last executing test programs: 9m31.842093731s ago: executing program 2 (id=2553): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x40000100, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) 9m31.720272393s ago: executing program 2 (id=2556): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/198, 0x32, 0xc6, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}}, 0x4810) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10800d30}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0xffffffffffffffef, 0xcb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffe0}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 9m31.217625844s ago: executing program 2 (id=2562): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0x0, 0xff000000], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0xbc529153b073ce1e, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x40}, @empty, [0x0, 0xffffff00], [0x0, 0xff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd4a00000, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0x6, 0x5, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc9, &(0x7f0000000200)=""/201, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000000c0)=[{0x2, 0x2, 0x1, 0x5}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0x8, 0x7}, {0x1, 0x4, 0xa, 0x6}]}, 0x94) readv(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/169, 0xa9}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="01f10500000000001800128008000100677470000c00028008000100b561f5c3"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r5, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) syz_emit_ethernet(0xd81, &(0x7f0000002480)={@local, @random="513a80bbd809", @void, {@llc={0x4, {@snap={0xaa, 0xaa, "ba", "581ef5", 0x19, "f4ac06efdce3ca21e664ae6eb8c283eb7c43af78aa6d158b83d8384b6dac6a9bca4732cf838c926779ad0ddbc0ac21206a8a4fb6d994aac3a679dd143d4985bdddd0abecb7e70119c6013f7fb06a92a416945bee6c162f29b3047f8cc52889a241f53b90f6f06d3ed31f53c9b9a4b2189965d46f9a35796577bbe0376d96fb6cdc0390c9e69301e924294b3a370431b2bb11c43588a34bf389cc40386ba133302445c89fbfbf4e7e52c82dfddaaf7313339ca861f04efd15002ae901825865bde530a1de398826dc9ea4aba48dbf26aa6136df8946ba4c2d1dc222269dc002fab4ae87c2a832685d5bd0da8925fb02041308a3f71c1f39644c8551a32143f1886ef88f1726a2751fd794f9044d8c5f09a36d507235285179035cf9a7fa45a468bddacfbc5f491e547a718339ad79c37b54eb300ff7e3e7a2b0b357abd90da22eb56c18f71ebe7df507d1956254725c0459e78f77fe55db332abb74188ad252136e8e5166509f14dc902c4e935240c7b960557733382e4e7871d4faf7c7c886139708e8a4458efa13ee0b834e11d03863187c86de67fe019f2f78680fe371fb101a4cbaee1a7664ca18c156abb83ab5e7c5e75ec743790682d4baf26f66876a30e139031d8a07e0070faa50f7b5d4453cf14aa8a96dc87fde56d6c9af6081c127639f4683400fa8bb3b314bf0a0f97332fc048fb8e8586eb862495183b41955574caf38f1b5dd67f0479a2e79e3a40d86a386368054608277ef3f940cfe09b68c6ae3dcbe707d0ee4e5b1603da0665805cc2db5d8e544cc5957d42c42cf1a42014986bb8137fd65dc980b263964e3169beb43ab4a3f88c351b060d76b5ac976c198d82a1407c6638581b4d81f85a05ed6eca7d9be12ba3bdf23c2fbd220e4a840676e3038df594fb903c08bd48b728c2c8c751d25eecb4bd8e499f83a3612eafe6458fc3748faa318348b66d525129aaf1599d97f17a319a6bf53524d9b2678880718b0176cf5929fe7a8298ca4e0ede2ecc27070b38674bc0a9f74368bb6bd6a653c85dfae9e7b3bef1a0b5153ab744bf4a4d8b1247440cd0103d10aafee78c6fb29026a685b6ba2550baa42d1b22f568236b1ba4a1b9a4d20e97968010a81ab2b4f2bc43f7b0be4adcec9dac74b37d44f8d0a7a7e7277c3936d74087008c4b4d5a7b7dad3e748e061fbcc4861087f8f869b29dcc52986d4d528224ddcd902ed2fe447f9d69e9266be01d20c93ab437a1e9280245aab2f206050713868a3f5d9486fe08738d5368fca54d1f3b5078758f3be190945828804261bb8a992086894fe22d772984bcfa5c07310f790114614bac19d3faf5137a778a9a3f1a87826093e66ff2a1e2c7fa9d20de7a58e62dfd9de7e4ce846bb6e0374e29ff1552af384ebd567b5ffae9a62c88eed8507c419d6e7ec1becdeaf3eaab35829efc34fbc8e98af93f228893e588f58af8a4564d63dad59f145e36ede3f5c477a11c93ce2118f85533bc22a22a9f770e02e3c474772f6d4f9988cbf5961bb777e295b89739a7395104a8a272eb2f5de5d1402e33bc0b9655fa03342a0aa29b37e8162b760cc3fbf8ddfba2c19cd6f03a106f2e960a67366659c59591581a5530dd1164937ae5efa50f0a1689014d2c18e119ec1a9c207fd48c6cb042e8d64f696a10df809d1dfaf3f5107ab5e200f4d551c8da9a453d8a96c17fa5b9c800597de6ac006d3deede4d6a50612d6b95c51c82891064e12b0182511e55a0ba36bcee0078a37a346470eb62b42957471c4ffb72b64e25780fa08fb55804b867efbc0c92498f1c37e2ee32363e681c87336192d4f025dfed228722faa96412ffeace1a64bb0beeddd555d705e3b760dc6e786d41ff2b71ecfd300f607c136e72d496ba76ce5fab1adaf7bb4a73708fa497cc7c8d2d5d0d4683f4b4735bfcaf52fb6c7e90c037aa936eabbcfc8fb9ee4f5b5d4f55033920de202f079d7fa547939b6e86ca21174958bf59f2aa417653ec3506e2dd51d4d1e863b6875ce63192b238147c9fe1a62757f69bed81bae13e58f89303ff7a98c878f6d098c047a8d7f3348329b31f68f96d4381fa343b68cc15a81d8a472160481f1706e09305035333709cd8931cc87df9682919f5de71be9d5f73dc1950f119097046118fcaeca999b8d7ca94933cc7656a2d17a93a050f046f10bb75936de067d40cc23d2b41e29401cd90ad5c828663d38279c4ed716ea020c938634ae9097cb5ba146b619a97a82a987782a4ae63b0aa43ab5f5b55b98afbb37f1ae31ffd09999ca67935776b2ada1a5b68b21915f6d17d23e6fbefd22848866512e71d9b7568fdc01b336dadd413d30e6bf8d16a39d67562c3b021dfe71aa9716a8ea58e68b60ee38b76470c6fa3bcf97895e90e8911c4cb3fff691cb2102de5ccbe255232ee4c95f0b5d4ebe0f4208b2a1ae0a59c74efae84631945aef37e9398d1b56360a3a9dbcfd9dcb0e67ad8fa9babc4eb2dfecc15faa99e14906f898df28f37549e794ca576b6215a94dcc8ddece8d18e26f4644b21fa70ceaa9e8e29936f2d8204f000fe975ef3cd0f6ded076786009bcf462167129e58bd78691e5019cdc173a17555e3981a8e2b956d0ec9b116b51d6dfd911cd884c8e1b3e8160b2dd0ca26636129f9036403cda9370845b899ff47dff7cbd2e4e141fe9e9c6cff5b8e9206487df467cd4b0eefbcf662eb102ed5eb60db4003a3c2944a0c5c7114fd876ace5779d5e5ded72e94b48dd5104fca29c05960615966fbf5eb942c103a16d5932f827dd638172c9ebc182e8ebeb5f468b8c0deab3915baa414373e33858e533bcec5bb7c8d1e39babce11d7a38c4a02b0e22ca96542d362dc8f5ed5db64c607dad5ed486290c2c3c505cb4dc297f98a69f4b2a66de5057f47a5327e0b85885b15a74f78d3492dac274033db83138fc689ac586fa3539f01b19751cf82428d7ce1fb2d626b46c25e19c3e1541b17ce23bcaebda8f4bc209c92b7b0949181aa22fce8db40f10d7b52e62aa8bb2baae6aa83f809088d3230863183cb9f28de9167a672bdcb9f90e36c3e5f06c2d1a5bee0505d9cae7b9553ea9bf00762ed625f92852a12aefbb754e5a3c64a4c403b99bfb2b689b2535313490a99077fcfff35fb73359f616da8ede6720b5be8788f9e38d9c0c805846dc3ffb99f10f91bd24070ec7049e9391a5c39fde21beaeb66c835888380a3caf8e6fbd75a54b2e304d3019a1c79a8ee4c76a2e83b421be21ca64428d6ca2d6d64c257f06bf139fb6186548fe607aaaa8e794fae97d87c057843533d56e83a30ad3392b4dcf64a61197ac10716771d15112ee5fc94e7f62ba0f16b0f1845e0793cfedb2fc1e7efc215e0a3a71fbc7a33430b446ca34287ff5f1e3646df843e72600fc2056b2f20f311b5883d90128a54619dbecad2f819f103226d5728619b16a13e9b249ad4d43cc8756f44c4f1ecc46e81d51b67b2fbe8fd3d36a4f1c0f4fefeceb0696404247c8303e300e148aafe1d483b25e8c928428a934f239e098cdb589f2a7972b15c90bbbd0ccf5bd22ade3079e363407f5676f0832f6bbbd6779a3c08bbef0a971b24278f0cd64d4a92f3a26e92e04ef8b210d176bd4ce2facaadeaef13a87f4157b151db04fe6b98cecfdabef54f174955bb6d2b721612cef39509d405dbbb828c0e60228597b13a209316e1f07f1094bf1b45b4259019ed1ba95f13dec7293e4c38fe02cdfa6eee21454044d8b01c094a7f85d9a5a9736d7e112cce74381f49af6d05df65db785e8fc3fbbc246a54e4026920bddcc8716c969de428276b23419b6c9005d304a8f7e4dda31e1f9652fd3f1bfe268f3325180d0492923e83d80fa7b7089acfee55865276a821ca9944a5f631f8d6ea0da89d7355e5c7cb332ff0575b7211c5d2ef3e326a6dc0469c373d51ec7328fb6cd61da4cf9c11c94100effbecc9db1e1f731ec4dafacf8de501b992d3780d33d3209a8bcd8c6221496a004c05231b81565361c9cae3e5624847e1af009e384e105954105e92da779560116427fcde18e260fb080ef242d2e8f7a56df2d695ab08175404187911b84ad3c278c3ef464e4209c2dc672002fc442069df432ba4c59c5b8508973544a25605ac06d9698bb11d170d8b7c7c0c119c4e28b0581cbcc3b38f3df78e7101609f451ce4e2c5f2408e81a7ccc924bb521a6d3c5dfb14ec4a897120dc7e4de17e41bf55fba2ceaeef9f4b500fd6fee1c6600f07d53ee0af7294f8b3856a2636c9659807e780147a1f33f1d5f2a3929e2c48e25a7ddf68ed348a54d3a808e5e1700b7a1a62e36cc05dc2e11351712d31f3fbd7f82aff7f10e0681cc2a9aa38f2ea253615d75b0e151bcb99a816c8870a129242d699733f1f60df3d226a0d5ed5faa4716bbdaa08a9e3843241d7763db814b68754aa2b4ad4b9d7954517ae32dd7f13ca9582e26cf853a948a7870bf2074285d34a3aad93303cd46fc65733aa7c5c62f57245e341963c936c3644fde74d8ef71173d878f07b5aa5b321e29057388e9daaae4b36efcdf6e446a51ee70d819620bb8ad00a73dee05c38e0bbab914ef99f526b3f2bf683db6bcfb165b52f6aeac8c1442fa04c421c6eb1781f830f1e2b76cd14e63b1a590e0157f470aad57b1accceb9c4c34985e6b5d1d5fd190eb6e0c8b5725f51e411e51868f8f1c79f38deb0267941f11692d86bc674a58ff506409ab2e092f9edd59632dec5e374447d98e0572eecc169b6b28f207e70e2fcb7fb69edb5e75f462f5e9249aae3b0a995134c90e494b817dec78853ce52a1b73da710a35130c84abef27db28f14a494349611e643a3b6b58c93de77d409a9545d078e8bf666bc03"}}}}}, 0x0) 9m30.962609075s ago: executing program 2 (id=2567): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="04000000008300000000000000007b5ef9a7c440e10000000000002098551e77e84009213a422b8b0f978dc49dc9bc5f8d2484f3351859933289f5999d11fadd7fe9d6b8ab008b23ae7f027b83e19b269854615b82e5314f58dbfb91a3f141232fa66aefb6f85d870e5e396cec02d56bf2d866bfff8bf10b463c1637098a266002711682b9611a3b55a17394b41509577c432fdb35b39bf3af7e4226c6962199297e4e3d4f253262f1db91bcafcd6c8b025612f040a4ca899c376d908f911f82b9f78c37198d682a4a77382e47a0a6e0996549b272566d52b14f942ebfa8da753992472b", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0e000000000000000100"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{0x1}, &(0x7f0000001800), &(0x7f0000001840)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x2, 0x30000000, 0x82, 0x1, 0x10001, 0x1, 0xca0, '\x00', r1, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x59, 0x536, 0x3, 0x1, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{0x1}, &(0x7f0000001a40), &(0x7f0000001a80)}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b80)={{0x1}, &(0x7f0000001b00), &(0x7f0000001b40)='%+9llu \x00'}, 0x20) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) (async) write$cgroup_subtree(r3, &(0x7f0000001200)=ANY=[], 0xfe33) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0xe, 0x4, &(0x7f0000001e40)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1", @ANYRES8=r4, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x1}, 0x10}, 0x94) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x5, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r6, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) 9m30.640019753s ago: executing program 2 (id=2573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x801}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000100aaaa"], 0x48}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040c1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x9, 0x6, 0x800, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x4}, 0x50) ioctl(r4, 0xfffffffe, &(0x7f0000000300)="ca774b532ea9af90c016a82552df1469b0ebe72f069f86628ec358c6326417fb12d4db35079a2a289ec37bfd90b2a5914f7c1c4d8be3fe1efe3bf43a9afbd295a594b07661bd724a72c8425684754792b003b377de6d874d6872ffed246abf44814cfb344bf67b1d651a1c25836794664fad320005951781c233fa66fa9bbf25a8e290b0ae188f2cea15ad63c348362dbc8f4364706ad1b92ba2efac29804cf7c23755db") 9m30.19252108s ago: executing program 2 (id=2580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x74, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaf80}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff9330}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x74}}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xffffffffffffff73, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r5, r4, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x80, 0xfffffffb, 0xf44, {{0x7, 0x4, 0x2, 0x3, 0x1c, 0x66, 0x0, 0xe8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x87d0, 0x4, 0x5, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x67, 0x0, 0x4, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1c}, {[@cipso={0x86, 0x35, 0x3, [{0x1, 0x11, "db063f1ceba5601d394efe52446698"}, {0x1, 0xf, "2e61eec5b565839d4482e0896c"}, {0x0, 0xf, "4c1417657a92793f7acc601795"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @rr={0x7, 0xf, 0xda, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}, @ra={0x94, 0x4}, @noop]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x81, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0), 0x402, r8}, 0x38) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r11}}, 0x18}}, 0x4090) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x5, r8}, 0x38) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000540)={@local}, &(0x7f0000000580)=0x14) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r12, &(0x7f0000000300)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14) 9m29.90378589s ago: executing program 32 (id=2580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x74, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaf80}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff9330}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x74}}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xffffffffffffff73, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r5, r4, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x80, 0xfffffffb, 0xf44, {{0x7, 0x4, 0x2, 0x3, 0x1c, 0x66, 0x0, 0xe8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x87d0, 0x4, 0x5, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x67, 0x0, 0x4, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1c}, {[@cipso={0x86, 0x35, 0x3, [{0x1, 0x11, "db063f1ceba5601d394efe52446698"}, {0x1, 0xf, "2e61eec5b565839d4482e0896c"}, {0x0, 0xf, "4c1417657a92793f7acc601795"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @rr={0x7, 0xf, 0xda, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}, @ra={0x94, 0x4}, @noop]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x81, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0), 0x402, r8}, 0x38) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r11}}, 0x18}}, 0x4090) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x5, r8}, 0x38) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000540)={@local}, &(0x7f0000000580)=0x14) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r12, &(0x7f0000000300)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14) 2.302026982s ago: executing program 3 (id=7642): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 2.209413567s ago: executing program 3 (id=7643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) r5 = accept4$alg(r3, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x83, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x6d6}], 0x2, 0x102, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xa0, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x84, 0x6, "599fd2567d5edb3789eea06d11f98e15df0592d7cad73ac6e9af798b4b4dfd5e29364566813eb69ab471ab46f1ed6f8e9f6d3b1b673b5dd8e0f60e827728d74af77dd3b8bb67f788511e1124444563716dbe7552fa6434efdd987f6ed043ec957125dbcff378e919d24405256801093f20a04b795ab8bf66ee26da36075b4f58"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290391200100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) 1.783547994s ago: executing program 1 (id=7652): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (rerun: 64) r1 = socket(0x1, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$inet6(0xa, 0x80803, 0x87) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x80087601, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x1, 0xa15, 0x570d, 0x800, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @dev}, &(0x7f0000000400)=0xc) (async, rerun: 64) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xb, &(0x7f0000000380)=@raw=[@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x3, 0x4, 0x7, 0x80, 0x9}], &(0x7f0000000040)='GPL\x00', 0x4d23, 0xe8, &(0x7f00000005c0)=""/232, 0x41100, 0x4, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xb, 0x1, 0x60}, 0x10, 0x11b66, r2, 0x0, &(0x7f0000000740)=[r2], 0x0, 0x10, 0x7}, 0x94) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x80, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0xe8) (rerun: 64) connect$inet6(r3, &(0x7f00000000c0), 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x344}]}, 0x34}}, 0x0) 1.555148517s ago: executing program 1 (id=7655): r0 = socket$rds(0x15, 0x5, 0x0) write(r0, &(0x7f0000000000)="83d08be72bbf03760722abfeb8d9", 0xe) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.188851768s ago: executing program 5 (id=7662): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="1406431c09f8062835633ab04e7b2529a61987eb2858bdf2ee21be29df232c6738fb83cf66a4f09e341723845e", 0x2d, 0x4, 0x0, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r5 = socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x24000840) (async) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (async) r7 = socket$inet6(0xa, 0x3, 0x7b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a}, 0x20) (async) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x8, 0x0, 0x20, 0x0, r8}, {0x0, 0x80, 0x0, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x3}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x3507, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x20000001) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) 1.187918696s ago: executing program 3 (id=7664): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x840000000002, 0x3, 0xff) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x7, 0x10001, 0x9, 0x1}, 0x50) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c00009311810021000900e400"/26, @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004016) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="780000001e00438b0000000000000000e00000020000001689cda20000000000000004d3000000000a01fd0100000000000000000000000000000000000000003800170007000000000000000300000000002000000000000000000004000000ab380000030000000300000000000000010001002c000000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000009c0)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000640)=""/98, 0x62}], 0x5, &(0x7f0000000740)=""/64, 0x40}, 0x7}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000c80)=""/18, 0x12}], 0x1, &(0x7f00000008c0)=""/229, 0xe5}}], 0x2, 0x12001, &(0x7f0000000a40)={0x0, 0x3938700}) (async) bind$bt_sco(r7, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async, rerun: 64) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0000000000000000000000010500000020000020"], 0x0, 0x4e}, 0x20) (rerun: 64) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r9, 0xc038943b, &(0x7f0000000a80)={0x7fffffff, 0x30, '\x00', 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) (rerun: 32) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000004ca6ac90a79373718e16babf264b1e00"/35, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r10}, &(0x7f0000000140), &(0x7f0000000100)='%pS \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000007a6235d1048f5cc93e7e426ed7107951760c3ca23b113a5ab109457c3e22d606b00870115e151f590eab5665a97460c9d8d2ea9b825599337ede6719b50771b77ee0de7613ed7cd6596dbb901aa0891a84db9e38c2fccc938917834bbaf2b423ed431f029cf77ab7bd786910f8835d3d0c99dc14f8c8871996b04d9c916d019a1a6853119c3fb025774a270ead6c618a0d99f94770cd25d49ebebd41035eee69fde4b30932c896dbee6b874d359c0a270af99de01b4c83bf66711ced0c24ef180d"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) accept(r0, &(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) (rerun: 32) setsockopt$bt_BT_RCVMTU(r12, 0x112, 0xd, &(0x7f00000002c0)=0xfff, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) (async) r14 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000000)={@local, 0x2, 0x0, 0x2, 0x3, 0x7, 0x8}, &(0x7f0000000040)=0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="7f00ff000000000000bd7000fed3df25020031097eb225c849d1f101f2ffffffffffffe83527d1d896febc0e44acc6aca9", @ANYRES32=r13, @ANYBLOB="3f00000408000100000000000a0002000180c20000030000"], 0x30}}, 0x4000004) 1.187092308s ago: executing program 1 (id=7665): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000890000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x40f00, 0x2, '\x00', 0x0, @flow_dissector}, 0x94) 1.185164557s ago: executing program 5 (id=7666): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a3100000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0037006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$qrtr(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x40010121}, 0x38, 0x40) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = socket(0x22, 0x2, 0x4) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000100), 