last executing test programs: 8.218054407s ago: executing program 1 (id=4479): unshare(0x6020480) (async) unshare(0x6020480) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001100)=""/132, &(0x7f00000011c0)=0x84) (async) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001100)=""/132, &(0x7f00000011c0)=0x84) sendmsg$IPSET_CMD_RENAME(r4, 0x0, 0x900) (async) sendmsg$IPSET_CMD_RENAME(r4, 0x0, 0x900) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000000)={{r3}, "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"}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000000)={{r3}, "8331d39e7f0639ba490bdca3e6ac4202f557ff47c34689b3d548030b373b5797303c19e07e9d5c637f2bc3620847ce409fcf8542319070c7daa248f84c3e9015012f520a4ba99fb47f1d88a8c930083c7c5eefcc9b51412f0b3b83ad256ff99228e9b32d027d821833c9808df1e0c47e78823b79f9be58c6c11b164667148ef753b11644d3ee7f9f8469ba2726949ec6ac9b6616853c63d72c1b7a4ff05705f853741e1e8eb0b580d6f74bf8ffed210384cda43c539c64ac44805ff523cbd1e54cb27e97aec1cdc462ea012c4953da45ff4971b02ac5f3e89314ca87b92e58adb3ac9e5ede8fad4f8950858b57ebb955f01018c3af1e750ba42583a10753e42c36439df6801afe1bc6568d0802c4984c656505579a9c14a257f6e5416d8d287628f7391d1e7d57678fd3fa763eab2cd5a9a692ef2b688a8c94801e98fcba5274fcd86891b5b70240baf3ece1089da26c0dd558e2a8ec20a735bfc5e272a666a29fc01cded0ff92659673242d0b2bb25bf53d7189a9bda09ff7df1fdd8133d1c5daa61957c37fab7abb7fe0276d22dbbe4fa4c25d1b929fbcd0349f66c20eeb694396ebe73b8064092b073a2f5be2d96dc48322b8a84cb5cdf39e74136fdbc3fbe103ee7a2a6668c683ae4c68fb5ceb9ddf7eb7502d9be3305367b2fe27b4b50b3dded9700db570ecb8b9af01268cfe1dc269d8be4b07e1e71d3f60d314abacc5bb0942f35fa920aa280e51b0ca4ace9158a7b682fb84ed74dd8661f64b064e0e3ffeb03ccd43eacbe58301a1a34ad41b697a7c0f73e9d9f7642b71b0398c60fa54cc6fea5893525e589e3aa0845101c279f97961cc0fc1b01ba6cd28193cd1259de174d8e9e2a769b31263ab8eb4a95bf99e07df245ab268ad997e5c6962c3e3980f1df026052020cbbb4127244f73709460e84ae73447861c04782c65fd37dceda2ae0d06bb461ed958dd6997cb4a67c7336286387db06f45afb4609e5475025778b124352b64e897732c65f334593b7e1c7ce839832d2ae199f4b37d8a533f4ef6c28a3ead3a689a0e8fd992c57b61a6a3f55ead708d9d0732099f592b845292e188676e0188b8de68385fc136ae30925f469690c456652a8804747c9b2f1a43d73f6444c9484f5fdeb2aa49264c4d57b0aeda01c12c7ddfb00abacffcf887c708d85b9f20386247e9b7c89bf3e1500a6d8f1f08ce9ef684dc4041f3697e380516eff97cca2b8807a9afcfecb289368aa3380f75fe85ff609953d138b62bd15332bb265d7bc2413ca80fbd0796386c892bff4959b192b5a0e9533de277c47048fcf19e01e974017909e580c9076945b2468456fa26627cde9e3b4f0ffd6de927e4113385cbe246e26addc08c51b06b3fc9015ae1d6ca5bc8b650ad98c5f934e297744068e5fde9a9c1c161d55848a2e31153dd1ddd690b9c397552e77e2fbef7928a30df117ab9a442616582329948d5b49a30b324ce7c57537ca73b85318f3481da71fdf88ad91377f000d067390f98fb276cff27fa9bb711ddd95ffe328a2c3021bb9072ade4378fb13146ce19bbf0a0c62463810755a2a7bdcc7348b89d594d61efc82979c705d58c0a8cc1fbd6dfbb99eb7d693f080e689ffbd63ac0c9353bdf06525fc96a82613af71c0cd2954bcf422e0f3673266dad58494968908d38f81658dcab10ea54db89d88fe33a3e69c15ebdadc39a90a84731ffbd9b2d0726261f6e39a290168f424ac904b95867882fc4358d383390e061c646234f34497a5db9286002f6961609dd75fd0c358d94cbe15b74af6b1aee21ed265f0d353645911f5a9864fc436479a30c1d32e5f6f15a18c3ad8f81c06959a300baf734f0c086d8cf5b170d65ef84b970dc94c0afacb06a14f42b236b72072a6d8a23a687065b8566193a8