last executing test programs: 4.949605465s ago: executing program 3 (id=4067): unshare(0x64000600) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="40226f070a000200aaaaaaaaaa0c0000680e"], 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44890) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xfffffffffffffffd, 0xec0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x1}, {0xe}, {0xfff1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) 4.288395971s ago: executing program 3 (id=4077): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}, @NLBL_UNLABEL_A_IFACE={0x14}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2efc, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x12, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4000) 3.683680186s ago: executing program 3 (id=4084): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f0000000340)=""/49, 0x31) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r1, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 3.661759754s ago: executing program 0 (id=4086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r6, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r6, 0x0, 0x41) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.499579147s ago: executing program 2 (id=4089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010400000000000000000100800308000240000000022c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000b4000000060a01040000006b965a00000000000100000008000b40000000008c000480340001800b000100657874686472000024000280080001400000000c0800030000220500020007000000540001800c0001006269747769736500440002800800034000000004080001400000001408000240000000121c0005801700010018069c0131b1daae261374e6fe20c389c72d7d000c000480080001006eee7e000900010073797a300000000024010000180a01080000000000000000000000016000038054000380140001006d61637365633000000000000000000014000100766c616e3000000000000000000000001400010064766d72703100000000000000000000140001000000000000000000000000000000000008000240000000020900020073797a32000000000900020073797a30000000000900010073797a310000000014000380080002400000000608000240000000140c00054000000000000000044c00038040000380140001006e72300000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f746f0008000240000000020c000540000000000000000308000380040003800900010073797a3100000000a80000000c0a03000000000000000000000000050900020073797a31000000000900020073797a31000000000900020073797a32000000000900010073797a30000000000900010073797a3000000000080004400000000f0900010073797a30000000000900020073797a32000000002c000380280000800900090073797a30000000001800078011000100666c6f775f6f66666c6f6164000000000900010073797a310000000048010000140a010800000000000000000a0000070900020073797a32000000000900020073797a32000000000900010073797a30000000000c00064000000000000000040900010073797a30000000000c0006400000000000000005e0000800533dd3c715faa18691837abf5ba1e8d27d0d48f6b9fed32c22d45985f259f11bba3eb67df884fae20882c6b0da31719232f341361c07d34674c24ea9e96794597e63e09442290eb565585440f690a714ac31a4d9a709648bb2f4efb90ed826890dedae246181eb39dc21bf4c98188340f70782702477de01da6bc5ec4515ee908b99dcdbbc5131026e9a7dc2aa91d8ff7b1ff612bfd0501191ba7606fa809a6f8dbe98784f5561aa0752b009931441b3cbc6c5f6324f553daf2ca9a5797eb607249022b549c6081820fada9c1692e08a6324307882a5ca7f6793881a0900010073797a3100000000140000001100010000000000000000000700000a"], 0x438}}, 0x0) close(0x3) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000050000d1cf6455efb031e7d31f000dfc3026e7d607b8000000070000000110000000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000030000000a00"/28], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x80000000000000a, 0x2, 0x9) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) close(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000191600010025bd7000fcdbdf250a1800fe23d758abe04d9af54282f77b618accc8ff6ffdb526b581a4ceb030163e21e422b8203f92f5ad4aa54d482cbb476fc1643d43a44904cbb7c5353b21071a704f2eb6c79ba40d34f45362", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) close(0x3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) close(0x3) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000040)={r10, 0x80000000, 0x7fffffff, 0x6, 0x1, 0x2, 0x8, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x400, 0xfff, 0xa, 0x0, 0x1}}, &(0x7f0000000100)=0xb0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000240), &(0x7f0000000300)=0x4) 2.32481772s ago: executing program 2 (id=4094): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1e, @multicast2}}, 0x5a4, 0xff}, &(0x7f0000000180)=0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7, 0x8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x5c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r10, 0x0) 2.252304553s ago: executing program 4 (id=4095): socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x103, 0xc, 0x4, 0x4, 0x0, @random="d95f6e1ff1f0"}, 0x10) r6 = socket(0x26, 0xa, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$alg(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)="12cb3345ae042bd5d052697833fcb8c38ed695322e7fc106055b1f460a370b80f97c57b5e36855f875c4244ba92d0a81de4192d4d6a8e584c68599c56119bb848b8c8dad71c910658505f3346046820e2b033801182028d55a3c9b7703df98f94c58d32da8524e480613ee2858965a7f34723b14343d47bc087f7147e011fc0da61f93be6170cb9523f929680bdd4140496c57c7732df03c4f3ade261ac152e48c4624e6a29e1225e7501a45602c6f22942060bdf0452119c8d7aab7b827d75490beb7ea3998ebad3998fb2375b836e09522085f64229644977565ea652c990bde8cbba4aeab49146f2b8c8ba0db015b", 0xf0}, {&(0x7f00000002c0)="19bebcedb2f5f0c419699ec3142e70e99541cf7b4d9181c5343085cc6fc9424cc69730e2f115ece8b3c9d11c6143ffde9120c0cad1ec0101a1f26b93a59f6259be4c274b427132f7a44399096a9586bcdc66e4290f22a8e8b299f080f13348aacb73ba0916a767ace19249e4577840b953f817df898d1ce0d550f4b59a62fb8b1f151ec624bfaca26901cd4ac1c886723b72ced0b7a9ba3d3b9da0a8f69f05c5948c3191b49a0ab956d2c778bdabef29be1b1b52367c6944d989803d9f5b2be63a56f9f8448ae128d80c6b25775f521a8977786c6b0bc56c2b451e61b650a7ab908df2eb7ab4c283542f16bc525ad9520954c0f6", 0xf4}, {&(0x7f00000003c0)="e27e5381b0d707e274d4f490ec27fbe1e2178dc6da1976ccd8ee14160dcba6a0bd1c2010784ec5", 0x27}, {&(0x7f0000000400)="1ac972846049600e558e99ee6a86cf053dd00cb610e542571b7beaaf3a", 0x1d}, {&(0x7f0000000440)="8211408fc46d09ab04789c2cf911672ab3e7b71d678af15c766b076bb3361e7d8345688eaab8ebe4a52ee193bd668d58d09f90da6911e0dfde4a0d732d0e72e7d3b91de4e4ac63ea0c5b75af16b9b06f876a173be9e3f84b970b4e28025a5a49e45752973d43809f54592434822db3365e9c9616b98d3f199c54d5a4c0e4f141de43f1ac7218e147b8227989f72f588e8ca542ff577809806e66eb5ae99a664fc6be3475ea7d0d4c3c422b07d6e3660d0159880e74dd2a8f32715605bfb1a0c63644fc45467c4efc40a6663d1e2cc9167306b6d47716264344fce86f3ad78ac833362fd6a251587543f865080d7c959bb50677ab1c5b6cd6c78b6f2f1172e53327d415a42b76cfa784b486c93bf6471ca8cc25afbb50f9a98705d34eefee2b26e7a099ad0d2ca35bfa3a8035dc9ccb5f4dfe92f90f70ed1b6a719dabd5092d2589b291a5c651c4a9b0fbab50720b9f93a79e8b09e6e54e56569f0114127078fd96d2ac886de0873ce5a075e4afbf36c12d0d66743f26f51990d54a587c2cf926f167b33e7e656fd16380ac4de47a38e958bdcd7ec952ed323c6ebcdc85834e6dad52c901abf9e20b4db827b3e05bd6d81d9776de2f28b8abece538cb0d9b78f23f920d22192d34fc56ab2f02f5e86fbce1897a79af8b55d87d7d46c26805661f106b4a40b5a0ee32ae697348c155600241a0a13b9c0e7c9e94a4aeb6afb80d228ea0812b6ea0b09cec83dec908637b3af41de0b2cc0ef52329348c8dacafcb3bac95f321919d688670621f4a1bc7dc3f3cf46b3f4eca48c46b728845e03ebae629c082f342707f42aa045f0731a50e6bf59569a18a08a9df259baae6f3df0921a5e82d4f77f09152cef2ccfa257a9b2be44eef14125e3dfea7ec0c291acd3cb906959c112d2a0a9b47726807bf0a85c9c681411c505e454e1c71f3d95b57610ca376a2b12b2c3df98db21ed39536f2d6d7c48eb3e4a44579179ce12a0d3aa4bb2f6f2eb322afc80c04111abbf9c0d2d68ed6a8c6b05947d1512b4fefe7e6294e00d336ed9190d30efbf7073df1c093f3c5526aa1b9bf205d999ac35de328a427c175158cb8a95bb9e0c0ac849a15c60f7b16aff509982fe20e43899d7ba92ab27ff063272e1a0a35ca8f72aab975c63e41636a6b37b7e1ac8359d15921a6900f766cca0e90a6408cbcd17b96c275da6feca06c9f4faf4646ce1934717a17d9363f0a3a94175aaf2d93ab64e5dd3afbb1eeca97e9a0709a1958a241bbe951a082cc7dfbfd41b6b937382722e9c6e62c8ab8998fab811b46750ce41d3e10ec2f0f7c5727086e1408f549c8c166e5fbeb09aa2f7f8997798394988fc631440e3489a8844cfb936ce02a1a8d8090e944fbd2c996e46ed917c958e24e6a97e8f2e7c33e4215272c202bab52fd7933691fd0820ccd51ff407fc3107cb7d38cc1402e41468e54169b9ccb6e16c14da3b9b900c1be375445b47054489f198bba20120705a18938c8223d94858d3d467e86ea660c3bfa6a13b284f388b21051daaf2095d7a98ba31f0b26ea9015f7a193ae81a9d1b017a7661d0d44d5316a872b4ecf9868106dccda40ff4b33caade33cd5f652cd541fbd06a30d7ed8621f381195a875a847e1eb288708f70a7b77ec5d83c590dd7738bd4ac88a7a25aac16c032880cc564b3a8cd21c005df1796cec4ee31f5725a5e5f9b21017f42d91f3aeb545ee1d90f1d87ff77929cc51866589ecabdf3a18d798995f5ad06b871627b69b5d26fd016865a71299e4b310ca4a5629a16ebbae457f5f6585716e471c46d7d48bcb2b73f8af7f7c2c7e7850c29b8b69c2b3160506d44238bae016e20bf7eb5bde5d743030edea76f57d7d5859bad5857bf2e996db4a4fe9216a0ee6b1dc2d2d65af3966df71e7fca48592ee7fb94e439a43145a2a142d5ddf2c83842ad95484bb52a86a47c6a45f1078c72595deef224014df147ebf62d57270e25976534b5ee6ffa8d1beb746ec20ad424868d4caf2865ce6b70bb14d23e068b47b644dd00d0313d4074941474df1091636f726572e7902f0b8f6b7dadb8162472b0badde6665bd56962fdf7a110cc04587d8f6d98bef41a00b5a89c11f68134224f3c820723e4c620796d396da151308a3ae39107d818ab1b69bf711292de059c0f5e8896716d17d37056c88cd798e67b70fdeacbcd076d4d6a3783917f6af1211df89cccf78f63cbf8a53d0d5a59a0a316f8c87d59fd9303dc7155bc48ebed55fa7c451bd7762b627d9f0717c094d1560e32a10974c353245343171287b67950fa653460f84c9855be97e2bc9faaa9b9945787d0d3ebc1467a29b0b58d065c0663e21980f34481a819db788851207f67097bcd2d1494c0be4cb28caf9701436f558baae7a131c349043afd15949cbf8ca7205e07f8eace5851ef0a8645a36de47a17f51a6fe126b0126c2921adbcd9512d9eeeab35db78aaab6ece51d1e8a99a7a711076e3365eae8ed46b24828601ebe9bdf25a438ce29d93f531d5e658f39b3651b3c39fe4de0fcf127ca2d298bd1d22de1366d866ef6221cff1f99e46dbcf9aabd93f2abed06c6ae226fb240c3019876697677afb20f145824b22aa6112221582627e5fc9ddb98a36e27f4a841cfa0aafdedf32b3211fba73855f7ee779432a7baff9b6278a82af5b4ae9ea6f3b858aa31bc09c39bce8b2f2bb7e5a9108ca69131d35b6bb3ec45548c1200d64dbd1a2113a613021edff5cceda0aaef21eda74dc4e9378082b3eb56b3246e7e0202b5afa7fd49be27775ea5700db186cd4f22a4c7899bd137172d4bc250b8dd215b732691a191bbdd26e9c18897048abd270c65244dd0b206894862fcd806cb60d3027c72048ecb1a1cf69a3a6993b0dddb820b6ced29b70cd5721b86a10f687bc630d9bc4ab63bef06d6b3cb034b8f71b6dc800b489c2add04260196102b5929f594ef844983334bf8604f7042d8c683e8f56197dcb4c411b9a6e7eeffc83eafb4d15b69a3a96fad53768fb49755d40101c488336404c4a96a17682f05cf86562ea3105377cf12374e4ca22ecba44db80597e1760134ff005a59de00015c80b441fc33190773359bf1b35ab051a0bfabad65de73d11d76b845b8e53d6aa9f70582d1d15d5b366cb3c8e81cc8db9fd61411a809f5b68112438261dcd039075b2167959a21d5c858e69fb9c9561b201d9e889a95bea0d6dad55ec4a1490eaa0c802ebec838f5971dbeea55712df5491a01562cbc2bed17aaffab5fa56c94b35ea8a74e88ebeb7cd69d92f463c3ebfc4546c367b02b6348c8a6f02d9945e6de1925838fcb6bbea654b487bb12e7b42eb6f3d19da6f7f37de91e34e6a701b86a39e54184d4863b1483edeaf9fa054d645778631aec98a3a1f64fa9449e59e1c1e0a6d42ea6bfa0eb72bbcb871687c9ea3d424fd961a44523bd18fdfc6e12e00b684f517c0157eeb0e70f14b37d912aa86da3d69a225afe03101133942282a5f9e18e4c5763cc66fd5087b3edf03b3559208b37298cd0f9bdae15ddbd9cca6682938e6cbcdac6fe7a1ce1cfb28d93b6e317e8c8f8c76e7c407b452bf346db57f16edbb9aaad3bd2a2f4b9ca2ab241f4fdccfa287b82b270761ad1a94108959c744c1db705d3ba75ab3e215d50d0b21d1a81aecb4b161287bdb3edcaddb7b47cc91ea0bae9f851bd1e26ef90b1b6314a719c4131e9b4183c71acdefdeab8ebed7f8f8af54d10aa85be980514ce201194694715674cf0c2aff3215960067f9b15b5df1ea83dd7364ede90fd265c10a1a570339782553aef5ccac876e1cd1d26b3221332d73f5dab27796eb5794d6db1eba78f5044b213de0bb2c1a1b5fca27c59695822743204c6046db06487c348bad87afbe353d58bc7d02ba6ba9f1b1df60abbaf4f2f477c04a00bf5fc6180eb676fb43a98264d32dbfbfe7a773badb28ef0379859e4fb11cee1b1dc6cf985a3977b179d1b41981d7e58485b3a71b0681deaeb024ecbfad9dde9dc29e3b9c509e43572895ec5c0fb8a3c88efc0823a210aba783be844656cebdadfa352a79434d3d59a67a63a4fa8992797f385b331fbc4db56f1cafff921a9b0592f97336f17ae350881e5b6b278fdc12fbe4365b93ab4c4f312ef64f038dc3e8691b44dc3c96b985afba38658683a7f1685812ac0a2f680bf96b6274dc0f895b07f5032f4b5d2556a16e5d07d3650281097a39b204e251b248cd0d419394ff38e9fac9ab002efe0b1e1bb3c60caa767fabd59a9261d2a7cb820d012f9952cb342e67241b5a3e6e047feff2891ecc2275d24f2f9d092cc73d7038c1427a5208be20e8e2bb83fdd375eda6ff406560fd1f2c210011b0849915da5ea73a464847ca8d00e2862eb9e760b77397757cad29b97f207a055907066c900f61a9f86fa045969be7310cdd7eed26004e10bd3e92c5525ce46ed6f8bc543762151e88a7a3c1b51beb06673efc1a7501a4582ac9120ca2bd8d83b05b322812538eb896ceda900511c94366c57cf45a2dd3b7a02c099f1745c9105784634b6fbb68d7eaa2558a6051632e0f1ed671c00c7a0db66fc69418e7d3beae0a351e4f40c32e028bb0fc016ab71bc31e38f6339f41dc5dbe94315e700b2194c17a4c0cf8af913971986f8f8e4b6b9c8c39baf50a2254ce9f1f77cb9c83f5fdc5609f47ad53e863c133b96139d3f66817e740228483e2806b0d34d83c48bcd35984690804ea1f9cd5a7d82574ad449d6e0c38d41f9c0ff6c35b022636f2a4558f65a265aa781f45b6bde909454878cbdff24a16126444c7b81f97ed1a56c259fbd0e862b45fff2dab49b09c21e54ea85eba3635fb7b96e67e3c39756c26e19835ddac4f61c141e60956e49ade49ee2203a25acdfebf9e614a87699c1d456b64126d00b2ee642a766dca03d441bf0c5d94de09b5d35053518d1bd4c2cb9482da4cd4359e700c1c184165698d9c2ec529815abd2caaabeabdee9ebce047c65ac71f6d6a1529de456a1196fd4c935c37c85e472a06355e3614e172f0c7923a459b04982316677f0e6447ea277cdebbcf43131c020d94a5375d76524d239afbe8e8c9da201d3fd617778f93f73f91d748ebd164a284bbdaf6ca134553bdb0071f1735399e35d53f3552b1f789794a424ce2c383d582583386db682c803838e241a5930d7282d764ee96d0664070dfc5eab03d61be9f6204c5502aba75e19c33a5d331649484dd35b1ef3e38c93a67e255ab8fa6951fe6e73dff1fc2d61504e3a2e53860325a2fa8b80e01801e05734e4238d2ff8310f0ff216919232c50c8b0860519e9156bdae1e90af54ed0e0bdc20bb1c667594732d826d53a4e18171b2fdf105bb96d10bb5342a9987e93cea98b3d204413c787f8d18e7163b0be3315a3b3cc2b99a6d57f0d48d87a7bd3523ac039646176682f8065256e3aec030f408d69c978316b52c0c2a7b30e6253b7eaa6cef721b00dcf6f0c23d60bc0f2773ac37c0a562d61ab245d14685282d4d1f92ba39b40f03e98683a0dc46229c315fd4040124362db82e63097581f219dca1c3f5a698ce32ff706c9f549a4154e8cb99ca934449669c37971a19b0802efea8ee0d103df6a48b420ed2c754a305ef02d1c47d501320c3f98062cf4ad08cc2b5d7dbf72e7727654ce6470601d997d285c45a83e19cb624770f02cccb2c9cf4e360758d4cf402f00e761d857372ec43d17af6a319f72b6bb0884ce303c2ee8f6610941e2c2b6876bc049c49d30f20ab11404ef4f8d44c6a5fc2357ec3b67850fe21201489a355f7a35c26ed5f44f4e9ef6bdaa8", 0x1000}], 0x5, &(0x7f00000014c0)=[@iv={0xd0, 0x117, 0x2, 0xb9, "c8d76d3a4799f3e15a6fb24355e060ebb708651cb429b7e457dde648bd5379db466356d091d85d3728bca417033a7095a6205db535a770c4eb6a8237406960766ae55be899691d1bc83632e556060281d9e1daa6c5528b5f5181433acf06fcd2e4174ed9b44d05402787aa8f71b25ae703bc4e05bb09ff1adf8164d6da01de3563fde7cc3a9a94279ff0b68e6b454732ee195213d41050daf1352705a055db9acfb40c66e1a5cfe3705d5afd86ad45c3650578728ab6b81dbe"}, @assoc={0x18, 0x117, 0x4, 0x35}, @assoc={0x18, 0x117, 0x4, 0x7b3}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "673edf31233edea03fe7a430510a7048847d62d5ef78dff564dc24f1065b7a51d8c711f6"}], 0x150, 0x80}, 0x4000000) sendto$inet6(r7, &(0x7f0000001680)="e47a06271c7c4fbbb94cf0d3602a48156196941651904f599fc26bb65b1f", 0x1e, 0x4000800, &(0x7f00000016c0)={0xa, 0x4e23, 0x10001, @loopback, 0x7}, 0x1c) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000001740)={0xfffffffffffffff7, 0x38, '\x00', 0x0, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000017c0)={0x3, &(0x7f0000001780)=[{0x1a, 0xf6, 0x80, 0xfffff497}, {0x8, 0x5, 0x47, 0x86a}, {0x5, 0xba, 0x1}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001800)={@multicast2, 0x1, 0x0, 0x80, 0x0, [{@multicast1}, {@multicast1}, {@remote}, {@dev}, {@private}, {@broadcast}, {@broadcast}, {@local}]}}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a00)={r9, 0x58, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001ac0)={'tunl0\x00', &(0x7f0000001a40)={'ip_vti0\x00', r10, 0x700, 0x700, 0x4, 0x9, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x3b, 0x0, [{0x0, 0xc, "350c5b9891a13d226615"}, {0x5, 0x3, "e5"}, {0x1, 0x5, "3d1923"}, {0x2, 0x2}, {0x2, 0x10, "baec1cb537cf5ba97cea491a8232"}, {0x1, 0xf, "d36002e2a6923c43aaae54ed66"}]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001b00)={r1}) sendfile(r2, r12, 0x0, 0x100000001) sendmsg$sock(r4, &(0x7f0000001d00)={&(0x7f0000001b40)=@phonet={0x23, 0x80, 0x6, 0x4}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="64a37ca3fb3863a305cf721fd3b0604ec2531b4e6c51c237641ff4d404c95d02aabdc208c8b32fdc9d301ae9b140be512ad95f44ee84a136c70872d7df227c8e9b8fb966c55f1788ddddeaa42774cec6bbcbe9eb252d99dbd8b1431a56078a449402fd422d8eb3ba70c090841cc7b07f1cec05dfaff457ce987a23649ac1", 0x7e}], 0x1, &(0x7f0000001c80)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x2000000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x78}, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000001d40)=0x57, 0x4) r13 = syz_genetlink_get_family_id$team(&(0x7f0000001dc0), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001e00)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f00000020c0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001e40)={0x240, r13, 0x10, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x88}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x194}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000002100)={0x0, 0x7}, &(0x7f0000002140)=0x8) r15 = accept4$tipc(r1, 0x0, &(0x7f0000002180), 0x80800) setsockopt$TIPC_IMPORTANCE(r15, 0x10f, 0x7f, &(0x7f00000021c0)=0x4, 0x4) 2.053098261s ago: executing program 4 (id=4097): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@null, @netrom, @netrom, @null, @default, @null]}, &(0x7f0000000240)=0x40, 0x80800) getsockopt$rose(r2, 0x104, 0x5, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000015}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0x2e}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.872632919s ago: executing program 3 (id=4098): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b700000000000000850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r3, &(0x7f0000000200)=""/96, 0x60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r5, &(0x7f0000000700)="f574c3", 0x3) splice(r5, &(0x7f0000000040), r4, 0x0, 0x6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x20, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {}, {0x13}}, [{0x8}, {0x8, 0xb, 0xd9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8ae}, {0x8, 0xb, 0xf4}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0xe}]}, 0x64}}, 0x0) 1.771816163s ago: executing program 1 (id=4099): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fdd0b3ef84d9213cb1f0441b9c42dbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000880), 0x4924924924927bd, 0x40084) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6d}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc7, &(0x7f00000001c0)=""/199, 0x0, 0x3c, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2}, 0x10, 0x0, r2}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f00007cb000/0x5000)=nil, 0x5000, 0x2000000, 0x3032, r3, 0x683b1000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f00000002c0)={0x24, {{0x29, 0x3, 0x2000000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x81}}}, 0x88) r5 = socket(0x8, 0x1, 0x6) recvmmsg(r5, 0x0, 0x0, 0x12000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) r7 = openat$cgroup(r6, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) mmap(&(0x7f0000492000/0x3000)=nil, 0x3000, 0x100000e, 0x40010, 0xffffffffffffffff, 0xdc18e000) socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r9, &(0x7f00000002c0), &(0x7f0000000340)=0x80, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0x9d, 0x0, &(0x7f0000000540)="f7edad000000f400000000000000f9cfbcb61c5c26b15026603573df129d2467378ba16eeecbae38a795b26fea46dc6d5259d97e86533e5797159010ab4fdbda512c36ee28795b38a5a26f1baf38839491e2d234e305ca74a687f60da6796f07aecf13f23f7c4825838e4eafa6f54d57acff9c4496ec10e204f6a521448736b49834cc6614714250f224231949ec6556daa8e2dc870fedde78608c8937", 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x20000001}, 0x50) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c15028048151480", @ANYRES32=r12], 