285.608532][T10356] xt_HMARK: proto mask must be zero with L3 mode [ 285.623026][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 286.258418][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 286.282420][T10388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1131'. [ 286.429198][T10384] wg1 speed is unknown, defaulting to 1000 [ 286.786190][T10410] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1137'. [ 286.804218][T10410] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1137'. [ 286.870500][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 286.893055][T10414] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1140'. [ 286.932410][T10414] 8021q: VLANs not supported on ip6gre0 [ 287.065062][T10421] _ĐZ`Ô€@S!: entered promiscuous mode [ 287.103114][T10421] netlink: 'syz.2.1141': attribute type 2 has an invalid length. [ 287.115503][T10421] netlink: 'syz.2.1141': attribute type 1 has an invalid length. [ 287.394139][T10436] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1145'. [ 287.615218][T10436] bond4: entered promiscuous mode [ 287.629617][T10432] wg1 speed is unknown, defaulting to 1000 [ 288.367583][T10451] nbd: socks must be embedded in a SOCK_ITEM attr [ 288.672335][T10468] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 288.687726][T10474] vxlan1: entered promiscuous mode [ 288.702995][T10474] macsec2: entered promiscuous mode [ 288.721604][T10474] team0: entered promiscuous mode [ 288.740409][T10468] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 288.792999][T10468] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 289.628112][T10494] sch_fq: defrate 0 ignored. [ 289.797422][T10498] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 290.094789][T10522] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 290.109148][T10522] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 290.154654][T10522] netlink: 'syz.2.1164': attribute type 12 has an invalid length. [ 290.719180][T10539] wg1 speed is unknown, defaulting to 1000 [ 290.756049][T10542] wg1 speed is unknown, defaulting to 1000 [ 293.142126][T10602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.415848][T10608] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 294.973353][T10684] netlink: 'syz.1.1199': attribute type 1 has an invalid length. [ 295.131251][T10684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.175822][T10696] __nla_validate_parse: 6 callbacks suppressed [ 295.175842][T10696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1202'. [ 295.412492][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 295.429738][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 295.617866][T10715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.696712][T10715] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 295.775673][T10715] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 295.857353][T10711] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 295.915505][T10719] bond1: (slave veth5): Releasing active interface [ 295.956106][T10719] bond2: (slave macvlan2): Releasing backup interface [ 296.039457][T10722] wg1 speed is unknown, defaulting to 1000 [ 296.083795][T10734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1209'. [ 296.269639][T10739] syzkaller1: entered promiscuous mode [ 296.314136][T10739] syzkaller1: entered allmulticast mode [ 296.383326][T10746] veth6: entered promiscuous mode [ 296.400227][T10746] veth6: entered allmulticast mode [ 296.409008][T10748] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1213'. [ 296.416279][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 296.441289][T10748] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1213'. [ 296.463728][T10748] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1213'. [ 296.511172][T10750] ip6gre1: entered allmulticast mode [ 296.583765][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1213'. [ 296.747989][T10764] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1214'. [ 296.986167][T10773] tipc: Enabling of bearer rejected, already enabled [ 296.996397][T10763] wg1 speed is unknown, defaulting to 1000 [ 298.694429][T10821] gretap1: entered promiscuous mode [ 298.733019][T10821] netlink: 'syz.1.1233': attribute type 7 has an invalid length. [ 299.019299][T10823] wg1 speed is unknown, defaulting to 1000 [ 299.209709][T10842] wg1 speed is unknown, defaulting to 1000 [ 300.164762][T10870] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 300.198525][T10870] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 300.687376][ T30] audit: type=1800 audit(1756726300.536:2): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1244" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1320 res=0 errno=0 [ 300.994601][T10870] team0: Port device dummy0 removed [ 301.006426][T10870] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 301.103239][ T7329] bond0: (slave dummy0): interface is now down [ 301.127927][ T7343] bond0: (slave dummy0): interface is now down [ 301.158577][ T7343] bond0: (slave dummy0): interface is now down [ 301.197439][ T7343] bond0: (slave dummy0): interface is now down [ 301.237878][ T7324] bond0: (slave dummy0): interface is now down [ 301.289850][ T7334] bond0: (slave dummy0): interface is now down [ 301.307735][ T7334] bond0: (slave dummy0): interface is now down [ 301.334134][T10876] wg1 speed is unknown, defaulting to 1000 [ 301.341505][ T7324] bond0: (slave dummy0): interface is now down [ 301.370539][ T7324] bond0: now running without any active interface! [ 301.627148][T10895] __nla_validate_parse: 8 callbacks suppressed [ 301.637077][T10895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1249'. [ 301.833026][T10903] xt_HMARK: proto mask must be zero with L3 mode [ 301.955702][T10901] syz.1.1250: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 302.031717][T10901] CPU: 1 UID: 0 PID: 10901 Comm: syz.1.1250 Not tainted syzkaller #0 PREEMPT(full) [ 302.031747][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.031758][T10901] Call Trace: [ 302.031766][T10901] [ 302.031774][T10901] dump_stack_lvl+0x189/0x250 [ 302.031806][T10901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.031829][T10901] ? __pfx__printk+0x10/0x10 [ 302.031852][T10901] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 302.031874][T10901] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 302.031898][T10901] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 302.031922][T10901] warn_alloc+0x214/0x310 [ 302.031957][T10901] ? __pfx_warn_alloc+0x10/0x10 [ 302.031995][T10901] ? __get_vm_area_node+0x28f/0x300 [ 302.032029][T10901] ? xskq_create+0xbf/0x170 [ 302.032051][T10901] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 302.032113][T10901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 302.032148][T10901] ? __kasan_kmalloc+0x93/0xb0 [ 302.032177][T10901] vmalloc_user_noprof+0xad/0xf0 [ 302.032204][T10901] ? xskq_create+0xbf/0x170 [ 302.032221][T10901] xskq_create+0xbf/0x170 [ 302.032242][T10901] xsk_init_queue+0xb0/0x110 [ 302.032273][T10901] xsk_setsockopt+0x57b/0x8d0 [ 302.032304][T10901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.032331][T10901] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.032361][T10901] ? __fget_files+0x2a/0x420 [ 302.032376][T10901] ? aa_sock_opt_perm+0xff/0x1b0 [ 302.032398][T10901] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 302.032417][T10901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.032446][T10901] do_sock_setsockopt+0x179/0x1b0 [ 302.032472][T10901] __x64_sys_setsockopt+0x13f/0x1b0 [ 302.032499][T10901] do_syscall_64+0xfa/0x3b0 [ 302.032517][T10901] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.032535][T10901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.032553][T10901] ? clear_bhb_loop+0x60/0xb0 [ 302.032577][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.032594][T10901] RIP: 0033:0x7fcc5478ebe9 [ 302.032611][T10901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.032627][T10901] RSP: 