f94aa46eb6f9fda60d92d218fce2c1e0fb516412e0a5ccb20ac9d78073526eb39e6beda077f0222784bfc9fe4f1b31e8ea34f094a09a6bbdc3fae1e20ddb5c5b99ee7c012e9222287187ae316e1c87edda91a8d1b0af314939a9d242ae14e4899ba102575f43c2bb89bfac8171e267ba294c7941d7d410d1c405559bada88d94ba13958171db246d2b8aa5f35946dbea1f0afe31382802f8aac99435521b1507a7039f01ecedc5bbcbd7579a712d9f2b797806a47c0edc27d7e8a8569e345e9b1e523d3a2b72ec853e77dc9e81981fbe0dbe29fc9b20a8b1b0ddb028d9e8e90d6642a461a2f516b6374b9c2e1baa52673d51c40325235d6c9a24720f1d2f9f214cc2d336900c5d3c689995a39a34483462cce1f98d2eece99576bb8526ee0a7d7b4f778a7b03df513f56137a9bb5af56791393b82420433b1adcdd610e1ea3df8a21b3f0a1a70dfcb743ad68b1f04af6170b0c49a72e855adb3499b9fa65375631538ccbe61d80dd0843a64488e62569e3b62cdf1e93cf5c811e95bb8e0489f43a76a549fa93e3de4fbfcee443844c8e15a09d954ed57730f07f38a6688f436292451eada308e53c5d67bdb7165582476e71d913a68366ce8f5b68bd184bee9dd0b720a42d6a42700e63fe84317a7df7a592d54d360525cd0790d9c3821bb1112701d2c69cd6c63f3a33da0381bd6c220b6c5f08c3d7f85b5ddd173ea41bc9cbc8adff9b62f5e6b645d6e287b6682650c02ee1b5ac80efa090b1bb8b4d20741c7aaa6712bb604d3c58ab2837c00fe6267400e9a7862a871e6d47c390605d3675a5715f2ab5ed7c5e35e5d37eb050d0da86baa45ad943e1767d1d0c03ca55a94440bb79b34394c482edad5d86accc5632a795766d61b2df9ba6dfc41996f799b3d5d156a4df30cb541c5b1cd4c6bffd64392b1b45d46651a7c921a1ccbfafdfd67c81b1cc27610df8b89ea0a6b2e07d2e043b16df5ce4421ed63faa6bdc0aef1df860d93867794ee08e2beceaaf8ff607ea5a08f8784e3c0675540fac3ccf0f281b3b2447285a624147bd94331a5e05d02c25331afeafdf60f8de793c1e96b503259a6e4bf69983b432a577986c43373333df526baa3f2dce9eee3d70cc14f334a2fd691d2899162e286d503d135cee81caa4a6f24354220e1a08d3f220b90d4c6928728cac9cd0be5a0975df4ac2c463d77984744e134a0672a7e4f0ae4f721dad69f1346726705a0002b09638129a0c1122a4f6e2207e6a0999327474b739c1722f1ff17131141ef1ba4a6fcf364e12d769898ad5127bd620f9cc2af37a8f7785ed2bbcfce26318fb669a63cd0aa5e6e178cb58eaaccbd92d4258ab1bfa36ae7180f70cfcddc15a627c743341f174c2c4154fe7dc36c5d00f13e76aef2984207e9f94039c5c1c8bb634485330895d14d8a8d0632caf8b62c08053fcb25dc098153ac2d613d3dc2cd8a6959f8190ee13850ebe04cf5d68131fab529fd44ae117fa54738fc5ecbf3c329d727efb3a1c98d7784aaf125e561dcf0230e258d47e05839d7b43c909935c41f40c65bf9cdb18b8c821465494f82e9b714819fb048e9d11c704f77a34c98fed653fab58c490324c8f1f9dc556d7110bbb8e0dc6bc2f14b6783560672f6cd71521d102746addbdd25bd6961bf85f8156b55abaccf5bbf39426944f785160b1cc04687c7bc44516223a47f4f0de58e026076a64b9664ee6a25b3c0efdbf3fa9868ad90577623cee33f7fe68bfcc79682a26961b2aebb54a942aca1f28978ae22b2be8be1aec9dbd5b89e57879ee03d5bd67f0f7f3006fc9a68a74f7d43a983401613716dd3f7bc4d33c1a1fca65f2a25c7312619a60bed6845e37258e1e4de64efc86022fda42cb61f35cebce01e324903239bf4dfa6227d3fbcf72f984afaddb53354b405ea49a2ab6b869e3a87a8c2abb202b0c649000b3170417dfe8592ad40309a45d3237c26c6422af2697f3587e2ad60bb04c09433fb5ac3836eb750f8e6bf8a16aa53de9c95d7a88c4892d76dff923f1bb71a736d654e87332ecb6b98acc94958d8169836d189ae252c267e359a0f516cbede1e270236eaf2b713868f2e69da2775372500947521e3f7c293932c8ff5dbcb123af1d53e97f99d3db6b1264966551690e8cb42db59f31a47dbbdbf746dc28aa5413aa7736d26adcf6ff4c47cbcdf298f7413271e36fa49013c5866a1c431113ddfd55da3906fd8bb0551ed0b654531f3372fbd446035c43ee4cfa2667753ba3fab16b05f6e937ea8da968d8856a389b1f4ad0a46eec1274f7603e3f5ff7a900e6b9d4fd9ccc4dbfc54322b04aa1cbea88250f712