0x1570}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) connect(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20, @broadcast}, 0x80) 1.74952881s ago: executing program 0 (id=4100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000c96bb5aff894ce49c8e8992aa58b1152000000000000000085008000e3b50000659dbb8c95000000"], &(0x7f0000000440)='GPL\x00', 0x4, 0x54, &(0x7f0000000480)=""/84, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x80047441, 0xf0ff1f00000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106b00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06"], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x9, 0x0, 0x7}, 0x10, 0x0, r0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 1.508844139s ago: executing program 3 (id=4101): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x30}}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, &(0x7f0000000040)) 1.506927911s ago: executing program 1 (id=4102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r0, &(0x7f00000027c0)=ANY=[@ANYBLOB="000086dd0000120000000000000064d6892b0f9a11"], 0xfd0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000540)) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x101, 0x81, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x66, 0x0, 0xf7, 0x29, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x7, 0xdd, [@multicast1]}, @cipso={0x86, 0x5b, 0x1, [{0x7, 0xa, "9d747eccef556d20"}, {0x6, 0x7, "6a08009b50"}, {0x5, 0x9, "bbdb187eba20ee"}, {0x5, 0xb, "3d224b4886a4bc6ad6"}, {0x5, 0x3, "b1"}, {0x6, 0x10, "d4761e4284f3895674a86d503398"}, {0x6, 0x4, "940e"}, {0x1, 0x9, "b3076104056a8d"}, {0x5, 0x9, "b9063862a00e82"}, {0x7, 0x7, "51b372d469"}]}, @timestamp_addr={0x44, 0x4c, 0x53, 0x1, 0x6, [{@local, 0xaa9a}, {@multicast1, 0x67}, {@broadcast, 0xab}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x5b06}, {@broadcast, 0xf3ef}, {@broadcast, 0xbc6}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}]}, @generic={0x89, 0x5, "83b7e5"}, @end]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x28040) 1.488595345s ago: executing program 0 (id=4103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="090000001c000000080000002500000042000000f92e42e2a0a65d1650062be98a2eb5613dd183b5ca7bd4062d9d4bd1d9de", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000280)=""/115}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000060000000e000008000000110100000009000000008547402478ea0cfea4e5d787dd0388de309424d1e2cab5c4753a7183cb8ea560154c47cef013ce38f0f4e2df12538b9c626b9b6b43f70e199468f207069338e4a66f16d65c72845dbbdc65b1243930dcd2ab54d3e8aa2fd562db1e4b6172e0a81959"], 0x0, 0x2e, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000080)}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x70bd2a}, 0x1c}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000006a0000022bbd7000fbdbdf2505000000000000000400090008000500", @ANYRES32=r5, @ANYBLOB="04000b00"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x24004840) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$inet(0x2, 0x6000000000000001, 0x0) getsockopt$bt_hci(r8, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x240408c5}, 0xc084) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) 1.133081697s ago: executing program 2 (id=4104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8097, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000002) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) (async) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080", 0x10}], 0x1}, 0x0) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='U', 0x1}], 0x1}}], 0x1, 0x2400c040) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x6, 0x0, 0x5000007ffffffc, 0x1, 0x9, 0x0, 0x3ff7}, {0x7fffffff, 0x6, 0x53e5, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0xa, @in=@empty, 0x1502, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0xfffffffc}, 0x1c) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) sendmsg$sock(r0, &(0x7f0000001740)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @multicast2}, 0x2, 0x4, 0x1, 0x3}}, 0x80, &(0x7f0000001640)=[{&(0x7f00000001c0)="b69dc5155e3de46c4dadf87912c82020683662585044ecf0898f3a066f9ef0ae0273b5d094bce4f4f069b1ea734af2af12e7e8e929f0f5cb81", 0x39}, {&(0x7f0000000200)="4d8ddff016e4b54ffc39df3f5b25a627a75e9c4d63e4fee4f4165f6f904071ef3bda2116c1e002415a8a5bab2ccf81bfa2d3bb8d948d51939f0503464f8b9acca6af543497a2c190ceec0ada8ce6c3cf4302029ab75302aa69a4675e86fe5566c0f2deb889bdbacfb1", 0x69}, {&(0x7f0000000380)="9aef8cf31b716af30517aa58c9efd7ea5f83cbdb7a6dec1ff62c7306473d73a5b99e8db0bb0dbf1f143e354646b3ade6efbc98d376b045e22d191f742eecd086a37f5b126ed2d306899fa27de314846e7f09eb1bbc264b02234ee01eb227676a36634f4cbdec90cfa9f6dbaa552130c3eb880e0065b381372fd82ca08694169aa34a258aa5225e75ec3dcd4d2612abac222a6461e3cf4152f24a9518d2d00c4f31b41084c47dc281cd00d72f81182ec83b75db4915ddf394dac3ace183d68b994f610fe77bd731ceddf3df783ac88be3e8d553cf2f11db0e1bcde41541776d05", 0xe0}, {&(0x7f0000000480)="7276a7aa894827327bb08e1383560f1a51486a032567b4db6b0a90f425db4fc1956a9975c66094a9c5f7f5f654233a1d3e49c08d3ef446dd4af56f1189ba91c1965b1c664a44b6a7d1dc8ffebb99ad160c291b758dc9fdbd88add5b0bacbc70bdf0b665270c2db06159b60c7579df012d5daf0aba1dc50e57eb2bbf8c48c53685a7ad55ba1d3eafd21fdf0444a075176a5e2f6da21b73ed8e8ac0ba7ab72da8e19fa36e18e99198cb0d21f00eea1d755738bc75ae6135f794761c29ede6182af898c3101d37df65829690288fbdd3d4d5f38ccb6781e9216366d66847b7534efee1135fd5bcb3d1bfc2570c7142989687e856b85", 0xf4}, {&(0x7f0000000580)="c473351ebd7b4c9abfc61921c1edf504b70d053643ef3bebec41005698c06dfe762eb490ce6fa9fc36c1b0e5b867096698d081690084664c3efd6f8caf37a762d6044f53a02324a5fabf11054e22cc46d97c4ff8b66014555e6846b050fded054775bee76a8ba25d7d590f2bb52ce0cba7272d153337b8202dccd2e91edb2e7daab886d04161462ae32e4645e3b0b887a9af6e", 0x93}, {&(0x7f0000000640)="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", 0x1000}], 0x6, &(0x7f00000016c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x48}, 0x0) (async) ioctl$sock_ifreq(r6, 0x8946, &(0x7f0000000040)={'vlan0\x00', @ifru_settings={0xfffffff9, 0x3, @cisco=&(0x7f0000000080)={0x20, 0x6}}}) (async) bind(r6, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x2, @private=0xa010101}}, 0x80) 982.295139ms ago: executing program 1 (id=4105): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x9, 0x10000, 0x4, 0x1, 0x0, 0x3, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x32, 0xffffffffffffffff, 0x2000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x6, 0x3, 0x7, 0x2}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x20000, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) pipe(&(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffff4159bd6d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r5}, &(0x7f0000000a40), &(0x7f0000000a80)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 977.66645ms ago: executing program 4 (id=4106): r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="04010000100053", @ANYRES64=0x0], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 693.194902ms ago: executing program 3 (id=4107): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000140)=""/106, 0x6a}], 0x2}, 0x1}], 0x1, 0x2, &(0x7f0000000240)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000280)={0x6, 'ip_vti0\x00', {0x1}, 0xdb97}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2000080}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xd, 0x2, 0x4e, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x11}, 0x8000, 0x8000, 0x0, 0x7}}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x82100020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {0x8, 0xe}, {0xffe0, 0xd}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680)=r6, 0x4) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x7fffffff, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', r5, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfb}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x7, 0x18, &(0x7f0000000880)=""/24, 0x41000, 0x30, '\x00', r5, @sk_reuseport=0x27, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x4, 0x3, 0xd, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[r10, r12]}, 0x94) sendmsg$alg(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="b3f9", 0x2}, {&(0x7f0000000b40)="adc007c3e848fae461af6109f263fd112cc07aa4976ad843f628cbc7fc01e9fc93020c43f94a16833f5b9654c92176cc0ef598a1f1301c0cff6c8e44b595af816fd215498c4fbdf7097ed472048473c2b900284fdaf149b45c718fd9d23ea0f74cd1fe48e726746355d31e27bbcbb4ce9331421ecbbfbbb912e6341df831cb8902786100d29df4f150011d19e1d0f636b808033b85ea8f06f3c126de78debeddf9b85b11a1f4b528bf60232b4990211bd311afa6fa3178a1f2e58fb78199ab762d50e6247030c91105df8a5d263e5617e5d0a0d43de491e69f6660711e582e6c1e", 0xe1}, {&(0x7f0000000c40)="62f3c3e53a03d48b161b528d77d337693e038e4c31b9e4ffe323299344f9f48a13db3a77aaab80c0", 0x28}, {&(0x7f0000000c80)="cc4c5d81891a2be06d29abbd8430381f0318643b6ae7067b060d34077330c7eff9061585b58c517cac14c99fa192a9a18eaa5623b09e0f8fca0aab4b788903770ba22879994e45438baefa9a4460ca565b3bb8408268c57ed3ed6cd327e7e85a2d5af876bd3d1277f50238ff836e13679ba01c8c0f3eb55e3f6acb0220378c24b877bdfcebcd8a96fc06cb2f0104aac6b86815d06ec1b2e34f2b46f6", 0x9c}, {&(0x7f0000000d40)="aff8efd235f1909cbe4fa6b608fefa346b732f8dc1e1b9765ef0e4ef24", 0x1d}, {&(0x7f0000000d80)="820b6ab578b87102fd9f74e5e186fc7161b3b6a570f82369be79e108def077036f92967e78cbd4db3e", 0x29}], 0x6, &(0x7f0000000e40)=[@iv={0xf8, 0x117, 0x2, 0xdf, "f520d8c8e334a2ddd86f9c0c17a87f9c80c00658902cbab914557bbfe17c99fe677f941dd56530b0a733724d9e1f10fcbd41fc3246404de6690ad05c3732044801ec51fb37b6c8c6a3625cfffe3c5c6f6d50f04f0e1476f1b36d72d00d5e44fc54e525cbaaeb61e14929a43a10048ca75ddb821bb65cd8ec400874fbb933cf28d0e4ee2f673b70075395b650998dc9a5e5e0769138bd7d405bc15eacf910b8b5e60d938b8d07893b8a82a07adb3d3485786d7fb89165aa600b6640c0ba1fc94c9c15fbc9ed1b1c1804001422c5ddc4caaf02ffa472ac8da0742f71d6190c1c"}, @assoc={0x18, 0x117, 0x4, 0x36e4}, @assoc={0x18, 0x117, 0x4, 0x405}, @iv={0x30, 0x117, 0x2, 0x19, "bbbae0f5e2b26fb13b07e756cf35e1694af18f1abf8903fe74"}, @op={0x18, 0x117, 0x3, 0x3}, @op={0x18}, @iv={0x58, 0x117, 0x2, 0x3f, "b59cea83265a5b4a3fa3d7557f6565bda9a314418ed2d8ad0f3d692a2a5f6c506ea340aa4e44d331c3491f9a8f642533a0f4cc55ef9416e3fe1f7f990094ea"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x296}, @op={0x18, 0x117, 0x3, 0x1}], 0x228, 0x4000885}, 0x88c4) r13 = socket$nl_crypto(0x10, 0x3, 0x15) sendto(r13, &(0x7f00000010c0)="99bb2df2afbb042756cf7e16319a141f9dfedbd3a937f813cd6fdede54ac93e107b1a6c96ff440ab582f8ff9024d22484bd8314aa31b3181eb43ffb49a3cd93944a813622b4381b783d6ec62fa18d093046d1dab102f8c29a2a7c6019af73215e2747f2ed03c80e320b67ed8aab47d8c86", 0x71, 0x20000000, &(0x7f0000001140)=@generic={0x11, "539b5361a4d0f7269ee7229a403cd03c153908350ad6b5cc0cd3bb6fdbb79e8641d8bcc0dde51b437e7fbeb9a4494aa33e3f72584759d67ecd3bf1fcabbe639a9f3f9f592516fd523ca7a7eaf99be9cce0762d3e07e97de4adc03403f06f0891f207c4933b26a507ade938a34ddb0776668469c622ba7de26b23e0ffa9bc"}, 0x80) getsockname$packet(r10, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001200)=0x14) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000001280)=@req={0x28, &(0x7f0000001240)={'syzkaller0\x00', @ifru_map={0x3ff, 0x78e, 0xf7fa, 0x6, 0x7, 0x5}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r11, 0x20, &(0x7f0000001440)={&(0x7f00000012c0)=""/156, 0x9c, 0x0, &(0x7f0000001380)=""/148, 0x94}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r11, 0x65, 0x3, &(0x7f00000015c0), 0x4) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000001600)={0x33, @multicast1, 0x4e20, 0x0, 'lblcr\x00', 0x2a, 0x3fc00000, 0x69}, 0x2c) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), r10) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x3c, r15, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000812) ioctl$F2FS_IOC_SEC_TRIM_FILE(r11, 0x4018f514, &(0x7f0000001780)={0x10, 0x820, 0x1}) 635.566966ms ago: executing program 2 (id=4108): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) (async) socket$netlink(0x10, 0x3, 0x14) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r8, 0x0) (async) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, r5, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116f1031baf63cddf6b906de8e64e96754059e65c39c5759b069d6e6d9589e1f2346878c00000000000000000000000000008000", 0x27}, 0x60) (async) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc={0x27, r5, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="47a490a9d46c4d413f2a899162511a75adbe028dbac5436a373da16fcb8960adf9e886373e88904e2a39f95a1e508216ce0ee465cfe185b984006146ab82980433783a1f00d8df39e613cba72120328829d1e0be4e0727bb0dc87497a7edc4f05c9fe725daa935b10bce7bcc3008eb49730f669444b5196a000aced4747cee8de63ccb56f3f5495f785c934b", 0x8c}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000200)="1c055492d1871fb82ecab0c8db94873fdc575c22849c775b9556ffd714e119feb04ef2ac754671b4f4a918dfa0d57ce99b2312f166e439c514936f4436f1c5237ff5f84a9fd8fbbd5fd5bb6ff1d98f717c678675d614bacdea0fda9df121049a0578d0ab9c0b99394e7cb25344d206214ec96e996b7586ef52709ed91779fda5da041bb8f30c5c84114825f61a494c1e668216347cf4d9ec6ed015fa399b7187a884b2cbb202e5", 0xa7}], 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x100}, 0x40099) 572.574101ms ago: executing program 0 (id=4109): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x2cbd}, {0x6, 0x0, 0x0, 0xdf57}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xf, 0xa}, {0xffe0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x101}], 0x1}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c220000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x1c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 495.719479ms ago: executing program 4 (id=4110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000140), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x3, 0x4}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES8=r2, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRESOCT=r1, @ANYBLOB="c7db0fd5a4d4fe4e356014c5c985900e67277edc2a0589fdf313f852b4093810af8c7b9f37bbedb4b16f461a47ab7683c68a7f6c91a55ea945c2f733ada44c30ec3deedb9f10ff05e644138d86c90f231ee99c2e1b593fdee39280905a6a34653dae4146c0009f4afa27dc13d6811f35c47ccc553a097b872faec6ddfd402dd69877bda51c45641c43a348b8f8c3d95f289a018cefc4f6297908cf78dc1116b19c71a2f2a446c84248c069a4"], &(0x7f0000000000)='GPL\x00', 0x0, 0xde, &(0x7f0000000340)=""/222, 0xb830a99318ad1197, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8f6b}, 0x94) 428.558077ms ago: executing program 0 (id=4111): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000180)={0x57f7, 0xfffffffffffffffb, 0xfff, 0x5, 0x5, 0x3, 0x2}, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x6, 0x5, 0x1, 0x9, 0xb1c8}, &(0x7f0000000300)={0x5, 0x1, 0x0, 0x9, 0x6, 0x3, 0x81, 0x3}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x10000]}, 0x8}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x58, 0x30, 0x871a15abc695fa3d, 0x70bd29, 0x0, {}, [{0x44, 0x1, [@m_ctinfo={0x40, 0x2, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', r4, 0x1, 0x8000, 0x400, 0x1, {{0x7, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x7, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, {[@ra={0x94, 0x4}, @end]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110040000000000630afcff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) 372.791164ms ago: executing program 4 (id=4112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000010000000000000000010dc"}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 313.271256ms ago: executing program 1 (id=4113): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={r2, 0x79e, 0x10, 0x76}, &(0x7f00000010c0)=0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x3, 0xfffff008}, {0x6}]}, 0x10) 309.562527ms ago: executing program 2 (id=4114): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000000000000000a11952a458ef413e01f871a68b89047397f22b133d57a17d839ecf232bd3f6d8afb14fa4613c8bf32ac5a658a332a2f1d655ba0c3adbb86f2a92d5d274395814d6827791d064c51b3643cbe861cb5eb0df638b6f3858d7a2df5332082bdf886576ed72a6de2dc357af10409c233"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000006c0)='pids.events\x00', 0x0, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f}}, 0x18}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$pppoe(0x18, 0x1, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x7, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 169.193748ms ago: executing program 1 (id=4115): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "964853e33fbfb73ce39ea9a615"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x40854) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x13, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x12}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x801, 0x0, 0x0, {0x8, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x74, 0x8, "0b826d9e3971364cd98a9cdb309505b11856284f1b94cbdbd62a140766ce356d4e8b38d98b8aeaf08d1fa3d03b68ff00fb47cd1758a3a3dff0cda45c88b61bac6cd8d32123d1b3154b8df30d7841280f1babc734a8fcd5f62b641e2827069893181d22c18967689208b3feae27d352dc"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x44014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003440)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x28f4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28d4, 0x3, 0x0, 0x1, [{0x140c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x13f0, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x13dc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DATA={0x1358, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xe7ae0742b3bc0467}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x83, 0x1, "dc969c2fdb996a28d5b27e2c8b39cedbacd5b78be2fb289509b15e6c1b9ed0598b3f64b226d97d8539fa849ec8aa01011da5cf9087a8736821a8b825299d8ef1ffc390586983e559867c1ca1d80031d05b3a30d04e285333f38572c8564b0dbed1710d379a48d1d3ae5f20b55e0b6894c8b9b00907f49e150d424a2f4d29c0"}, @NFTA_DATA_VALUE={0xa5, 0x1, "8aa0e57984c192f9a9b4276eb0c955d2df460708d73edf58ea0b5949eb63030e4678ef3c65b743dc365450978a4465470355e4c4b6de98726166b9a0d7fe6551e8eea5f2c13e4c48879076df9689a55578096f72e2c23672bcb5e291384ad1987df8e9ded934039bdc5771f913c402a18a314f3aae5a783e994b760178ea020f5886e4730a46bd174b2e10bb78970554f4fabef55fb3a3f1ff35b603487b2e83d6"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "ee2ab1d71017473668a69a795234e13a8c6b70b4553dbe62fc6bb703a18e10590b35a9b7b0951650cc7ff49433c0e4824ccd9f1c6bc68d9e6c0792c6cc131569ec1add704bc29ba6b93524b4e2e1dfab18991953ce2f8ab00020aee4397315f5e4e7ceadc92875e838e62aaa5faefa8b2b070479c01920ef0ab5bd5513fc6a978bc9673c370d77d6e2083d24b151676fa771e4f28319e9c2d117d5b2be2ac9c843b4990c"}, @NFTA_DATA_VALUE={0xd0, 0x1, "2987e3a56c182f319f1128e6684ad54a20ef4df1cef4f62e39f6b4a910460fc3a6509bad3d65fc10e83e872de242afba625a56405484fef2fc4e434cdccc815ca91b6ba976faf6c31ad985e649eb514e57ab6d8c684febfcd9ef1bca536f4095a410dd169611716d0647743ff3e0a1907c4cf87ec01a086718466be01fba8a917569610eaaaf2964c1e81b62bbf0cd52b9ee18d2888f834eeb45ecfb4d3611d5293b7ff13cb3f7de1aa101a42c1f8c13bca1d184b9dfdce8f554849f7db2033414345702ca6103a3b940bb01"}]}, @NFTA_IMMEDIATE_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, @NFTA_SET_ELEM_USERDATA={0x15, 0x6, 0x1, 0x0, "9914e45ac46a3a834f6e44535167bd2e9d"}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x35, 0x6, 0x1, 0x0, "e7da5f86dbff9c6fbf50bf6a60c19a64f658fb9566e88aa3bf634c068bf3baed9433183029ed4e76ef8abcd099cd860285"}, @NFTA_SET_ELEM_USERDATA={0xe8, 0x6, 0x1, 0x0, "2adda8b62ab948da95c6268d0ed6b2bf454b4d9d4b9143017a1dbb38b5c2675cd596ac5a69d5d1528f3dafa0c84aaf9759d393dc3b84b7688d1d21e68f13b6ab36ae35b4e0fe423368389b7d65a3c5f063aa3d22adc44689ede9b7bd5a210793679ba24ac7ade5a9a29ddd88683e3ab2aeaa71f98943767c39225d0f22d3387deef9c2ec071f6cf0de0273d967baf6579c36da657298b0ef557221d2ea70e555f6c4d3ee41900a4fd326eef21e29bc877484f178e61506d35e1d3e90d6f6d4dac231d458b2fbeb64e96f9c75a45c94002af228c0b0acc1bc43a13db9dd1c53216eb14c0d"}]}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "849a837e258b713ca63ee28bc39db6569d62"}, @NFTA_SET_ELEM_USERDATA={0x34, 0x6, 0x1, 0x0, "421a8ce04f9702440797e4f02a6aac287c264273858c96cdc8ad6394092cb1fe8c0c932499c46d17853a579575cc90c1"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xa8, 