0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000c00)) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x40040) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 934.434172ms ago: executing program 0 (id=7667): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, r2, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r1) read$nci(r1, &(0x7f0000000100)=""/121, 0x79) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000001240)={{r0}, "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"}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x78cf}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) 927.146601ms ago: executing program 4 (id=7668): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xe4a, 0x40, 0x6d, 0x55b}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) (async) r1 = accept(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) (rerun: 32) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9002000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2d8, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x902f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x29}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf618}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd0b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x60}, 0x20000800) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x140, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65d}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4526}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x15de, @loopback, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x140}}, 0x8000) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) (async, rerun: 64) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @val=@netfilter={0x2, 0x0, 0x5, 0x1}}, 0x20) (rerun: 64) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000980)={r3}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40091) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x4) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c00)={0x6, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c40)=r7, 0x4) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x24}}, 0x14) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1d4, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x99d6}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x799e93f9}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x214}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6f2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x16320e8d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2e2c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, &(0x7f0000001080)={0xc, 0x0, 0x1, 0xc, 0x3, [0x3, 0x0, 0x401, 0xffff0712]}) (async) connect$inet(r6, &(0x7f00000010c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001100)={@multicast1, @dev, 0x0}, &(0x7f0000001140)=0xc) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000001180)={0x0, 0x0, 0x4, 0xffffff7f, @vifc_lcl_ifindex=r11, @rand_addr=0x64010100}, 0x10) (async) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000040) recvfrom(r6, &(0x7f00000012c0)=""/228, 0xe4, 0x100, 0x0, 0x0) (async, rerun: 64) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000013c0)=r7, 0x4) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup/syz0\x00', 0x1ff) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001540)={@fallback=r8, 0x0, 0x1, 0x9, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@map=r4, r4, 0x2f, 0x4, 0x0, @void, @value, @void, @void, r12}, 0x20) 926.778529ms ago: executing program 1 (id=7669): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmmsg(r0, &(0x7f0000006300)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/182, 0xb6}, {}], 0x4, &(0x7f0000000300)=""/71, 0x47}, 0x9}, {{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)=""/125, 0x7d}], 0x1, &(0x7f00000004c0)=""/221, 0xdd}, 0x6}, {{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000640)=""/108, 0x6c}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/178, 0xb2}, {&(0x7f00000009c0)=""/198, 0xc6}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000ac0)=""/26, 0x1a}], 0x8}, 0x1000}, {{&(0x7f0000002c40)=@un=@abs, 0x80, &(0x7f0000004200)=[{&(0x7f0000002cc0)=""/140, 0x8c}, {&(0x7f0000002d80)=""/18, 0x12}, {&(0x7f0000002dc0)=""/223, 0xdf}, {&(0x7f0000002ec0)=""/29, 0x1d}, {&(0x7f0000002f00)=""/179, 0xb3}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/248, 0xf8}, {&(0x7f00000040c0)=""/180, 0xb4}, {&(0x7f0000004180)=""/68, 0x44}], 0x9, &(0x7f00000042c0)=""/83, 0x53}, 0x2}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004340)=""/246, 0xf6}, {&(0x7f0000004440)=""/214, 0xd6}], 0x2, &(0x7f0000004580)=""/244, 0xf4}, 0x1}, {{&(0x7f0000004680)=@alg, 0x80, &(0x7f00000058c0)=[{&(0x7f0000004700)=""/97, 0x61}, {&(0x7f0000004780)=""/140, 0x8c}, {&(0x7f0000004840)=""/15, 0xf}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/18, 0x12}], 0x5}, 0x5}, {{&(0x7f0000005940)=@xdp, 0x80, &(0x7f0000005b80)=[{&(0x7f00000059c0)=""/63, 0x3f}, {&(0x7f0000005a00)=""/161, 0xa1}, {&(0x7f0000005ac0)=""/153, 0x99}], 0x3, &(0x7f0000005bc0)=""/196, 0xc4}, 0x1}, {{&(0x7f0000005cc0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000006180)=[{&(0x7f0000005d40)=""/241, 0xf1}, {&(0x7f0000005e40)=""/238, 0xee}, {&(0x7f0000005f40)=""/208, 0xd0}, {&(0x7f0000006040)=""/243, 0xf3}, {&(0x7f0000006140)=""/35, 0x23}], 0x5, &(0x7f0000006200)=""/239, 0xef}, 0x9}], 0x8, 0x1, &(0x7f0000006500)={0x0, 0x3938700}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000006540)=""/11) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) 924.94606ms ago: executing program 4 (id=7670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x85dc}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r5, 0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e20, 0x0, @private2, 0x4}}}, &(0x7f0000000040)=0x84) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000ac0)={r6, 0x4, 0x0, 0x1}) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000240)={r5, 0x8863, 0x3325}, 0x8) 924.454579ms ago: executing program 5 (id=7671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES8=r3, @ANYRES16=r0, @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "08dbd603b0f9c586"}}, 0x48}}, 0x40081) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x5, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) socket(0xa, 0x6, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100b11b700000feffff1a00000018000180140002"], 0x2c}}, 0x20040040) 906.392977ms ago: executing program 0 (id=7672): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xb2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) 819.031942ms ago: executing program 4 (id=7673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002480)={@local, @random="513a80bbd809", @void, {@llc={0x4, {@snap={0xaa, 0xaa, "ba", "581ef5", 0x19, "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"}}}}}, 0x0) 818.126669ms ago: executing program 3 (id=7674): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40280, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x250) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}, 0x6}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000004c0)="5cfb4a64aff4d374c2f27c04f6b2f0167a8f6b429fa78fab4b8c2d247f359b00794189a10416dffdb996b592b03e99b691e9b5bf05562f0267c9e8ee996ce8bbed01114b22ff04dfee05700ea5cd31f9844341d8b5ad84460ed133dab091652bf46a60d109f8c17f8ca2c9a7d72aae0a635c611a8a6a100dcc055ecbe247beaa78c2636b2c5730d35569aa0c910d69d3d9bc01151d8a5c393b", 0x99}, {&(0x7f0000000580)="2b39495c84c6044d88f02f0a5033d6106fb3dd97e65daba8cea79f1f8e29067b9881f231c0dbbe265a1ac2531746f55ab644713d43a1a2f643ffdfb3e4d1ab6c51ba9ec6ad13dd64666c777a844a128cd126e06f7966fa3de585a0d50295e6fd07a08e48e92dbda49062e8aa41a052e60c9f9c4d7c6ccc42d1aeed04e4410c95012b128d8bf1e82296bea1ca802f7c9d8c0ae5a38ebd7ba63a139a63c1036254cfe89977e75a2540573eed29", 0xac}, {&(0x7f0000000640)="135ce6744d0d9de659b9270ec975431c594dc4b5f4f95c1dca82f43d7bc76484d3569e5d556b4269", 0x28}, {&(0x7f0000000680)="84025c548ada59f82572fee6c0fe2f351541363082310ed73745c718d1425876fe3493d78d5942a4a2c99d818f14a81e95bc9c9a190cd85438b601585b3ac5e4acba8959c1e3e9ee6150f399597772ccf3d46000e15206804d1f7390be0f864407f2c282c3826307ee904eccc37b529af0e1cd532e9e6711dc51b4aa154ab8e4c0bc8b624d678aec035e71da9de763ed7b38", 0x92}], 0x4, &(0x7f0000000780)=[@rthdr={{0xb8, 0x29, 0x39, {0x84, 0x14, 0x0, 0x4, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x98}, @mcast2, @mcast1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}}}, @tclass={{0x14, 0x29, 0x43, 0xc}}, @hopopts={{0x178, 0x29, 0x36, {0x3b, 0x2b, '\x00', [@generic={0x8, 0x84, "649fbd7111a08807f5890409f29fd796f4e46d6fff903d9812e73b18f3aeb75cb3a5c6545f387c0b1e1f1c9ef6932446d864f3425d55ed3903e63327739d260cdf5945c12d64a38ecf75ca9d3d7f2d20622a65338663385d5300990e98f8c4ac54b4e3e283d9bfd9bfcbc39ac52ac5e1d6fceb66b6175c5c6d8e5490ccdac74d50e1e106"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xb}}, @pad1, @generic={0xbc, 0xbc, "1b6883e9bb1d826c8e020c0a6106b2b5f8c64113d4528bae677bc443c78a0c0e3e17352a5ce91a0f4647b28e9befd7a29c9346c4be4fe7ab58a024d3d301d24884456e8c9b692bdc8d1cf47a8e22b046b8e4877d5f9e8942900af1994fe8f460b9b92dfc3d159ad3453c918013c8864a3e1ecb67206c86357b12dc21b88492150fef952d94119a1e800a635241fa67b623b16a951282f4fd044189e4c233317b021244a0c22d321e1a5127ca30565d34f7dc6897822aa9dc3afea82b"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x42, 0xa, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x6, 0x7, [0x6, 0x2, 0x2000000000, 0x10001, 0x8, 0xd, 0x3ff]}}, @hao={0xc9, 0x10, @local}]}}}], 0x2d0}, 0x0) 710.623729ms ago: executing program 3 (id=7675): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x120000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x4}, {0x7, 0x3}, {0xc, 0x2}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x4}, @union={0x10, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x1, 0x5, 0x1}, {0x5, 0x3, 0x1ff}, {0x3, 0x5, 0x9}, {0xc, 0x2, 0x1}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x7, 0x9, 0x6}, {0x1, 0x4, 0x2}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0xc, 0xb}, {0x6, 0x5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0xb, 0x1}, {0x8, 0x1}, {0x3, 0x4}, {0xc}]}, @ptr, @enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0x1a, [{0x7, 0x8, 0x6}]}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000480)=""/213, 0x12c, 0xd5, 0x1, 0xc73}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x6, 0x8, 0xa, 0x8, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x70000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xd1, &(0x7f0000000240)=""/209, 0x40f00, 0x40, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000005c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x5, 0x6, 0xf}, 0x10, r4, 0x0, 0x8, 0x0, &(0x7f0000000940)=[{0x4, 0x5, 0x3a55}, {0x2, 0x1, 0x0, 0x6}, {0x4, 0x4, 0x2, 0xb}, {0x2, 0x3, 0xf, 0xc}, {0x4, 0x2, 0x4, 0xa}, {0x3, 0x3, 0xc, 0xa}, {0x4, 0x5, 0xe}, {0x2, 0x5, 0x2, 0x7}], 0x10, 0x4}, 0x94) getpeername$packet(r2, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=r4, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={r2, 0x20, &(0x7f0000000e80)={&(0x7f0000000d00)=""/250, 0xfa, 0x0, &(0x7f0000000e00)=""/89, 0x59}}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xc, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000b00)='GPL\x00', 0x9, 0xd8, &(0x7f0000000b40)=""/216, 0x40f00, 0x2, '\x00', r6, @fallback=0x22, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r5, 0x8, &(0x7f0000000f80)=[r9, r1], &(0x7f0000000fc0)=[{0x1, 0x2, 0xf, 0x6}, {0x1, 0x2, 0x8}, {0x1, 0x5, 0x1, 0x5}, {0x0, 0x4, 0x0, 0x4}, {0x1, 0x5, 0x10, 0xb}, {0x4, 0x1, 0x5, 0x9}, {0x2, 0x1, 0x3, 0x3}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0xfffffc00}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001100), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001180)={r10, r11, 0x25, 0x2, @val=@target_btf_id=0xffffffffffffffff}, 0x14) sendmsg$NFT_BATCH(r10, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x78aed3d4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cd26dbf}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c0}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd930c13c214fc896}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000001540)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x64, r14, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004880}, 0xc891) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r10) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r16, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x40}]}, 0x2c}}, 0xc001) recvfrom$l2tp(r10, &(0x7f00000017c0)=""/195, 0xc3, 0x40002023, &(0x7f00000018c0)={0x2, 0x0, @remote}, 0x10) connect$phonet_pipe(r10, &(0x7f0000001900)={0x23, 0x5, 0x3, 0xd}, 0x10) bind$inet6(r10, &(0x7f0000001940)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) r17 = syz_genetlink_get_family_id$SEG6(&(0x7f00000019c0), r5) sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x80, r17, 0x418, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0xa11, 0x7, 0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xab}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x81, 0x1, 0x9, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x0, 0xfffffffa]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5f}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001b00)={@multicast, @local, @void, {@generic={0x11, "b4f9608a7e048204db93fa601ccb0a8b20f1c502c42b369307fcc4fc9626bdc5"}}}, &(0x7f0000001b40)={0x0, 0x2, [0xb59, 0x686, 0xc11, 0x7d5]}) close(r1) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r18, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x6) 702.899399ms ago: executing program 5 (id=7676): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0x100, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}, @common=@mh={{0x28}, {"df07", 0xfe}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x7, &(0x7f0000000040)=0x2, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_extract_tcp_res(&(0x7f0000000340)={0x41424344, 0x41424344}, 0x9, 0x800) write$tun(r4, &(0x7f0000000600)={@void, @val={0x1, 0x3, 0x787, 0xd, 0x0, 0x6}, @eth={@empty, @broadcast, @void, {@mpls_uc={0x8847, {[{0x9}, {0xff001, 0x0, 0x1}], @ipv6=@tcp={0x5, 0x6, "fb2a41", 0x183, 0x6, 0x0, @mcast1, @remote, {[@dstopts={0x33, 0x20, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x100}, @generic={0x1, 0xf6, "dbf87b887e29bd3df41165c5e179ac4df4a0f9a725f420afbb92f953890b88722e7d869509796350e5db9ea064241a141a025dbe5e8ce811da5c4192cfc9223992ff17ea754ee43ba28a3dc8c86dacb01a64e4be348a01e0447292487a31852f7309fac2ede926e3e8ccc70f73bca0bf4364247c6ee706e77ccf1ea432a389136986104e14424a4d86cd449798df965900e276e53c44773b3d114c1bd26498c1bdf855c84fedb6062de47b58e0509ca2bcb29f8db8a04b71cd1d04030aecda4c9c002e1d5e8cac7d097dad89b9f7f9e9888d8cb1a56ecb5707c4b1e31752e44d217cc132b6fb0fb10629116f9c6dd98e5fa3ac5fb12e"}]}], {{0x4e20, 0x4e20, r8, 0x41424344, 0x0, 0x0, 0x14, 0x4, 0x0, 0x0, 0x6, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "28d49db7adbeb4d22b6a2a701c68c6bf"}, @mss={0x2, 0x4, 0x3d5d}, @md5sig={0x13, 0x12, "a72fdf21d1b3f5000a9303fbaecc3482"}, @timestamp={0x8, 0xa, 0x9, 0x7fffffff}, @nop]}}, {"fca79fb613b8e3567bfb6fb52588c57e63d53f965d8bda9a7cbc98972ddea36df96ea6"}}}}}}}}}, 0x1cb) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r9) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r7, {0x0, 0xf0}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) select(0x20000048, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x440, 0x0) sendmsg$nl_route(r2, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@dellink={0x3c, 0x11, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x43086, 0x18020}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000480)={'geneve0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) 655.607725ms ago: executing program 0 (id=7677): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040014}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, 0x0, 0x4c040) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000000001f0600d1b5b09efc88e3a4000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r10 = socket(0x14, 0x2, 0x4) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 628.592056ms ago: executing program 4 (id=7678): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)="afa67e93b09737f58a27bad4beef516e7d73aaf9b7f3ff8a7b69563381dd5031a35c31fead43d2a81d8e0139a5df6924b536e156e0bb06151751a20f4d3abb2cb5398b8836849f825daa956ebf57a1403cebb4bb6fa3ee7b2a7fe2bade4b9bcb41c961e43b7212414e049f7083db6393fa60ed64c04647f58b9fbfb25b300242f8563a9cf5749f7341d51e9c2de6bbc1bc1131e6829171eaeae4dd7fa91ea430e08684fd13dd", 0xa6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) 553.071849ms ago: executing program 4 (id=7679): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01b81280080001006772650014000280080001000000000000000006000000000000003ac92e50626b3123076b9b7c652a9cdceda557a2102dc61118a1f29f9294c25696ffcc7443a7bbcc68c533620b00acb74468dc69f84854a1d8eba290cbd0bacbb446b2360f4564d2f71878acaedbeb6e62f29ac17378a5edf343bcb996f61252396bb0390f4a8954abec5d", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01b81280080001006772650014000280080001000000000000000006000000000000003ac92e50626b3123076b9b7c652a9cdceda557a2102dc61118a1f29f9294c25696ffcc7443a7bbcc68c533620b00acb74468dc69f84854a1d8eba290cbd0bacbb446b2360f4564d2f71878acaedbeb6e62f29ac17378a5edf343bcb996f61252396bb0390f4a8954abec5d", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r7}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r8}]}}}]}, 0x40}}, 0x0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000040)={@rand_addr=' \x01\x00', @dev={0xac, 0x14, 0x14, 0x34}, 0xe, 0x1e}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 351.050352ms ago: executing program 0 (id=7680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000300)=0xd, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000001c0)={0x8, 0x8, 0x16c, 0x0, 0x100, 0x696e}) 337.679889ms ago: executing program 3 (id=7681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="160001"]) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) writev(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000140)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xd7, &(0x7f00000002c0), &(0x7f0000000300)=0x74) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r6, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003904000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000048104002400128009000100626f6e640000000014000280050001000500000008000200", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) 305.891185ms ago: executing program 5 (id=7682): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd29, 0x25dfdbff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc6f, 0x0, 0x0, 0x10, 0x3}, 0x94) 235.691891ms ago: executing program 4 (id=7683): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0xfffffffe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x12, [0x2, 0x7f, 0x7, 0xfa73]}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="1832", 0x2}], 0x1, 0xa, 0x10) read(r0, 0x0, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x44, 0x6d, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11000}, [@IFLA_PORT_SELF={0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x32d2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x44}}, 0x0) 211.857729ms ago: executing program 5 (id=7684): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000040)="80b61500000000caa20783926412bf445425ba00bb00f0a81a2ae499b2534065242235fa2e2b6c", 0xfffffffffffffde5}], 0x1, 0x7fff, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x18) 162.721939ms ago: executing program 0 (id=7685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) shutdown(r1, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40c5}, 0x4040) accept(r1, &(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f00000000c0)=0x80) 63.810978ms ago: executing program 1 (id=7686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 62.053844ms ago: executing program 0 (id=7687): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000080)=0x8a82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @empty}, 0x1, 0x0, 0x1, 0x3}}, 0x26) close(r0) 0s ago: executing program 1 (id=7688): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): y 0 port 6081 - 0 [ 777.399642][T17799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 777.475287][T26599] netlink: 'syz.0.5887': attribute type 2 has an invalid length. [ 