002b:00007fcc55550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.032648][T10901] RAX: ffffffffffffffda RBX: 00007fcc549c6090 RCX: 00007fcc5478ebe9 [ 302.032666][T10901] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 302.032677][T10901] RBP: 00007fcc54811e19 R08: 0000000000000004 R09: 0000000000000000 [ 302.032688][T10901] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 302.032700][T10901] R13: 00007fcc549c6128 R14: 00007fcc549c6090 R15: 00007ffcbff8ea48 [ 302.032733][T10901] [ 302.032765][T10901] Mem-Info: [ 302.308906][T10901] active_anon:4527 inactive_anon:0 isolated_anon:0 [ 302.308906][T10901] active_file:3410 inactive_file:39920 isolated_file:0 [ 302.308906][T10901] unevictable:768 dirty:84 writeback:0 [ 302.308906][T10901] slab_reclaimable:12101 slab_unreclaimable:141211 [ 302.308906][T10901] mapped:30349 shmem:1354 pagetables:1144 [ 302.308906][T10901] sec_pagetables:0 bounce:0 [ 302.308906][T10901] kernel_misc_reclaimable:0 [ 302.308906][T10901] free:1283529 free_pcp:12933 free_cma:0 [ 302.360312][T10911] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1252'. [ 302.375459][T10901] Node 0 active_anon:18108kB inactive_anon:0kB active_file:13640kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121396kB dirty:332kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13420kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.417798][T10901] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.473421][T10901] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.503220][T10901] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 302.510073][T10901] Node 0 DMA32 free:1229000kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18060kB inactive_anon:0kB active_file:13640kB inactive_file:157900kB unevictable:1536kB writepending:332kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:34184kB local_pcp:20812kB free_cma:0kB [ 302.546263][T10901] lowmem_reserve[]: 0 0 1 1 1 [ 302.553913][T10901] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 302.588846][T10901] lowmem_reserve[]: 0 0 0 0 0 [ 302.593864][T10901] Node 1 Normal free:3890128kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18464kB local_pcp:9248kB free_cma:0kB [ 302.636844][T10901] lowmem_reserve[]: 0 0 0 0 0 [ 302.652225][T10901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 302.667001][T10901] Node 0 DMA32: 2674*4kB (UM) 402*8kB (UME) 485*16kB (UM) 627*32kB (UME) 341*64kB (UME) 187*128kB (UME) 95*256kB (UM) 30*512kB (UM) 10*1024kB (UME) 9*2048kB (UME) 262*4096kB (UM) = 1229000kB [ 302.688842][T10901] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 302.702296][T10901] Node 1 Normal: 178*4kB (UME) 41*8kB (UME) 38*16kB (UME) 137*32kB (UME) 35*64kB (UME) 13*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3890128kB [ 302.757532][T10911] wg1 speed is unknown, defaulting to 1000 [ 302.817285][T10901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.826895][T10901] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.872276][T10901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.919526][T10901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.938755][T10901] 44680 total pagecache pages [ 302.972808][T10901] 0 pages in swap cache [ 303.005374][T10901] Free swap = 124996kB [ 303.006790][T10916] bond5: entered promiscuous mode [ 303.014891][T10916] bond5: entered allmulticast mode [ 303.021685][T10916] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.034885][T10901] Total swap = 124996kB [ 303.039419][T10901] 2097051 pages RAM [ 303.043364][T10901] 0 pages HighMem/MovableOnly [ 303.049832][T10901] 425669 pages reserved [ 303.054199][T10901] 0 pages cma reserved [ 303.462208][T10934] tipc: Enabled bearer , priority 0 [ 303.506098][T10937] syzkaller0: entered promiscuous mode [ 303.512186][T10937] syzkaller0: entered allmulticast mode [ 303.568217][T10932] tipc: Resetting bearer [ 303.586726][T10932] tipc: Disabling bearer [ 303.633056][T10942] syzkaller0: left promiscuous mode [ 303.640549][T10942] syzkaller0: left allmulticast mode [ 303.648240][T10941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.835003][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 303.856230][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 303.994075][T10952] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 304.072927][T10952] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.228623][T10954] bond6: (slave veth7): Enslaving as an active interface with a down link [ 304.268927][T10961] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 304.280512][ T7343] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.518421][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 304.717409][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 304.770884][T10983] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 304.955340][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1276'. [ 305.425604][T10977] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 305.440965][T10977] tipc: Resetting bearer [ 305.514835][ T7334] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.548880][ T7334] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.596378][ T7334] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.624432][ T7334] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.677568][ T7334] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.719843][ T7334] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.746499][ T7334] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.755884][ T7334] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.933297][T11033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1288'. [ 307.157077][T11046] tipc: Enabled bearer , priority 0 [ 307.166243][T11046] syzkaller0: entered promiscuous mode [ 307.173948][T11046] syzkaller0: entered allmulticast mode [ 307.223367][T11046] tipc: Resetting bearer [ 307.229341][T11049] netlink: 'syz.3.1292': attribute type 11 has an invalid length. [ 307.294598][T11047] syzkaller1: entered allmulticast mode [ 307.334732][T11044] tipc: Resetting bearer [ 307.415855][T11044] tipc: Disabling bearer [ 307.831693][T11072] pimreg: left allmulticast mode [ 308.134486][T11077] macsec2: entered promiscuous mode [ 308.153987][T11077] bridge0: entered promiscuous mode [ 308.166081][T11077] bridge0: port 1(macsec2) entered blocking state [ 308.182220][T11077] bridge0: port 1(macsec2) entered disabled state [ 308.193062][T11077] macsec2: entered allmulticast mode [ 308.203812][T11077] bridge0: entered allmulticast mode [ 308.218923][T11077] macsec2: left allmulticast mode [ 308.248273][T11077] bridge0: left allmulticast mode [ 308.279439][T11077] bridge0: left promiscuous mode [ 308.683904][T11107] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1304'. [ 308.842666][T11115] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1309'. [ 308.971707][T11122] delete_channel: no stack [ 308.983071][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 309.124564][T11132] pimreg: entered allmulticast mode [ 309.175492][T11135] netlink: zone id is out of range [ 309.558971][T11153] pimreg: entered allmulticast mode [ 309.564736][T11154] pimreg: left allmulticast mode [ 309.594046][T11149] wg1 speed is unknown, defaulting to 1000 [ 309.830292][T11163] tipc: Enabled bearer , priority 10 [ 309.856024][T11158] wg1 speed is unknown, defaulting to 1000 [ 309.866801][T11163] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 310.099012][T11163] bond0 (unregistering): Released all slaves [ 310.390310][T11172] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 310.417543][T11173] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 310.471666][T11173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.938178][T10993] tipc: Node number set to 4139338669 [ 311.052966][T11197] netlink: 'syz.3.1328': attribute type 4 has an invalid length. [ 311.091337][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1329'. [ 311.833711][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 