0x6, 0x1, 0x0, "c837d1ed7a62465c65814f69a315c9d6b6852b62c07cf43d4eea5da5cc4ca092a64d42f88d21fdeb145ceb68960a54e205c970a364ae3267537d4b3fa66e7a302353648b0b58e65db0651eccd4328efe9394ce6f68a68536bfac06077b6b166f214b8478f82e93cfc488f3992993c1575d02fac103b12f7d3146ac5ef4f54d1bce73437373182c155ebc5a04357100e64dccf7e4999e2405048d5259f69de1a787dd301d"}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x88, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1184, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6c, 0x1, "d47262afebedf0cb1b5b35ccdd890442ac9c5fe03998bb6bf85a0866efd75f44f07c95d1284ee9973949fdf75e0805babdd5e70d788cbffbe4ef90d103543f38cd85902b36b7f3bcc0c5282d3e7711b112651f1942acaf23f6c936c67b27c1cae7582d017041879e"}, @NFTA_DATA_VALUE={0x9f, 0x1, "b2716e283b87ddc899cceaf0d6ab497110916141344195893ac6436b076995c672f50a76fb589fa1096ba702b0f9f7cc54c4d6f80881fcb0d6e1a473af2d8364bcc7457c71622b2360cbdd1f112b3cf65e3b27dce66b598f8faace715055aff418d5e7dac8a96df3771b933efc55d7da8a48993be1d8b107958543304cd31313ed86c93554ef88a5f7c0d0b46944e09ef4283788b29b4173d4372a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xb4, 0x8, 0xa, 0x507, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x77, 0x7, 0x1, 0x0, "9e0b059919c3d11af1dfe0c677e0ee756185f5c3aad8dc13a27826fd66a1af1e9823c6fe2d79a3f8c9761aa280014dfa831e3d32d4bad122de49aefbc7bc1ca3407e41af7c53c9c581287ee1b8c23dd022f1adeb17c6c930293ff1721f3e717a6c628f3df44907c16a871cc62a807c7e86e02a"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x2a10}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003500), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x50, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb051}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x0) readv(r1, &(0x7f0000004880)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/15, 0xf}, {&(0x7f0000004680)=""/212, 0xd4}, {&(0x7f0000004780)=""/251, 0xfb}], 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f00000048c0)={0x2, 'veth1_macvtap\x00', {0x3}, 0x1}) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000049c0)={&(0x7f0000004900), 0xc, &(0x7f0000004980)={&(0x7f0000004940)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000004a00)={0x0, 0x0, 0x5, r4, 0x3}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004b40)={'gretap0\x00', &(0x7f0000004a80)={'syztnl2\x00', r6, 0x700, 0x7800, 0x5, 0x4, {{0x23, 0x4, 0x0, 0x9, 0x8c, 0x65, 0x0, 0xfc, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x82, 0xb, "89bf6e3fa9e3371922"}, @ssrr={0x89, 0x27, 0xb, [@private=0xa010102, @broadcast, @local, @loopback, @loopback, @multicast2, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x19, 0x3, 0x8, [{@remote, 0x6}, {@local, 0x100}, {@local, 0x8df5}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010100, 0xe}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x6}]}, @lsrr={0x83, 0xb, 0x2, [@rand_addr=0x64010102, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000004d00)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004b80)={0x10c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000004d80), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000004e40)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x1c, r11, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000004e80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000005080)={{r8}, r12, 0x2, @unused=[0xfffffffffffffde2, 0x7, 0x7, 0x393], @subvolid=0x1}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000006140)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006100)={&(0x7f00000060c0)={0x34, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2800c080}, 0x9386f69d0847ff85) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000006180)={0x78, 0x6, 0x1, 0xe6f, 0x6}) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f00000061c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r13, &(0x7f0000006200)='cgroup.procs\x00', 0x2, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000006240), &(0x7f0000006280)=0x4) 92.688176ms ago: executing program 0 (id=4116): unshare(0x24020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) unshare(0x24020400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)) (async) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) (async) 91.586178ms ago: executing program 2 (id=4117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), 0x0}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@private, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x3f9, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x57, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x2, 0x9, 0x4, 0x4, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0xa, 0x9, &(0x7f0000000240)=""/9, 0x40f00, 0x14, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r7, r8], &(0x7f00000003c0)=[{0x5, 0x5, 0x0, 0xc}, {0x2, 0x3, 0xb, 0x7}, {0x1, 0x1, 0xf, 0x5}, {0x1, 0x5, 0xf}], 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x70}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x74, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffe08, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44044) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@newchain={0x60, 0x64, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xffff, 0x8}, {0x6, 0xe}, {0x4, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xfff3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40) 31.325351ms ago: executing program 1 (id=4118): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='mm_vmscan_kswapd_sleep\x00', r0, 0x0, 0x5}, 0x18) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x8, 0xfe, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xa9858983f96c8051) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000000008002907800000000e000030000009078006400d2ccb88ea49382"], 0x0) (async) socket(0x2, 0x80805, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) close(0x3) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x63}]}, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000170a0108000000000000000002000000090002007379f51484a000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000540)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="ce855c8def82edf41850b44c2c36451d125c1e53e6ef46", 0x17}, {&(0x7f0000000280)="a64bc930b6158d92349ed1730e7d4eae8e6b7722e2862d0e38e7c1a3260d1328f090d021d3701bfb935ecc3cedd97b04e21fb2e8e9df72d5a2e91d0ff1b437e0fae3cb043bbc485eea188fb7ecfe707dacf8b87ade49339e7532b11dc372ccd156e3bd7ca9c78476", 0x68}, {&(0x7f0000000600)="9c52cee30a10cdcb2c2d9997dc6651eea5a9ca3d4d8fefafc183fb5ed3b1afa7e0113485b70121ede4dafbce321d01b88123cde38208796b0010c64c18a501f84d774554b5b5a38b2273211f7b1ef1cb2d4599f6094d481e72f9ab6d1ccdc573a123b87c03c514bd4d32bb7babc13cf8ad45e19851bd52af5ae778d44d3dad9e68e079c193256f0967f24c34af7d48fac2af56355d97ad99b22730cb42d91a2876b802661e757cde5ead6511844667e807e809564f6ae017", 0xb8}], 0x3, &(0x7f0000000700)=[@ip_retopts={{0x48, 0x0, 0x7, {[@generic={0x94, 0xd, "10ab677398215803bbea6e"}, @lsrr={0x83, 0x17, 0x5d, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote]}, @end, @timestamp={0x44, 0x10, 0x73, 0x0, 0xf, [0x580, 0x8, 0x8e75]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xce, [@loopback, @empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x90}}], 0x2, 0x4c0c4) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000200)=0x80000001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 0s ago: executing program 4 (id=4119): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) kernel console output (not intermixed with test programs): 0 [ 391.991924][T17318] __x64_sys_sendmsg+0x19b/0x260 [ 391.991951][T17318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.991987][T17318] ? rcu_is_watching+0x15/0xb0 [ 391.992023][T17318] ? do_syscall_64+0xbe/0x3b0 [ 391.992056][T17318] do_syscall_64+0xfa/0x3b0 [ 391.992081][T17318] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.992111][T17318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.992130][T17318] ? clear_bhb_loop+0x60/0xb0 [ 391.992155][T17318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.992174][T17318] RIP: 0033:0x7f45c118eec9 [ 391.992192][T17318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.992210][T17318] RSP: 002b:00007f45c1f5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.992231][T17318] RAX: ffffffffffffffda RBX: 00007f45c13e6090 RCX: 00007f45c118eec9 [ 391.992246][T17318] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000027 [ 391.992258][T17318] RBP: 00007f45c1211f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.992271][T17318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.992283][T17318] R13: 00007f45c13e6128 R14: 00007f45c13e6090 R15: 00007ffd2892ca18 [ 391.992317][T17318] [ 391.992415][T17318] Mem-Info: [ 392.496995][T17318] active_anon:5722 inactive_anon:0 isolated_anon:0 [ 392.496995][T17318] active_file:3140 inactive_file:40001 isolated_file:0 [ 392.496995][T17318] unevictable:768 dirty:42 writeback:0 [ 392.496995][T17318] slab_reclaimable:12726 slab_unreclaimable:138665 [ 392.496995][T17318] mapped:29014 shmem:1357 pagetables:938 [ 392.496995][T17318] sec_pagetables:0 bounce:0 [ 392.496995][T17318] kernel_misc_reclaimable:0 [ 392.496995][T17318] free:1283216 free_pcp:19487 free_cma:0 [ 392.543635][T17318] Node 0 active_anon:22888kB inactive_anon:0kB active_file:12560kB inactive_file:159804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116056kB dirty:168kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14008kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.598052][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.610366][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.626244][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.636910][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.646813][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.658795][T17318] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.695571][T17318] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.731979][T17318] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 392.762773][T17338] lo speed is unknown, defaulting to 1000 [ 392.773039][T17318] Node 0 DMA32 free:1223732kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23048kB inactive_anon:0kB active_file:12560kB inactive_file:159480kB unevictable:1536kB writepending:168kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:60020kB local_pcp:37856kB free_cma:0kB [ 392.812179][T17318] lowmem_reserve[]: 0 0 0 0 0 [ 392.816947][T17318] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.985822][T17318] lowmem_reserve[]: 0 0 0 0 0 [ 392.991018][T17318] Node 1 Normal free:3893772kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17828kB local_pcp:9308kB free_cma:0kB [ 393.038097][T17361] dvmrp1: entered allmulticast mode [ 393.049401][T17318] lowmem_reserve[]: 0 0 0 0 0 [ 393.054178][T17318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 393.101206][T17318] Node 0 DMA32: 79*4kB (ME) 383*8kB (UME) 263*16kB (UME) 219*32kB (UME) 95*64kB (ME) 39*128kB (ME) 66*256kB (UM) 39*512kB (UME) 20*1024kB (UM) 7*2048kB (UM) 274*4096kB (UM) = 1219652kB [ 393.132161][T17368] netlink: 'syz.4.2869': attribute type 9 has an invalid length. [ 393.170291][T17318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 393.283018][T17318] Node 1 Normal: 169*4kB (UE) 45*8kB (UME) 42*16kB (UME) 103*32kB (UME) 32*64kB (UME) 5*128kB (UME) 4*256kB (UME) 4*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 947*4096kB (M) = 3893772kB [ 393.308628][T17318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.370746][T17318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.459484][T17318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.470077][T17318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.505972][T17318] 45370 total pagecache pages [ 393.513490][T17318] 0 pages in swap cache [ 393.518053][T17318] Free swap = 124996kB [ 393.522382][T17318] Total swap = 124996kB [ 393.535063][T17318] 2097051 pages RAM [ 393.538915][T17338] lo speed is unknown, defaulting to 1000 [ 393.544778][T17318] 0 pages HighMem/MovableOnly [ 393.550021][T17318] 423781 pages reserved [ 393.554192][T17318] 0 pages cma reserved [ 393.597722][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 393.617267][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 393.756438][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 393.893987][T17391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2875'. [ 394.116018][T17398] lo speed is unknown, defaulting to 1000 [ 394.221424][T17398] lo speed is unknown, defaulting to 1000 [ 394.491536][T17415] netlink: 550 bytes leftover after parsing attributes in process `syz.1.2878'. [ 394.548394][T17421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2881'. [ 394.733628][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.759970][ T5852] Bluetooth: hci5: command tx timeout [ 394.987019][T17338] chnl_net:caif_netlink_parms(): no params data found [ 395.030143][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.119631][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.145932][T17435] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 395.231293][T17435] vlan0: entered allmulticast mode [ 395.299475][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.673567][T17338] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.711297][T17338] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.732132][T17338] bridge_slave_0: entered allmulticast mode [ 395.742950][T17338] bridge_slave_0: entered promiscuous mode [ 395.779537][T17338] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.795987][T17338] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.804973][T17338] bridge_slave_1: entered allmulticast mode [ 395.812968][T17338] bridge_slave_1: entered promiscuous mode [ 395.839809][ T1164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 395.849626][T17461] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 395.851157][T17459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2889'. [ 395.942097][T17338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.952196][ T1164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 395.970853][T17338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.012381][ T1164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 396.084344][T17338] team0: Port device team_slave_0 added [ 396.095907][ T1164] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 396.115828][T17338] team0: Port device team_slave_1 added [ 396.133029][T17464] lo speed is unknown, defaulting to 1000 [ 396.243853][ T49] ip6gretap0 (unregistering): left promiscuous mode [ 396.497937][ T49] dvmrp8 (unregistering): left allmulticast mode [ 396.562078][ T49] bond4 (unregistering): (slave geneve2): Releasing active interface [ 396.594828][ T49] team0: Port device geneve0 removed [ 396.651783][T17476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2894'. [ 396.848470][ T5852] Bluetooth: hci5: command tx timeout [ 396.866071][ T49] bond3 (unregistering): (slave macvlan2): Removing an active aggregator [ 396.875986][ T49] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 396.895171][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.905304][ T49] bond_slave_0: left promiscuous mode [ 396.911715][T17479] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2895'. [ 396.930366][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.940390][ T49] bond_slave_1: left promiscuous mode [ 396.947008][ T49] bond0 (unregistering): Released all slaves [ 396.966951][ T49] bond1 (unregistering): Released all slaves [ 397.199243][ T49] bond2 (unregistering): Released all slaves [ 397.302613][ T49] bond3 (unregistering): Released all slaves [ 397.403887][ T49] bond4 (unregistering): Released all slaves [ 397.505083][ T49] bond5 (unregistering): Released all slaves [ 397.602562][ T49] bond6 (unregistering): Released all slaves [ 397.615502][ T49] bond7 (unregistering): Released all slaves [ 397.628710][ T49] bond8 (unregistering): Released all slaves [ 397.734650][ T49] bond9 (unregistering): Released all slaves [ 397.747535][T17469] syzkaller1: entered promiscuous mode [ 397.753127][T17469] syzkaller1: entered allmulticast mode [ 397.772120][T17338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.779674][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.808662][T17338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.919820][T17464] lo speed is unknown, defaulting to 1000 [ 397.920834][T17338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.948457][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.989030][T17338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.030209][T17492] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2897'. [ 398.033966][T17471] lo speed is unknown, defaulting to 1000 [ 398.205231][T17338] hsr_slave_0: entered promiscuous mode [ 398.219284][T17338] hsr_slave_1: entered promiscuous mode [ 398.225954][T17338] debugfs: 'hsr0' already exists in 'hsr' [ 398.231982][T17338] Cannot create hsr debugfs directory [ 398.238787][T17498] netlink: 'syz.4.2900': attribute type 12 has an invalid length. [ 398.267070][T17496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.349729][T17499] netlink: 'syz.4.2900': attribute type 1 has an invalid length. [ 398.362118][T17499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.391142][T17471] lo speed is unknown, defaulting to 1000 [ 398.704159][T17338] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 398.772187][T17509] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2904'. [ 398.809439][T17338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 398.928415][ T5852] Bluetooth: hci5: command tx timeout [ 398.983389][T17338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 399.120880][T17338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 399.190574][T17522] lo speed is unknown, defaulting to 1000 [ 399.203184][T17522] lo speed is unknown, defaulting to 1000 [ 399.341677][T17529] bridge0: entered promiscuous mode [ 399.456896][T17338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 399.503016][T17338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 399.531633][T17338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 399.579840][T17338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 399.609736][ T49] tipc: Disabling bearer [ 399.616500][ T49] tipc: Left network mode [ 399.669598][T17547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2914'. [ 400.073452][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'. [ 400.272933][T17338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.374595][T17338] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.452039][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.459539][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.479425][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.486576][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.705349][T17338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.728714][T17338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.840050][T17576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2920'. [ 400.864240][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2920'. [ 400.997733][ T5852] Bluetooth: hci5: command tx timeout [ 401.064894][T17573] lo speed is unknown, defaulting to 1000 [ 401.104477][T17581] netlink: 'syz.1.2921': attribute type 1 has an invalid length. [ 401.124053][T17573] lo speed is unknown, defaulting to 1000 [ 401.294282][T17583] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 401.326420][T17583] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 401.457663][T17338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.476579][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 401.571354][T17593] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2923'. [ 401.734333][T17595] lo speed is unknown, defaulting to 1000 [ 401.755365][T17595] lo speed is unknown, defaulting to 1000 [ 401.819430][T17338] veth0_vlan: entered promiscuous mode [ 401.874404][T17338] veth1_vlan: entered promiscuous mode [ 402.037908][T17338] veth0_macvtap: entered promiscuous mode [ 402.131295][T17338] veth1_macvtap: entered promiscuous mode [ 402.155617][T17338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.189768][T17338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.245887][ T2973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.263042][ T2973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.291110][T17612] netlink: 'syz.4.2928': attribute type 3 has an invalid length. [ 402.299070][ T2973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.319084][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2928'. [ 402.327176][ T2973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.688244][ T6348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.696181][ T6348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.884952][ T49] batadv_slave_0: left promiscuous mode [ 402.895752][ T49] hsr_slave_0: left promiscuous mode [ 402.901939][ T49] hsr_slave_1: left promiscuous mode [ 402.943274][ T49] pimreg (unregistering): left allmulticast mode [ 403.320109][ T49] team0 (unregistering): Port device team_slave_1 removed [ 403.362193][ T49] team0 (unregistering): Port device C removed [ 403.639882][T14276] lo speed is unknown, defaulting to 1000 [ 403.648617][T14276] syz2: Port: 1 Link DOWN [ 403.721460][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.761992][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.773162][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2931'. [ 403.792101][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2931'. [ 403.994807][T17633] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.078819][T17633] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 404.231434][T17633] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.241768][T17633] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 404.321184][T17642] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2933'. [ 404.439959][T17633] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.463070][T17633] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 404.602665][T17633] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.631329][T17633] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 405.033459][ T6348] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.064622][ T6348] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 405.107829][ T6348] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.132652][ T6348] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 405.292552][ T1164] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.311465][ T1164] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 405.355186][ T1164] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.384851][ T1164] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 405.673916][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.788542][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.799917][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.811808][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.820713][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.196266][T17682] lo speed is unknown, defaulting to 1000 [ 406.404852][T17691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2945'. [ 406.582672][T17703] tipc: Enabled bearer , priority 0 [ 406.667831][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 406.780372][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'. [ 406.816943][ T49] IPVS: stop unused estimator thread 0... [ 406.901923][T17682] chnl_net:caif_netlink_parms(): no params data found [ 406.920241][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 407.044068][ T30] audit: type=1804 audit(1759639693.480:7): pid=17737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2955" name="/newroot/7/cgroup.controllers" dev="tmpfs" ino=55 res=1 errno=0 [ 407.083216][ T30] audit: type=1800 audit(1759639693.480:8): pid=17737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2955" name="cgroup.controllers" dev="tmpfs" ino=55 res=0 errno=0 [ 407.323254][T17682] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.342875][T17682] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.357649][T17682] bridge_slave_0: entered allmulticast mode [ 407.366002][T17682] bridge_slave_0: entered promiscuous mode [ 407.445427][T17682] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.457961][T17682] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.466872][T17682] bridge_slave_1: entered allmulticast mode [ 407.479008][T17682] bridge_slave_1: entered promiscuous mode [ 407.491106][T17765] netlink: 'syz.1.2962': attribute type 11 has an invalid length. [ 407.509473][T17765] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 407.527438][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'. [ 407.606959][T17763] lo speed is unknown, defaulting to 1000 [ 407.618004][T17682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.652801][T17682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.743278][T17776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2965'. [ 407.770898][T17773] lo speed is unknown, defaulting to 1000 [ 407.782774][T17682] team0: Port device team_slave_0 added [ 407.813212][T17682] team0: Port device team_slave_1 added [ 407.924139][T17682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.947052][T17682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.957894][ T5852] Bluetooth: hci0: command tx timeout [ 408.016280][T17682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.136694][T17682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.148470][T17682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.176448][T17682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.267314][T17793] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2971'. [ 408.394377][T17795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.413489][T17799] Bluetooth: MGMT ver 1.23 [ 408.513947][T17682] hsr_slave_0: entered promiscuous mode [ 408.524871][T17682] hsr_slave_1: entered promiscuous mode [ 408.531886][T17682] debugfs: 'hsr0' already exists in 'hsr' [ 408.537778][T17682] Cannot create hsr debugfs directory [ 408.544096][T17793] lo speed is unknown, defaulting to 1000 [ 408.614027][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 409.278977][T17835] lo speed is unknown, defaulting to 1000 [ 409.293597][T17682] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.411587][T17844] IPv6: sit2: Disabled Multicast RS [ 409.473767][T17682] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.596327][T17682] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.686741][T17854] __nla_validate_parse: 1 callbacks suppressed [ 409.686754][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 409.692684][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'. [ 409.834049][T17855] netlink: 'syz.1.2985': attribute type 4 has an invalid length. [ 409.880239][T17682] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.887817][T17853] netlink: 'syz.1.2985': attribute type 4 has an invalid length. [ 410.037732][ T5852] Bluetooth: hci0: command tx timeout [ 410.043860][ T1164] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.066123][ T1164] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.075790][ T1164] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.085132][ T1164] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.233866][T17682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.273942][T17877] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 410.286225][T17682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.307799][T17877] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 410.318590][T17877] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 410.337876][T17682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.371475][T17682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.521065][T17897] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2996'. [ 410.808695][T17921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3000'. [ 410.859620][T17921] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 410.895196][T17682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.121079][T17929] bond3: (slave bond_slave_1): Device is not bonding slave [ 411.131350][T17929] bond3: option active_slave: invalid value (bond_slave_1) [ 411.181436][T17929] bond3 (unregistering): Released all slaves [ 411.370021][T17682] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.393229][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.400491][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.797946][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.805162][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.855654][T17951] sctp: [Deprecated]: syz.3.3006 (pid 17951) Use of int in maxseg socket option. [ 411.855654][T17951] Use struct sctp_assoc_value instead [ 411.969149][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3009'. [ 412.117813][ T5852] Bluetooth: hci0: command tx timeout [ 412.332546][T17682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.478731][T17987] lo speed is unknown, defaulting to 1000 [ 412.561513][T17995] lo speed is unknown, defaulting to 1000 [ 412.706711][T17999] lo speed is unknown, defaulting to 1000 [ 412.749876][T18006] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3016'. [ 412.990672][T17682] veth0_vlan: entered promiscuous mode [ 413.020046][T17682] veth1_vlan: entered promiscuous mode [ 413.131432][T17682] veth0_macvtap: entered promiscuous mode [ 413.146541][T17682] veth1_macvtap: entered promiscuous mode [ 413.179548][T17682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.320551][T18023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3021'. [ 413.335128][T17682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.376876][ T2973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.406079][ T2973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.437788][ T2973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.448432][ T2973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.745451][T18050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3027'. [ 413.835946][T18045] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3026'. [ 413.879384][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3028'. [ 414.048221][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.089539][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.178868][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.189152][T18061] lo speed is unknown, defaulting to 1000 [ 414.197427][ T5852] Bluetooth: hci0: command tx timeout [ 414.226188][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.645168][T18084] lo speed is unknown, defaulting to 1000 [ 415.256088][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.269180][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.285767][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.296987][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.310587][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.556697][ T1164] bond9 (unregistering): (slave geneve3): Releasing active interface [ 415.638669][T18100] __nla_validate_parse: 4 callbacks suppressed [ 415.638687][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 415.730342][T18098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3038'. [ 415.819421][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'. [ 416.155156][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.164521][ T1164] bond_slave_0: left allmulticast mode [ 416.172314][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.182202][ T1164] bond_slave_1: left allmulticast mode [ 416.188235][ T1164] bond0 (unregistering): Released all slaves [ 416.201164][ T1164] bond1 (unregistering): Released all slaves [ 416.301069][ T1164] bond2 (unregistering): Released all slaves [ 416.315435][ T1164] bond3 (unregistering): Released all slaves [ 416.414593][ T1164] bond4 (unregistering): Released all slaves [ 416.510840][ T1164] bond5 (unregistering): Released all slaves [ 416.618313][ T1164] bond6 (unregistering): Released all slaves [ 416.716806][ T1164] bond7 (unregistering): Released all slaves [ 416.729799][ T1164] bond8 (unregistering): Released all slaves [ 416.742414][ T1164] bond9 (unregistering): Released all slaves [ 416.755101][ T1164] bond10 (unregistering): Released all slaves [ 416.866632][ T1164] bond11 (unregistering): left promiscuous mode [ 416.874931][ T1164] team0: Port device bond11 removed [ 416.881881][ T1164] bond11 (unregistering): Released all slaves [ 416.900068][ T1164] bond12 (unregistering): Released all slaves [ 416.913142][ T1164] bond13 (unregistering): Released all slaves [ 417.021401][ T1164] bond14 (unregistering): Released all slaves [ 417.084853][T18109] tipc: Started in network mode [ 417.091900][T18109] tipc: Node identity ac1414aa, cluster identity 4711 [ 417.105337][T18109] tipc: Enabled bearer , priority 10 [ 417.260483][T18095] lo speed is unknown, defaulting to 1000 [ 417.411910][ T5157] Bluetooth: hci1: command tx timeout [ 417.648997][T18133] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 417.661074][T18133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.890934][T18095] chnl_net:caif_netlink_parms(): no params data found [ 417.977670][T18154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3053'. [ 418.022616][T18149] lo speed is unknown, defaulting to 1000 [ 418.032026][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 418.105457][T18095] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.121517][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.131178][T18095] bridge_slave_0: entered allmulticast mode [ 418.142195][T18095] bridge_slave_0: entered promiscuous mode [ 418.173952][T18095] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.187999][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.199248][T18095] bridge_slave_1: entered allmulticast mode [ 418.216714][T18095] bridge_slave_1: entered promiscuous mode [ 418.227250][ T5908] tipc: Node number set to 2886997162 [ 418.358901][T18095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.382000][T18095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.504075][T18095] team0: Port device team_slave_0 added [ 418.554310][T18095] team0: Port device team_slave_1 added [ 418.719610][ T1164] ûý: left promiscuous mode [ 418.835832][T18095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.855338][T18095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.903677][T18095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.918110][T18187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3061'. [ 418.938065][ T1164] : left promiscuous mode [ 418.976110][T18095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.006758][T18095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.040944][T18095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.083873][T18198] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3063'. [ 419.122448][ T1164] tipc: Left network mode [ 419.248875][T18095] hsr_slave_0: entered promiscuous mode [ 419.260419][T18095] hsr_slave_1: entered promiscuous mode [ 419.269444][T18095] debugfs: 'hsr0' already exists in 'hsr' [ 419.275670][T18095] Cannot create hsr debugfs directory [ 419.373451][T18220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3071'. [ 419.413812][T18222] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 419.426428][T18223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3071'. [ 419.495729][ T5157] Bluetooth: hci1: command tx timeout [ 419.580968][T18233] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3075'. [ 419.651806][T18233] dvmrp8: entered allmulticast mode [ 419.739748][T18228] lo speed is unknown, defaulting to 1000 [ 419.782768][T18233] lo speed is unknown, defaulting to 1000 [ 419.820484][T18095] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.831502][T18095] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 419.876787][ T1164] veth0: left promiscuous mode [ 419.885660][ T1164] team0: left promiscuous mode [ 419.893837][ T1164] team_slave_0: left promiscuous mode [ 419.900018][ T1164] team_slave_1: left promiscuous mode [ 419.911251][ T1164] hsr_slave_0: left promiscuous mode [ 419.918747][ T1164] hsr_slave_1: left promiscuous mode [ 419.925161][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.936652][ T1164] batman_adv: batadv0: Interface deactivated: 0! [ 419.956422][ T1164] batman_adv: batadv0: Removing interface: 0! [ 420.383052][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 420.442033][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 421.058883][T18231] dvmrp8: left allmulticast mode [ 421.220430][T18095] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.249101][T18095] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 421.262948][T18260] __nla_validate_parse: 2 callbacks suppressed [ 421.262966][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 421.282418][T18260] chnl_net:caif_netlink_parms(): no params data found [ 421.389671][T18095] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.407694][T18095] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 421.523363][T18095] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.544083][T18095] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 421.558802][ T5157] Bluetooth: hci1: command tx timeout [ 421.908432][T18271] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3082'. [ 421.962546][T18095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.962584][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 421.985648][T18271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3082'. [ 421.998637][T18271] netlink: 'syz.4.3082': attribute type 7 has an invalid length. [ 422.009500][T18263] lo speed is unknown, defaulting to 1000 [ 422.009962][T18095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.032878][T18271] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3082'. [ 422.058554][T18095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.145286][T18095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.190421][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'. [ 422.260475][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 422.303388][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 422.348566][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 422.415205][T18299] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3087'. [ 422.432466][T18095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.535641][T18095] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.546221][T18307] netlink: 'syz.0.3090': attribute type 39 has an invalid length. [ 422.567451][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.574616][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.623015][T18310] netlink: 'syz.1.3091': attribute type 1 has an invalid length. [ 422.658161][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.665337][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.686027][T18304] lo speed is unknown, defaulting to 1000 [ 423.012541][T18328] netlink: 'syz.1.3096': attribute type 1 has an invalid length. [ 423.055251][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.085107][T18328] netlink: 'syz.1.3096': attribute type 1 has an invalid length. [ 423.094809][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.111772][T18328] netlink: 'syz.1.3096': attribute type 1 has an invalid length. [ 423.120591][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.186946][T18331] team0: Port device team_slave_0 removed [ 423.252672][T18328] netlink: 'syz.1.3096': attribute type 1 has an invalid length. [ 423.263080][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.284428][T18328] netlink: 'syz.1.3096': attribute type 1 has an invalid length. [ 423.294062][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.325039][T18328] netlink: 'syz.1.3096': attribute type 1 has an invalid length. [ 423.368766][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.396204][ T1164] IPVS: stop unused estimator thread 0... [ 423.416168][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.451800][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.504110][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.526954][T18347] warn_alloc: 