777.541717][T26604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5888'. [ 777.649572][T17799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.704058][T17799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.736239][T17799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 777.832229][T17799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.867315][T17799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.893796][T17799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 778.000142][T17799] batman_adv: batadv0: Removing interface: netdevsim0 [ 778.019024][T17799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.037391][T17799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.048200][T17799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 778.082883][T26570] chnl_net:caif_netlink_parms(): no params data found [ 778.167269][T26638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.178785][T26638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.189377][T26638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 778.209492][T26638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 778.326864][T26638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.337686][T26638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.350088][T26638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 778.361039][T26638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 778.491093][T26638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.501570][T26638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.513109][T26638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 778.524174][T26638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 778.549030][T26570] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.556694][T26570] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.573363][T26570] bridge_slave_0: entered allmulticast mode [ 778.583946][T26570] bridge_slave_0: entered promiscuous mode [ 778.612792][T26570] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.625370][T26570] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.632759][T26570] bridge_slave_1: entered allmulticast mode [ 778.641087][T26570] bridge_slave_1: entered promiscuous mode [ 778.651323][T17799] veth0_to_bridge: left allmulticast mode [ 778.661103][T17799] veth0_to_bridge: left promiscuous mode [ 778.668284][T17799] bridge0: port 3(veth0_to_bridge) entered disabled state [ 778.679712][T17799] bridge_slave_1: left allmulticast mode [ 778.685828][T17799] bridge_slave_1: left promiscuous mode [ 778.691803][T17799] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.701692][T17799] bridge_slave_0: left allmulticast mode [ 778.707559][T17799] bridge_slave_0: left promiscuous mode [ 778.715898][T17799] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.816704][ T5836] Bluetooth: hci1: command tx timeout [ 778.920521][T17799] bond0 (unregistering): (slave gretap1): Releasing active interface [ 779.399009][T17799] ` (unregistering): (slave 1!): Releasing backup interface [ 779.408157][T17799] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.417519][T17799] ` (unregistering): Released all slaves [ 779.442703][T17799] bond0 (unregistering): Released all slaves [ 779.547398][T17799] bond1 (unregistering): Released all slaves [ 779.659705][T17799] bond2 (unregistering): Released all slaves [ 779.776787][T17799] bond3 (unregistering): Released all slaves [ 779.883158][T17799] bond4 (unregistering): (slave veth3): Releasing active interface [ 779.895552][T17799] bond4 (unregistering): Released all slaves [ 779.907783][T17799] bond5 (unregistering): Released all slaves [ 779.920152][T17799] bond6 (unregistering): Released all slaves [ 779.932502][T17799] bond7 (unregistering): Released all slaves [ 779.949662][T17799] bond8 (unregistering): Released all slaves [ 780.008285][T26638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.019248][T26638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.030943][T26638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 780.041429][T26638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 780.164972][T17799] tipc: Left network mode [ 780.231937][T26570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.259202][T26679] Unsupported ieee802154 address type: 0 [ 780.268253][T26570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.268471][T17799] IPVS: stopping backup sync thread 18122 ... [ 780.318216][T26678] __nla_validate_parse: 3 callbacks suppressed [ 780.318228][T26678] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5910'. [ 780.382076][T26570] team0: Port device team_slave_0 added [ 780.387901][T14710] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.399772][T14710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.418694][T14710] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.430070][T14710] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 780.441180][T26570] team0: Port device team_slave_1 added [ 780.505505][T21374] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.513960][T21374] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.522360][T21374] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.531880][T21374] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 780.543261][T26684] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5913'. [ 780.624411][T26687] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 780.637967][T26681] IPVS: stopping master sync thread 26687 ... [ 780.647808][T26570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.650907][T26689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5915'. [ 780.657433][T26570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.692818][T26570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.705983][ T326] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.714886][T26691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5915'. [ 780.715160][ T326] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.732883][ T326] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.741261][ T326] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 780.750026][T26686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5914'. [ 780.790213][T26689] xfrm1: entered promiscuous mode [ 780.796976][T26689] xfrm1: entered allmulticast mode [ 780.806763][T26570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.821625][T26570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.848839][T26570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.885815][ T5836] Bluetooth: hci1: command tx timeout [ 780.900174][T14759] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.917928][T14759] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.938774][T14759] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.957277][T14759] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 781.141240][T26708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5920'. [ 781.203606][T26706] pim6reg1: entered promiscuous mode [ 781.212004][T26706] pim6reg1: entered allmulticast mode [ 781.220022][T26711] netlink: 'syz.5.5922': attribute type 1 has an invalid length. [ 781.255032][T26570] hsr_slave_0: entered promiscuous mode [ 781.265425][T26570] hsr_slave_1: entered promiscuous mode [ 781.296311][T26570] debugfs: 'hsr0' already exists in 'hsr' [ 781.308149][T26570] Cannot create hsr debugfs directory [ 781.418660][T26714] bond3: (slave geneve3): making interface the new active one [ 781.455007][T26714] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 781.543151][T14807] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 781.617003][T17799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.638413][T17799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.755496][T26730] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5928'. [ 781.801978][T17799] pimreg3 (unregistering): left allmulticast mode [ 781.826991][T26731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5927'. [ 782.306924][T17799] team0 (unregistering): Port device team_slave_1 removed [ 782.349543][T17799] team0 (unregistering): Port device team_slave_0 removed [ 782.696795][T14807] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 782.772466][T14807] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 782.817983][T14807] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 782.963982][ T5836] Bluetooth: hci1: command tx timeout [ 782.992333][T26751] syzkaller0: entered promiscuous mode [ 783.012367][T26751] syzkaller0: entered allmulticast mode [ 783.148087][T26751] tipc: Enabled bearer , priority 0 [ 783.204588][T26750] tipc: Resetting bearer [ 783.257076][T26750] tipc: Disabling bearer [ 783.479685][T26779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5937'. [ 783.481200][T26784] netlink: 'syz.1.5939': attribute type 1 has an invalid length. [ 783.601228][T26793] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.5944'. [ 783.692029][T26799] macsec2: entered promiscuous mode [ 783.698446][T26799] macsec2: entered allmulticast mode [ 783.707472][T26799] bond12: (slave macsec2): Error -34 calling dev_set_mtu [ 783.874818][T26807] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 783.899466][T26807] bond4: entered promiscuous mode [ 783.905037][T26807] bond4: entered allmulticast mode [ 783.910768][T26807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.981302][T26823] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 783.987790][T26823] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 784.102283][T26834] netlink: 'syz.5.5953': attribute type 24 has an invalid length. [ 784.212286][T26841] tipc: Enabling of bearer rejected, already enabled [ 784.308475][T26570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 784.331316][T26570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 784.373040][T26570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 784.407294][T26570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 784.449134][T26854] netlink: 'syz.4.5959': attribute type 1 has an invalid length. [ 784.580134][T26570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.627309][T26570] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.655502][T14759] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.662707][T14759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.685740][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.692900][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.703227][T26871] netlink: 'syz.0.5964': attribute type 1 has an invalid length. [ 784.720262][T26871] netlink: 'syz.0.5964': attribute type 1 has an invalid length. [ 785.046750][ T5847] Bluetooth: hci1: command tx timeout [ 785.108019][T26570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.217867][T26890] netlink: 'syz.1.5971': attribute type 9 has an invalid length. [ 785.242328][T26892] netlink: 'syz.1.5971': attribute type 9 has an invalid length. [ 785.256849][T26570] veth0_vlan: entered promiscuous mode [ 785.264177][T26892] netlink: 'syz.1.5971': attribute type 11 has an invalid length. [ 785.278968][T26570] veth1_vlan: entered promiscuous mode [ 785.285650][T26890] netlink: 'syz.1.5971': attribute type 11 has an invalid length. [ 785.307796][T26892] netlink: 'syz.1.5971': attribute type 12 has an invalid length. [ 785.332278][T26570] veth0_macvtap: entered promiscuous mode [ 785.349735][T26570] veth1_macvtap: entered promiscuous mode [ 785.350122][T26892] __nla_validate_parse: 13 callbacks suppressed [ 785.350135][T26892] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.5971'. [ 785.379017][T26570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.425930][T26570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.477851][T15269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.492115][T15269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.507623][T15269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.526465][T26904] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.597601][T26902] bond11: entered promiscuous mode [ 785.598925][T26915] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20002 [ 785.626289][T26902] 8021q: adding VLAN 0 to HW filter on device bond11 [ 785.645714][T15269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.710858][T26921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5979'. [ 785.914796][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.933314][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.015787][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.034974][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.486036][ T39] IPVS: starting estimator thread 0... [ 786.499214][T26965] geneve4: entered promiscuous mode [ 786.534511][T26572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 786.544789][T26572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 786.553394][T26572] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 786.572568][T26572] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 786.581411][T26572] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 786.588875][T26969] IPVS: using max 53 ests per chain, 127200 per kthread [ 786.717382][T26971] wg1 speed is unknown, defaulting to 1000 [ 786.795624][T26984] pim6reg1: entered promiscuous mode [ 786.802863][T26984] pim6reg1: entered allmulticast mode [ 787.101493][T26994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5998'. [ 787.119694][T26994] openvswitch: netlink: Invalid VLAN frame [ 787.133891][T26572] Bluetooth: hci1: command 0x0405 tx timeout [ 787.602149][T26971] chnl_net:caif_netlink_parms(): no params data found [ 787.628583][T27031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6005'. [ 787.641141][T27031] siw: device registration error -23 [ 787.649450][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6007'. [ 787.842074][T27048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6012'. [ 787.855853][T26971] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.863162][T27047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6011'. [ 787.863328][T26971] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.879861][T26971] bridge_slave_0: entered allmulticast mode [ 787.887739][T26971] bridge_slave_0: entered promiscuous mode [ 787.896666][T26971] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.904329][T26971] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.911701][T26971] bridge_slave_1: entered allmulticast mode [ 787.922447][T26971] bridge_slave_1: entered promiscuous mode [ 787.946895][T27049] team0: Port device geneve2 added [ 787.968662][T27047] xfrm1: entered promiscuous mode [ 787.974160][T27047] xfrm1: entered allmulticast mode [ 787.993999][T14807] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 788.015403][T14807] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 788.098159][T14807] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 788.111312][T27059] openvswitch: netlink: Flow actions attr not present in new flow. [ 788.119533][T14807] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 788.142294][T27053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6013'. [ 788.160682][T27059] : renamed from veth1_vlan (while UP) [ 788.180392][T26971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.199451][T26971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.270505][T27066] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6018'. [ 788.301097][T26971] team0: Port device team_slave_0 added [ 788.310603][T26971] team0: Port device team_slave_1 added [ 788.397180][T26971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.423816][T26971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.461159][T26971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.477374][T26971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.485687][T26971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.516713][T26971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.553462][T27079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6020'. [ 788.627243][T26971] hsr_slave_0: entered promiscuous mode [ 788.637862][T26971] hsr_slave_1: entered promiscuous mode [ 788.647918][ T5836] Bluetooth: hci3: command tx timeout [ 788.656081][T26971] debugfs: 'hsr0' already exists in 'hsr' [ 788.661833][T26971] Cannot create hsr debugfs directory [ 788.775306][T27090] nbd: nbd3 already in use [ 788.794696][T27091] tipc: Started in network mode [ 788.794829][T27090] validate_nla: 4 callbacks suppressed [ 788.794851][T27090] netlink: 'syz.3.6024': attribute type 30 has an invalid length. [ 788.800798][T27091] tipc: Node identity e0000001, cluster identity 4711 [ 788.839387][T27091] tipc: Enabling of bearer rejected, failed to enable media [ 789.079067][T26971] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.094551][T26971] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.179599][T26971] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.206813][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 789.213008][T26971] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.352948][T26971] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.366086][T26971] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.442999][T26971] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.460363][T26971] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.782136][T26971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 789.812951][T26971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 790.022592][T26971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 790.062782][T26971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 790.275285][T27182] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 790.462830][T26971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.604690][T26971] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.623774][T14710] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.630947][T14710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.673719][T14710] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.680902][T14710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.726333][T26572] Bluetooth: hci3: command tx timeout [ 790.777404][T27205] netlink: 'syz.5.6056': attribute type 3 has an invalid length. [ 790.842638][T27216] __nla_validate_parse: 9 callbacks suppressed [ 790.842658][T27216] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6059'. [ 790.854406][T27217] netlink: 'syz.3.6055': attribute type 64 has an invalid length. [ 790.900927][T27217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6055'. [ 791.335915][T27242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6065'. [ 791.396266][T27252] bridge0: port 2(ipvlan2) entered blocking state [ 791.414248][T27252] bridge0: port 2(ipvlan2) entered disabled state [ 791.420956][T27252] ipvlan2: entered allmulticast mode [ 791.470859][T27252] bridge0: entered allmulticast mode [ 791.481969][T27252] ipvlan2: left allmulticast mode [ 791.487419][T27252] bridge0: left allmulticast mode [ 791.509729][T27259] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 791.521028][T26971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.592007][T27252] bridge0: port 2(ipvlan2) entered blocking state [ 791.606890][T27252] bridge0: port 2(ipvlan2) entered disabled state [ 791.624049][T27252] ipvlan2: entered allmulticast mode [ 791.667984][T27252] bridge0: entered allmulticast mode [ 791.699122][T27252] ipvlan2: left allmulticast mode [ 791.723415][T27252] bridge0: left allmulticast mode [ 791.753151][T27272] netlink: 'syz.3.6071': attribute type 17 has an invalid length. [ 791.779924][T27272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6071'. [ 791.825893][T27272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6071'. [ 791.890457][T27272] gretap0: entered promiscuous mode [ 791.909888][T27272] gretap0: left promiscuous mode [ 791.926973][T27278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6074'. [ 791.975207][T26971] veth0_vlan: entered promiscuous mode [ 792.035564][T26971] veth1_vlan: entered promiscuous mode [ 792.138213][T27291] netlink: 'syz.4.6077': attribute type 1 has an invalid length. [ 792.325861][T27296] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 792.338896][T27296] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 792.402760][T27302] gretap1: entered promiscuous mode [ 792.412245][T27302] bond2: (slave gretap1): making interface the new active one [ 792.420650][T27302] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 