312.122789][T11222] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 312.145601][T11222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.191715][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1336'. [ 312.887972][T11241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1341'. [ 313.050990][T11245] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 313.072750][T11245] netlink: 'syz.3.1343': attribute type 4 has an invalid length. [ 313.091726][T11245] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1343'. [ 313.138679][T11245] syz_tun: entered promiscuous mode [ 313.144792][T11247] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1344'. [ 313.145549][T11245] batadv_slave_0: entered promiscuous mode [ 313.172754][T11245] debugfs: 'hsr0' already exists in 'hsr' [ 313.184347][T11245] Cannot create hsr debugfs directory [ 313.196250][T11245] hsr0: entered allmulticast mode [ 313.205741][T11245] syz_tun: entered allmulticast mode [ 313.211547][T11245] batadv_slave_0: entered allmulticast mode [ 313.255128][T11248] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 313.275912][T11257] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 313.766587][T11286] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1353'. [ 313.843519][T11291] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 313.931632][T11291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.092631][T11304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 314.192835][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1361'. [ 314.301924][T11317] netlink: 'syz.0.1363': attribute type 7 has an invalid length. [ 314.324197][T11317] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1363'. [ 314.352146][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 314.362293][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 314.486126][T11330] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1368'. [ 314.630033][T11337] wg1 speed is unknown, defaulting to 1000 [ 315.593664][T11375] geneve1: entered promiscuous mode [ 315.599348][T11375] geneve1: entered allmulticast mode [ 315.610595][ T8472] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.665993][ T8472] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.693817][ T8472] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.776626][ T8472] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.304989][T11411] wg1 speed is unknown, defaulting to 1000 [ 316.409959][T11420] validate_nla: 1 callbacks suppressed [ 316.409982][T11420] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 316.547099][T11420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.622271][T11422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.652646][T11422] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 316.723414][T11422] bond3: (slave vcan1): Error -95 calling set_mac_address [ 316.866551][T11427] gretap1: entered promiscuous mode [ 316.966441][T11427] bond3: (slave gretap1): making interface the new active one [ 317.006030][T11427] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 317.032590][T11420] macvlan3: entered promiscuous mode [ 317.041511][T11420] macvlan3: entered allmulticast mode [ 317.050605][T11420] bond3: entered promiscuous mode [ 317.062394][T11420] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 317.078229][T11420] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 317.091656][T11420] bond3: left promiscuous mode [ 317.333808][T11451] __nla_validate_parse: 5 callbacks suppressed [ 317.333828][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 317.341669][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1390'. [ 317.360041][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 317.415760][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1390'. [ 317.439761][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 317.555408][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.663589][T11458] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1391'. [ 317.682530][T11455] netlink: 'syz.0.1391': attribute type 5 has an invalid length. [ 317.754099][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1391'. [ 318.302516][T11478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1395'. [ 318.541668][T11491] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1399'. [ 318.612135][T11496] netlink: 'syz.4.1400': attribute type 30 has an invalid length. [ 318.727040][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 318.807447][T11504] Bluetooth: MGMT ver 1.23 [ 318.870292][T11507] syzkaller0: entered promiscuous mode [ 318.879205][T11507] syzkaller0: entered allmulticast mode [ 318.923086][T11507] macvtap0: entered promiscuous mode [ 318.946556][T11507] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 318.978316][T11507] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 319.304347][ T7334] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 320.137483][T11574] openvswitch: netlink: IP tunnel dst address not specified [ 320.219740][T11571] can: request_module (can-proto-0) failed. [ 320.925579][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.936123][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.954075][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.978209][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.994889][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.052206][T11583] wg1 speed is unknown, defaulting to 1000 [ 322.682051][T11583] chnl_net:caif_netlink_parms(): no params data found [ 322.741597][T11631] netlink: 'syz.0.1433': attribute type 11 has an invalid length. [ 323.073965][ T5866] Bluetooth: hci5: command tx timeout [ 323.202977][T11583] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.228185][T11646] openvswitch: netlink: Flow key attr not present in new flow. [ 323.251342][T11646] __nla_validate_parse: 4 callbacks suppressed [ 323.251362][T11646] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1436'. [ 323.258238][T11583] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.301617][T11583] bridge_slave_0: entered allmulticast mode [ 323.351858][T11583] bridge_slave_0: entered promiscuous mode [ 323.394968][T11583] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.402958][T11583] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.425223][T11583] bridge_slave_1: entered allmulticast mode [ 323.439615][T11583] bridge_slave_1: entered promiscuous mode [ 323.560685][T11583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.604351][T11583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.672135][T11654] erspan0: entered promiscuous mode [ 323.743290][T11653] tipc: Enabled bearer , priority 0 [ 323.751877][T11653] syzkaller0: entered promiscuous mode [ 323.757557][T11653] syzkaller0: entered allmulticast mode [ 323.784546][T11653] tipc: Resetting bearer [ 323.816319][T11583] team0: Port device team_slave_0 added [ 323.836549][T11650] tipc: Resetting bearer [ 324.094751][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 324.125923][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 324.168180][T11650] tipc: Disabling bearer [ 324.214789][T11583] team0: Port device team_slave_1 added [ 324.352973][T11666] syzkaller1: entered allmulticast mode [ 324.388672][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 324.389262][T11583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.413946][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 324.424346][T11583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.517591][T11583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.535584][T11583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.564971][T11583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.610735][T11583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.623799][T11680] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 324.641205][ T7334] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.670178][ T7334] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.801377][T11687] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1445'. [ 324.801591][ T7334] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.945169][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 324.988864][T11583] hsr_slave_0: entered promiscuous mode [ 325.003513][T11583] hsr_slave_1: entered promiscuous mode [ 325.023672][T11583] debugfs: 'hsr0' already exists in 'hsr' [ 325.033207][T11583] Cannot create hsr debugfs directory [ 325.039333][ T7334] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.148309][ T5866] Bluetooth: hci5: command tx timeout [ 325.444875][T11703] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1450'. [ 325.664957][T11723] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.837025][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 326.001624][T11583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.026811][T11583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.050432][T11583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.059323][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 326.089842][T11583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.455451][T11746] tipc: Enabled bearer , priority 0 [ 326.467850][T11746] syzkaller0: entered promiscuous mode [ 326.477136][T11746] syzkaller0: entered allmulticast mode [ 326.578022][T11753] tipc: Resetting bearer [ 326.602117][T11583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.671513][T11745] tipc: Resetting bearer [ 326.716707][T11745] tipc: Disabling bearer [ 326.745641][T11757] sit0: mtu less than device minimum [ 326.765319][T11757] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 326.805636][T11583] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.849395][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.857660][ T8472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.923657][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.931285][ T8471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.227741][ T5867] Bluetooth: hci5: command tx timeout [ 327.516228][T11786] macvlan1: entered promiscuous mode [ 327.526508][T11786] macvlan1: left promiscuous mode [ 327.621715][T11583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.668011][T11792] netlink: 'syz.0.1469': attribute type 4 has an invalid length. [ 327.872514][T11795] veth9: entered promiscuous mode [ 328.417825][T11808] __nla_validate_parse: 4 callbacks suppressed [ 328.417846][T11808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1471'. [ 328.460798][T11810] syzkaller0: entered allmulticast mode [ 328.596285][T11583] veth0_vlan: entered promiscuous mode [ 328.689396][T11583] veth1_vlan: entered promiscuous mode [ 328.891766][T11819] pim6reg1: entered promiscuous mode [ 328.912900][T11819] pim6reg1: entered allmulticast mode [ 328.944865][T11583] veth0_macvtap: entered promiscuous mode [ 328.985674][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 329.013945][T11583] veth1_macvtap: entered promiscuous mode [ 329.132847][T11583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.164497][T11806] syzkaller0: left allmulticast mode [ 329.178593][T11583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.260335][ T7334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.279432][ T7334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.308538][ T5867] Bluetooth: hci5: command 0x0419 tx timeout [ 329.341950][ T7334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.362298][ T7334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.552739][ T8472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.577412][ T8472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.649642][T11830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1478'. [ 329.668523][ T8471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.689699][ T8471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.878272][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1480'. [ 329.893699][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1480'. [ 329.972421][T11842] geneve2: entered promiscuous mode [ 329.978497][T11842] geneve2: entered allmulticast mode [ 330.093702][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 330.118077][T11834] wg1 speed is unknown, defaulting to 1000 [ 330.161941][T11841] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 330.180539][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 330.226567][T11846] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 330.365643][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 330.405571][T11843] gtp0: entered promiscuous mode [ 330.423012][T11843] gtp0: entered allmulticast mode [ 330.497590][T11841] team0: Device dummy0 failed to register rx_handler [ 330.603862][T11863] bridge0: port 1(ipvlan2) entered blocking state [ 330.611845][T11863] bridge0: port 1(ipvlan2) entered disabled state [ 330.620711][T11863] ipvlan2: entered allmulticast mode [ 330.627833][T11863] bridge0: entered allmulticast mode [ 330.659412][T11863] ipvlan2: left allmulticast mode [ 330.664674][T11863] bridge0: left allmulticast mode [ 330.912940][T11868] netlink: 'syz.2.1485': attribute type 11 has an invalid length. [ 331.136621][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1488'. [ 331.197347][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1488'. [ 331.256964][T11880] bridge0: entered promiscuous mode [ 331.299851][T11880] ip6gretap0: entered promiscuous mode [ 331.388745][ T5867] Bluetooth: hci5: command 0x0419 tx timeout [ 331.436832][T11890] wg1 speed is unknown, defaulting to 1000 [ 331.999991][T11909] tipc: Started in network mode [ 332.012330][T11909] tipc: Node identity 76a4651e8317, cluster identity 4711 [ 332.030454][T11909] tipc: Enabled bearer , priority 0 [ 332.045741][T11909] syzkaller0: entered promiscuous mode [ 332.060601][T11909] syzkaller0: entered allmulticast mode [ 332.064478][T11911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1497'. [ 332.092114][T11909] tipc: Resetting bearer [ 332.139986][T11908] tipc: Resetting bearer [ 332.213860][T11908] tipc: Disabling bearer [ 332.401574][T11913] wg1 speed is unknown, defaulting to 1000 [ 332.561031][T11916] wg1 speed is unknown, defaulting to 1000 [ 332.700772][T11917] wg1 speed is unknown, defaulting to 1000 [ 333.969995][T11935] nbd: must specify a device to reconfigure [ 334.997642][T11972] __nla_validate_parse: 1 callbacks suppressed [ 334.997662][T11972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1510'. [ 335.257466][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1512'. [ 336.393131][T11992] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 336.452909][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 336.494338][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 336.718358][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1517'. [ 336.781532][T11997] macvlan1: entered promiscuous mode [ 336.833242][T11997] macvlan1: left promiscuous mode [ 337.642982][T12042] netlink: 'syz.4.1530': attribute type 7 has an invalid length. [ 337.661310][T12042] netlink: 'syz.4.1530': attribute type 8 has an invalid length. [ 337.671514][T12045] netlink: 'syz.2.1532': attribute type 4 has an invalid length. [ 337.680479][T12046] netlink: 'syz.2.1532': attribute type 4 has an invalid length. [ 338.205565][T12066] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 338.248929][T12066] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 338.305243][T12070] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 338.327676][T12070] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 338.362205][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 338.484637][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 338.619518][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 339.127115][T12107] netlink: 'syz.5.1552': attribute type 6 has an invalid length. [ 339.202730][T12110] wg1 speed is unknown, defaulting to 1000 [ 339.738554][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1557'. [ 