1 callbacks suppressed [ 423.526973][T18347] syz.4.3100: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 423.547667][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.576904][T18347] ,cpuset=/,mems_allowed=0-1 [ 423.581761][T18347] CPU: 1 UID: 0 PID: 18347 Comm: syz.4.3100 Not tainted syzkaller #0 PREEMPT(full) [ 423.581786][T18347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.581798][T18347] Call Trace: [ 423.581806][T18347] [ 423.581814][T18347] dump_stack_lvl+0x189/0x250 [ 423.581844][T18347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.581866][T18347] ? __pfx__printk+0x10/0x10 [ 423.581895][T18347] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 423.581918][T18347] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 423.581945][T18347] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 423.581983][T18347] warn_alloc+0x214/0x310 [ 423.582013][T18347] ? stack_depot_save_flags+0x40/0x860 [ 423.582043][T18347] ? __pfx_warn_alloc+0x10/0x10 [ 423.582073][T18347] ? kasan_save_track+0x4f/0x80 [ 423.582095][T18347] ? xskq_create+0x56/0x170 [ 423.582124][T18347] ? xsk_init_queue+0xb0/0x110 [ 423.582149][T18347] ? xsk_setsockopt+0x4dc/0x8d0 [ 423.582173][T18347] ? do_sock_setsockopt+0x179/0x1b0 [ 423.582194][T18347] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 423.582215][T18347] ? do_syscall_64+0xfa/0x3b0 [ 423.582232][T18347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.582262][T18347] __vmalloc_node_range_noprof+0x125/0x12f0 [ 423.582324][T18347] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 423.582357][T18347] ? __kasan_kmalloc+0x93/0xb0 [ 423.582385][T18347] vmalloc_user_noprof+0xad/0xf0 [ 423.582410][T18347] ? xskq_create+0xbf/0x170 [ 423.582440][T18347] xskq_create+0xbf/0x170 [ 423.582473][T18347] xsk_init_queue+0xb0/0x110 [ 423.582503][T18347] xsk_setsockopt+0x4dc/0x8d0 [ 423.582534][T18347] ? __pfx_xsk_setsockopt+0x10/0x10 [ 423.582562][T18347] ? __pfx_aa_sk_perm+0x10/0x10 [ 423.582591][T18347] ? aa_sock_opt_perm+0xff/0x1b0 [ 423.582623][T18347] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 423.582652][T18347] ? __pfx_xsk_setsockopt+0x10/0x10 [ 423.582682][T18347] do_sock_setsockopt+0x179/0x1b0 [ 423.582709][T18347] __x64_sys_setsockopt+0x13f/0x1b0 [ 423.582737][T18347] do_syscall_64+0xfa/0x3b0 [ 423.582756][T18347] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.582786][T18347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.582804][T18347] ? clear_bhb_loop+0x60/0xb0 [ 423.582829][T18347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.582848][T18347] RIP: 0033:0x7fae68b8eec9 [ 423.582866][T18347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.582884][T18347] RSP: 002b:00007fae6995d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 423.582905][T18347] RAX: ffffffffffffffda RBX: 00007fae68de5fa0 RCX: 00007fae68b8eec9 [ 423.582921][T18347] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 423.582933][T18347] RBP: 00007fae68c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 423.582945][T18347] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.582958][T18347] R13: 00007fae68de6038 R14: 00007fae68de5fa0 R15: 00007ffd50eab138 [ 423.583003][T18347] [ 423.583011][T18347] Mem-Info: [ 423.654232][ T5157] Bluetooth: hci1: command tx timeout [ 423.659191][T18347] active_anon:5794 inactive_anon:0 isolated_anon:0 [ 423.659191][T18347] active_file:3140 inactive_file:40018 isolated_file:0 [ 423.659191][T18347] unevictable:768 dirty:97 writeback:0 [ 423.659191][T18347] slab_reclaimable:12684 slab_unreclaimable:125481 [ 423.659191][T18347] mapped:29041 shmem:1357 pagetables:965 [ 423.659191][T18347] sec_pagetables:0 bounce:0 [ 423.659191][T18347] kernel_misc_reclaimable:0 [ 423.659191][T18347] free:1287591 free_pcp:28711 free_cma:0 [ 423.695284][T18095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.813186][T18347] Node 0 active_anon:23076kB inactive_anon:0kB active_file:12560kB inactive_file:159872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116164kB dirty:388kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13688kB pagetables:3804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 423.862299][T18095] veth0_vlan: entered promiscuous mode [ 423.992847][T18347] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 424.059481][T18347] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.107892][T18347] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 424.115156][T18347] Node 0 DMA32 free:1241332kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23344kB inactive_anon:0kB active_file:12560kB inactive_file:159548kB unevictable:1536kB writepending:384kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:96040kB local_pcp:37148kB free_cma:0kB [ 424.154751][T18347] lowmem_reserve[]: 0 0 0 0 0 [ 424.204606][T18347] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.285250][T18347] lowmem_reserve[]: 0 0 0 0 0 [ 424.343938][T18347] Node 1 Normal free:3894800kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16736kB local_pcp:8256kB free_cma:0kB [ 424.366558][T18095] veth1_vlan: entered promiscuous mode [ 424.442282][T18347] lowmem_reserve[]: 0 0 0 0 0 [ 424.469591][T18347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 424.486932][T18347] Node 0 DMA32: 603*4kB (UME) 369*8kB (UME) 295*16kB (UME) 254*32kB (UME) 118*64kB (UM) 58*128kB (UM) 29*256kB (UM) 65*512kB (UM) 14*1024kB (UM) 1*2048kB (M) 281*4096kB (UME) = 1241252kB [ 424.510613][T18347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 424.536198][T18347] Node 1 Normal: 167*4kB (UE) 47*8kB (UME) 43*16kB (UME) 122*32kB (UME) 39*64kB (UME) 5*128kB (UME) 4*256kB (UME) 4*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 947*4096kB (M) = 3894852kB [ 424.570143][T18347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.582813][T18347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.611390][T18347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.638809][T18347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.648634][T18347] 44512 total pagecache pages [ 424.653397][T18347] 0 pages in swap cache [ 424.661457][T18347] Free swap = 124996kB [ 424.668438][T18095] veth0_macvtap: entered promiscuous mode [ 424.674635][T18347] Total swap = 124996kB [ 424.682945][T18347] 2097051 pages RAM [ 424.691984][T18095] veth1_macvtap: entered promiscuous mode [ 424.717377][T18347] 0 pages HighMem/MovableOnly [ 424.717401][T18095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.726673][T18347] 423781 pages reserved [ 424.740976][T18095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.749641][T18347] 0 pages cma reserved [ 424.762953][ T2973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.784421][ T2973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.804445][ T2973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.842580][T13965] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.898965][ T5836] lo speed is unknown, defaulting to 1000 [ 424.905340][ T5836] syz1: Port: 1 Link DOWN [ 424.916736][T18397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.924926][T18397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.936452][T18397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.945056][T18397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.006990][T18399] tun1: tun_chr_ioctl cmd 1074812117 [ 425.251553][T18406] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 425.421433][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.453030][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.531256][T13965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.562022][T13965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.689439][T18429] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 425.696939][T18429] dvmrp1: linktype set to 774 [ 425.724560][T18432] syz.2.3122 uses old SIOCAX25GETINFO [ 425.725496][T18413] lo: entered allmulticast mode [ 425.748917][T18430] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 425.754598][T18430] dvmrp1: linktype set to 774 [ 425.828840][T18437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.905016][T18437] bond_slave_0: entered promiscuous mode [ 425.911125][T18437] bond_slave_1: entered promiscuous mode [ 425.934667][T18437] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.952595][T18437] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 426.444633][T18462] __nla_validate_parse: 13 callbacks suppressed [ 426.444663][T18462] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3131'. [ 426.553799][ T30] audit: type=1804 audit(1759639712.990:9): pid=18461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3129" name="cgroup.controllers" dev="tmpfs" ino=28 res=1 errno=0 [ 426.626151][ T30] audit: type=1800 audit(1759639712.990:10): pid=18461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3129" name="cgroup.controllers" dev="tmpfs" ino=28 res=0 errno=0 [ 426.842021][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.875274][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.897556][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.915490][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.927478][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.979031][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3136'. [ 427.016584][T18483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3137'. [ 427.023086][T18474] lo speed is unknown, defaulting to 1000 [ 427.172511][T18481] lo speed is unknown, defaulting to 1000 [ 427.273276][T18477] lo speed is unknown, defaulting to 1000 [ 427.345748][T18496] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3140'. [ 427.360114][T18497] validate_nla: 28 callbacks suppressed [ 427.360132][T18497] netlink: 'syz.4.3139': attribute type 10 has an invalid length. [ 427.390552][T18497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3139'. [ 427.470207][T18497] team0: Port device geneve0 added [ 427.512056][T18502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3141'. [ 427.728261][T18474] chnl_net:caif_netlink_parms(): no params data found [ 427.982813][T18509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3142'. [ 428.022331][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 428.182783][T18515] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3144'. [ 428.211502][T18515] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3144'. [ 428.419484][T18523] syzkaller0: entered promiscuous mode [ 428.428722][T18523] syzkaller0: entered allmulticast mode [ 428.448124][T18474] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.455355][T18474] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.476358][T18474] bridge_slave_0: entered allmulticast mode [ 428.485170][T18474] bridge_slave_0: entered promiscuous mode [ 429.000247][ T5157] Bluetooth: hci2: command tx timeout [ 430.103347][T18474] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.111560][T18474] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.121221][T18474] bridge_slave_1: entered allmulticast mode [ 430.129697][T18474] bridge_slave_1: entered promiscuous mode [ 430.242923][T18533] lo speed is unknown, defaulting to 1000 [ 430.259663][T18474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.289784][T18474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.526603][ T43] IPVS: starting estimator thread 0... [ 430.530209][T18474] team0: Port device team_slave_0 added [ 430.587754][T18557] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 430.627471][T18564] IPVS: using max 28 ests per chain, 67200 per kthread [ 430.637766][T18557] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 430.648179][T18557] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 430.698349][T18474] team0: Port device team_slave_1 added [ 430.866690][T18474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.880387][T18474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.910575][T18474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.944246][T18474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.963108][T18474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.016642][T18474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.079471][ T5157] Bluetooth: hci2: command tx timeout [ 431.186582][T18474] hsr_slave_0: entered promiscuous mode [ 431.199657][T18474] hsr_slave_1: entered promiscuous mode [ 431.415451][T18605] nicvf0: entered promiscuous mode [ 431.461362][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 431.483571][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 431.507789][T18608] net_ratelimit: 25 callbacks suppressed [ 431.507807][T18608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 431.560583][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 431.573520][T18605] __nla_validate_parse: 5 callbacks suppressed [ 431.573540][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3163'. [ 431.623951][T18614] netlink: 'syz.3.3166': attribute type 1 has an invalid length. [ 431.635875][T18608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'. [ 431.658251][T18614] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3166'. [ 431.668814][ T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 431.769699][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3166'. [ 431.803257][T18614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3166'. [ 431.909829][T18628] lo speed is unknown, defaulting to 1000 [ 431.914704][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'. [ 431.998235][T18640] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3172'. [ 432.034676][T18644] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3173'. [ 432.052468][T18644] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3173'. [ 432.070992][T18644] netlink: 'syz.3.3173': attribute type 5 has an invalid length. [ 432.079598][T18644] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3173'. [ 432.406110][T18474] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 432.431234][T18474] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 432.492670][T18474] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 432.561122][T18474] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.615800][T18657] lo speed is unknown, defaulting to 1000 [ 432.721913][ T30] audit: type=1800 audit(1759639719.160:11): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3180" name="@" dev="tmpfs" ino=376 res=0 errno=0 [ 432.769075][T18651] lo speed is unknown, defaulting to 1000 [ 433.163622][ T5157] Bluetooth: hci2: command tx timeout [ 433.239002][T18694] netlink: 'syz.4.3183': attribute type 13 has an invalid length. [ 433.251286][T18694] netlink: 'syz.4.3183': attribute type 17 has an invalid length. [ 433.563769][T18702] sctp: [Deprecated]: syz.0.3184 (pid 18702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.563769][T18702] Use struct sctp_sack_info instead [ 433.626236][T18694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.906379][T18474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.926019][ T30] audit: type=1804 audit(1759639720.360:12): pid=18689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3181" name="/newroot/15/cgroup.controllers" dev="tmpfs" ino=96 res=1 errno=0 [ 434.008199][ T30] audit: type=1804 audit(1759639720.400:13): pid=18693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3181" name="/newroot/15/cgroup.controllers" dev="tmpfs" ino=96 res=1 errno=0 [ 434.021569][T18474] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.340958][T18708] syzkaller0: entered promiscuous mode [ 434.368248][T18708] syzkaller0: entered allmulticast mode [ 434.461539][T13964] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.468974][T13964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.534559][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.542364][T13964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.238656][ T5157] Bluetooth: hci2: command tx timeout [ 436.829885][T18732] geneve0: entered promiscuous mode [ 436.835581][T18732] macsec1: entered promiscuous mode [ 436.843275][T18732] macsec1: entered allmulticast mode [ 436.849652][T18732] geneve0: entered allmulticast mode [ 436.859298][T18732] geneve0: left allmulticast mode [ 436.866037][T18732] geneve0: left promiscuous mode [ 437.030508][T18745] bond1: option mode: unable to set because the bond device has slaves [ 437.058843][T18748] netlink: 'syz.3.3196': attribute type 21 has an invalid length. [ 437.067054][T18748] netlink: 'syz.3.3196': attribute type 22 has an invalid length. [ 437.110402][T18748] netlink: 'syz.3.3196': attribute type 23 has an invalid length. [ 437.128908][T18748] netlink: 'syz.3.3196': attribute type 25 has an invalid length. [ 437.177184][T18748] __nla_validate_parse: 5 callbacks suppressed [ 437.177204][T18748] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3196'. [ 437.215192][T18755] sctp: [Deprecated]: syz.4.3197 (pid 18755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.215192][T18755] Use struct sctp_sack_info instead [ 437.316982][T18765] netlink: 'syz.0.3199': attribute type 29 has an invalid length. [ 437.337436][T18765] netlink: 'syz.0.3199': attribute type 29 has an invalid length. [ 437.358187][T18765] netlink: 508 bytes leftover after parsing attributes in process `syz.0.3199'. [ 437.438244][T18474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.535877][T18775] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20001 [ 437.584147][T18774] tipc: Enabled bearer , priority 0 [ 437.598804][T18774] syzkaller0: entered promiscuous mode [ 437.604659][T18774] syzkaller0: entered allmulticast mode [ 437.631320][T18774] tipc: Resetting bearer [ 437.638641][T18774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3203'. [ 437.654292][T18474] veth0_vlan: entered promiscuous mode [ 437.688337][T18774] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 437.720529][T18773] tipc: Resetting bearer [ 437.760663][T18773] tipc: Disabling bearer [ 437.782235][T18474] veth1_vlan: entered promiscuous mode [ 437.878790][T18474] veth0_macvtap: entered promiscuous mode [ 437.905286][T18474] veth1_macvtap: entered promiscuous mode [ 437.987825][T18474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.026573][T18474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.121951][T18632] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.144477][T18632] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.182245][T18632] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.204313][T18632] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.218672][T18797] tipc: Enabling of bearer rejected, failed to enable media [ 438.429455][T13962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.443970][T13962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.525794][T18632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.534516][T18632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.688349][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 438.704962][T18816] netlink: 'syz.4.3211': attribute type 10 has an invalid length. [ 438.736412][T18816] team0: Device ipvlan1 failed to register rx_handler [ 438.815700][T18822] openvswitch: netlink: Flow key attribute not present in set flow. [ 438.930547][T18823] lo speed is unknown, defaulting to 1000 [ 439.145419][T18829] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3214'. [ 439.476401][T18843] netlink: 'syz.0.3218': attribute type 10 has an invalid length. [ 439.568539][T18848] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3219'. [ 439.591498][T18842] bond1: option ad_user_port_key: invalid value (65535) [ 439.611231][T18842] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 439.643869][T18842] bond1 (unregistering): Released all slaves [ 439.719578][ T5852] Bluetooth: hci2: command 0x0405 tx timeout [ 439.835736][T18845] bond1: option ad_user_port_key: invalid value (65535) [ 439.853531][T18845] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 439.884399][T18845] bond1 (unregistering): Released all slaves [ 