792.464731][T27291] macvlan2: entered promiscuous mode [ 792.471005][T27298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6078'. [ 792.490342][T27291] macvlan2: entered allmulticast mode [ 792.511370][T27291] bond2: entered promiscuous mode [ 792.522531][T27291] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 792.554607][T27291] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 792.580557][T27291] bond2: left promiscuous mode [ 792.629205][T27317] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 792.647673][T27292] delete_channel: no stack [ 792.780362][T26971] veth0_macvtap: entered promiscuous mode [ 792.805403][T26572] Bluetooth: hci3: command tx timeout [ 792.809042][T26971] veth1_macvtap: entered promiscuous mode [ 792.851447][T27330] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 792.921319][T27331] veth0: entered promiscuous mode [ 792.995357][T26971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.057864][T26971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.079647][T27325] veth0: left promiscuous mode [ 793.108966][T14807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.172939][T14807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.209455][T14807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.246700][T14807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.331386][T27350] syzkaller0: entered promiscuous mode [ 793.350594][T27350] syzkaller0: entered allmulticast mode [ 793.374139][T27360] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6089'. [ 793.422171][T27360] x_tables: duplicate underflow at hook 3 [ 793.517137][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.532126][ T9] hid_parser_main: 379 callbacks suppressed [ 793.532146][ T9] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x1 [ 793.540973][ T9] hid-generic 0005:0C49:1012.0003: ignoring exceeding usage max [ 793.558518][ T9] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x4 [ 793.570417][ T9] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x5 [ 793.570422][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.570765][ T9] hid-generic 0005:0C49:1012.0003: reserved main item tag 0xd [ 793.593503][ T9] hid-generic 0005:0C49:1012.0003: item fetching failed at offset 31/106 [ 793.602985][ T9] hid-generic 0005:0C49:1012.0003: probe with driver hid-generic failed with error -22 [ 793.754857][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.762707][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.327867][T27417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6101'. [ 794.507831][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6105'. [ 794.887501][T26572] Bluetooth: hci3: command tx timeout [ 795.220933][T27475] FAULT_INJECTION: forcing a failure. [ 795.220933][T27475] name failslab, interval 1, probability 0, space 0, times 0 [ 795.264000][T27475] CPU: 0 UID: 0 PID: 27475 Comm: syz.1.6118 Not tainted syzkaller #0 PREEMPT(full) [ 795.264026][T27475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.264044][T27475] Call Trace: [ 795.264052][T27475] [ 795.264059][T27475] dump_stack_lvl+0xe8/0x150 [ 795.264088][T27475] should_fail_ex+0x414/0x560 [ 795.264122][T27475] should_failslab+0xa8/0x100 [ 795.264145][T27475] kmem_cache_alloc_noprof+0x88/0x710 [ 795.264172][T27475] ? __netlink_lookup+0xbd/0x8a0 [ 795.264195][T27475] ? skb_clone+0x212/0x3a0 [ 795.264222][T27475] skb_clone+0x212/0x3a0 [ 795.264261][T27475] __netlink_deliver_tap+0x404/0x850 [ 795.264301][T27475] ? netlink_deliver_tap+0x2e/0x1b0 [ 795.264326][T27475] netlink_deliver_tap+0x19c/0x1b0 [ 795.264352][T27475] netlink_unicast+0x7fa/0x9e0 [ 795.264382][T27475] ? __pfx_netlink_unicast+0x10/0x10 [ 795.264403][T27475] ? __alloc_skb+0x198/0x3a0 [ 795.264423][T27475] ? netlink_sendmsg+0x642/0xb30 [ 795.264445][T27475] ? skb_put+0x11b/0x210 [ 795.264469][T27475] netlink_sendmsg+0x805/0xb30 [ 795.264503][T27475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.264532][T27475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 795.264558][T27475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 795.264576][T27475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.264601][T27475] __sock_sendmsg+0x21c/0x270 [ 795.264632][T27475] ____sys_sendmsg+0x505/0x820 [ 795.264661][T27475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.264693][T27475] ? import_iovec+0x74/0xa0 [ 795.264720][T27475] ___sys_sendmsg+0x21f/0x2a0 [ 795.264746][T27475] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.264804][T27475] ? __fget_files+0x2a/0x420 [ 795.264825][T27475] ? __fget_files+0x3a0/0x420 [ 795.264857][T27475] __x64_sys_sendmsg+0x19b/0x260 [ 795.264884][T27475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 795.264916][T27475] ? __pfx_ksys_write+0x10/0x10 [ 795.264942][T27475] do_syscall_64+0xec/0xf80 [ 795.264959][T27475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.264975][T27475] ? trace_irq_disable+0x37/0x100 [ 795.264996][T27475] ? clear_bhb_loop+0x60/0xb0 [ 795.265018][T27475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.265042][T27475] RIP: 0033:0x7fdc52b8f749 [ 795.265060][T27475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.265078][T27475] RSP: 002b:00007fdc53986038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.265099][T27475] RAX: ffffffffffffffda RBX: 00007fdc52de5fa0 RCX: 00007fdc52b8f749 [ 795.265112][T27475] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 795.265124][T27475] RBP: 00007fdc53986090 R08: 0000000000000000 R09: 0000000000000000 [ 795.265135][T27475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.265146][T27475] R13: 00007fdc52de6038 R14: 00007fdc52de5fa0 R15: 00007ffcfc2d1ce8 [ 795.265179][T27475] [ 795.631697][T27496] netlink: 'syz.3.6117': attribute type 27 has an invalid length. [ 795.663668][T27486] IPv6: NLM_F_REPLACE set, but no existing node found! [ 795.828405][T27504] Unsupported ieee802154 address type: 0 [ 795.842934][T27503] netlink: 'syz.4.6124': attribute type 5 has an invalid length. [ 795.897971][T27509] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 796.140555][T27532] __nla_validate_parse: 10 callbacks suppressed [ 796.140574][T27532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6131'. [ 796.246591][T27538] FAULT_INJECTION: forcing a failure. [ 796.246591][T27538] name failslab, interval 1, probability 0, space 0, times 0 [ 796.261648][T27538] CPU: 1 UID: 0 PID: 27538 Comm: syz.3.6133 Not tainted syzkaller #0 PREEMPT(full) [ 796.261675][T27538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 796.261687][T27538] Call Trace: [ 796.261695][T27538] [ 796.261704][T27538] dump_stack_lvl+0xe8/0x150 [ 796.261731][T27538] should_fail_ex+0x414/0x560 [ 796.261763][T27538] should_failslab+0xa8/0x100 [ 796.261787][T27538] kmem_cache_alloc_noprof+0x88/0x710 [ 796.261813][T27538] ? __netlink_lookup+0xbd/0x8a0 [ 796.261838][T27538] ? skb_clone+0x212/0x3a0 [ 796.261862][T27538] skb_clone+0x212/0x3a0 [ 796.261888][T27538] __netlink_deliver_tap+0x404/0x850 [ 796.261922][T27538] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.261946][T27538] netlink_deliver_tap+0x19c/0x1b0 [ 796.261969][T27538] netlink_unicast+0x7fa/0x9e0 [ 796.261998][T27538] ? __pfx_netlink_unicast+0x10/0x10 [ 796.262015][T27538] ? __alloc_skb+0x198/0x3a0 [ 796.262034][T27538] ? netlink_sendmsg+0x642/0xb30 [ 796.262054][T27538] ? skb_put+0x11b/0x210 [ 796.262075][T27538] netlink_sendmsg+0x805/0xb30 [ 796.262107][T27538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.262133][T27538] ? aa_sock_msg_perm+0xf1/0x1b0 [ 796.262158][T27538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 796.262175][T27538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.262198][T27538] __sock_sendmsg+0x21c/0x270 [ 796.262235][T27538] ____sys_sendmsg+0x505/0x820 [ 796.262263][T27538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.262295][T27538] ? import_iovec+0x74/0xa0 [ 796.262319][T27538] ___sys_sendmsg+0x21f/0x2a0 [ 796.262343][T27538] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.262394][T27538] ? __fget_files+0x2a/0x420 [ 796.262416][T27538] ? __fget_files+0x3a0/0x420 [ 796.262449][T27538] __x64_sys_sendmsg+0x19b/0x260 [ 796.262474][T27538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 796.262506][T27538] ? __pfx_ksys_write+0x10/0x10 [ 796.262534][T27538] do_syscall_64+0xec/0xf80 [ 796.262553][T27538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.262571][T27538] ? trace_irq_disable+0x37/0x100 [ 796.262596][T27538] ? clear_bhb_loop+0x60/0xb0 [ 796.262618][T27538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.262634][T27538] RIP: 0033:0x7f9b5b38f749 [ 796.262651][T27538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.262666][T27538] RSP: 002b:00007f9b5c25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.262686][T27538] RAX: ffffffffffffffda RBX: 00007f9b5b5e5fa0 RCX: 00007f9b5b38f749 [ 796.262700][T27538] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 796.262711][T27538] RBP: 00007f9b5c25f090 R08: 0000000000000000 R09: 0000000000000000 [ 796.262722][T27538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.262733][T27538] R13: 00007f9b5b5e6038 R14: 00007f9b5b5e5fa0 R15: 00007ffef1c75418 [ 796.262764][T27538] [ 796.281401][T27536] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 796.707667][T27483] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 796.743912][T27557] veth0_to_bond: entered allmulticast mode [ 796.757222][T27554] netlink: 'syz.0.6139': attribute type 1 has an invalid length. [ 796.796057][T27559] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6140'. [ 796.819631][T27562] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6140'. [ 796.831080][T27561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6141'. [ 796.853045][T27564] netlink: 272 bytes leftover after parsing attributes in process `syz.5.6142'. [ 796.875912][T27565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6141'. [ 796.890564][T27564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6142'. [ 797.004920][T27572] FAULT_INJECTION: forcing a failure. [ 797.004920][T27572] name failslab, interval 1, probability 0, space 0, times 0 [ 797.022063][T27572] CPU: 1 UID: 0 PID: 27572 Comm: syz.5.6146 Not tainted syzkaller #0 PREEMPT(full) [ 797.022091][T27572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 797.022111][T27572] Call Trace: [ 797.022119][T27572] [ 797.022127][T27572] dump_stack_lvl+0xe8/0x150 [ 797.022157][T27572] should_fail_ex+0x414/0x560 [ 797.022190][T27572] should_failslab+0xa8/0x100 [ 797.022216][T27572] kmem_cache_alloc_noprof+0x88/0x710 [ 797.022246][T27572] ? skb_clone+0x212/0x3a0 [ 797.022275][T27572] skb_clone+0x212/0x3a0 [ 797.022303][T27572] __netlink_deliver_tap+0x404/0x850 [ 797.022340][T27572] ? netlink_deliver_tap+0x2e/0x1b0 [ 797.022364][T27572] netlink_deliver_tap+0x19c/0x1b0 [ 797.022389][T27572] netlink_sendskb+0x68/0x140 [ 797.022412][T27572] netlink_unicast+0x397/0x9e0 [ 797.022431][T27572] ? __asan_memcpy+0x40/0x70 [ 797.022467][T27572] ? __pfx_netlink_unicast+0x10/0x10 [ 797.022499][T27572] netlink_rcv_skb+0x28c/0x470 [ 797.022524][T27572] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 797.022548][T27572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 797.022583][T27572] ? bpf_lsm_capable+0x9/0x20 [ 797.022604][T27572] ? security_capable+0x7e/0x2e0 [ 797.022633][T27572] nfnetlink_rcv+0x282/0x2590 [ 797.022666][T27572] ? lockdep_hardirqs_on+0x7b/0x110 [ 797.022685][T27572] ? __dev_queue_xmit+0x289/0x31c0 [ 797.022708][T27572] ? __local_bh_enable_ip+0xd0/0x130 [ 797.022727][T27572] ? __dev_queue_xmit+0x289/0x31c0 [ 797.022751][T27572] ? __dev_queue_xmit+0x19cb/0x31c0 [ 797.022775][T27572] ? ___sys_sendmsg+0x21f/0x2a0 [ 797.022805][T27572] ? __dev_queue_xmit+0x289/0x31c0 [ 797.022832][T27572] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 797.022858][T27572] ? __pfx___dev_queue_xmit+0x10/0x10 [ 797.022891][T27572] ? ref_tracker_free+0x63a/0x7d0 [ 797.022912][T27572] ? __asan_memcpy+0x40/0x70 [ 797.022938][T27572] ? __pfx_ref_tracker_free+0x10/0x10 [ 797.022973][T27572] ? skb_clone+0x246/0x3a0 [ 797.023000][T27572] ? __netlink_deliver_tap+0x807/0x850 [ 797.023023][T27572] ? netlink_deliver_tap+0x2e/0x1b0 [ 797.023052][T27572] ? netlink_deliver_tap+0x2e/0x1b0 [ 797.023083][T27572] netlink_unicast+0x82f/0x9e0 [ 797.023120][T27572] ? __pfx_netlink_unicast+0x10/0x10 [ 797.023140][T27572] ? __alloc_skb+0x198/0x3a0 [ 797.023159][T27572] ? netlink_sendmsg+0x642/0xb30 [ 797.023182][T27572] ? skb_put+0x11b/0x210 [ 797.023205][T27572] netlink_sendmsg+0x805/0xb30 [ 797.023239][T27572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.023268][T27572] ? aa_sock_msg_perm+0xf1/0x1b0 [ 797.023294][T27572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 797.023311][T27572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.023336][T27572] __sock_sendmsg+0x21c/0x270 [ 797.023367][T27572] ____sys_sendmsg+0x505/0x820 [ 797.023396][T27572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.023428][T27572] ? import_iovec+0x74/0xa0 [ 797.023454][T27572] ___sys_sendmsg+0x21f/0x2a0 [ 797.023480][T27572] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.023537][T27572] ? __fget_files+0x2a/0x420 [ 797.023559][T27572] ? __fget_files+0x3a0/0x420 [ 797.023594][T27572] __x64_sys_sendmsg+0x19b/0x260 [ 797.023620][T27572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 797.023652][T27572] ? __pfx_ksys_write+0x10/0x10 [ 797.023683][T27572] do_syscall_64+0xec/0xf80 [ 797.023702][T27572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.023725][T27572] ? trace_irq_disable+0x37/0x100 [ 797.023746][T27572] ? clear_bhb_loop+0x60/0xb0 [ 797.023766][T27572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.023783][T27572] RIP: 0033:0x7f321af8f749 [ 797.023799][T27572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.023816][T27572] RSP: 002b:00007f321bd80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.023836][T27572] RAX: ffffffffffffffda RBX: 00007f321b1e5fa0 RCX: 00007f321af8f749 [ 797.023849][T27572] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 797.023861][T27572] RBP: 00007f321bd80090 R08: 0000000000000000 R09: 0000000000000000 [ 797.023873][T27572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.023884][T27572] R13: 00007f321b1e6038 R14: 00007f321b1e5fa0 R15: 00007ffc81f5ea98 [ 797.023914][T27572] [ 797.561007][T27584] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 797.577003][T27584] bond12 (unregistering): Released all slaves [ 797.589068][T27591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6148'. [ 797.604235][T26572] Bluetooth: hci0: command 0x0c20 tx timeout [ 797.609371][T27591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6148'. [ 797.961714][T27607] netlink: 'syz.0.6155': attribute type 12 has an invalid length. [ 797.990798][T27611] netlink: 'syz.3.6152': attribute type 33 has an invalid length. [ 798.005669][T27607] netlink: 'syz.0.6155': attribute type 29 has an invalid length. [ 798.013516][T27607] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6155'. [ 798.656701][T27646] netlink: 'syz.4.6167': attribute type 1 has an invalid length. [ 798.676036][T27646] netlink: 'syz.4.6167': attribute type 2 has an invalid length. [ 798.787605][T27652] syzkaller0: entered promiscuous mode [ 798.793277][T27652] syzkaller0: entered allmulticast mode [ 799.619642][T27706] netlink: 'syz.3.6189': attribute type 3 has an invalid length. [ 800.398128][T27748] chnl_net:caif_netlink_parms(): no params data found [ 800.430989][T27750] netlink: 'syz.0.6206': attribute type 21 has an invalid length. [ 800.503599][T27753] chnl_net:caif_netlink_parms(): no params data found [ 800.764185][T27773] Bluetooth: MGMT ver 1.23 [ 800.769438][T27770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.790688][T27770] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 800.986211][T27783] lo: entered promiscuous mode [ 801.000226][T27783] tunl0: entered promiscuous mode [ 801.008999][T27783] gre0: entered promiscuous mode [ 801.029759][T27783] gretap0: entered promiscuous mode [ 801.043172][T27790] netlink: 'syz.1.6220': attribute type 1 has an invalid length. [ 801.054765][T27783] erspan0: entered promiscuous mode [ 801.068469][T27783] ip_vti0: entered promiscuous mode [ 801.152123][T27791] netlink: 'syz.3.6221': attribute type 1 has an invalid length. [ 801.160527][T27791] netlink: 'syz.3.6221': attribute type 2 has an invalid length. [ 801.169537][T27791] netlink: 'syz.3.6221': attribute type 1 has an invalid length. [ 801.182737][T27784] wg1 speed is unknown, defaulting to 1000 [ 801.184403][T27792] __nla_validate_parse: 19 callbacks suppressed [ 801.184419][T27792] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6218'. [ 801.202112][T27791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6221'. [ 801.280898][T27798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'. [ 801.492021][T27815] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6231'. [ 801.679316][T27819] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 801.718631][T27827] SET target dimension over the limit! [ 801.969169][T27845] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6241'. [ 801.987568][T27833] syzkaller1: entered promiscuous mode [ 801.993053][T27833] syzkaller1: entered allmulticast mode [ 802.149206][T27849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.268662][T27857] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6246'. [ 802.288016][T27859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6247'. [ 802.297526][T27859] openvswitch: netlink: Flow key attr not present in new flow. [ 802.378051][T27857] netlink: 'syz.4.6246': attribute type 1 has an invalid length. [ 802.410037][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6246'. [ 802.534950][T27870] sctp: [Deprecated]: syz.5.6250 (pid 27870) Use of int in maxseg socket option. [ 802.534950][T27870] Use struct sctp_assoc_value instead [ 802.596893][T27865] wg1 speed is unknown, defaulting to 1000 [ 802.651345][T27877] ipvlan0: entered promiscuous mode [ 802.880755][ T5944] IPVS: starting estimator thread 0... [ 802.899980][T27888] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 802.979252][T27891] IPVS: using max 28 ests per chain, 67200 per kthread [ 803.224870][T27902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6257'. [ 803.240966][T27902] block nbd5: Unsupported socket: should be TCP or UNIX. [ 803.318749][T27907] gre0: entered allmulticast mode [ 803.522958][T27924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.523292][T27925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6265'. [ 804.137105][T27964] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 804.150892][T27964] delete_channel: no stack [ 804.392408][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 804.417357][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 804.426394][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 804.435677][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 804.450413][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 804.632542][T27981] wg1 speed is unknown, defaulting to 1000 [ 804.828012][T28004] netlink: 'syz.3.6287': attribute type 39 has an invalid length. [ 804.853701][T28008] netlink: zone id is out of range [ 804.859003][T28008] netlink: zone id is out of range [ 804.878075][T28008] netlink: zone id is out of range [ 804.887041][T28008] netlink: zone id is out of range [ 804.903500][T28008] netlink: zone id is out of range [ 804.914455][T28008] netlink: zone id is out of range [ 804.940373][T28008] netlink: set zone limit has 4 unknown bytes [ 805.024272][T28008] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 805.257800][T28017] netlink: 'syz.3.6290': attribute type 4 has an invalid length. [ 805.354989][T28029] netlink: 'syz.1.6294': attribute type 3 has an invalid length. [ 805.362761][T28029] netlink: 'syz.1.6294': attribute type 3 has an invalid length. [ 805.553210][T28041] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 805.620571][T28041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 805.648590][T27981] chnl_net:caif_netlink_parms(): no params data found [ 805.743163][T28056] bond0: entered promiscuous mode [ 805.749286][T28056] bond_slave_0: entered promiscuous mode [ 805.755248][T28056] bond_slave_1: entered promiscuous mode [ 805.762354][T28056] batadv0: entered promiscuous mode [ 805.771583][T28056] debugfs: 'hsr1' already exists in 'hsr' [ 