339.751198][T12135] netlink: 'syz.5.1557': attribute type 1 has an invalid length. [ 339.761253][T12135] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1557'. [ 339.771478][T12135] netlink: 'syz.5.1557': attribute type 1 has an invalid length. [ 339.780431][T12135] netlink: 'syz.5.1557': attribute type 2 has an invalid length. [ 340.274196][T12161] __nla_validate_parse: 1 callbacks suppressed [ 340.274217][T12161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1566'. [ 340.316781][T12161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1566'. [ 340.379726][T12169] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1566'. [ 340.435340][T12169] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1566'. [ 340.566702][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1568'. [ 340.713321][T12183] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 340.781183][T12183] netlink: 'syz.2.1570': attribute type 10 has an invalid length. [ 340.982411][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 341.838490][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 341.870857][T12210] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.056155][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'. [ 342.500279][T12230] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1581'. [ 342.522887][T12230] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1581'. [ 343.004650][T12252] wg1 speed is unknown, defaulting to 1000 [ 343.796848][T12238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.812136][T12238] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 343.860311][T12238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.874170][T12238] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 343.895176][T12238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.910736][T12238] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 343.925592][T12238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.953454][T12238] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 344.026507][T12238] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 344.035797][T12238] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 344.086889][T12278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.316972][T12288] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 344.371312][T12288] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 344.383584][T12287] validate_nla: 3 callbacks suppressed [ 344.383604][T12287] netlink: 'syz.5.1601': attribute type 1 has an invalid length. [ 344.432698][T12287] sctp: [Deprecated]: syz.5.1601 (pid 12287) Use of int in max_burst socket option. [ 344.432698][T12287] Use struct sctp_assoc_value instead [ 344.537127][T12287] gretap1: entered allmulticast mode [ 344.628613][T12297] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 344.805256][T12307] IPv4: Oversized IP packet from 127.202.26.0 [ 344.882634][T12308] syz_tun (unregistering): left promiscuous mode [ 344.903695][T12311] tipc: Enabling of bearer rejected, media not registered [ 344.915383][T12312] tipc: Enabling of bearer rejected, media not registered [ 345.230121][T12329] tap0: tun_chr_ioctl cmd 1074025680 [ 345.406244][T12338] __nla_validate_parse: 7 callbacks suppressed [ 345.406265][T12338] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1616'. [ 346.244261][T12360] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1621'. [ 346.304788][T12362] netlink: 'syz.2.1623': attribute type 2 has an invalid length. [ 346.459630][T12364] netlink: 'syz.5.1618': attribute type 1 has an invalid length. [ 346.718129][T12384] netlink: 'syz.4.1628': attribute type 9 has an invalid length. [ 347.756440][T12402] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1631'. [ 348.139726][ T8471] tipc: Subscription rejected, illegal request [ 348.349174][T12433] netlink: 'syz.4.1641': attribute type 10 has an invalid length. [ 348.368446][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1641'. [ 348.394556][T12433] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 348.435951][T12433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.780104][T12448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.874037][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1648'. [ 348.903958][T12452] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1648'. [ 349.202284][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1650'. [ 349.257899][T12460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.341986][T12460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.681895][T12487] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1656'. [ 349.737717][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'. [ 349.771557][T12490] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 349.803428][T12490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.940746][T12485] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.940917][T12496] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1660'. [ 349.981392][T12485] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 350.659971][T12522] __nla_validate_parse: 3 callbacks suppressed [ 350.659991][T12522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1666'. [ 350.730246][T12522] batman_adv: batadv0: Adding interface: dummy0 [ 350.736750][T12522] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.769596][T12522] batman_adv: batadv0: Interface activated: dummy0 [ 350.826033][T12522] batadv0: mtu less than device minimum [ 350.848437][T12522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.860741][T12522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.872737][T12522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.958747][T12528] batman_adv: batadv0: Adding interface: ip6gretap1 [ 350.965667][T12528] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.016737][T12528] batman_adv: batadv0: Interface activated: ip6gretap1 [ 351.084395][T12537] netlink: 'syz.5.1670': attribute type 1 has an invalid length. [ 351.731988][T12558] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1676'. [ 351.753140][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'. [ 351.774547][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 351.798488][T12562] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1674'. [ 351.976033][T12566] wg1 speed is unknown, defaulting to 1000 [ 352.268496][T12572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'. [ 352.575903][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1685'. [ 352.589751][T12584] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1683'. [ 352.623798][T12583] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1684'. [ 352.672328][T12584] vti1: entered promiscuous mode [ 352.865448][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'. [ 352.959523][T12593] bridge6: entered promiscuous mode [ 352.976235][T12593] bridge6: entered allmulticast mode [ 352.985376][T12593] team0: Port device bridge6 added [ 354.012778][T12652] netlink: 'syz.5.1703': attribute type 1 has an invalid length. [ 354.052888][T12652] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 354.910091][T12683] netlink: 'syz.5.1711': attribute type 12 has an invalid length. [ 355.104613][T12695] netlink: 'syz.3.1710': attribute type 16 has an invalid length. [ 355.113027][T12695] netlink: 'syz.3.1710': attribute type 17 has an invalid length. [ 355.146848][T12695] net_ratelimit: 36 callbacks suppressed [ 355.146860][T12695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.604195][T12709] 8021q: VLANs not supported on ipvlan1 [ 355.673181][T12709] macsec3: entered promiscuous mode [ 355.696361][T12709] macsec3: entered allmulticast mode [ 356.411502][T12749] __nla_validate_parse: 13 callbacks suppressed [ 356.411522][T12749] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1729'. [ 356.452512][T12747] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1729'. [ 356.550193][T12756] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.596741][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 