439.942889][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.953009][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.965247][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.974136][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.982224][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 440.019760][T18823] geneve0: entered promiscuous mode [ 440.259648][T18866] netlink: 'syz.0.3223': attribute type 7 has an invalid length. [ 440.268466][T18866] netlink: 'syz.0.3223': attribute type 8 has an invalid length. [ 440.294629][T18857] lo speed is unknown, defaulting to 1000 [ 440.575323][ T43] IPVS: starting estimator thread 0... [ 440.690405][T18882] IPVS: using max 29 ests per chain, 69600 per kthread [ 440.734590][T18879] lo speed is unknown, defaulting to 1000 [ 440.810286][T18877] lo speed is unknown, defaulting to 1000 [ 440.810599][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3229'. [ 440.825875][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3229'. [ 440.887018][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3229'. [ 440.898865][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3229'. [ 440.989899][T18857] chnl_net:caif_netlink_parms(): no params data found [ 441.380805][T18857] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.388725][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.396162][T18857] bridge_slave_0: entered allmulticast mode [ 441.407206][T18857] bridge_slave_0: entered promiscuous mode [ 441.430880][T18857] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.438485][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.446296][T18857] bridge_slave_1: entered allmulticast mode [ 441.458972][T18857] bridge_slave_1: entered promiscuous mode [ 441.578387][T18917] openvswitch: netlink: Missing key (keys=40, expected=100) [ 441.618861][T18857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.655070][T18857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.665006][T18921] lo speed is unknown, defaulting to 1000 [ 441.753532][T18857] team0: Port device team_slave_0 added [ 441.813702][T18857] team0: Port device team_slave_1 added [ 441.870902][T18857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.883680][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.911461][T18857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.926674][T18857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.936442][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.968932][T18857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.037612][ T5157] Bluetooth: hci3: command tx timeout [ 442.144687][T18930] lo speed is unknown, defaulting to 1000 [ 442.244153][T18857] hsr_slave_0: entered promiscuous mode [ 442.254082][T18857] hsr_slave_1: entered promiscuous mode [ 442.262047][T18857] debugfs: 'hsr0' already exists in 'hsr' [ 442.268536][T18857] Cannot create hsr debugfs directory [ 442.649556][T18953] __nla_validate_parse: 5 callbacks suppressed [ 442.649576][T18953] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3247'. [ 442.789735][T18951] vlan2: entered allmulticast mode [ 442.796705][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 442.934449][T18950] lo speed is unknown, defaulting to 1000 [ 443.006501][T18857] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.324979][T18857] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.398743][ T5908] IPVS: starting estimator thread 0... [ 443.497611][T18979] IPVS: using max 25 ests per chain, 60000 per kthread [ 443.508819][T18857] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.616892][T18984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3254'. [ 443.656227][T18857] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.845758][T18992] syzkaller1: entered promiscuous mode [ 443.895535][T18992] syzkaller1: entered allmulticast mode [ 443.961862][T18990] lo speed is unknown, defaulting to 1000 [ 443.978136][T18996] netlink: 'syz.4.3256': attribute type 17 has an invalid length. [ 444.093126][T18996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.123919][ T5852] Bluetooth: hci3: command tx timeout [ 444.151443][T18996] netlink: 'syz.4.3256': attribute type 83 has an invalid length. [ 444.375890][T18857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.501003][T18857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.517562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.523224][T18857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.561379][T18857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.676208][T19025] netlink: 'syz.0.3261': attribute type 5 has an invalid length. [ 444.721394][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3262'. [ 444.812870][T18857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.858558][T18857] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.924796][T13960] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.932021][T13960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.983830][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.991056][T13964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.064074][T19035] lo speed is unknown, defaulting to 1000 [ 445.065209][T19044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'. [ 445.143939][T19046] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 445.178814][T19046] macvtap1: entered allmulticast mode [ 445.184440][T19046] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 445.198807][T19046] mac80211_hwsim hwsim48 wlan0: left allmulticast mode [ 445.206055][T19046] mac80211_hwsim hwsim48 wlan0: left promiscuous mode [ 445.288728][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'. [ 445.299581][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'. [ 445.391249][T19062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3271'. [ 445.474970][T19062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3271'. [ 445.506417][T18857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.514507][T19062] netlink: 'syz.4.3271': attribute type 16 has an invalid length. [ 445.545261][T19062] netlink: 'syz.4.3271': attribute type 17 has an invalid length. [ 445.579044][T19070] IPv6: NLM_F_REPLACE set, but no existing node found! [ 445.843356][T19062] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.851138][T19062] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.945364][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c8b7800: rx timeout, send abort [ 445.955768][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c8b7800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 446.087324][T19077] nbd3: detected capacity change from 0 to 64 [ 446.199806][ T51] Bluetooth: hci3: command 0x040f tx timeout [ 446.236177][T19088] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3277'. [ 446.619252][ T5852] block nbd3: Receive control failed (result -32) [ 446.947211][T18633] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.969200][T18633] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.178349][T18633] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.201388][T18633] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.426756][T19113] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 447.429863][T18857] veth0_vlan: entered promiscuous mode [ 447.656579][T19119] bridge_slave_1: left allmulticast mode [ 447.664452][T19119] bridge_slave_1: left promiscuous mode [ 447.682426][T19119] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.694326][T19119] bridge_slave_0: left allmulticast mode [ 447.701203][T19119] bridge_slave_0: left promiscuous mode [ 447.710443][T19119] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.813399][T18857] veth1_vlan: entered promiscuous mode [ 447.820542][T19128] __nla_validate_parse: 3 callbacks suppressed [ 447.820559][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3286'. [ 447.874253][T19115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.984314][T19115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.012814][T18857] veth0_macvtap: entered promiscuous mode [ 448.049105][T18857] veth1_macvtap: entered promiscuous mode [ 448.088083][T19138] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3288'. [ 448.173663][T19115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.229995][T18857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.252240][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'. [ 448.271458][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'. [ 448.283142][ T5852] Bluetooth: hci3: command 0x040f tx timeout [ 448.294377][T19140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3289'. [ 448.304690][T19140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3289'. [ 448.321677][T19115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.353456][T18857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.413721][T13964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.442810][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'. [ 448.452696][T13964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.462010][T13964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.502490][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'. [ 448.512296][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'. [ 448.565006][T13964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.747379][T13964] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.761407][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.813760][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.842161][T13963] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.873852][T13962] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.907242][T13964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.915202][T13964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.923184][T18632] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.984798][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'. [ 449.390672][T19193] lo speed is unknown, defaulting to 1000 [ 449.621261][T19206] lo speed is unknown, defaulting to 1000 [ 449.658752][T19203] lo speed is unknown, defaulting to 1000 [ 450.100097][T19203] netlink: 'syz.2.3304': attribute type 30 has an invalid length. [ 450.136568][T19222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.357937][ T5852] Bluetooth: hci3: command 0x040f tx timeout [ 450.524600][T19229] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 450.652343][T19229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.669539][T19229] batadv0: entered promiscuous mode [ 450.731129][T19229] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 451.306231][T19264] netlink: 'syz.0.3321': attribute type 9 has an invalid length. [ 451.589699][T19273] IPv6: sit1: Disabled Multicast RS [ 451.606501][T19273] sit1: entered allmulticast mode [ 452.432016][T19317] tipc: Started in network mode [ 452.436937][T19317] tipc: Node identity bebb6cd12795, cluster identity 4711 [ 452.449207][T19317] tipc: Enabled bearer , priority 0 [ 452.461720][T19317] syzkaller0: entered promiscuous mode [ 452.474286][T19317] syzkaller0: entered allmulticast mode [ 452.565143][T19320] block nbd1: Unsupported socket: should be TCP or UNIX. [ 452.566147][T19316] tipc: Resetting bearer [ 452.584488][T19325] netlink: 'syz.1.3336': attribute type 1 has an invalid length. [ 452.623994][T19316] tipc: Disabling bearer [ 452.836132][T19335] lo speed is unknown, defaulting to 1000 [ 452.945101][T19348] sctp: [Deprecated]: syz.3.3339 (pid 19348) Use of int in max_burst socket option. [ 452.945101][T19348] Use struct sctp_assoc_value instead [ 453.383528][T19376] __nla_validate_parse: 9 callbacks suppressed [ 453.383548][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3344'. [ 453.539732][T19382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3346'. [ 453.561605][T19383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3346'. [ 453.868295][T19388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.945877][T19412] bridge_slave_0: left allmulticast mode [ 453.981681][T19412] bridge_slave_0: left promiscuous mode [ 453.993673][T19412] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.045153][T19412] bridge_slave_1: left allmulticast mode [ 454.064440][T19412] bridge_slave_1: left promiscuous mode [ 454.077687][T19412] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.103103][T19412] bond0: (slave bond_slave_0): Releasing backup interface [ 454.124041][T19412] bond0: (slave bond_slave_1): Releasing backup interface [ 454.164500][T19412] team0: Port device team_slave_0 removed [ 454.225243][T19412] team0: Port device team_slave_1 removed [ 454.233020][T19412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.245807][T19412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.266060][T19412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.277993][T19412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.289059][T19412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.432852][T19388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.526201][T19388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.709308][T19388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.809185][T19438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.875716][T19438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 454.923872][T19438] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 455.011604][T19444] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.092777][T13964] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.111911][T19450] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 455.214563][T13964] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.257898][T19455] sctp: [Deprecated]: syz.1.3363 (pid 19455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.257898][T19455] Use struct sctp_sack_info instead [ 455.520206][ T30] audit: type=1800 audit(1759639741.960:14): pid=19462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3361" name="memory.events" dev="tmpfs" ino=386 res=0 errno=0 [ 455.570306][T19469] can: request_module (can-proto-0) failed. [ 457.027823][T13960] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.110505][T19463] lo speed is unknown, defaulting to 1000 [ 457.116356][T13963] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.406526][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3368'. [ 457.431031][T19488] geneve2: entered promiscuous mode [ 457.436354][T19488] geneve2: entered allmulticast mode [ 457.463670][T19480] lo speed is unknown, defaulting to 1000 [ 457.535841][T19485] lo speed is unknown, defaulting to 1000 [ 457.772545][T19502] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3372'. [ 458.053033][T19516] netlink: 'syz.4.3377': attribute type 11 has an invalid length. [ 458.061710][T19516] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3377'. [ 458.272162][T19530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3381'. [ 458.292863][T19530] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3381'. [ 458.630212][T19548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3387'. [ 458.720780][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3388'. [ 458.754497][T19553] lo speed is unknown, defaulting to 1000 [ 458.863567][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3389'. [ 458.873506][T19555] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 458.942724][T19566] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3390'. [ 459.014878][T19566] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3390'. [ 459.086544][T19566] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 459.143224][T19566] gretap1: entered promiscuous mode [ 459.149008][T19566] gretap1: entered allmulticast mode [ 459.160394][T19577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3393'. [ 459.292324][T19588] netlink: 'syz.4.3398': attribute type 4 has an invalid length. [ 459.795133][T19602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3402'. [ 459.996819][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3402'. [ 460.281601][T19610] tipc: Started in network mode [ 460.309375][T19610] tipc: Node identity ae2f1ed307a8, cluster identity 4711 [ 460.316686][T19610] tipc: Enabled bearer , priority 0 [ 460.344239][T19610] syzkaller0: entered promiscuous mode [ 460.349825][T19610] syzkaller0: entered allmulticast mode [ 460.369080][T19610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 460.401372][T19615] netlink: 'syz.3.3405': attribute type 1 has an invalid length. [ 460.421113][T19610] tipc: Resetting bearer [ 460.629169][T19618] gretap1: entered promiscuous mode [ 460.635044][T19623] tipc: Started in network mode [ 460.641829][T19623] tipc: Node identity 2aa465fab2c4, cluster identity 4711 [ 460.650024][T19623] tipc: Enabled bearer , priority 0 [ 460.661693][T19610] tipc: Resetting bearer [ 460.684399][T19610] tipc: Disabling bearer [ 460.697021][T19622] nbd: must specify a size in bytes for the device [ 460.726714][T19619] tipc: Disabling bearer [ 460.942058][T19635] tipc: Enabled bearer , priority 0 [ 460.981649][T19641] macvtap1: entered allmulticast mode [ 461.011986][T19641] veth1_vlan: entered allmulticast mode [ 461.056120][T19641] veth1_vlan: left allmulticast mode [ 461.148313][T19635] syzkaller0: entered promiscuous mode [ 461.154132][T19635] syzkaller0: entered allmulticast mode [ 461.193107][T19635] tipc: Resetting bearer [ 461.202713][T19633] tipc: Resetting bearer [ 461.250649][T19633] tipc: Disabling bearer [ 461.356471][T19658] lo speed is unknown, defaulting to 1000 [ 461.370826][T19665] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3421'. [ 461.382938][T19667] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 461.516018][T19669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3421'. [ 461.984135][T19708] syzkaller1: entered promiscuous mode [ 462.010413][T19708] syzkaller1: entered allmulticast mode [ 462.125042][T19712] lo speed is unknown, defaulting to 1000 [ 463.794408][T19716] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 463.810381][T19722] bridge_slave_0: left promiscuous mode [ 463.825796][T19722] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.840707][T19722] bridge_slave_1: left allmulticast mode [ 463.846538][T19722] bridge_slave_1: left promiscuous mode [ 463.853509][T19722] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.869339][T19722] bond0: (slave bond_slave_0): Releasing backup interface [ 463.886015][T19722] bond0: (slave bond_slave_1): Releasing backup interface [ 463.907018][T19722] team0: Port device team_slave_0 removed [ 463.920329][T19722] team0: Port device team_slave_1 removed [ 463.927390][T19722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.934836][T19722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.946396][T19722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.949119][ T30] audit: type=1800 audit(1759639750.390:15): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3440" name="memory.events" dev="tmpfs" ino=222 res=0 errno=0 [ 463.964099][T19722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.985517][T19722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.264925][T19745] __nla_validate_parse: 1 callbacks suppressed [ 464.264943][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 464.295782][T19741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3443'. [ 464.298943][T19745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3442'. [ 464.322303][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 464.331704][T19745] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3442'. [ 464.351774][T19745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3442'. [ 464.363549][T19748] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 464.364173][T19751] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3446'. [ 464.431009][T19751] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3446'. [ 464.467739][T19751] 0ªX¹¦À: renamed from caif0 [ 464.479976][T19751] 0ªX¹¦À: entered allmulticast mode [ 464.485300][T19751] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 464.644592][T19763] bridge0: port 3(syz_tun) entered blocking state [ 464.651534][T19763] bridge0: port 3(syz_tun) entered disabled state [ 464.689861][T19763] syz_tun: entered allmulticast mode [ 464.705024][T14286] IPVS: starting estimator thread 0... [ 464.705622][T19763] syz_tun: entered promiscuous mode [ 464.719997][T19763] bridge0: port 3(syz_tun) entered blocking state [ 464.726927][T19763] bridge0: port 3(syz_tun) entered forwarding state [ 464.822664][T19774] lo speed is unknown, defaulting to 1000 [ 464.837753][T19772] IPVS: using max 27 ests per chain, 64800 per kthread [ 464.859643][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 465.245786][T19788] lo speed is unknown, defaulting to 1000 [ 465.573375][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3462'. [ 466.141439][T19845] netlink: 'syz.3.3468': attribute type 1 has an invalid length. [ 466.372591][T19859] lo speed is unknown, defaulting to 1000 [ 466.471981][T19867] netlink: 'syz.4.3474': attribute type 29 has an invalid length. [ 466.496486][T19867] netlink: 'syz.4.3474': attribute type 29 has an invalid length. [ 466.597404][ T5157] Bluetooth: hci0: command 0x0c1a tx timeout [ 466.603749][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 466.833638][T19885] ip6_tunnel: non-ECT from fe02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 467.405924][T19919] bond2: entered promiscuous mode [ 467.435791][T19919] bond2: entered allmulticast mode [ 467.462861][T19919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.624523][T19931] lo speed is unknown, defaulting to 1000 [ 467.755985][T19936] pim6reg: entered allmulticast mode [ 468.242730][T19960] lo speed is unknown, defaulting to 1000 [ 468.524215][T19973] netlink: 'syz.4.3502': attribute type 1 has an invalid length. [ 468.613502][T19973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.640501][T19985] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 468.712869][T19990] bond1: option mode: unable to set because the bond device has slaves [ 468.739660][T19973] bond1: (slave gretap1): making interface the new active one [ 468.749307][T19973] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 468.772111][T19990] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 468.942533][T20000] lo speed is unknown, defaulting to 1000 [ 469.509840][T20034] __nla_validate_parse: 19 callbacks suppressed [ 469.509862][T20034] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3516'. [ 469.559924][T20036] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3517'. [ 469.641677][T20034] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3516'. [ 469.843238][T20044] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 469.938544][T20044] bond1: entered promiscuous mode [ 469.943804][T20044] bond1: entered allmulticast mode [ 469.950862][T20044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.099664][T20044] bond1 (unregistering): Released all slaves [ 470.310591][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3525'. [ 470.408124][T20072] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3527'. [ 470.419308][T20072] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3527'. [ 470.471940][T20074] netlink: 'syz.1.3528': attribute type 4 has an invalid length. [ 470.483275][T20074] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3528'. [ 470.712784][T20082] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.3531'. [ 470.725805][T20085] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 470.762549][T20090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3531'. [ 470.840678][T20088] lo speed is unknown, defaulting to 1000 [ 471.107022][T20099] netlink: 'syz.2.3534': attribute type 21 has an invalid length. [ 471.109818][T20093] tipc: Enabled bearer , priority 0 [ 471.168759][T20099] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3534'. [ 471.219230][T20093] netlink: 'syz.2.3534': attribute type 21 has an invalid length. [ 471.232652][T20093] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 471.254225][T20093] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 471.271346][T20093] tipc: Resetting bearer [ 471.631848][T20113] netlink: 'syz.2.3537': attribute type 14 has an invalid length. [ 471.745276][T20123] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 471.800278][T18632] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.827552][T18632] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.894360][T18632] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.927425][T18632] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.066492][T20129] netlink: 'syz.4.3545': attribute type 1 has an invalid length. [ 472.123033][T20133] netlink: 'syz.3.3544': attribute type 5 has an invalid length. [ 472.157258][T14272] tipc: Node number set to 2556454394 [ 472.397199][T20152] lo speed is unknown, defaulting to 1000 [ 472.512587][T20155] lo speed is unknown, defaulting to 1000 [ 473.415946][ T30] audit: type=1800 audit(1759639759.850:16): pid=20191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3558" name="memory.events" dev="tmpfs" ino=350 res=0 errno=0 [ 473.428578][T20195] macsec1: entered promiscuous mode [ 473.442496][T20195] macsec1: entered allmulticast mode [ 473.701405][T20213] netlink: 'syz.4.3565': attribute type 11 has an invalid length. [ 473.863681][T20224] netlink: 'syz.4.3569': attribute type 10 has an invalid length. [ 473.873868][T20222] lo speed is unknown, defaulting to 1000 [ 474.236716][T20197] delete_channel: no stack [ 474.271557][T20247] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002 [ 474.303635][T20243] syzkaller0: entered promiscuous mode [ 474.309937][T20243] syzkaller0: entered allmulticast mode [ 476.439193][T20274] veth0: entered promiscuous mode [ 476.529673][T20274] veth0: left promiscuous mode [ 476.611555][T20290] netlink: 'syz.1.3583': attribute type 2 has an invalid length. [ 476.641945][T20290] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 476.655533][T20293] tipc: Enabling of bearer rejected, already enabled [ 476.750859][T20300] __nla_validate_parse: 20 callbacks suppressed [ 476.750879][T20300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3586'. [ 476.825383][T20307] netlink: 'syz.2.3588': attribute type 12 has an invalid length. [ 476.875354][T20302] |ªA–: entered promiscuous mode [ 477.073420][T20328] netlink: 'syz.3.3596': attribute type 13 has an invalid length. [ 477.086536][T20328] netlink: 'syz.3.3596': attribute type 17 has an invalid length. [ 477.099792][T20329] netlink: 'syz.0.3597': attribute type 1 has an invalid length. [ 477.108371][T20329] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3597'. [ 477.150978][T20328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.179038][T20333] tipc: Enabled bearer , priority 0 [ 477.200178][T20325] tipc: Disabling bearer [ 477.217830][T20326] lo speed is unknown, defaulting to 1000 [ 477.583553][T20354] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 477.597985][T20352] netlink: 'syz.2.3605': attribute type 1 has an invalid length. [ 477.889316][T20372] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3609'. [ 477.932186][T20372] veth3: entered promiscuous mode [ 478.280194][T20376] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 478.301168][T20380] lo speed is unknown, defaulting to 1000 [ 478.356988][T20376] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 479.342034][T20407] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 479.356096][T20399] lo speed is unknown, defaulting to 1000 [ 479.392327][T20409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3620'. [ 479.478753][T20409] macsec1: entered promiscuous mode [ 479.484851][T20409] macsec1: entered allmulticast mode [ 479.491356][T20411] tipc: Enabling of bearer rejected, failed to enable media [ 479.582886][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3622'. [ 480.197602][T20447] tipc: Enabling of bearer rejected, already enabled [ 480.219198][T20447] syz_tun: entered allmulticast mode [ 480.230628][T20449] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 480.260865][T20452] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 480.547738][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3634'. [ 480.579859][T20446] syz_tun: left allmulticast mode [ 480.633301][T13963] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.679445][T13963] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.697209][T13963] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.724487][T13963] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.851199][T20481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3638'. [ 481.097484][T20505] lo speed is unknown, defaulting to 1000 [ 481.401936][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3649'. [ 481.546355][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3650'. [ 481.817773][T20538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.825323][T20538] bridge0: port 1(bond3) entered blocking state [ 481.832172][T20538] bridge0: port 1(bond3) entered disabled state [ 481.839089][T20538] bond3: entered allmulticast mode [ 481.847564][T20538] bond3: entered promiscuous mode [ 481.855050][T20538] bridge0: port 1(bond3) entered blocking state [ 481.861687][T20538] bridge0: port 1(bond3) entered forwarding state [ 481.962279][T18633] bridge0: port 1(bond3) entered disabled state [ 481.998230][T20527] lo speed is unknown, defaulting to 1000 [ 482.075303][T20548] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3653'. [ 482.565760][T20574] netlink: 'syz.2.3662': attribute type 1 has an invalid length. [ 482.850197][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3666'. [ 482.863930][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3666'. [ 482.874094][T20585] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3666'. [ 482.885594][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3666'. [ 482.895050][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3666'. [ 482.909585][T20585] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3666'. [ 483.095632][T20596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3668'. [ 483.143984][T20600] netlink: 'syz.4.3671': attribute type 5 has an invalid length. [ 483.314873][T20621] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 484.108699][T20643] tipc: Enabled bearer , priority 10 [ 484.136367][T20643] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3682'. [ 484.161481][T20645] tipc: Enabling of bearer rejected, already enabled [ 484.272878][T20657] lo speed is unknown, defaulting to 1000 [ 484.353810][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3689'. [ 484.462507][T20674] netlink: zone id is out of range [ 484.473239][T20674] netlink: get zone limit has 8 unknown bytes [ 484.484566][T20658] lo speed is unknown, defaulting to 1000 [ 484.869681][T20697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.960094][T20695] lo speed is unknown, defaulting to 1000 [ 485.031955][T20708] tipc: Enabled bearer , priority 0 [ 485.058252][T20708] syzkaller0: entered promiscuous mode [ 485.064156][T20708] syzkaller0: entered allmulticast mode [ 485.112510][T20708] netlink: 'syz.0.3700': attribute type 12 has an invalid length. [ 485.134741][T20708] netlink: 'syz.0.3700': attribute type 14 has an invalid length. [ 485.256490][T20708] tipc: Resetting bearer [ 485.285307][T20706] tipc: Resetting bearer [ 485.302188][T20706] tipc: Disabling bearer [ 485.312818][T20719] netlink: 'syz.4.3703': attribute type 1 has an invalid length. [ 485.320421][T20717] lo speed is unknown, defaulting to 1000 [ 485.576777][T20727] geneve2: entered promiscuous mode [ 485.598278][T13963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 485.608440][T13963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 485.648027][T20727] tun0: tun_chr_ioctl cmd 1074025673 [ 485.654417][T18633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 485.706573][T13963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 485.717817][T20729] lo speed is unknown, defaulting to 1000 [ 486.279299][T20767] sch_fq: defrate 128 ignored. [ 486.316358][T20770] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 486.339296][T20769] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 486.465836][T20771] lo speed is unknown, defaulting to 1000 [ 486.506734][T20777] lo speed is unknown, defaulting to 1000 [ 487.389846][T20818] netlink: 'syz.1.3731': attribute type 1 has an invalid length. [ 487.398152][T20818] __nla_validate_parse: 13 callbacks suppressed [ 487.398168][T20818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3731'. [ 487.618334][T20833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3733'. [ 487.751448][T20831] xt_l2tp: missing protocol rule (udp|l2tpip) [ 488.918808][T20867] netlink: 'syz.1.3743': attribute type 10 has an invalid length. [ 488.926682][T20867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3743'. [ 488.951237][T20867] dummy0: entered promiscuous mode [ 488.969195][T20867] bridge0: port 2(dummy0) entered blocking state [ 488.977497][T20867] bridge0: port 2(dummy0) entered disabled state [ 488.984344][T20867] dummy0: entered allmulticast mode [ 489.017454][T20867] bridge0: port 2(dummy0) entered blocking state [ 489.024087][T20867] bridge0: port 2(dummy0) entered forwarding state [ 489.063510][T20875] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 489.094593][T20878] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 489.175810][T20882] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 489.350063][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 489.523269][T20904] lo speed is unknown, defaulting to 1000 [ 490.066575][T20911] lo speed is unknown, defaulting to 1000 [ 490.166817][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3751'. [ 490.301509][T20901] bond4: entered promiscuous mode [ 490.307495][T20901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.662184][T20931] netlink: 'syz.0.3756': attribute type 21 has an invalid length. [ 490.670169][T20931] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3756'. [ 490.700981][T20930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3756'. [ 490.726436][T20931] netlink: 'syz.0.3756': attribute type 4 has an invalid length. [ 490.737272][T20933] netlink: 'syz.4.3757': attribute type 4 has an invalid length. [ 490.760428][T20931] netlink: 'syz.0.3756': attribute type 5 has an invalid length. [ 490.779053][T20933] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3757'. [ 490.795745][T20931] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3756'. [ 491.076808][T20946] netlink: 'syz.4.3760': attribute type 1 has an invalid length. [ 491.203904][T20946] bond3: entered promiscuous mode [ 491.211191][T20946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.405143][T20942] bond3: (slave bridge2): making interface the new active one [ 491.447175][T20942] bridge2: entered promiscuous mode [ 491.475425][T20942] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 491.602699][T20954] lo speed is unknown, defaulting to 1000 [ 491.710408][T20961] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3765'. [ 492.250018][T20955] netlink: 'syz.0.3762': attribute type 1 has an invalid length. [ 492.269973][T20955] netlink: 'syz.0.3762': attribute type 4 has an invalid length. [ 492.309748][T20955] netlink: 'syz.0.3762': attribute type 1 has an invalid length. [ 492.728076][T20987] __nla_validate_parse: 2 callbacks suppressed [ 492.728094][T20987] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3770'. [ 492.801115][T20987] IPv6: addrconf: prefix option has invalid lifetime [ 492.835123][T20991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3771'. [ 492.893264][T20991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3771'. [ 492.935389][T20991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3771'. [ 493.167708][T21001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3773'. [ 493.573139][T21012] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 493.699533][T21011] lo speed is unknown, defaulting to 1000 [ 494.117942][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3777'. [ 494.238172][T21019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3779'. [ 494.322032][T21019] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3779'. [ 494.349366][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3779'. [ 494.413509][T21021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3779'. [ 494.508085][T21028] batadv0: entered promiscuous mode [ 494.763947][T21034] dummy0: left allmulticast mode [ 494.773181][T21034] bridge0: port 2(dummy0) entered disabled state [ 494.796811][T21034] batman_adv: batadv0: Adding interface: dummy0 [ 494.803446][T21034] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.868446][T21034] batman_adv: batadv0: Interface activated: dummy0 [ 494.910137][T21037] batadv0: mtu less than device minimum [ 494.945200][T21037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.957649][T21037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.969625][T21037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.981532][T21037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 494.993639][T21037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.005586][T21037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.017731][T21037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.029656][T21037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.272254][T21055] ip6erspan0: entered promiscuous mode [ 495.312315][T21062] sctp: [Deprecated]: syz.3.3792 (pid 21062) Use of int in max_burst socket option. [ 495.312315][T21062] Use struct sctp_assoc_value instead [ 495.439581][T21067] lo speed is unknown, defaulting to 1000 [ 495.640624][ T5852] Bluetooth: hci0: command tx timeout [ 496.052588][T21086] lo speed is unknown, defaulting to 1000 [ 496.062806][T21098] xt_l2tp: v2 tid > 0xffff: 37482740 [ 496.359638][T21107] vlan3: entered allmulticast mode [ 496.366072][T21107] bond2: entered allmulticast mode [ 496.671114][T21135] vxcan1: entered allmulticast mode [ 496.908169][T21145] validate_nla: 1 callbacks suppressed [ 496.908188][T21145] netlink: 'syz.0.3813': attribute type 20 has an invalid length. [ 496.928632][T21145] netlink: 'syz.0.3813': attribute type 21 has an invalid length. [ 497.120318][T21158] netlink: 'syz.0.3819': attribute type 10 has an invalid length. [ 497.144764][T21158] team0: Port device dummy0 added [ 497.162101][T21154] tipc: Enabled bearer , priority 0 [ 497.170581][T21154] syzkaller0: entered promiscuous mode [ 497.176080][T21154] syzkaller0: entered allmulticast mode [ 497.233313][T21154] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 497.266743][T21154] tipc: Resetting bearer [ 497.337032][T21153] tipc: Resetting bearer [ 497.365141][T21153] tipc: Disabling bearer [ 497.495688][T21176] ip6gretap1: entered promiscuous mode [ 497.686486][T21193] team0: Device gtp0 is of different type [ 497.871203][T21210] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 498.068711][T21221] __nla_validate_parse: 7 callbacks suppressed [ 498.068730][T21221] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3835'. [ 498.094146][T21216] lo speed is unknown, defaulting to 1000 [ 498.351351][T21240] net_ratelimit: 16 callbacks suppressed [ 498.351369][T21240] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 498.670414][T21246] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3842'. [ 499.455227][T21283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.460681][T21288] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 499.539190][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3853'. [ 499.632344][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3856'. [ 499.651587][T21297] netlink: 'syz.4.3856': attribute type 10 has an invalid length. [ 499.665128][T21297] team0: Port device dummy0 added [ 499.672993][T21297] netlink: 'syz.4.3856': attribute type 10 has an invalid length. [ 499.683714][T21297] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 499.709437][T21297] team0: Failed to send options change via netlink (err -105) [ 499.728171][T21297] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 499.750736][T21297] team0: Port device dummy0 removed [ 499.763357][T21297] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 500.188650][T21326] lo speed is unknown, defaulting to 1000 [ 500.358105][T21333] sctp: [Deprecated]: syz.1.3866 (pid 21333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.358105][T21333] Use struct sctp_sack_info instead [ 500.848827][T21354] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3870'. [ 500.999104][T21358] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3871'. [ 501.208589][T21371] netlink: 'syz.0.3873': attribute type 1 has an invalid length. [ 501.219623][T21372] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.3874'. [ 501.251843][T21371] gretap2: entered promiscuous mode [ 501.568560][T21392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3881'. [ 501.742772][T21404] IPv6: NLM_F_REPLACE set, but no existing node found! [ 501.942464][T21417] macsec2: entered promiscuous mode [ 501.953406][T21417] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 501.997019][T21417] macsec2: entered allmulticast mode [ 502.026921][T21417] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 502.061481][T21423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3891'. [ 502.075813][T21423] nbd: illegal input index 65508 [ 502.220474][T21423] lo speed is unknown, defaulting to 1000 [ 502.539559][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3894'. [ 502.559239][T21435] veth0_to_bridge: entered promiscuous mode [ 502.594825][T21439] lo speed is unknown, defaulting to 1000 [ 502.971905][T21463] netlink: 'syz.2.3901': attribute type 1 has an invalid length. [ 503.116938][T21469] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 503.191498][T21463] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 503.203952][T21463] bond1 (unregistering): Released all slaves [ 503.255223][T21479] __nla_validate_parse: 2 callbacks suppressed [ 503.255241][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.280695][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.295369][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.314373][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.361652][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.371982][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.414583][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.458757][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.478499][ T5157] Bluetooth: hci3: command 0x040f tx timeout [ 503.500549][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.510164][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3904'. [ 503.596823][T21493] netlink: 'syz.2.3908': attribute type 10 has an invalid length. [ 503.629278][T21493] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.655464][T21493] bond0: (slave team0): Enslaving as an active interface with an up link [ 503.748518][T21498] netlink: 'syz.3.3907': attribute type 10 has an invalid length. [ 503.812332][T21498] team0: Port device dummy0 added [ 503.948381][T21517] wg1: entered promiscuous mode [ 503.956927][T21517] wg1: entered allmulticast mode [ 503.986555][T21515] netlink: 'syz.4.3914': attribute type 13 has an invalid length. [ 503.995870][T21515] netlink: 'syz.4.3914': attribute type 17 has an invalid length. [ 504.098589][T21515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.107991][T21515] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.149782][T21515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.342588][T21532] bond4: Removing last arp target with arp_interval on [ 504.394963][T21536] bond5: Removing last arp target with arp_interval on [ 504.586757][T21544] Bluetooth: MGMT ver 1.23 [ 504.626155][T21545] lo speed is unknown, defaulting to 1000 [ 505.024492][T21569] netlink: 'syz.1.3929': attribute type 1 has an invalid length. [ 505.072416][T21569] nbd: error processing sock list [ 506.188449][T21592] sctp: [Deprecated]: syz.0.3933 (pid 21592) Use of int in max_burst socket option deprecated. [ 506.188449][T21592] Use struct sctp_assoc_value instead [ 506.219602][T21598] lo speed is unknown, defaulting to 1000 [ 506.273920][T21610] nbd: must specify at least one socket [ 506.447109][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 506.746134][ T5852] Bluetooth: hci3: link tx timeout [ 506.753358][ T5852] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.890407][T21648] : entered promiscuous mode [ 506.923820][T21654] openvswitch: netlink: Actions may not be safe on all matching packets [ 507.034994][T21654] tun0: tun_chr_ioctl cmd 1074025672 [ 507.046231][T21654] tun0: ignored: set checksum disabled [ 507.180366][T21666] pim6reg1: entered promiscuous mode [ 507.186791][T21666] pim6reg1: entered allmulticast mode [ 507.203159][T21666] sctp: [Deprecated]: syz.3.3957 (pid 21666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.203159][T21666] Use struct sctp_sack_info instead [ 507.254416][T21671] block nbd1: Unsupported socket: should be TCP or UNIX. [ 507.342832][T21669] lo speed is unknown, defaulting to 1000 [ 508.841997][ T5157] Bluetooth: hci3: command 0x040f tx timeout [ 509.428779][T21731] netlink: 'syz.3.3975': attribute type 5 has an invalid length. [ 509.456537][T21729] lo speed is unknown, defaulting to 1000 [ 509.466511][T21733] netlink: 'syz.3.3975': attribute type 5 has an invalid length. [ 509.562562][T21722] __nla_validate_parse: 29 callbacks suppressed [ 509.562582][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3968'. [ 509.652870][T21738] lo speed is unknown, defaulting to 1000 [ 509.678997][T21743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3977'. [ 510.264432][T21762] netlink: 'syz.0.3982': attribute type 1 has an invalid length. [ 510.278677][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'. [ 510.304641][T21762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3982'. [ 510.331189][T21763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3981'. [ 510.344588][T21760] bridge2: entered allmulticast mode [ 510.368636][T21758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3981'. [ 510.593475][T21770] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3985'. [ 511.135286][T21785] syzkaller1: entered promiscuous mode [ 511.151217][T21785] syzkaller1: entered allmulticast mode [ 511.619021][T13963] nci: nci_rx_work: unknown MT 0x1 [ 511.760508][T21799] netlink: 'syz.3.3990': attribute type 1 has an invalid length. [ 512.148888][T21799] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 512.538602][T21813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3995'. [ 512.550606][T21817] netlink: 'syz.4.3994': attribute type 15 has an invalid length. [ 512.788041][T21826] IPVS: length: 141 != 8 [ 512.846187][T21836] lo speed is unknown, defaulting to 1000 [ 512.881059][T21841] tipc: Enabled bearer , priority 10 [ 512.933121][T21845] netlink: 'syz.3.4004': attribute type 1 has an invalid length. [ 513.023115][T21845] bond3: (slave bridge4): making interface the new active one [ 513.043187][T21845] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 513.070498][T21843] lo speed is unknown, defaulting to 1000 [ 513.183454][T21854] sctp: [Deprecated]: syz.1.4006 (pid 21854) Use of int in maxseg socket option. [ 513.183454][T21854] Use struct sctp_assoc_value instead [ 513.257748][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4006'. [ 513.423311][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4006'. [ 513.497226][T21869] netlink: 'syz.4.4011': attribute type 12 has an invalid length. [ 513.771121][T21883] gretap0: entered promiscuous mode [ 513.935030][T21902] wg1 speed is unknown, defaulting to 1000 [ 513.989997][T21902] wg1 speed is unknown, defaulting to 1000 [ 514.050884][T21902] wg1 speed is unknown, defaulting to 1000 [ 514.066417][T21905] netlink: 'syz.0.4021': attribute type 1 has an invalid length. [ 514.090617][T21905] netlink: 'syz.0.4021': attribute type 1 has an invalid length. [ 514.142894][T21907] lo speed is unknown, defaulting to 1000 [ 514.189687][T21907] wg1 speed is unknown, defaulting to 1000 [ 514.207513][T21902] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 514.431989][T21902] wg1 speed is unknown, defaulting to 1000 [ 514.476691][T21902] wg1 speed is unknown, defaulting to 1000 [ 514.479588][T21915] lo speed is unknown, defaulting to 1000 [ 514.659395][T21902] wg1 speed is unknown, defaulting to 1000 [ 514.723197][T21915] wg1 speed is unknown, defaulting to 1000 [ 514.841066][T21902] wg1 speed is unknown, defaulting to 1000 [ 515.039122][T21902] wg1 speed is unknown, defaulting to 1000 [ 515.043896][T21940] __nla_validate_parse: 5 callbacks suppressed [ 515.043913][T21940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4028'. [ 515.066125][T21902] wg1 speed is unknown, defaulting to 1000 [ 515.089036][T21902] wg1 speed is unknown, defaulting to 1000 [ 515.200163][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4029'. [ 515.220054][T21902] wg1 speed is unknown, defaulting to 1000 [ 515.577784][T21966] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 515.776367][T21978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4040'. [ 515.876324][T21985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4041'. [ 515.978140][ T30] audit: type=1800 audit(1759639802.350:17): pid=21977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4039" name="memory.events" dev="tmpfs" ino=799 res=0 errno=0 [ 516.022702][ T30] audit: type=1804 audit(1759639802.350:18): pid=21977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4039" name="memory.events" dev="tmpfs" ino=799 res=1 errno=0 [ 516.133158][T21996] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4043'. [ 516.155809][T21996] openvswitch: netlink: Key 18 has unexpected len 4 expected 2 [ 516.460929][T22010] tipc: Enabling of bearer rejected, already enabled [ 516.482524][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4048'. [ 516.592103][T22018] lo speed is unknown, defaulting to 1000 [ 516.633755][T22018] wg1 speed is unknown, defaulting to 1000 [ 516.771226][T22017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4046'. [ 517.060525][T22032] veth0_to_bond: entered allmulticast mode [ 517.394550][T22048] openvswitch: netlink: Flow actions attr not present in new flow. [ 517.555359][T22059] netlink: 'syz.2.4057': attribute type 13 has an invalid length. [ 517.574432][T22059] netlink: 'syz.2.4057': attribute type 17 has an invalid length. [ 517.801388][T22072] openvswitch: netlink: Duplicate key (type 32). [ 517.817576][T22059] 0ªX¹¦À: left allmulticast mode [ 517.836497][T22059] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 517.909750][T22067] tipc: Enabled bearer , priority 0 [ 517.967947][T22063] lo speed is unknown, defaulting to 1000 [ 517.976143][T22067] tipc: Disabling bearer [ 518.030984][T22063] wg1 speed is unknown, defaulting to 1000 [ 518.427447][T22080] lo speed is unknown, defaulting to 1000 [ 518.707957][T22080] wg1 speed is unknown, defaulting to 1000 [ 518.932316][ T5157] Bluetooth: hci5: command 0x0406 tx timeout [ 519.134893][T22113] lo speed is unknown, defaulting to 1000 [ 519.161435][T22113] wg1 speed is unknown, defaulting to 1000 [ 519.238419][T22114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4067'. [ 519.249006][T22114] bridge_slave_0: default FDB implementation only supports local addresses [ 519.337524][T22124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'. [ 519.374582][T22130] netlink: 'syz.1.4074': attribute type 3 has an invalid length. [ 519.386333][T22132] lo: entered allmulticast mode [ 519.390949][T22121] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4071'. [ 519.667956][T22145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.730937][T22148] netlink: 'syz.3.4077': attribute type 9 has an invalid length. [ 519.911865][T22145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.264923][T22174] lo speed is unknown, defaulting to 1000 [ 520.290572][T22173] lo speed is unknown, defaulting to 1000 [ 520.301006][T22174] wg1 speed is unknown, defaulting to 1000 [ 520.316595][T22183] __nla_validate_parse: 1 callbacks suppressed [ 520.316612][T22183] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4089'. [ 520.332443][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'. [ 520.348512][T22176] Bluetooth: MGMT ver 1.23 [ 520.418557][T22187] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4088'. [ 520.488736][T22185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'. [ 520.586785][T22176] netlink: 'syz.4.4087': attribute type 4 has an invalid length. [ 520.596004][T22173] wg1 speed is unknown, defaulting to 1000 [ 520.735212][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4086'. [ 520.746298][T22193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4089'. [ 522.148754][T22236] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4094'. [ 522.194173][T22235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.480479][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4103'. [ 522.676707][T22250] bridge0: port 3(syz_tun) entered disabled state [ 522.772857][T22250] syz_tun (unregistering): left allmulticast mode [ 522.818143][T22250] syz_tun (unregistering): left promiscuous mode [ 522.833350][T22250] bridge0: port 3(syz_tun) entered disabled state [ 522.938511][T22261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4106'. [ 523.249146][T22274] netlink: 'syz.2.4108': attribute type 10 has an invalid length. [ 523.259620][T22274] netlink: 'syz.2.4108': attribute type 10 has an invalid length. [ 523.779046][T22307] ------------[ cut here ]------------ [ 523.784604][T22307] ida_free called for id=1310 which is not allocated. [ 523.793230][T22307] WARNING: CPU: 0 PID: 22307 at lib/idr.c:592 ida_free+0x280/0x310 [ 523.801440][T22307] Modules linked in: [ 523.805452][T22307] CPU: 0 UID: 0 PID: 22307 Comm: syz.0.4116 Not tainted syzkaller #0 PREEMPT(full) [ 523.815075][T22307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 523.825256][T22307] RIP: 0010:ida_free+0x280/0x310 [ 523.832001][T22307] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 523.852324][T22307] RSP: 0018:ffffc90002f87b60 EFLAGS: 00010246 [ 523.858973][T22307] RAX: 3f3d973e395b9600 RBX: 0000000000000a02 RCX: ffff8880301dbc80 [ 523.867512][T22307] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 523.875598][T22307] RBP: ffffc90002f87c60 R08: 0000000000000003 R09: 0000000000000004 [ 523.884045][T22307] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff920005f0f70 [ 523.892553][T22307] R13: dffffc0000000000 R14: ffff888030641a00 R15: 000000000000051e [ 523.901125][T22307] FS: 00007f39f19d56c0(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 523.910635][T22307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.917785][T22307] CR2: 0000000000000000 CR3: 00000000800da000 CR4: 00000000003526f0 [ 523.925875][T22307] Call Trace: [ 523.929400][T22307] [ 523.932362][T22307] ? __pfx_ida_free+0x10/0x10 [ 523.937098][T22307] ? down_write+0x162/0x1f0 [ 523.941627][T22307] ? __pfx_down_write+0x10/0x10 [ 523.946508][T22307] ? alloc_mnt_ns+0x24e/0x310 [ 523.951297][T22307] copy_mnt_ns+0x197/0x820 [ 523.955742][T22307] ? rcu_is_watching+0x15/0xb0 [ 523.960887][T22307] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 523.966295][T22307] create_new_namespaces+0xd1/0x720 [ 523.971582][T22307] ? bpf_lsm_capable+0x9/0x20 [ 523.976281][T22307] ? security_capable+0x7e/0x2e0 [ 523.981346][T22307] unshare_nsproxy_namespaces+0x11c/0x170 [ 523.987135][T22307] ksys_unshare+0x4c8/0x8c0 [ 523.991662][T22307] ? __pfx_ksys_unshare+0x10/0x10 [ 523.996710][T22307] ? rcu_is_watching+0x15/0xb0 [ 524.001572][T22307] __x64_sys_unshare+0x38/0x50 [ 524.006357][T22307] do_syscall_64+0xfa/0x3b0 [ 524.011072][T22307] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.013482][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 524.016305][T22307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.016331][T22307] ? clear_bhb_loop+0x60/0xb0 [ 524.036183][T22307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.042664][T22307] RIP: 0033:0x7f39f378eec9 [ 524.047181][T22307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.066885][T22307] RSP: 002b:00007f39f19d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 524.075730][T22307] RAX: ffffffffffffffda RBX: 00007f39f39e6090 RCX: 00007f39f378eec9 [ 524.083904][T22307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 524.091958][T22307] RBP: 00007f39f3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 524.092973][T22311] team1: entered promiscuous mode [ 524.100007][T22307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.100025][T22307] R13: 00007f39f39e6128 R14: 00007f39f39e6090 R15: 00007ffcf3a3ec58 [ 524.100060][T22307] [ 524.100082][T22307] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 524.100097][T22307] CPU: 0 UID: 0 PID: 22307 Comm: syz.0.4116 Not tainted syzkaller #0 PREEMPT(full) [ 524.100120][T22307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.100134][T22307] Call Trace: [ 524.100143][T22307] [ 524.100152][T22307] dump_stack_lvl+0x99/0x250 [ 524.100181][T22307] ? __asan_memcpy+0x40/0x70 [ 524.100203][T22307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.100228][T22307] ? __pfx__printk+0x10/0x10 [ 524.100273][T22307] vpanic+0x281/0x750 [ 524.100296][T22307] ? __pfx__printk+0x10/0x10 [ 524.100325][T22307] ? __pfx_vpanic+0x10/0x10 [ 524.100363][T22307] ? is_bpf_text_address+0x26/0x2b0 [ 524.100396][T22307] panic+0xb9/0xc0 [ 524.100420][T22307] ? __pfx_panic+0x10/0x10 [ 524.100461][T22307] __warn+0x31b/0x4b0 [ 524.100485][T22307] ? ida_free+0x280/0x310 [ 524.100507][T22307] ? ida_free+0x280/0x310 [ 524.100525][T22307] report_bug+0x2be/0x4f0 [ 524.100543][T22307] ? ida_free+0x280/0x310 [ 524.100560][T22307] ? ida_free+0x280/0x310 [ 524.100577][T22307] ? ida_free+0x282/0x310 [ 524.100593][T22307] handle_bug+0x84/0x160 [ 524.100614][T22307] exc_invalid_op+0x1a/0x50 [ 524.100635][T22307] asm_exc_invalid_op+0x1a/0x20 [ 524.100651][T22307] RIP: 0010:ida_free+0x280/0x310 [ 524.100668][T22307] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 524.100685][T22307] RSP: 0018:ffffc90002f87b60 EFLAGS: 00010246 [ 524.100703][T22307] RAX: 3f3d973e395b9600 RBX: 0000000000000a02 RCX: ffff8880301dbc80 [ 524.100718][T22307] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 524.100730][T22307] RBP: ffffc90002f87c60 R08: 0000000000000003 R09: 0000000000000004 [ 524.100744][T22307] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff920005f0f70 [ 524.100758][T22307] R13: dffffc0000000000 R14: ffff888030641a00 R15: 000000000000051e [ 524.100795][T22307] ? __pfx_ida_free+0x10/0x10 [ 524.100819][T22307] ? down_write+0x162/0x1f0 [ 524.100842][T22307] ? __pfx_down_write+0x10/0x10 [ 524.100867][T22307] ? alloc_mnt_ns+0x24e/0x310 [ 524.100896][T22307] copy_mnt_ns+0x197/0x820 [ 524.100919][T22307] ? rcu_is_watching+0x15/0xb0 [ 524.100943][T22307] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 524.100973][T22307] create_new_namespaces+0xd1/0x720 [ 524.100997][T22307] ? bpf_lsm_capable+0x9/0x20 [ 524.101020][T22307] ? security_capable+0x7e/0x2e0 [ 524.101053][T22307] unshare_nsproxy_namespaces+0x11c/0x170 [ 524.101073][T22307] ksys_unshare+0x4c8/0x8c0 [ 524.101103][T22307] ? __pfx_ksys_unshare+0x10/0x10 [ 524.101129][T22307] ? rcu_is_watching+0x15/0xb0 [ 524.101161][T22307] __x64_sys_unshare+0x38/0x50 [ 524.101184][T22307] do_syscall_64+0xfa/0x3b0 [ 524.101200][T22307] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.101229][T22307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.101248][T22307] ? clear_bhb_loop+0x60/0xb0 [ 524.101271][T22307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.101289][T22307] RIP: 0033:0x7f39f378eec9 [ 524.101307][T22307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.101323][T22307] RSP: 002b:00007f39f19d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 524.101350][T22307] RAX: ffffffffffffffda RBX: 00007f39f39e6090 RCX: 00007f39f378eec9 [ 524.101365][T22307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 524.101377][T22307] RBP: 00007f39f3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 524.101390][T22307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.101402][T22307] R13: 00007f39f39e6128 R14: 00007f39f39e6090 R15: 00007ffcf3a3ec58 [ 524.101433][T22307] [ 524.106431][T22307] Kernel Offset: disabled