805.777521][T28056] Cannot create hsr debugfs directory [ 805.783330][T28056] hsr1: entered allmulticast mode [ 805.788867][T28056] bond0: entered allmulticast mode [ 805.794339][T28056] bond_slave_0: entered allmulticast mode [ 805.800094][T28056] bond_slave_1: entered allmulticast mode [ 805.806738][T28056] batadv0: entered allmulticast mode [ 805.812883][T28056] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 805.821475][T28056] bond0: left promiscuous mode [ 805.826302][T28056] bond_slave_0: left promiscuous mode [ 805.831834][T28056] bond_slave_1: left promiscuous mode [ 805.838234][T28056] batadv0: left promiscuous mode [ 805.920340][ T30] audit: type=1800 audit(1768071333.953:9): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6301" name="memory.events" dev="tmpfs" ino=585 res=0 errno=0 [ 806.012403][T27981] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.020118][T27981] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.027671][T27981] bridge_slave_0: entered allmulticast mode [ 806.035436][T27981] bridge_slave_0: entered promiscuous mode [ 806.088119][T27981] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.095730][T27981] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.103160][T27981] bridge_slave_1: entered allmulticast mode [ 806.114908][T27981] bridge_slave_1: entered promiscuous mode [ 806.245469][T27981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.265599][T27981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.356380][T27981] team0: Port device team_slave_0 added [ 806.398610][T27981] team0: Port device team_slave_1 added [ 806.485419][ T5836] Bluetooth: hci5: command tx timeout [ 806.497007][T27981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.512735][T27981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.540732][T27981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.554535][T27981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.568247][T27981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.628215][T27981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.820118][T27981] hsr_slave_0: entered promiscuous mode [ 806.836102][T27981] hsr_slave_1: entered promiscuous mode [ 806.842555][T27981] debugfs: 'hsr0' already exists in 'hsr' [ 806.853381][T28067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 806.864632][T27981] Cannot create hsr debugfs directory [ 806.884473][T28067] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 807.040062][T28067] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 807.062697][T28067] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 807.209999][T28067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 807.232285][T28067] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 807.456594][T28067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 807.472758][T28067] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 807.532367][T27981] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.565146][T27981] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 807.586581][T27981] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 807.597911][T27981] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 807.688508][T27981] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.712794][T27981] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 807.743870][T27981] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 807.753712][T27981] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 807.778265][T28067] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 807.815787][T28067] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 807.832957][T27981] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.876958][T27981] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 807.901317][T27981] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 807.911306][T27981] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 808.044345][T28154] netlink: 'syz.3.6320': attribute type 1 has an invalid length. [ 808.073443][T28156] __nla_validate_parse: 41 callbacks suppressed [ 808.073461][T28156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6321'. [ 808.121065][T27981] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.151438][T27981] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 808.181930][T27981] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 808.217157][T27981] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 808.409895][T28154] bond3: entered promiscuous mode [ 808.435196][T28154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.700945][T28170] bond3: (slave bridge3): making interface the new active one [ 808.713376][T28170] bridge3: entered promiscuous mode [ 808.756779][T28170] bridge3: left promiscuous mode [ 810.985112][T28184] syzkaller0: entered allmulticast mode [ 811.251843][T27981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 811.282923][T28210] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6328'. [ 811.298855][T27981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 811.321840][T27981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 811.338127][T27981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 811.393033][T28210] bond1: (slave lo): Device is not bonding slave [ 811.401143][T28210] bond1: option active_slave: invalid value (lo) [ 811.413516][T28210] bond1 (unregistering): Released all slaves [ 811.656880][T28241] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6338'. [ 811.669100][T28233] syzkaller0: entered promiscuous mode [ 811.683561][T28233] syzkaller0: entered allmulticast mode [ 811.700589][T28236] geneve2: entered promiscuous mode [ 813.424870][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6346'. [ 813.520748][T28275] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6347'. [ 813.537759][T27981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.557913][T28276] smc: net device gre0 applied user defined pnetid SYZ1 [ 813.575188][T28280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.575737][T28277] smc: net device gre0 erased user defined pnetid SYZ1 [ 813.598019][T27981] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.620425][T28282] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6350'. [ 813.650181][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.657367][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.689715][T20081] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.696964][T20081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.833480][T28292] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 813.893497][T28292] netlink: 'syz.3.6353': attribute type 9 has an invalid length. [ 814.100285][T28308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6355'. [ 814.115165][T28308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6355'. [ 814.141899][T28308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6355'. [ 814.167642][T28308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6355'. [ 814.185703][T27981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.193257][T28310] tipc: Enabled bearer , priority 0 [ 814.218700][T28313] ip6gre1: entered allmulticast mode [ 814.226636][T28310] syzkaller0: entered promiscuous mode [ 814.232530][T28310] syzkaller0: entered allmulticast mode [ 814.261916][T28309] tipc: Resetting bearer [ 814.297138][T28309] tipc: Disabling bearer [ 814.316979][T28316] No such timeout policy "syz0" [ 814.350494][T27981] veth0_vlan: entered promiscuous mode [ 814.378381][T27981] veth1_vlan: entered promiscuous mode [ 814.454987][T28320] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6360'. [ 814.464016][T27981] veth0_macvtap: entered promiscuous mode [ 814.468555][T27981] veth1_macvtap: entered promiscuous mode [ 814.539534][T28325] netlink: 'syz.4.6361': attribute type 1 has an invalid length. [ 814.613015][T28325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.623235][T27981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.651074][T28331] bond3: (slave geneve2): making interface the new active one [ 814.662964][T28331] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 814.681196][T28334] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6365'. [ 814.692332][T28332] netlink: 'syz.3.6364': attribute type 12 has an invalid length. [ 814.770609][T27981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.805777][ T3462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.821127][T28340] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6367'. [ 814.830675][ T3462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.845745][ T3462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.864690][ T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.180811][T28356] pimreg: entered allmulticast mode [ 815.199759][T28359] openvswitch: netlink: Message has 2712 unknown bytes. [ 815.203483][T20078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.220431][T20078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.354371][T20081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.362236][T20081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.527973][T28379] netlink: 'syz.0.6276': attribute type 6 has an invalid length. [ 816.146874][T28426] netlink: 'syz.3.6395': attribute type 16 has an invalid length. [ 816.427483][T28447] netlink: 'syz.4.6403': attribute type 3 has an invalid length. [ 816.448630][T28447] IPVS: set_ctl: invalid protocol: 50 10.1.5.2:0 [ 816.662751][T28463] nbd: must specify at least one socket [ 816.706037][T28465] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 816.728776][T28457] IPv6: sit1: Disabled Multicast RS [ 816.751565][T28457] sit1: entered allmulticast mode [ 816.788117][T28459] netem: change failed [ 816.792754][T28467] netem: change failed [ 817.024139][T28491] netlink: 'syz.3.6413': attribute type 11 has an invalid length. [ 817.033156][T28491] netlink: 'syz.3.6413': attribute type 11 has an invalid length. [ 817.305192][T28498] netlink: 'syz.1.6415': attribute type 9 has an invalid length. [ 817.360692][T28505] netlink: 'syz.5.6420': attribute type 1 has an invalid length. [ 817.544728][T28517] sctp: [Deprecated]: syz.4.6424 (pid 28517) Use of int in max_burst socket option. [ 817.544728][T28517] Use struct sctp_assoc_value instead [ 817.654620][T28530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.715321][T28526] veth0_vlan: left promiscuous mode [ 817.817371][T28539] veth1_to_bond: entered allmulticast mode [ 817.871501][T28538] veth1_to_bond: left allmulticast mode [ 817.881440][T28542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 817.932452][T28544] syz_tun: entered allmulticast mode [ 817.979783][T28547] netlink: 'syz.3.6436': attribute type 4 has an invalid length. [ 818.007114][T28549] netlink: 'syz.0.6438': attribute type 16 has an invalid length. [ 818.582307][T28595] tc_dump_action: action bad kind [ 818.650478][T28602] __nla_validate_parse: 10 callbacks suppressed [ 818.650496][T28602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6453'. [ 818.862421][T28619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6458'. [ 819.112296][T28626] pimreg: entered allmulticast mode [ 819.124712][T28629] validate_nla: 1 callbacks suppressed [ 819.124730][T28629] netlink: 'syz.4.6463': attribute type 1 has an invalid length. [ 819.153395][T28629] netlink: 'syz.4.6463': attribute type 3 has an invalid length. [ 819.172185][T28629] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6463'. [ 819.212281][T28629] NCSI netlink: No device for ifindex 813332851 [ 819.229019][T28632] netlink: 'syz.3.6466': attribute type 10 has an invalid length. [ 819.247262][T28632] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6466'. [ 819.277666][T28635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6465'. [ 819.330241][T28636] netlink: 'syz.5.6465': attribute type 1 has an invalid length. [ 819.367407][T28636] netlink: 'syz.5.6465': attribute type 1 has an invalid length. [ 819.407136][T28635] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 819.407888][T28636] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.6465'. [ 819.463170][T28647] netlink: 'syz.1.6470': attribute type 33 has an invalid length. [ 819.500119][T28647] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6470'. [ 819.675748][T28654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6472'. [ 819.803355][T28648] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.810839][T28648] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.984322][T28660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6473'. [ 819.987698][T28662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6474'. [ 820.049644][T28662] Bluetooth: MGMT ver 1.23 [ 820.105708][T28668] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 820.127108][T28672] ip6t_srh: unknown srh match flags 4000 [ 820.510706][T28696] openvswitch: netlink: Tunnel attr 209 out of range max 16 [ 820.725489][T28683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.872483][T28681] lec:lec_atm_close: lec0: Shut down! [ 820.922612][T28716] netlink: 'syz.0.6491': attribute type 39 has an invalid length. [ 821.033687][T28722] netlink: 'syz.1.6493': attribute type 1 has an invalid length. [ 821.098763][T28725] netlink: 'syz.3.6495': attribute type 1 has an invalid length. [ 821.115859][T28725] netlink: 'syz.3.6495': attribute type 3 has an invalid length. [ 821.167153][T28732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 821.214919][T28732] bond1: (slave bond2): making interface the new active one [ 821.240071][T28732] bond1: (slave bond2): Enslaving as an active interface with an up link [ 821.276550][T28722] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 821.291178][T28738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 821.501172][T28747] syzkaller1: entered promiscuous mode [ 821.507294][T28747] syzkaller1: entered allmulticast mode [ 821.701965][T28759] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 822.495596][T28805] bridge_slave_0: left allmulticast mode [ 822.502197][T28805] bridge_slave_0: left promiscuous mode [ 822.509727][T28805] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.520537][T28805] bridge_slave_1: left allmulticast mode [ 822.528035][T28805] bridge_slave_1: left promiscuous mode [ 822.534175][T28805] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.547982][T28805] bond0: (slave bond_slave_0): Releasing backup interface [ 822.555657][T28805] bond_slave_0: left allmulticast mode [ 822.570270][T28805] bond0: (slave bond_slave_1): Releasing backup interface [ 822.640996][T28805] bond_slave_1: left allmulticast mode [ 822.697817][T28805] team0: Port device team_slave_0 removed [ 822.747166][T28805] team0: Port device team_slave_1 removed [ 822.772307][T28805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.795396][T28805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.826172][T28805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.833565][T28805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.857004][T28805] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 823.104904][T28832] bridge1: port 1(veth0_to_bond) entered blocking state [ 823.122077][T28832] bridge1: port 1(veth0_to_bond) entered disabled state [ 823.153229][T28832] veth0_to_bond: entered allmulticast mode [ 823.181087][T28832] veth0_to_bond: entered promiscuous mode [ 823.195217][T28840] netlink: 'syz.4.6524': attribute type 11 has an invalid length. [ 823.204761][T28840] netlink: 'syz.4.6524': attribute type 11 has an invalid length. [ 823.265776][T28844] tipc: Started in network mode [ 823.275042][T28844] tipc: Node identity 8291b5f72ec, cluster identity 4711 [ 823.299391][T28844] tipc: Enabled bearer , priority 0 [ 823.347949][T28841] tipc: Disabling bearer [ 823.595171][T28864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.602523][T28865] openvswitch: netlink: Multiple metadata blocks provided [ 823.828369][T28884] __nla_validate_parse: 22 callbacks suppressed [ 823.828389][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6540'. [ 823.926239][T28884] bond3: option coupled_control: invalid value (16) [ 823.936111][T28884] bond3 (unregistering): Released all slaves [ 824.044599][T28886] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6542'. [ 824.071229][T28901] wg1 speed is unknown, defaulting to 1000 [ 824.195459][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6547'. [ 824.220866][T28907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6547'. [ 824.226064][T28909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6548'. [ 824.319262][T28909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6548'. [ 824.596838][T28929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 824.712282][T28931] validate_nla: 4 callbacks suppressed [ 824.712294][T28931] netlink: 'syz.1.6554': attribute type 2 has an invalid length. [ 824.779359][T28931] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6554'. [ 824.948882][T28947] tipc: Enabling of bearer rejected, failed to enable media [ 825.025225][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6561'. [ 825.059587][T28956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6562'. [ 825.295688][T28969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6567'. [ 825.501665][T28977] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 825.517445][T28981] : entered promiscuous mode [ 826.035419][T29016] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 826.448940][T29040] netlink: 'syz.1.6592': attribute type 21 has an invalid length. [ 826.459646][T29041] sctp: [Deprecated]: syz.0.6591 (pid 29041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.459646][T29041] Use struct sctp_sack_info instead [ 826.510028][T29040] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.521614][T29040] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.731825][T29057] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 826.746187][T29054] openvswitch: netlink: Multiple metadata blocks provided [ 827.000506][T29074] tipc: Started in network mode [ 827.014312][T29074] tipc: Node identity 080211000001, cluster identity 4711 [ 827.031047][T29074] tipc: Enabled bearer , priority 0 [ 827.054575][T29075] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 827.063177][T29075] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 827.074873][T29075] tipc: Resetting bearer [ 827.429920][T29100] netlink: 'syz.4.6608': attribute type 10 has an invalid length. [ 827.462897][T29100] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.479208][T29100] bridge_slave_1: left allmulticast mode [ 827.479667][T29106] netlink: 'syz.1.6611': attribute type 11 has an invalid length. [ 827.494166][T29100] bridge_slave_1: left promiscuous mode [ 827.517205][T29100] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.556051][T29100] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 827.569315][T29112] netlink: 'syz.3.6613': attribute type 1 has an invalid length. [ 827.655440][T29112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 827.668032][T29115] Unsupported ieee802154 address type: 0 [ 827.734414][T29121] netlink: 'syz.0.6615': attribute type 11 has an invalid length. [ 827.770134][T29116] bond4: (slave veth3): Enslaving as an active interface with a down link [ 827.876662][T29128] netlink: 'syz.5.6617': attribute type 1 has an invalid length. [ 828.070570][T27580] tipc: Node number set to 134418688 [ 828.288962][T14771] tipc: Subscription rejected, illegal request [ 828.848842][T29209] __nla_validate_parse: 14 callbacks suppressed [ 828.848864][T29209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6640'. [ 828.874562][T29211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6641'. [ 829.507425][T29256] netlink: 'syz.3.6655': attribute type 16 has an invalid length. [ 829.515584][T29253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6652'. [ 829.528079][T29256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6655'. [ 829.564185][T29262] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 829.581808][T29259] netlink: 'syz.1.6656': attribute type 4 has an invalid length. [ 829.721657][T29268] tipc: Enabling of bearer rejected, already enabled [ 829.787418][T29272] xfrm1: entered promiscuous mode [ 829.792642][T29272] xfrm1: entered allmulticast mode [ 829.810695][T29269] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 829.847329][T29269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 829.893429][T29268] tipc: Resetting