356.618316][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 356.641052][T12754] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 356.650652][T12759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1734'. [ 356.673503][T12754] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1733'. [ 356.748190][T12754] nbd: socks must be embedded in a SOCK_ITEM attr [ 356.758360][T12754] block nbd0: shutting down sockets [ 356.778729][T12770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1737'. [ 356.964341][T12781] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1740'. [ 357.167663][T12788] netlink: 'syz.0.1743': attribute type 14 has an invalid length. [ 357.485689][T12804] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 357.559441][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1749'. [ 358.116707][ T8477] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.136812][ T8477] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.173740][ T8477] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.208065][ T8477] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.223151][ T8477] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.232716][ T8477] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.304445][ T8477] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.314472][ T8477] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.326259][T12844] netlink: 'syz.0.1754': attribute type 12 has an invalid length. [ 358.410854][T12844] C: renamed from team_slave_0 [ 358.430296][T12844] netlink: 'syz.0.1754': attribute type 4 has an invalid length. [ 358.439554][T12844] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 358.561082][T12858] netlink: 'syz.5.1757': attribute type 1 has an invalid length. [ 358.754995][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1761'. [ 358.802048][T12862] tipc: Enabling of bearer rejected, already enabled [ 358.819945][T12862] syzkaller0: entered promiscuous mode [ 358.833555][T12862] syzkaller0: entered allmulticast mode [ 358.924302][T12871] tipc: Enabled bearer , priority 0 [ 358.956098][T12873] syzkaller0: entered promiscuous mode [ 358.977946][T12873] syzkaller0: entered allmulticast mode [ 359.096774][T12881] netlink: 'syz.5.1764': attribute type 10 has an invalid length. [ 359.134528][T12873] tipc: Resetting bearer [ 359.154179][T12883] netlink: 'syz.0.1767': attribute type 30 has an invalid length. [ 359.186231][T12881] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.195450][T12886] netlink: 'syz.0.1767': attribute type 30 has an invalid length. [ 359.225214][T12881] bond0: (slave team0): Enslaving as an active interface with an up link [ 359.433829][T12898] wg1 speed is unknown, defaulting to 1000 [ 359.516631][T12905] wg1 speed is unknown, defaulting to 1000 [ 359.936857][T12922] tipc: Enabling of bearer rejected, failed to enable media [ 360.548689][T12873] tipc: Resetting bearer [ 360.624963][T12873] tipc: Disabling bearer [ 360.662838][T12943] wg1 speed is unknown, defaulting to 1000 [ 360.928820][T12953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.936613][T12953] IPv6: NLM_F_CREATE should be set when creating new route [ 361.035720][T12953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.711928][T12977] !: renamed from dummy0 (while UP) [ 362.024467][T12986] tipc: New replicast peer: 255.255.255.255 [ 362.032456][T12986] tipc: Enabled bearer , priority 10 [ 362.574262][T13001] __nla_validate_parse: 3 callbacks suppressed [ 362.574282][T13001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1795'. [ 362.598518][T12994] wg1 speed is unknown, defaulting to 1000 [ 362.864060][T13010] netlink: 'syz.3.1797': attribute type 58 has an invalid length. [ 362.872275][T13010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1797'. [ 363.854126][T13040] wg1 speed is unknown, defaulting to 1000 [ 364.118106][T13056] netlink: 'syz.3.1809': attribute type 7 has an invalid length. [ 364.136249][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 364.152296][T13059] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 364.171658][T13059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 364.590291][T13079] syzkaller1: entered promiscuous mode [ 364.615361][T13079] syzkaller1: entered allmulticast mode [ 364.644176][T13086] netlink: 'syz.3.1818': attribute type 3 has an invalid length. [ 364.738221][T13084] netlink: 212924 bytes leftover after parsing attributes in process `syz.5.1817'. [ 364.929917][T13091] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1819'. [ 365.413981][T13103] tipc: Resetting bearer [ 365.443958][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1825'. [ 365.511272][T13107] tipc: Enabling of bearer rejected, already enabled [ 365.527281][ T7324] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.631207][ T7324] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.652296][ T7324] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.658276][T13118] netlink: 'syz.0.1826': attribute type 15 has an invalid length. [ 365.670759][ T7324] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.785148][T13122] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1826'. [ 366.222800][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 366.240302][T13137] bond0: entered promiscuous mode [ 366.277547][T13137] bond0: left promiscuous mode [ 366.283363][T13140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1832'. [ 366.578563][T13154] syzkaller1: entered promiscuous mode [ 366.584271][T13154] syzkaller1: entered allmulticast mode [ 366.723685][T13162] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 367.396581][T13190] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.801064][T13214] openvswitch: netlink: Flow actions attr not present in new flow. [ 368.613876][T13260] netlink: 'syz.4.1864': attribute type 10 has an invalid length. [ 368.623688][T13260] __nla_validate_parse: 7 callbacks suppressed [ 368.623706][T13260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1864'. [ 368.651706][T13260] netlink: 'syz.4.1864': attribute type 10 has an invalid length. [ 368.711096][T13260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1864'. [ 368.730644][T13267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1865'. [ 368.765886][T13267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1865'. [ 368.873453][T13269] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1867'. [ 369.070058][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 369.095102][T13287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.243161][T13296] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1872'. [ 369.395761][T13305] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1874'. [ 369.413806][T13301] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 369.421453][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1874'. [ 369.521179][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1876'. [ 369.741875][T13321] netlink: 'syz.5.1881': attribute type 4 has an invalid length. [ 369.866476][T13327] netlink: 'syz.3.1882': attribute type 16 has an invalid length. [ 369.875070][T13327] netlink: 'syz.3.1882': attribute type 3 has an invalid length. [ 370.031961][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.039882][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.496708][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.775780][ T8470] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.818193][ T8470] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.858845][ T8470] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.907842][ T8470] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.035129][T13335] wg1 speed is unknown, defaulting to 1000 [ 374.063667][T13372] __nla_validate_parse: 3 callbacks suppressed [ 374.063690][T13372] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1888'. [ 374.086462][T13372] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1888'. [ 