bd37547fb68c636a2edff3e4a2216dfe3f89be5d425e5e099d145dce4e0bb8a54be968d093401bf5e4175d8aac18734a1438257e56f6aec5ed38e969a5fff079b3d082b1b423ad2e68f9a1c1e7b4a620015272c424548995c4deb6c203e718fb133f60292442480f4545ea66828d84eb7b93d9c433e6b13cb63b88a6f060ae3f9f567f95522206d2f535b1d5c92a3486d2de0a25639b04463b2906dc0865de27c37b0b3cd2cf6b6ac8524317f99ac6e80d12ee4399a405f6f93a54e0211f55432f8c366e3da8ba4fbd1401859c7adb5f37e9ae7361968e2d48251c951564b408e60d74bc03b0169c0887aa854c5c545ac3326bab8f8d165463d3724d5c9e5ef1d6732405221c64521e5127ac10c834696a9e1b33e3a655c38c2b83209bc2563bbb1fa7f0a64682fafd7dba7f4b8ec7afd4e43363ad487470a9e901a72c5883fae84ec0cd4102a8b175b382ea74d77032f7b156155ef55348733c1d1de7aef7d1136bd1a84c0602e951c99f4af5fe41dc7e81f7b0210a01d225ef99c80218642c77c426b1313278f0586e55fc1455af3572ce21ea2effeb4f2acd4c490b9bb4e3acfe04895bfeab55b3fa0725040a9bc9197a8e91cc013945913d8a69188e0fe8cb04d481d7c634fad2c44d8fd2f65dec3dccc9ed2064f120a5d4a4e950de55355252308930200bfcefd2ca5ecfbcd7212e94dde4b0c82dd27b31161f98737b8b550c33a803f62fda8675105123b941ee61ae2e2a571027c9984f445fdbcd0d949e2fdc0003850dcc16466b2f364b21c5cf39c8818633ced99d862faf2c55d4b671fc33aa66903d74ea3af86c447c3250bfc34b14006c0653ce345b043a6bea2d694b300ca2c15f81276720c03e55ac365bd1c81406ab109ffdae97ed55aea48dc6e7518af13dffe5ea837a45e1766278659d427da7e0f8652942d7fbfc04cf6206f57fd50ddb2e5449cb8f34feb2bbb5351ec329dee493703469bc0b0c1d06af0879a3b2d314107f8a7ba40cf69d798b7ba4c807688803eb355a6b3df08036fd43bc621c0f2637e75656aa6e14856527135d78932535674626f5afd3c3aee39b9d39d1b0b41b32f525bf4910b95f5b889d4350cc4d08ec2814db55327178fc717a981d6cd21260e5de99d5e0d9b72c447e4ca23e9791b255f132dc8093ea5308d243f6cc329cd0d661480c7b0b81b097e8dda7c3377ce5a1475c87540ba26d08c3e3c86e3064bf24a4f6e06ccc6fd455cb857e13b3f784ecadab87bb829590675602c26e5a89a50e1cb82de37b1d5d7972fa4affd265ada8cfeb2aa79e65714ac7266a837f50926e19ab2c4cd36c36c6145c0addcb6124a29166e877e2f584cf2007c60f30e0cee439d3b3b2094ef98530ff2ac5bdd5e7366f2444a7255bc9f04fa255fa3ae0795b598b577f939fb5a8cb64a7911cfb7661b5a39fb609c968112518e6d392d08a1a412d1bb3de5f77fd152bcb9db1ed61c432af28629ec947268d72c527938103beec626a2729ce653a3e44853dd1c43205b9838326bf2eec"}) close(r3) r5 = socket(0x10, 0x4, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x1000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000080000000000000001c6eefa1598b81542f9293664f267b0d2743f6f34b780007911b5787ffbca8894d5a4120503c141b590650bb343da25722c8e02bc370e4ac631bd1a5aff0e923f69a0c416cf9213d5e3d817af766dd01d5929a065c0d3cf41ccf1459889843033191e8770747782a7d1bfb3d8a388b04c560bd857ff3d71219a4c51429a68ffe874b72eb06abb211e936d7f7fc55852f15741f4c8b3e92c4fb2a2d7da46f7f55234ad2f9cbf254b5473f2f91a2850d37788f7e760a00000000000000000000eb9cde2671544ce8907967", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000080000000000000001c6eefa1598b81542f9293664f267b0d2743f6f34b780007911b5787ffbca8894d5a4120503c141b590650bb343da25722c8e02bc370e4ac631bd1a5aff0e923f69a0c416cf9213d5e3d817af766dd01d5929a065c0d3cf41ccf1459889843033191e8770747782a7d1bfb3d8a388b04c560bd857ff3d71219a4c51429a68ffe874b72eb06abb211e936d7f7fc55852f15741f4c8b3e92c4fb2a2d7da46f7f55234ad2f9cbf254b5473f2f91a2850d37788f7e760a00000000000000000000eb9cde2671544ce8907967", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200000038000480340001800900010068617368000000002400028008000540000000070800074000000001080005400000532808000340000000900900010073797a30000000000900020073797a3200000000050007"], 