bearer [ 829.942325][T29280] batadv_slave_1: entered promiscuous mode [ 830.007803][T29269] syzkaller1: entered promiscuous mode [ 830.013423][T29269] syzkaller1: entered allmulticast mode [ 830.026098][T29278] batadv_slave_1: left promiscuous mode [ 830.133343][T29287] pim6reg527: entered allmulticast mode [ 830.146887][T29289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6666'. [ 830.160233][T29289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6666'. [ 830.238074][T29300] syzkaller1: entered promiscuous mode [ 830.243714][T29300] syzkaller1: entered allmulticast mode [ 830.259442][T29300] netlink: 'syz.1.6668': attribute type 1 has an invalid length. [ 830.284501][T29300] netlink: 'syz.1.6668': attribute type 3 has an invalid length. [ 830.292263][T29300] netlink: 'syz.1.6668': attribute type 7 has an invalid length. [ 830.305223][T29300] netlink: 'syz.1.6668': attribute type 8 has an invalid length. [ 830.318164][T29300] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6668'. [ 830.328092][T29300] NCSI netlink: No device for ifindex 131092 [ 830.448475][T29313] ipvlan2: entered promiscuous mode [ 830.530240][T29317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6674'. [ 830.779867][T29330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 830.885290][T29334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6678'. [ 830.911665][T29335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6678'. [ 831.134148][T29346] syzkaller0: entered promiscuous mode [ 831.140178][T29346] syzkaller0: entered allmulticast mode [ 831.146854][T29354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 831.162913][T29353] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 831.494727][T29378] netlink: 'syz.1.6690': attribute type 5 has an invalid length. [ 831.586175][T29375] can: request_module (can-proto-0) failed. [ 832.942390][T29374] lo: left promiscuous mode [ 832.948483][T29374] tunl0: left promiscuous mode [ 832.954911][T29374] gre0: left promiscuous mode [ 832.959614][T29374] gre0: left allmulticast mode [ 833.006901][T29374] gretap0: left promiscuous mode [ 833.012019][T29374] erspan0: left promiscuous mode [ 833.018344][T29374] ip_vti0: left promiscuous mode [ 833.132433][T29374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.152238][T29374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.243616][T29374] tipc: Resetting bearer [ 833.256416][T29374] mac80211_hwsim hwsim60 syzkaller0: left promiscuous mode [ 833.263635][T29374] mac80211_hwsim hwsim60 syzkaller0: left allmulticast mode [ 833.277873][T29378] geneve2: entered promiscuous mode [ 833.283230][T29378] geneve2: entered allmulticast mode [ 833.346989][T29385] syzkaller1: entered promiscuous mode [ 833.384347][T29385] syzkaller1: entered allmulticast mode [ 833.391649][T24854] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.418664][T24854] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 833.446456][T29400] netlink: 'syz.0.6693': attribute type 1 has an invalid length. [ 833.463612][T24854] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.493899][T24854] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 833.580477][T24854] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.596519][T24854] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 833.606455][T24854] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.615978][T24854] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 833.873651][T29431] __nla_validate_parse: 4 callbacks suppressed [ 833.873669][T29431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6702'. [ 833.897997][T29431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6702'. [ 833.941723][T29434] team0: No ports can be present during mode change [ 833.976739][T29431] gretap0: entered promiscuous mode [ 834.007298][T29431] batadv_slave_1: entered promiscuous mode [ 834.013524][T29431] batadv_slave_1: left promiscuous mode [ 834.034150][T29431] gretap0: left promiscuous mode [ 834.248744][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6711'. [ 834.329898][T14710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.343223][T29472] netlink: 'syz.4.6715': attribute type 2 has an invalid length. [ 834.345844][T14710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.352137][T29472] netlink: 119 bytes leftover after parsing attributes in process `syz.4.6715'. [ 834.487428][T29483] syzkaller1: entered promiscuous mode [ 834.500674][T29483] syzkaller1: entered allmulticast mode [ 834.515963][T29483] netlink: 'syz.0.6717': attribute type 1 has an invalid length. [ 834.547879][T29483] bond3: entered promiscuous mode [ 834.559445][T29483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 834.564358][T29491] netlink: 'syz.5.6720': attribute type 1 has an invalid length. [ 834.597336][T29490] netlink: 'syz.5.6720': attribute type 10 has an invalid length. [ 834.607413][T29490] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6720'. [ 834.642539][T29489] wg1 speed is unknown, defaulting to 1000 [ 834.662510][T29497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6719'. [ 834.846284][T29507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 835.010575][T29511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6724'. [ 835.230279][T29519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6726'. [ 835.241022][T29519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6726'. [ 835.264856][T29519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6726'. [ 835.633410][T29544] Cannot find add_set index 2 as target [ 836.073305][T29563] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 836.092937][T29563] bond4: (slave lo): Enslaving as a backup interface with an up link [ 836.106054][T29563] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 836.122029][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.131618][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.141772][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.150710][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.159666][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.169244][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.178004][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.186820][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.195515][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.204445][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.213347][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.222387][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.231120][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.239841][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.250603][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.259364][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.268310][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.304138][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.334657][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.404656][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.413180][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.437287][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.453671][T29586] bond0: entered promiscuous mode [ 836.460030][T29586] bond_slave_0: entered promiscuous mode [ 836.467341][T29586] bond_slave_1: entered promiscuous mode [ 836.473271][T29586] bridge_slave_1: entered promiscuous mode [ 836.483123][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.498016][T29583] validate_nla: 1 callbacks suppressed [ 836.498036][T29583] netlink: 'syz.1.6742': attribute type 1 has an invalid length. [ 836.531873][T29583] netlink: 'syz.1.6742': attribute type 2 has an invalid length. [ 836.540128][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.563336][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.589146][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.633030][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.662817][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.687319][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.697761][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.754295][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.766764][T29564] bond4: option mode: unable to set because the bond device has slaves [ 836.884307][T20078] wlan0: Trigger new scan to find an IBSS to join [ 837.177971][T29639] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 837.231801][T29645] openvswitch: netlink: Key type 105 is out of range max 32 [ 837.277541][T29650] xt_HMARK: spi-set and port-set can't be combined [ 837.292838][T29650] xt_HMARK: spi-set and port-set can't be combined [ 837.300073][T29650] xt_HMARK: spi-set and port-set can't be combined [ 837.307858][T29650] xt_HMARK: spi-set and port-set can't be combined [ 837.315461][T29650] xt_HMARK: spi-set and port-set can't be combined [ 837.322435][T29650] xt_HMARK: spi-set and port-set can't be combined [ 837.330397][T29650] xt_HMARK: spi-set and port-set can't be combined [ 837.338375][T29650] xt_HMARK: spi-set and port-set can't be combined [ 838.201665][T29667] gretap0: entered promiscuous mode [ 838.225544][T29667] gretap0: left promiscuous mode [ 838.262346][T29667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.359089][T29681] netlink: 'syz.3.6772': attribute type 1 has an invalid length. [ 838.421053][T29681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 838.486553][T29689] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 838.668237][T29681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 838.682134][T29681] bond5: (slave bond6): Enslaving as an active interface with a down link [ 838.735784][T29689] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 838.757290][T29703] bridge_slave_1: entered promiscuous mode [ 839.000396][T29738] __nla_validate_parse: 12 callbacks suppressed [ 839.000417][T29738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6783'. [ 839.033959][T29738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6783'. [ 839.071637][T29743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6785'. [ 839.089834][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6783'. [ 839.100375][T29743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6785'. [ 839.128359][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.184104][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.250008][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.294985][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.415236][T29753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.561652][T29763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6790'. [ 839.628710][T29768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6789'. [ 839.655786][T29767] netlink: 'syz.0.6792': attribute type 1 has an invalid length. [ 839.697851][T29767] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.746431][T29775] bond5: (slave veth3): Enslaving as an active interface with a down link [ 839.781447][T29767] veth0_to_bond: left allmulticast mode [ 839.787265][T29767] veth0_to_bond: left promiscuous mode [ 839.793219][T29767] bridge1: port 1(veth0_to_bond) entered disabled state [ 839.826105][T29767] bond5: (slave veth0_to_bond): making interface the new active one [ 839.836520][T29767] veth0_to_bond: entered promiscuous mode [ 839.843973][ T3870] wlan0: Trigger new scan to find an IBSS to join [ 839.845280][T29767] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 839.971953][T29785] syz.5.6796 uses old SIOCAX25GETINFO [ 840.037988][T29788] sctp: [Deprecated]: syz.5.6798 (pid 29788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 840.037988][T29788] Use struct sctp_sack_info instead [ 840.237489][T29807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6802'. [ 840.281335][T29812] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.6804'. [ 840.281335][T29811] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.6804'. [ 840.295510][ T5836] block nbd5: Receive control failed (result -107) [ 840.651372][T29832] SET target dimension over the limit! [ 840.666064][T29833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.722717][T29839] netlink: 'syz.0.6816': attribute type 3 has an invalid length. [ 840.834115][T29848] syzkaller0: entered promiscuous mode [ 840.839658][T29848] syzkaller0: entered allmulticast mode [ 840.848706][T29848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 841.250063][T29867] macvtap1: entered promiscuous mode [ 841.255782][T29867] macvtap1: entered allmulticast mode [ 841.261273][T29867] veth1_vlan: entered allmulticast mode [ 841.297765][T29867] macvtap2: entered promiscuous mode [ 841.303267][T29867] macvtap2: entered allmulticast mode [ 841.333978][T29859] wg1 speed is unknown, defaulting to 1000 [ 841.527253][T29883] wg1 speed is unknown, defaulting to 1000 [ 841.597861][T29888] netlink: 'syz.0.6831': attribute type 4 has an invalid length. [ 841.901525][T29904] bond7: invalid ARP target 0.0.0.0 specified for addition [ 841.909168][T29904] bond7: option arp_ip_target: invalid value (0) [ 841.921767][T29904] bond7 (unregistering): Released all slaves [ 842.047268][T29884] Cannot find set identified by id 1 to match [ 842.121411][T29916] netlink: 'syz.3.6839': attribute type 9 has an invalid length. [ 842.241394][T29923] : renamed from hsr0 (while UP) [ 842.598966][T29935] wg1 speed is unknown, defaulting to 1000 [ 842.806560][T24890] wlan0: Trigger new scan to find an IBSS to join [ 843.532473][T29977] netem: change failed [ 843.705124][T20078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.734970][T29984] tipc: Enabling of bearer rejected, failed to enable media [ 844.049085][T30001] openvswitch: netlink: IP tunnel TTL not specified. [ 844.216699][T30017] pim6reg1: entered promiscuous mode [ 844.222046][T30017] pim6reg1: entered allmulticast mode [ 844.375400][T30024] __nla_validate_parse: 9 callbacks suppressed [ 844.375420][T30024] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.6871'. [ 844.418286][T30024] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 844.942770][T30059] syzkaller1: entered promiscuous mode [ 844.967869][T30059] syzkaller1: entered allmulticast mode [ 844.979982][T30057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6882'. [ 845.077564][T30054] netlink: 'syz.4.6881': attribute type 1 has an invalid length. [ 845.171797][T30070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6885'. [ 845.192727][T30070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6885'. [ 845.292202][T30079] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 845.326925][T30079] bond7 (unregistering): Released all slaves [ 845.342671][T30083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6888'. [ 845.378526][T30083] bond4: option xmit_hash_policy: invalid value (64) [ 845.388376][T30083] bond4 (unregistering): Released all slaves [ 845.583294][T30097] sctp: [Deprecated]: syz.4.6894 (pid 30097) Use of int in maxseg socket option. [ 845.583294][T30097] Use struct sctp_assoc_value instead [ 845.615426][T30096] bond6: entered promiscuous mode [ 845.621603][T30096] bond6: entered allmulticast mode [ 845.627988][T30096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 845.680568][T30103] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6895'. [ 845.949465][T30125] pimreg: left allmulticast mode [ 846.267763][T30153] netlink: 'syz.4.6912': attribute type 7 has an invalid length. [ 846.285597][T30153] netlink: 'syz.4.6912': attribute type 7 has an invalid length. [ 846.411471][T30166] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6916'. [ 846.422919][T30166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6916'. [ 846.447013][T30168] tipc: New replicast peer: 255.255.255.255 [ 846.465704][T30168] tipc: Enabled bearer , priority 10 [ 846.499953][T30169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6915'. [ 846.522730][T30163] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.6915'. [ 846.539495][T30163] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 846.548976][T30163] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 847.014897][T30210] xt_SECMARK: invalid mode: 9 [ 847.031974][T30210] nbd: couldn't find a device at index 0 [ 847.472587][T30246] nbd: couldn't find a device at index 0 [ 847.681683][T30261] netlink: 'syz.3.6938': attribute type 7 has an invalid length. [ 847.865662][T30277] syzkaller0: entered promiscuous mode [ 847.871297][T30277] syzkaller0: entered allmulticast mode [ 847.881398][ T1138] syzkaller0: tun_net_xmit 70 [ 847.886562][ T1138] syzkaller0: tun_net_xmit 14 [ 847.998143][T30285] x_tables: duplicate underflow at hook 2 [ 848.776803][T30315] syzkaller0: entered promiscuous mode [ 848.782490][T30315] syzkaller0: entered allmulticast mode [ 848.789830][T30319] pim6reg1: entered promiscuous mode [ 848.795479][T30319] pim6reg1: entered allmulticast mode [ 849.290477][T30349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.527486][T30362] __nla_validate_parse: 13 callbacks suppressed [ 849.527505][T30362] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6971'. [ 849.552584][T30362] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 849.578324][T30368] syzkaller1: entered promiscuous mode [ 849.591325][T30368] syzkaller1: entered allmulticast mode [ 849.717220][T30379] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6978'. [ 849.727682][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6976'. [ 849.916361][T30391] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 849.933059][T30393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6983'. [ 850.069357][T30408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.141356][T30412] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.6989'. [ 850.154819][T30412] netlink: 'syz.5.6989': attribute type 1 has an invalid length. [ 850.169426][T30412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6989'. [ 850.242067][T30419] sctp: [Deprecated]: syz.1.6991 (pid 30419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 850.242067][T30419] Use struct sctp_sack_info instead [ 850.320942][T30423] syzkaller1: entered promiscuous mode [ 850.327188][T30423] syzkaller1: entered allmulticast mode [ 850.727634][T30452] netlink: 13 bytes leftover after parsing attributes in process `syz.5.7000'. [ 850.783232][T30464] veth0_to_bond: entered allmulticast mode [ 850.854546][T30468] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7005'. [ 850.873968][T30468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7005'. [ 850.889355][ T1006] veth0_to_bond: left promiscuous mode [ 850.928573][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7007'. [ 851.701066][T30524] netlink: 'syz.0.7020': attribute type 1 has an invalid length. [ 851.897268][T30537] netlink: 'syz.3.7025': attribute type 4 has an invalid length. [ 851.964684][T30535] netlink: 'syz.5.7023': attribute type 8 has an invalid length. [ 852.086879][T30554] netlink: 'syz.0.7029': attribute type 12 has an invalid length. [ 852.216334][T30564] tc_dump_action: action bad kind [ 852.601291][T30603] openvswitch: netlink: Message has 1 unknown bytes. [ 852.614684][T30603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.734775][T30612] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 852.749432][T30612] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 852.759134][T30612] tipc: Resetting bearer [ 852.919736][T30627] netlink: 'syz.5.7049': attribute type 5 has an invalid length. [ 852.965310][T30631] netlink: 'syz.5.7049': attribute type 5 has an invalid length. [ 852.987233][T30627] geneve4: entered promiscuous mode [ 853.019608][T30627] geneve4: entered allmulticast mode [ 853.031425][ T1138] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 853.086174][ T1138] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 853.101115][ T1138] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 853.110518][ T1138] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 853.135831][T30636] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 853.179132][T30636] bond4: (slave lo): Enslaving as a backup interface with an up link [ 853.208840][T30636] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 853.282111][T30647] netlink: 'syz.5.7055': attribute type 4 has an invalid length. [ 853.439914][T30656] syzkaller1: entered promiscuous mode [ 853.460936][T30656] syzkaller1: entered allmulticast mode [ 853.468344][T30657] syzkaller1: left promiscuous mode [ 853.473924][T30657] syzkaller1: left allmulticast mode [ 853.480754][T30661] netlink: 'syz.5.7060': attribute type 13 has an invalid length. [ 853.515847][T14771] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.515967][T30661] netlink: 'syz.5.7060': attribute type 13 has an invalid length. [ 853.549130][T14771] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.580649][T14771] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.657481][T14771] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.715859][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.723180][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.748761][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.767431][T30678] ip6gretap1: entered promiscuous mode [ 853.776213][T30678] ip6gretap1: entered allmulticast mode [ 853.822549][T30675] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 853.879000][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.886921][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.899124][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.912971][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.918223][T30685] x_tables: duplicate underflow at hook 1 [ 853.939750][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.962042][T30675] wlan0 speed is unknown, defaulting to 1000 [ 853.962405][T30685] mac80211_hwsim hwsim60 syzkaller0: left promiscuous mode [ 853.979900][T30685] mac80211_hwsim hwsim60 syzkaller0: left allmulticast mode [ 853.995920][T30675] wlan0 speed is unknown, defaulting to 1000 [ 854.154964][T30693] team0 (unregistering): Port device geneve2 removed [ 854.176650][T14803] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 854.185970][T30675] wlan0 speed is unknown, defaulting to 1000 [ 854.208789][T14803] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 854.213887][T30675] wlan0 speed is unknown, defaulting to 1000 [ 854.220466][T14803] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 854.236504][T14803] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 854.248506][T30675] wlan0 speed is unknown, defaulting to 1000 [ 854.702470][T30719] wg1 speed is unknown, defaulting to 1000 [ 854.907801][T30731] __nla_validate_parse: 17 callbacks suppressed [ 854.907829][T30731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7080'. [ 854.935969][T30736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7081'. [ 855.147174][T30745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7083'. [ 855.206041][T30719] wlan0 speed is unknown, defaulting to 1000 [ 855.304985][T30745] hsr_slave_0: left promiscuous mode [ 855.327848][T30745] hsr_slave_1: left promiscuous mode [ 855.438520][T30755] syzkaller1: entered promiscuous mode [ 855.448435][T30755] syzkaller1: entered allmulticast mode [ 855.458799][T30728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7079'. [ 855.596288][T30727] lec:lec_atm_close: lec0: Shut down! [ 855.760444][T30770] syzkaller0: entered promiscuous mode [ 855.780157][T30770] syzkaller0: entered allmulticast mode [ 855.891887][T30773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7091'. [ 856.014740][T30781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7093'. [ 856.151340][T30790] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.158593][T30790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.224771][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7097'. [ 856.239246][T30794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.272327][T30800] syzkaller1: entered promiscuous mode [ 856.280102][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7097'. [ 856.289760][T30800] syzkaller1: entered allmulticast mode [ 856.856713][T30838] ipt_ECN: cannot use operation on non-tcp rule [ 856.888203][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7112'. [ 856.898821][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7112'. [ 857.108179][T30855] vcan0: entered allmulticast mode [ 857.132276][T30858] openvswitch: netlink: Missing valid actions attribute. [ 857.153495][T30858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.185271][T30858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.321808][T30868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.355136][T30865] erspan0: entered promiscuous mode [ 857.360387][T30865] erspan0: entered allmulticast mode [ 857.605448][T30893] bond0: entered promiscuous mode [ 857.611350][T30893] bond_slave_0: entered promiscuous mode [ 857.620620][T30893] bond_slave_1: entered promiscuous mode [ 857.628601][T30893] bond0: left promiscuous mode [ 857.636048][T30893] bond_slave_0: left promiscuous mode [ 857.641865][T30893] bond_slave_1: left promiscuous mode [ 857.875483][T30916] netlink: 'syz.4.7135': attribute type 8 has an invalid length. [ 857.980718][T30923] netlink: 'syz.3.7138': attribute type 17 has an invalid length. [ 858.029173][T30927] netlink: 'syz.4.7139': attribute type 12 has an invalid length. [ 858.314405][T30942] netlink: 'syz.5.7142': attribute type 11 has an invalid length. [ 858.324071][T30943] netlink: 'syz.5.7142': attribute type 11 has an invalid length. [ 859.061293][T30954] netlink: 'syz.3.7145': attribute type 5 has an invalid length. [ 859.166811][T30967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.333632][T30980] netlink: 'syz.5.7151': attribute type 1 has an invalid length. [ 859.792287][T31003] Cannot find add_set index 2 as target [ 859.799204][T31002] Cannot find add_set index 2 as target [ 859.932096][T30951] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 859.992454][T30951] bond3: left promiscuous mode [ 860.015649][T30951] ip6gre1: left allmulticast mode [ 860.135084][T30951] veth1_vlan: left allmulticast mode [ 860.144970][T30951] macvtap1: left promiscuous mode [ 860.150008][T30951] macvtap1: left allmulticast mode [ 860.174289][T30954] geneve3: entered promiscuous mode [ 860.179539][T30954] geneve3: entered allmulticast mode [ 860.226408][ T1138] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.263837][ T1138] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 860.287791][ T1138] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.303952][ T1138] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 860.319179][T31006] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.326956][T31006] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.343325][ T1138] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.352405][ T1138] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 860.361528][ T1138] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.377350][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 860.388732][T31012] unsupported nla_type 33542 [ 860.514907][T31018] syzkaller0: entered promiscuous mode [ 860.520415][T31018] syzkaller0: entered allmulticast mode [ 860.580229][T31024] __nla_validate_parse: 14 callbacks suppressed [ 860.580249][T31024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7162'. [ 860.616035][T31024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7162'. [ 861.376385][T31071] wg1 speed is unknown, defaulting to 1000 [ 861.388750][T31082] syzkaller0: entered promiscuous mode [ 861.394651][T31082] syzkaller0: entered allmulticast mode [ 861.538276][T31092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7182'. [ 861.601566][T31094] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7181'. [ 861.628399][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7182'. [ 861.629476][T31098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7183'. [ 861.662950][T31098] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7183'. [ 861.674497][T31093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7182'. [ 861.682344][T31098] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7183'. [ 861.683472][T31093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7182'. [ 861.759064][T21458] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.775890][T21458] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.795740][T21458] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.813617][T21458] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.963591][T31071] wlan0 speed is unknown, defaulting to 1000 [ 862.090939][T31118] ip6erspan0: entered promiscuous mode [ 862.111793][T31118] ip6erspan0: entered allmulticast mode [ 862.389588][T31137] syzkaller0: entered promiscuous mode [ 862.411570][T31137] syzkaller0: entered allmulticast mode [ 862.533283][T31140] xt_recent: Unsupported userspace flags (000000b1) [ 862.695207][T31151] netlink: 'syz.4.7200': attribute type 1 has an invalid length. [ 862.719081][T31151] netlink: 'syz.4.7200': attribute type 1 has an invalid length. [ 862.887086][T31164] syzkaller1: entered promiscuous mode [ 862.892645][T31164] syzkaller1: entered allmulticast mode [ 863.092135][T31177] bridge0: port 2(veth0_to_bridge) entered blocking state [ 863.102890][T31177] bridge0: port 2(veth0_to_bridge) entered disabled state [ 863.111605][T31177] veth0_to_bridge: entered allmulticast mode [ 863.120654][T31177] veth0_to_bridge: entered promiscuous mode [ 863.134003][T31177] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.166757][T31177] bridge0: port 2(veth0_to_bridge) entered blocking state [ 863.174487][T31177] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 863.203403][T31179] syzkaller0: entered promiscuous mode [ 863.210091][T31179] syzkaller0: entered allmulticast mode [ 863.345737][T31189] bridge: RTM_NEWNEIGH with invalid ether address [ 863.353186][T31191] sit0: entered promiscuous mode [ 863.359209][T31190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.376491][T31191] netlink: 'syz.5.7212': attribute type 1 has an invalid length. [ 863.679952][T31196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.696326][T31196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.837832][T31196] bond3: left promiscuous mode [ 863.851397][T31196] bond6: left promiscuous mode [ 863.884920][T21374] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.894926][T21374] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.929881][T21374] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.950956][T21374] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.056320][T31218] netlink: 'syz.5.7219': attribute type 1 has an invalid length. [ 864.253530][T31232] sock: sock_set_timeout: `syz.3.7226' (pid 31232) tries to set negative timeout [ 864.296570][T31226] syzkaller0: entered promiscuous mode [ 864.302117][T31226] syzkaller0: entered allmulticast mode [ 864.319208][T31232] syzkaller0: entered promiscuous mode [ 864.325237][T31232] syzkaller0: entered allmulticast mode [ 864.452733][T31242] ipt_ECN: cannot use operation on non-tcp rule [ 865.135344][T31275] IPv6: sit1: Disabled Multicast RS [ 865.287373][ T796] IPVS: starting estimator thread 0... [ 865.357377][T31291] netlink: 'syz.0.7243': attribute type 9 has an invalid length. [ 865.374235][T31286] IPVS: using max 33 ests per chain, 79200 per kthread [ 865.385164][ T3537] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.416463][ T3537] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.419628][T31291] netlink: 'syz.0.7243': attribute type 9 has an invalid length. [ 865.447555][ T3537] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.471292][ T3537] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.537078][T31298] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 865.556014][T31298] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 865.657458][T31305] __nla_validate_parse: 21 callbacks suppressed [ 865.657477][T31305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7248'. [ 865.765835][T31320] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 865.835991][T31322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7255'. [ 865.874109][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7258'. [ 865.897185][T31324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.926104][T31324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.960315][T31331] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 866.240445][T31351] bridge0: port 3(batadv2) entered blocking state [ 866.263195][T31351] bridge0: port 3(batadv2) entered disabled state [ 866.271823][T31353] netlink: 'syz.3.7266': attribute type 1 has an invalid length. [ 866.291899][T31351] batadv2: entered allmulticast mode [ 866.323627][T31351] batadv2: entered promiscuous mode [ 866.381260][T31361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7266'. [ 866.421053][T31353] bond8: entered promiscuous mode [ 866.430520][T31353] 8021q: adding VLAN 0 to HW filter on device bond8 [ 866.478642][T31361] bond8: entered allmulticast mode [ 866.512362][T31353] bond8: (slave bridge4): making interface the new active one [ 866.521708][T31353] bridge4: entered promiscuous mode [ 866.528168][T31353] bridge4: entered allmulticast mode [ 866.537034][T31353] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 866.576962][T31373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7270'. [ 866.602156][T31373] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7270'. [ 866.623868][T31373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7270'. [ 866.744428][T14805] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 866.753859][T14805] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 866.771484][T31384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7273'. [ 866.847258][T31384] bond9: entered promiscuous mode [ 866.852710][T31384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 866.862706][T31384] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7273'. [ 866.907963][T31384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 866.917078][T31384] bond9: (slave xfrm2): The slave device specified does not support setting the MAC address [ 866.928569][T31384] bond9: (slave xfrm2): Error -95 calling set_mac_address [ 867.101530][T31400] : entered promiscuous mode [ 867.175427][T31404] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7280'. [ 867.306920][T31418] netlink: 'syz.4.7284': attribute type 1 has an invalid length. [ 867.350731][T31418] netlink: 'syz.4.7284': attribute type 4 has an invalid length. [ 867.443477][T31427] syzkaller0: entered promiscuous mode [ 867.456351][T31427] syzkaller0: entered allmulticast mode [ 867.522779][T31436] netlink: 'syz.3.7291': attribute type 4 has an invalid length. [ 867.769357][T31447] can: request_module (can-proto-5) failed. [ 868.143664][T31479] netlink: 'syz.1.7301': attribute type 1 has an invalid length. [ 868.239343][T31485] netlink: 'syz.0.7304': attribute type 10 has an invalid length. [ 869.623494][T31479] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 869.634645][T31483] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 869.644324][T31485] bridge0: port 3(team0) entered blocking state [ 869.659640][T31485] bridge0: port 3(team0) entered disabled state [ 869.666619][T31485] team0: entered allmulticast mode [ 869.671750][T31485] team_slave_0: entered allmulticast mode [ 869.681489][T31485] team_slave_1: entered allmulticast mode [ 869.691071][T31485] team0: entered promiscuous mode [ 869.698628][T31485] team_slave_0: entered promiscuous mode [ 869.704713][T31485] team_slave_1: entered promiscuous mode [ 870.328569][T31541] syzkaller0: entered promiscuous mode [ 870.347751][T31541] syzkaller0: entered allmulticast mode [ 870.731340][T31570] __nla_validate_parse: 6 callbacks suppressed [ 870.731360][T31570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7327'. [ 870.880158][T31578] netlink: 'syz.4.7332': attribute type 13 has an invalid length. [ 870.880504][T31576] netlink: 248 bytes leftover after parsing attributes in process `syz.5.7330'. [ 870.911521][T31576] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7330'. [ 871.012868][T31576] 8021q: VLANs not supported on ip_vti0 [ 871.040033][T31580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7331'. [ 871.099391][T31580] tipc: Enabling of bearer rejected, already enabled [ 871.161571][T31590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7335'. [ 871.210212][T31590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7335'. [ 871.594867][T31622] netlink: 'syz.5.7345': attribute type 16 has an invalid length. [ 871.602727][T31622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7345'. [ 871.675551][T31623] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7344'. [ 871.692186][T31625] Cannot find add_set index 65532 as target [ 871.910437][T31642] netlink: 'syz.5.7351': attribute type 13 has an invalid length. [ 871.916237][T31645] bond0: Caught tx_queue_len zero misconfig [ 871.941755][T31650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7350'. [ 871.953568][T31651] IPv6: NLM_F_CREATE should be specified when creating new route [ 872.025304][T31645] netlink: 'syz.4.7352': attribute type 1 has an invalid length. [ 872.033549][T31645] netlink: 'syz.4.7352': attribute type 11 has an invalid length. [ 872.042436][T31645] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7352'. [ 872.093665][T31661] netlink: 'syz.1.7356': attribute type 1 has an invalid length. [ 872.146986][T31663] ipt_REJECT: TCP_RESET invalid for non-tcp [ 872.364232][T31681] netlink: 'syz.1.7363': attribute type 23 has an invalid length. [ 872.390427][T31681] netlink: 'syz.1.7363': attribute type 1 has an invalid length. [ 872.567697][T31693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.587357][T31691] bridge4: entered promiscuous mode [ 872.601502][T31691] bridge4: entered allmulticast mode [ 872.676752][T31696] netlink: 'syz.0.7368': attribute type 16 has an invalid length. [ 872.717818][T31702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.758311][T31702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.787857][T31696] bridge_slave_0: left allmulticast mode [ 872.804990][T31696] bridge_slave_0: left promiscuous mode [ 872.810812][T31696] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.854135][T31704] ip_vti0: entered promiscuous mode [ 872.928062][T31714] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 873.264989][T31742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 873.468836][T31736] sit0: left promiscuous mode [ 873.491235][T31751] netlink: 'syz.0.7382': attribute type 25 has an invalid length. [ 873.551032][T31736] bridge0: port 2(veth0_to_bridge) entered disabled state [ 873.558395][T31736] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.757270][T31736] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 874.040679][T31760] bridge_slave_0: left allmulticast mode [ 874.056912][T31760] bridge_slave_0: left promiscuous mode [ 874.071152][T31760] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.591756][T31782] chnl_net:caif_netlink_parms(): no params data found [ 874.637721][T31800] bond4: option mode: unable to set because the bond device has slaves [ 874.651801][T31800] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 875.397988][T31853] bridge7: entered promiscuous mode [ 875.403345][T31853] bridge7: entered allmulticast mode [ 875.413173][T31853] team0: Port device bridge7 added [ 875.461213][T31855] erspan0: entered allmulticast mode [ 875.506795][T31853] bridge0: port 1(macsec0) entered blocking state [ 875.534383][T31853] bridge0: port 1(macsec0) entered disabled state [ 875.551304][T31853] macsec0: entered allmulticast mode [ 875.556745][T31853] veth1_macvtap: entered allmulticast mode [ 875.566742][T31853] macsec0: entered promiscuous mode [ 875.944287][T31877] __nla_validate_parse: 50 callbacks suppressed [ 875.944305][T31877] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7424'. [ 875.986849][T31883] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 876.039025][T31886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7426'. [ 876.048362][T31886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7426'. [ 876.232984][T31898] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.7428'. [ 876.430038][T31910] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7432'. [ 876.624473][T31924] bond7: (slave lo): Device is not bonding slave [ 876.631553][T31924] bond7: option active_slave: invalid value (lo) [ 876.647865][T31924] bond7 (unregistering): Released all slaves [ 876.647878][T16893] nci: nci_rx_work: unknown MT 0x1 [ 876.744677][T31928] bond7: (slave lo): Device is not bonding slave [ 876.752110][T31928] bond7: option active_slave: invalid value (lo) [ 876.761027][T31928] bond7 (unregistering): Released all slaves [ 