374.474608][T13387] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 374.776272][T13415] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 375.027070][T13425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.051828][T13425] bond5: (slave bond6): making interface the new active one [ 375.065383][T13425] bond5: (slave bond6): Enslaving as an active interface with an up link [ 375.489905][T13456] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.1903'. [ 375.567078][T13443] wg1 speed is unknown, defaulting to 1000 [ 375.688790][T13459] wg1 speed is unknown, defaulting to 1000 [ 375.744575][T13462] tipc: New replicast peer: 255.255.255.255 [ 375.746394][T13466] IPVS: set_ctl: invalid protocol: 142 255.255.255.255:20004 [ 375.766574][T13462] tipc: Enabled bearer , priority 10 [ 376.044773][T13479] netlink: 'syz.4.1911': attribute type 10 has an invalid length. [ 376.058354][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 376.062645][T13479] team0: Device hsr_slave_0 failed to register rx_handler [ 376.444966][T13485] syzkaller0: entered promiscuous mode [ 376.455126][T13485] syzkaller0: entered allmulticast mode [ 376.497514][T13444] wg1 speed is unknown, defaulting to 1000 [ 378.993302][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.036122][T13504] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1919'. [ 379.072128][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1920'. [ 379.107790][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 379.123464][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 379.133681][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 379.284137][T13521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1923'. [ 381.036455][T13558] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1933'. [ 381.232893][T13562] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 381.266134][T13563] netlink: 'syz.5.1936': attribute type 1 has an invalid length. [ 381.328963][T13568] netlink: 'syz.5.1936': attribute type 1 has an invalid length. [ 381.593717][T13563] veth3: entered promiscuous mode [ 381.646617][T13571] wg1 speed is unknown, defaulting to 1000 [ 382.003854][T13591] vlan2: entered promiscuous mode [ 382.213857][T13608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1948'. [ 382.227025][T13608] tipc: Invalid UDP bearer configuration [ 382.227093][T13608] tipc: Enabling of bearer rejected, failed to enable media [ 382.473599][T13624] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 382.563713][T13628] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.887839][T13628] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.053015][T13628] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.143193][T13646] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1956'. [ 383.208043][T13637] syzkaller1: entered promiscuous mode [ 383.213786][T13637] syzkaller1: entered allmulticast mode [ 383.413814][T13628] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.489600][T13650] netlink: 'syz.0.1957': attribute type 1 has an invalid length. [ 383.589851][T13650] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.641289][T13653] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 383.784721][ T8472] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.843374][ T7324] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.880294][ T7324] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.904449][ T7324] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.986628][T13666] tipc: Enabling of bearer rejected, failed to enable media [ 384.055537][T13668] wg1 speed is unknown, defaulting to 1000 [ 384.597344][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1964'. [ 384.972550][T13688] netlink: 'syz.3.1967': attribute type 11 has an invalid length. [ 384.997213][T13688] netlink: 'syz.3.1967': attribute type 4 has an invalid length. [ 385.017288][T13688] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1967'. [ 385.061486][T13690] netlink: 'syz.3.1967': attribute type 4 has an invalid length. [ 385.116739][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 385.519397][T13699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1970'. [ 385.582813][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 385.863148][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1972'. [ 385.880636][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1972'. [ 385.960071][T13699] hsr_slave_1 (unregistering): left promiscuous mode [ 386.065617][T13710] veth0_virt_wifi: entered promiscuous mode [ 386.201874][T13717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.299147][T13720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1974'. [ 386.427276][T13722] tipc: Enabled bearer , priority 0 [ 386.435264][T13722] syzkaller0: entered promiscuous mode [ 386.441441][T13722] syzkaller0: entered allmulticast mode [ 386.547419][T13721] tipc: Resetting bearer [ 386.963370][T13721] tipc: Disabling bearer [ 387.212574][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 387.239720][T13746] bond0: (slave vlan2): Opening slave failed [ 387.622199][T13766] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1984'. [ 387.964016][T13771] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 387.973984][T13771] openvswitch: netlink: Message has 1 unknown bytes. [ 388.296658][T13786] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 388.363026][ T30] audit: type=1800 audit(1756726388.206:3): pid=13787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1990" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2098 res=0 errno=0 [ 389.363771][T13625] Set syz1 is full, maxelem 65536 reached [ 389.380901][T13818] vxlan1: left promiscuous mode [ 389.403767][T13818] team0: Port device vxlan1 removed [ 389.417347][T13818] bond2: (slave ip6gretap1): Removing an active aggregator [ 389.428635][T13818] bond2: (slave ip6gretap1): Releasing backup interface [ 389.611447][T13822] wg1 speed is unknown, defaulting to 1000 [ 389.613601][T13830] __nla_validate_parse: 4 callbacks suppressed [ 389.613617][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 389.678148][T13834] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2003'. [ 390.020758][T13845] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2006'. [ 390.082689][T13847] wg1 speed is unknown, defaulting to 1000 [ 390.206470][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 390.236267][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 390.277606][T13853] netlink: 'syz.0.2008': attribute type 12 has an invalid length. [ 390.347414][T13854] wg1 speed is unknown, defaulting to 1000 [ 390.653188][T13863] syzkaller1: entered promiscuous mode [ 390.665942][T13863] syzkaller1: entered allmulticast mode [ 392.263279][T13910] wg1 speed is unknown, defaulting to 1000 [ 392.692011][T13936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2022'. [ 392.718304][T13936] netlink: 'syz.4.2022': attribute type 13 has an invalid length. [ 393.516678][T13964] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 393.530640][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2029'. [ 394.662227][T14005] bridge: RTM_NEWNEIGH with invalid ether address [ 394.781553][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2041'. [ 395.123708][T14003] wg1 speed is unknown, defaulting to 1000 [ 395.132226][T14017] wg1 speed is unknown, defaulting to 1000 [ 395.689890][T14025] wg1 speed is unknown, defaulting to 1000 [ 395.897037][T14033] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2049'. [ 396.188003][T14042] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2051'. [ 397.190631][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 397.241172][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2057'. [ 397.726573][T14087] netlink: 'syz.3.2061': attribute type 10 has an invalid length. [ 397.787281][ C0] [ 397.789681][ C0] ================================ [ 397.794811][ C0] WARNING: inconsistent lock state [ 