0x94}}, 0x50) unshare(0x600) (async) unshare(0x600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) 4.713717983s ago: executing program 1 (id=4508): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0xeb, @mcast2, 0xfffffffb}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x5000000, @private1}}, {{0xa, 0x0, 0xd50, @local}}}, 0x108) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 4.439949473s ago: executing program 1 (id=4511): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20) sendmsg$tipc(r1, &(0x7f0000000580)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8811}, 0x40) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005640)=ANY=[@ANYBLOB="687ede4cbaba4f2f9eac02f126bcb634ffe1", @ANYRES16=r3, @ANYBLOB="01df25020000007efcf2605222d092f2fcc5c9ac6ac9488c46c3986cf72a1082e9134a132e4c9f4462f2471d81a0468ae78e9645421876a463c3e555f4d47b7c1415cbd3677cf718cf8938148a05338e4684ff767e55121135c53b38821406b5ba354e32ad93d076567fba78a14686bcbf7b8400000000000000183f8888b6aa257aa82209c129841ed1577471d1a024e7cebb2e5a1a5111fe8732829ed68a7bcb2467652d2719d5c1504baada99398b3bd9262fd4d67b12b9e5b567729a257a8c5276d637e45d439a9c1adf51", @ANYRES32=r4], 0x1c}}, 0x80) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="70080945fe20420704"], 0xc) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10) (async) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0x3}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) (async) recvmmsg(r6, &(0x7f0000006c00)=[{{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000780)=""/241, 0xf1}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/68, 0x44}, {&(0x7f00000005c0)=""/106, 0x6a}], 0x7, &(0x7f00000004c0)=""/49, 0x2e}, 0x9}, {{&(0x7f0000002a00)=@xdp, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002a80)=""/236, 0xec}, {&(0x7f0000002b80)=""/220, 0xdc}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000002c80)=""/44, 0x2c}], 0x4, &(0x7f0000002d00)=""/177, 0xb1}, 0xfffffff7}, {{&(0x7f0000002dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002f80), 0x0, &(0x7f0000002fc0)=""/4096, 0x1000}, 0xd}, {{&(0x7f0000003fc0)=@un=@abs, 0x80, &(0x7f0000004180)=[{&(0x7f0000004040)=""/167, 0xa7}, {&(0x7f0000004100)=""/55, 0x37}, {&(0x7f0000004140)=""/43, 0x2b}], 0x3, &(0x7f00000041c0)=""/100, 0x64}, 0x7ff}, {{&(0x7f0000004240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000005480)=[{&(0x7f0000002e40)=""/140, 0x8c}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/243, 0xf3}], 0x3}, 0x48000000}, {{&(0x7f00000054c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000005540)=""/243, 0xf3}, {&(0x7f0000006e40)=""/4096, 0x1000}, {&(0x7f0000005740)=""/250, 0xf3}, {&(0x7f0000006740)=""/108, 0x6c}, {&(0x7f00000067c0)=""/171, 0xb0}, {&(0x7f0000006880)=""/142, 0x8e}, {&(0x7f0000006940)=""/114, 0x72}, {&(0x7f00000069c0)=""/31, 0x1f}, {&(0x7f0000006a00)=""/160, 0xa0}, {&(0x7f0000006ac0)=""/92, 0x5c}], 0xa}, 0x4}], 0x6, 0x2120, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x5f4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) 4.120733876s ago: executing program 1 (id=4514): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x18}, 0x94) 