876.860792][T31946] team0: Caught tx_queue_len zero misconfig [ 876.930543][T31952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7444'. [ 876.945569][T31952] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7444'. [ 877.046229][T31958] syzkaller0: entered promiscuous mode [ 877.052092][T31958] syzkaller0: entered allmulticast mode [ 877.093211][T31961] validate_nla: 2 callbacks suppressed [ 877.093223][T31961] netlink: 'syz.0.7447': attribute type 9 has an invalid length. [ 877.523681][T31970] x_tables: duplicate underflow at hook 1 [ 877.848614][T31982] team0: Device gtp0 is up. Set it down before adding it as a team port [ 877.925317][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7456'. [ 877.951992][T31984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7456'. [ 877.970495][T31989] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7457'. [ 877.979904][T31989] lo: Caught tx_queue_len zero misconfig [ 877.986639][T31989] netem: invalid attributes len -24 [ 877.992037][T31989] netem: change failed [ 878.098536][T31992] pim6reg1: entered promiscuous mode [ 878.115909][T31992] pim6reg1: entered allmulticast mode [ 878.188460][T31996] tunl0: Caught tx_queue_len zero misconfig [ 878.375100][T32016] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 878.625421][T32031] bond4: (slave lo): Releasing backup interface [ 878.667114][T32031] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 878.702631][T32031] bridge_slave_0: left allmulticast mode [ 878.729656][T32031] bridge_slave_0: left promiscuous mode [ 878.745283][T32031] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.770931][T32031] bond0: (slave bridge_slave_1): Releasing backup interface [ 878.781809][T32031] bridge_slave_1: left promiscuous mode [ 878.791620][T32031] bond0: (slave bond_slave_0): Releasing backup interface [ 878.800816][T32031] bond_slave_0: left promiscuous mode [ 878.815905][T32031] bond0: (slave bond_slave_1): Releasing backup interface [ 878.835290][T32031] bond_slave_1: left promiscuous mode [ 878.865748][T32031] team0: Port device team_slave_0 removed [ 878.908129][T32031] team0: Port device team_slave_1 removed [ 878.935142][T32031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.949592][T32031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.972213][T32031] bond2: (slave gretap1): Releasing active interface [ 878.989844][T32031] bond3: (slave geneve2): Releasing active interface [ 879.191075][T32074] pim6reg: entered allmulticast mode [ 879.207247][T32074] pim6reg: left allmulticast mode [ 879.244006][T32074] vcan0: left allmulticast mode [ 879.445633][T32091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.637220][T32106] openvswitch: netlink: IPv6 tunnel dst address is zero [ 880.126861][T32145] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 880.144030][T32146] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 880.253381][T32152] veth7: entered allmulticast mode [ 880.334583][T17799] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 880.447955][T32164] netlink: 'syz.1.7514': attribute type 1 has an invalid length. [ 880.618668][T32177] veth0: entered promiscuous mode [ 880.643097][T32177] veth0: left promiscuous mode [ 880.749189][T32183] xt_hashlimit: invalid rate [ 880.787703][T32183] mac80211_hwsim hwsim60 syzkaller0: left promiscuous mode [ 880.811571][T32183] mac80211_hwsim hwsim60 syzkaller0: left allmulticast mode [ 880.906280][T32188] netlink: 'syz.3.7523': attribute type 2 has an invalid length. [ 880.995103][T32197] netlink: 'syz.5.7524': attribute type 1 has an invalid length. [ 881.003205][T32197] netlink: 'syz.5.7524': attribute type 2 has an invalid length. [ 881.229395][T32216] netlink: 'syz.1.7531': attribute type 1 has an invalid length. [ 881.293657][T32220] __nla_validate_parse: 17 callbacks suppressed [ 881.293676][T32220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7531'. [ 881.300429][T32216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 881.358978][T32220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7531'. [ 881.544487][T32239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7536'. [ 881.759886][T32248] wg1 speed is unknown, defaulting to 1000 [ 881.880414][T32263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7545'. [ 882.008023][T32266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7546'. [ 882.194693][T32272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7547'. [ 882.217638][T32272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7547'. [ 882.259195][T32248] wlan0 speed is unknown, defaulting to 1000 [ 882.650604][T32305] pim6reg1: entered promiscuous mode [ 882.684042][T32305] pim6reg1: entered allmulticast mode [ 882.752325][T32321] netlink: 'syz.3.7560': attribute type 1 has an invalid length. [ 882.825690][T32318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7559'. [ 882.842730][T32321] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 882.942405][T32328] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7561'. [ 883.140671][T32340] netlink: 'syz.5.7564': attribute type 9 has an invalid length. [ 883.159915][T32341] netlink: 'syz.0.7565': attribute type 1 has an invalid length. [ 883.278028][T32344] veth5: entered promiscuous mode [ 883.322571][T32341] 8021q: adding VLAN 0 to HW filter on device bond10 [ 883.346668][T32348] netlink: 'syz.3.7567': attribute type 13 has an invalid length. [ 883.367585][T32349] tipc: Enabling of bearer rejected, already enabled [ 883.425614][T32351] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 883.445575][T32351] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 883.476098][T32349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7568'. [ 883.707910][T32378] netlink: 'syz.5.7577': attribute type 1 has an invalid length. [ 883.889030][T32389] tipc: Started in network mode [ 883.895090][T32389] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 883.906466][T32389] tipc: Enabling of bearer rejected, failed to enable media [ 884.020784][T32394] bridge_slave_0: entered promiscuous mode [ 884.325965][T32414] Cannot find add_set index 65532 as target [ 884.660800][T32428] syzkaller0: entered promiscuous mode [ 884.670841][T32428] syzkaller0: entered allmulticast mode [ 885.584193][T32491] xt_l2tp: missing protocol rule (udp|l2tpip) [ 885.712631][T32500] pim6reg1: entered promiscuous mode [ 885.729395][T32500] pim6reg1: entered allmulticast mode [ 885.737769][T32500] x_tables: duplicate underflow at hook 3 [ 885.999036][T32522] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 886.037027][T32524] netlink: 'syz.5.7628': attribute type 1 has an invalid length. [ 886.122200][T32524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 886.180288][T32530] 8021q: adding VLAN 0 to HW filter on device bond7 [ 886.189093][T32530] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 886.202960][T32530] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 886.236831][T32524] veth9: entered promiscuous mode [ 886.248410][T32524] bond7: (slave veth9): Enslaving as an active interface with a down link [ 886.286227][T32538] vlan3: entered allmulticast mode [ 886.291495][T32538] bond7: entered allmulticast mode [ 886.327134][T32532] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 886.343558][T32536] __nla_validate_parse: 22 callbacks suppressed [ 886.343577][T32536] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.7633'. [ 886.467584][T32548] netlink: 'syz.4.7636': attribute type 1 has an invalid length. [ 886.471779][T32550] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 886.553358][T32548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7636'. [ 886.568389][T32552] tipc: Enabled bearer , priority 0 [ 886.605872][T32552] syzkaller0: entered promiscuous mode [ 886.621594][T32552] syzkaller0: entered allmulticast mode [ 886.639670][T32564] netlink: 'syz.1.7640': attribute type 1 has an invalid length. [ 886.656762][T32564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7640'. [ 886.659593][T32552] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 886.742472][T32564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7640'. [ 886.769664][T32552] tipc: Resetting bearer [ 886.809849][T32551] tipc: Resetting bearer [ 886.858268][T32551] tipc: Disabling bearer [ 886.922959][T32570] netlink: 'syz.3.7643': attribute type 2 has an invalid length. [ 886.941453][T32570] 9: entered promiscuous mode [ 887.087460][T32586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7649'. [ 887.133647][T32586] syzkaller0: entered promiscuous mode [ 887.148160][T32586] syzkaller0: entered allmulticast mode [ 887.208914][T32590] syzkaller1: entered promiscuous mode [ 887.225993][T32590] syzkaller1: entered allmulticast mode [ 887.529952][T32615] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 887.556116][T32616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7660'. [ 887.720829][T32631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7663'. [ 887.881801][T32639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7666'. [ 887.890939][T32639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7666'. [ 888.147582][T32659] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 888.160581][T32664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7674'. [ 888.176328][T32659] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 888.186701][T32659] gretap1: entered promiscuous mode [ 888.192068][T32659] gretap1: entered allmulticast mode [ 888.265844][T32670] netlink: 'syz.0.7677': attribute type 1 has an invalid length. [ 888.278854][T32669] netlink: 'syz.0.7677': attribute type 1 has an invalid length. [ 888.319941][T32670] 8021q: adding VLAN 0 to HW filter on device bond11 [ 888.396228][T32670] veth5: entered promiscuous mode [ 888.569238][T32690] gtp0: entered promiscuous mode [ 888.587348][T32690] gtp0: entered allmulticast mode [ 888.661724][T32696] syzkaller0: entered promiscuous mode [ 888.671981][T32696] syzkaller0: entered allmulticast mode [ 888.739121][T32696] bond10: (slave lo): Device is not bonding slave [ 888.759652][T32696] bond10: option active_slave: invalid value (lo) [ 888.770877][T32696] bond10 (unregistering): Released all slaves [ 888.908116][T32711] ------------[ cut here ]------------ [ 888.913624][T32711] WARNING: net/core/flow_dissector.c:1131 at __skb_flow_dissect+0xb57/0x68b0, CPU#0: syz.0.7687/32711 [ 888.924705][T32711] Modules linked in: [ 888.928623][T32711] CPU: 0 UID: 0 PID: 32711 Comm: syz.0.7687 Not tainted syzkaller #0 PREEMPT(full) [ 888.938070][T32711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 888.948205][T32711] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 888.954174][T32711] Code: 55 00 00 80 3d 74 c4 36 06 01 0f 85 b3 55 00 00 e8 1e 8b 8b f8 e9 83 f9 ff ff e8 14 8b 8b f8 e9 b0 03 00 00 e8 0a 8b 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 fc 8a 8b f8 c6 05 3d c4 36 06 01 48 c7 [ 888.973856][T32711] RSP: 0018:ffffc9000ba37100 EFLAGS: 00010283 [ 888.979948][T32711] RAX: ffffffff8935c9ae RBX: 0000000000000001 RCX: 0000000000080000 [ 888.987991][T32711] RDX: ffffc9000e5b8000 RSI: 00000000000004d2 RDI: 00000000000004d3 [ 888.996044][T32711] RBP: ffffc9000ba37718 R08: ffffffff89356568 R09: ffffffff8df41aa0 [ 889.004086][T32711] R10: ffffc9000ba377a0 R11: fffff52001746efe R12: dffffc0000000000 [ 889.012079][T32711] R13: ffffffff89356568 R14: 0000000000000000 R15: ffffffff8f8261d0 [ 889.020099][T32711] FS: 00007f1713dcd6c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 889.029061][T32711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 889.035692][T32711] CR2: 000000110c290d98 CR3: 0000000050c5c000 CR4: 00000000003526f0 [ 889.043660][T32711] Call Trace: [ 889.046984][T32711] [ 889.049928][T32711] ? sched_clock+0x3f/0x60 [ 889.054431][T32711] ? __update_load_avg_se+0x751/0xbc0 [ 889.059846][T32711] ? update_load_avg+0x572/0x1870 [ 889.064951][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.069913][T32711] ? __pfx___skb_flow_dissect+0x10/0x10 [ 889.075526][T32711] ? pick_next_task_fair+0x1ef2/0x2130 [ 889.081010][T32711] ? update_load_avg+0x572/0x1870 [ 889.086077][T32711] ? finish_task_switch+0x162/0x940 [ 889.091273][T32711] ? lock_acquire+0x107/0x340 [ 889.096001][T32711] ? finish_task_switch+0x302/0x940 [ 889.101200][T32711] ? rcu_is_watching+0x15/0xb0 [ 889.105998][T32711] ? trace_sched_exit_tp+0x36/0xf0 [ 889.111109][T32711] ? __schedule+0x14b1/0x4fd0 [ 889.115822][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.120762][T32711] ? synchronize_rcu_expedited+0x5e2/0x6e0 [ 889.126617][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.131579][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.136665][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.141626][T32711] __bond_xmit_hash+0x2d7/0xba0 [ 889.146544][T32711] ? __pfx___bond_xmit_hash+0x10/0x10 [ 889.151940][T32711] ? bpf_test_run+0x192/0x7d0 [ 889.156660][T32711] ? bpf_ktime_get_coarse_ns+0xa6/0x100 [ 889.162216][T32711] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 889.167703][T32711] xdp_master_redirect+0x13f/0x2c0 [ 889.172815][T32711] ? bpf_test_run+0x192/0x7d0 [ 889.177510][T32711] bpf_test_run+0x6b2/0x7d0 [ 889.182034][T32711] ? 0xffffffffa02057c0 [ 889.186207][T32711] ? 0xffffffffa0201854 [ 889.190354][T32711] ? 0xffffffffa020188c [ 889.194528][T32711] ? __pfx_bpf_test_run+0x10/0x10 [ 889.199558][T32711] ? _copy_from_user+0x94/0xb0 [ 889.204352][T32711] ? bpf_test_init+0x113/0x150 [ 889.209130][T32711] ? xdp_convert_md_to_buff+0x5b/0x330 [ 889.214618][T32711] bpf_prog_test_run_xdp+0x795/0x10e0 [ 889.220092][T32711] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 889.225924][T32711] ? __fget_files+0x2a/0x420 [ 889.230513][T32711] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 889.236343][T32711] bpf_prog_test_run+0x2c7/0x340 [ 889.241284][T32711] __sys_bpf+0x562/0x860 [ 889.245559][T32711] ? __pfx___sys_bpf+0x10/0x10 [ 889.250328][T32711] ? rcu_is_watching+0x15/0xb0 [ 889.255116][T32711] __x64_sys_bpf+0x7c/0x90 [ 889.259527][T32711] do_syscall_64+0xec/0xf80 [ 889.264065][T32711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.270141][T32711] ? trace_irq_disable+0x37/0x100 [ 889.275224][T32711] ? clear_bhb_loop+0x60/0xb0 [ 889.279916][T32711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.285847][T32711] RIP: 0033:0x7f1712f8f749 [ 889.290260][T32711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.309900][T32711] RSP: 002b:00007f1713dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 889.318376][T32711] RAX: ffffffffffffffda RBX: 00007f17131e5fa0 RCX: 00007f1712f8f749 [ 889.326403][T32711] RDX: 0000000000000059 RSI: 0000200000000600 RDI: 000000000000000a [ 889.334411][T32711] RBP: 00007f1713013f91 R08: 0000000000000000 R09: 0000000000000000 [ 889.342380][T32711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.350393][T32711] R13: 00007f17131e6038 R14: 00007f17131e5fa0 R15: 00007ffe2fb770a8 [ 889.358400][T32711] [ 889.361413][T32711] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 889.368682][T32711] CPU: 0 UID: 0 PID: 32711 Comm: syz.0.7687 Not tainted syzkaller #0 PREEMPT(full) [ 889.378033][T32711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 889.388076][T32711] Call Trace: [ 889.391348][T32711] [ 889.394272][T32711] vpanic+0x1e0/0x670 [ 889.398253][T32711] panic+0xb9/0xc0 [ 889.401964][T32711] ? __pfx_panic+0x10/0x10 [ 889.406375][T32711] __warn+0x317/0x4b0 [ 889.410355][T32711] ? __skb_flow_dissect+0xb57/0x68b0 [ 889.415657][T32711] ? __skb_flow_dissect+0xb57/0x68b0 [ 889.420947][T32711] __report_bug+0x288/0x500 [ 889.425445][T32711] ? __skb_flow_dissect+0xb57/0x68b0 [ 889.430726][T32711] ? __pfx___report_bug+0x10/0x10 [ 889.435740][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.440669][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.445598][T32711] ? __skb_flow_dissect+0xb57/0x68b0 [ 889.450892][T32711] report_bug+0x16a/0x220 [ 889.455223][T32711] ? __skb_flow_dissect+0xb57/0x68b0 [ 889.460517][T32711] ? __skb_flow_dissect+0xb59/0x68b0 [ 889.465796][T32711] handle_bug+0x98/0x200 [ 889.470063][T32711] exc_invalid_op+0x1a/0x50 [ 889.474568][T32711] asm_exc_invalid_op+0x1a/0x20 [ 889.479415][T32711] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 889.485312][T32711] Code: 55 00 00 80 3d 74 c4 36 06 01 0f 85 b3 55 00 00 e8 1e 8b 8b f8 e9 83 f9 ff ff e8 14 8b 8b f8 e9 b0 03 00 00 e8 0a 8b 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 fc 8a 8b f8 c6 05 3d c4 36 06 01 48 c7 [ 889.504913][T32711] RSP: 0018:ffffc9000ba37100 EFLAGS: 00010283 [ 889.510974][T32711] RAX: ffffffff8935c9ae RBX: 0000000000000001 RCX: 0000000000080000 [ 889.518940][T32711] RDX: ffffc9000e5b8000 RSI: 00000000000004d2 RDI: 00000000000004d3 [ 889.526906][T32711] RBP: ffffc9000ba37718 R08: ffffffff89356568 R09: ffffffff8df41aa0 [ 889.534877][T32711] R10: ffffc9000ba377a0 R11: fffff52001746efe R12: dffffc0000000000 [ 889.542848][T32711] R13: ffffffff89356568 R14: 0000000000000000 R15: ffffffff8f8261d0 [ 889.550820][T32711] ? __skb_flow_dissect+0x408/0x68b0 [ 889.556115][T32711] ? __skb_flow_dissect+0x408/0x68b0 [ 889.561398][T32711] ? __skb_flow_dissect+0x684e/0x68b0 [ 889.566776][T32711] ? sched_clock+0x3f/0x60 [ 889.571205][T32711] ? __update_load_avg_se+0x751/0xbc0 [ 889.576584][T32711] ? update_load_avg+0x572/0x1870 [ 889.581625][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.586557][T32711] ? __pfx___skb_flow_dissect+0x10/0x10 [ 889.592103][T32711] ? pick_next_task_fair+0x1ef2/0x2130 [ 889.597570][T32711] ? update_load_avg+0x572/0x1870 [ 889.602614][T32711] ? finish_task_switch+0x162/0x940 [ 889.607813][T32711] ? lock_acquire+0x107/0x340 [ 889.612504][T32711] ? finish_task_switch+0x302/0x940 [ 889.617709][T32711] ? rcu_is_watching+0x15/0xb0 [ 889.622472][T32711] ? trace_sched_exit_tp+0x36/0xf0 [ 889.627586][T32711] ? __schedule+0x14b1/0x4fd0 [ 889.632263][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.637206][T32711] ? synchronize_rcu_expedited+0x5e2/0x6e0 [ 889.643021][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.647959][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.652893][T32711] ? __lock_acquire+0x6b6/0x2cf0 [ 889.657829][T32711] __bond_xmit_hash+0x2d7/0xba0 [ 889.662691][T32711] ? __pfx___bond_xmit_hash+0x10/0x10 [ 889.668071][T32711] ? bpf_test_run+0x192/0x7d0 [ 889.672748][T32711] ? bpf_ktime_get_coarse_ns+0xa6/0x100 [ 889.678293][T32711] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 889.683767][T32711] xdp_master_redirect+0x13f/0x2c0 [ 889.688879][T32711] ? bpf_test_run+0x192/0x7d0 [ 889.693553][T32711] bpf_test_run+0x6b2/0x7d0 [ 889.698059][T32711] ? 0xffffffffa02057c0 [ 889.702207][T32711] ? 0xffffffffa0201854 [ 889.706348][T32711] ? 0xffffffffa020188c [ 889.710502][T32711] ? __pfx_bpf_test_run+0x10/0x10 [ 889.715540][T32711] ? _copy_from_user+0x94/0xb0 [ 889.720319][T32711] ? bpf_test_init+0x113/0x150 [ 889.725075][T32711] ? xdp_convert_md_to_buff+0x5b/0x330 [ 889.730530][T32711] bpf_prog_test_run_xdp+0x795/0x10e0 [ 889.735910][T32711] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 889.741718][T32711] ? __fget_files+0x2a/0x420 [ 889.746310][T32711] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 889.752112][T32711] bpf_prog_test_run+0x2c7/0x340 [ 889.757052][T32711] __sys_bpf+0x562/0x860 [ 889.761300][T32711] ? __pfx___sys_bpf+0x10/0x10 [ 889.766079][T32711] ? rcu_is_watching+0x15/0xb0 [ 889.770845][T32711] __x64_sys_bpf+0x7c/0x90 [ 889.775258][T32711] do_syscall_64+0xec/0xf80 [ 889.779756][T32711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.785817][T32711] ? trace_irq_disable+0x37/0x100 [ 889.790839][T32711] ? clear_bhb_loop+0x60/0xb0 [ 889.795522][T32711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.801505][T32711] RIP: 0033:0x7f1712f8f749 [ 889.805917][T32711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.825518][T32711] RSP: 002b:00007f1713dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 889.833929][T32711] RAX: ffffffffffffffda RBX: 00007f17131e5fa0 RCX: 00007f1712f8f749 [ 889.841895][T32711] RDX: 0000000000000059 RSI: 0000200000000600 RDI: 000000000000000a [ 889.849857][T32711] RBP: 00007f1713013f91 R08: 0000000000000000 R09: 0000000000000000 [ 889.857821][T32711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.865781][T32711] R13: 00007f17131e6038 R14: 00007f17131e5fa0 R15: 00007ffe2fb770a8 [ 889.873763][T32711] [ 889.877134][T32711] Kernel Offset: disabled [ 889.881442][T32711] Rebooting in 86400 seconds..