397.799964][ C0] syzkaller #0 Not tainted [ 397.804400][ C0] -------------------------------- [ 397.809537][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 397.816508][ C0] syz.5.2059/14088 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 397.822955][ C0] ffff8880223b94a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 397.834638][ C0] {SOFTIRQ-ON-W} state was registered at: [ 397.840517][ C0] lock_acquire+0x120/0x360 [ 397.845938][ C0] _raw_spin_lock+0x2e/0x40 [ 397.850588][ C0] tunnel_key_init+0xd10/0x14d0 [ 397.855666][ C0] tcf_action_init_1+0x460/0x6d0 [ 397.860801][ C0] tcf_action_init+0x2cf/0xab0 [ 397.865684][ C0] tc_ctl_action+0x430/0xbd0 [ 397.870483][ C0] rtnetlink_rcv_msg+0x779/0xb70 [ 397.875542][ C0] netlink_rcv_skb+0x208/0x470 [ 397.880500][ C0] netlink_unicast+0x82c/0x9e0 [ 397.885520][ C0] netlink_sendmsg+0x805/0xb30 [ 397.890989][ C0] __sock_sendmsg+0x21c/0x270 [ 397.895909][ C0] ____sys_sendmsg+0x505/0x830 [ 397.900800][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 397.905844][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 397.910915][ C0] do_syscall_64+0xfa/0x3b0 [ 397.915699][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.921783][ C0] irq event stamp: 7580 [ 397.925963][ C0] hardirqs last enabled at (7580): [] _raw_spin_unlock_irq+0x23/0x50 [ 397.936298][ C0] hardirqs last disabled at (7579): [] _raw_spin_lock_irq+0x7d/0xf0 [ 397.946032][ C0] softirqs last enabled at (5288): [] __irq_exit_rcu+0xca/0x1f0 [ 397.955486][ C0] softirqs last disabled at (7577): [] __irq_exit_rcu+0xca/0x1f0 [ 397.964940][ C0] [ 397.964940][ C0] other info that might help us debug this: [ 397.973007][ C0] Possible unsafe locking scenario: [ 397.973007][ C0] [ 397.980460][ C0] CPU0 [ 397.984191][ C0] ---- [ 397.987478][ C0] lock(&p->tcfa_lock); [ 397.991726][ C0] [ 397.995175][ C0] lock(&p->tcfa_lock); [ 397.999677][ C0] [ 397.999677][ C0] *** DEADLOCK *** [ 397.999677][ C0] [ 398.008109][ C0] 2 locks held by syz.5.2059/14088: [ 398.013373][ C0] #0: ffff888033fe62a0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x16f/0x380 [ 398.022965][ C0] #1: ffffc90000007be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 398.032583][ C0] [ 398.032583][ C0] stack backtrace: [ 398.038683][ C0] CPU: 0 UID: 0 PID: 14088 Comm: syz.5.2059 Not tainted syzkaller #0 PREEMPT(full) [ 398.038703][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.038712][ C0] Call Trace: [ 398.038722][ C0] [ 398.038729][ C0] dump_stack_lvl+0x189/0x250 [ 398.038753][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.038769][ C0] ? __pfx__printk+0x10/0x10 [ 398.038788][ C0] ? print_lock_name+0xde/0x100 [ 398.038808][ C0] print_usage_bug+0x297/0x2e0 [ 398.038822][ C0] valid_state+0xc3/0xf0 [ 398.038835][ C0] mark_lock_irq+0x36/0x390 [ 398.038848][ C0] ? __kernel_text_address+0xd/0x40 [ 398.038872][ C0] ? unwind_get_return_address+0x4d/0x90 [ 398.038890][ C0] mark_lock+0x11b/0x190 [ 398.038903][ C0] __lock_acquire+0x680/0xd20 [ 398.038925][ C0] ? est_timer+0xd4/0x9f0 [ 398.038944][ C0] lock_acquire+0x120/0x360 [ 398.038961][ C0] ? est_timer+0xd4/0x9f0 [ 398.038981][ C0] ? lockdep_unlock+0x89/0x120 [ 398.038999][ C0] _raw_spin_lock+0x2e/0x40 [ 398.039019][ C0] ? est_timer+0xd4/0x9f0 [ 398.039035][ C0] est_timer+0xd4/0x9f0 [ 398.039055][ C0] ? call_timer_fn+0xbe/0x5f0 [ 398.039075][ C0] ? call_timer_fn+0xbe/0x5f0 [ 398.039092][ C0] ? __pfx_est_timer+0x10/0x10 [ 398.039114][ C0] call_timer_fn+0x17e/0x5f0 [ 398.039132][ C0] ? __pfx_est_timer+0x10/0x10 [ 398.039149][ C0] ? call_timer_fn+0xbe/0x5f0 [ 398.039167][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 398.039188][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.039207][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.039220][ C0] ? __pfx_est_timer+0x10/0x10 [ 398.039238][ C0] __run_timer_base+0x61a/0x860 [ 398.039255][ C0] ? ktime_get+0x3e/0x1f0 [ 398.039273][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 398.039289][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 398.039310][ C0] run_timer_softirq+0xb7/0x180 [ 398.039328][ C0] handle_softirqs+0x283/0x870 [ 398.039342][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 398.039357][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 398.039372][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.039389][ C0] __irq_exit_rcu+0xca/0x1f0 [ 398.039402][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 398.039418][ C0] irq_exit_rcu+0x9/0x30 [ 398.039430][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 398.039451][ C0] [ 398.039456][ C0] [ 398.039461][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.039476][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 398.039498][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 fa 9c 20 f6 48 89 df e8 52 34 21 f6 e8 ad 86 4a f6 fb bf 01 00 00 00 b2 2e 13 f6 65 8b 05 6b f1 23 07 85 c0 74 07 5b e9 51 4c 00 00 [ 398.039510][ C0] RSP: 0018:ffffc9000ae77430 EFLAGS: 00000286 [ 398.039525][ C0] RAX: 718cbc7448236500 RBX: ffff888020b6d890 RCX: 718cbc7448236500 [ 398.039536][ C0] RDX: 0000000000000007 RSI: ffffffff8d9b95c1 RDI: 0000000000000001 [ 398.039546][ C0] RBP: ffffc9000ae77570 R08: ffffffff8fa39337 R09: 1ffffffff1f47266 [ 398.039556][ C0] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: ffffc9000ae774c0 [ 398.039566][ C0] R13: 00000003fffffffc R14: 0000000000000000 R15: ffff8880418ba3c0 [ 398.039583][ C0] shmem_add_to_page_cache+0x8ee/0xba0 [ 398.039603][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 398.039624][ C0] shmem_alloc_and_add_folio+0x846/0xf60 [ 398.039645][ C0] ? filemap_get_entry+0xad/0x2f0 [ 398.039657][ C0] ? filemap_get_entry+0xad/0x2f0 [ 398.039671][ C0] ? shmem_huge_global_enabled+0x174/0x3a0 [ 398.039687][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 398.039706][ C0] ? shmem_allowable_huge_orders+0x414/0x420 [ 398.039724][ C0] shmem_get_folio_gfp+0x59d/0x1660 [ 398.039746][ C0] shmem_fault+0x179/0x390 [ 398.039767][ C0] __do_fault+0x138/0x390 [ 398.039788][ C0] __handle_mm_fault+0x3611/0x5440 [ 398.039810][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 398.039831][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 398.039851][ C0] handle_mm_fault+0x40a/0x8e0 [ 398.039878][ C0] __get_user_pages+0x1699/0x2ce0 [ 398.039904][ C0] populate_vma_page_range+0x29f/0x3a0 [ 398.039922][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 398.039937][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 398.039958][ C0] ? down_read+0x1ad/0x2e0 [ 398.039972][ C0] __mm_populate+0x24c/0x380 [ 398.039989][ C0] ? __pfx___mm_populate+0x10/0x10 [ 398.040005][ C0] ? up_write+0x1c4/0x420 [ 398.040021][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 398.040038][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 398.040052][ C0] ? exc_page_fault+0x76/0xf0 [ 398.040067][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 398.040083][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 398.040099][ C0] do_syscall_64+0xfa/0x3b0 [ 398.040113][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.040126][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.040147][ C0] ? clear_bhb_loop+0x60/0xb0 [ 398.040162][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.040175][ C0] RIP: 0033:0x7f86acb8ebe9 [ 398.040189][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.040200][ C0] RSP: 002b:00007f86ad975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 398.040215][ C0] RAX: ffffffffffffffda RBX: 00007f86acdc6180 RCX: 00007f86acb8ebe9 [ 398.040225][ C0] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 398.040234][ C0] RBP: 00007f86acc11e19 R08: ffffffffffffffff R09: 0000000000000000 [ 398.040244][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 398.040253][ C0] R13: 00007f86acdc6218 R14: 00007f86acdc6180 R15: 00007ffc8905c528 [ 398.040275][ C0] [ 398.743414][T14085] wg1 speed is unknown, defaulting to 1000 [ 398.795976][T14093] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2059'.