3.942292324s ago: executing program 1 (id=4518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0) close(r1) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @remote}, {0xa, 0x4e1f, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x897, 0x0, 0x2, 0x80000000]}}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @null}, [@netrom, @remote, @bcast, @rose, @bcast, @default, @default, @rose]}, &(0x7f0000000400)=0x48, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a6", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000480)={r0, 0x100000000, 0xfffffffffffffffa, 0x6}) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="18220000", @ANYRES32=r10, @ANYBLOB="00000000e3a40000106300bd5f0000000000000002000000183a270000ffe1005101d062b5fce27954c25ffdfd33d2660fdd743a8c14da635a61122c"], &(0x7f0000000500)='syzkaller\x00', 0x7f, 0x0, &(0x7f00000005c0), 0x41100, 0x20, '\x00', r11, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x8, 0x80000001, 0x4}, 0x10, 0xffffffffffffffff, r12, 0x2, &(0x7f0000000840)=[r7, 0xffffffffffffffff], &(0x7f0000000880)=[{0x1, 0x1, 0x7, 0x4}, {0x0, 0x4, 0x8, 0xa}], 0x10, 0x40}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff}, {0xc, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}}, 0x44080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2c0100001800200029bd7000fbdbdf25ffffffff000000000000000000000000fe8800000000000000000000000000014e23000f4e2100010a0000ac3b000000", @ANYRESHEX=r7, @ANYRES32=r14, @ANYRES32=r13], 0x12c}, 0x1, 0x0, 0x0, 0x59f80f2c417ce345}, 0x4040014) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03000000000000000f000a00000708000240000000020900010073797a310000000038000000030a010100000000000000000a0000070900010073797a3100000000090003", @ANYRES64=r3, @ANYRES16=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.465817522s ago: executing program 2 (id=4524): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000027900018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) 3.135934418s ago: executing program 2 (id=4525): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1ffa40b10f6f228}, 0x8001) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x3, 0xb, 0x6, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000340)=""/211, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xa, 0x0, 0x7ff}, 0x10, 0xd1ad, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0x1, r2, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x1, 0x8, 0xa}], 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x1, 0xfa, r6, 0x2}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @dev={0xfe, 0x80, '\x00', 0x40}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804c005}, 0x20040054) 2.846440467s ago: executing program 3 (id=4526): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x140d, 0x19, 0x270bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x83}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.730497555s ago: executing program 4 (id=4528): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x1f}, 0x94) 2.639477794s ago: executing program 4 (id=4529): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {0x0, 0x4000}, {0x14, 0x19, {0x2, 0x0, 0x0, 0x2000002}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=0x60, 0x80000) getsockopt$nfc_llcp(r5, 0x118, 0x6, &(0x7f00000001c0)=""/79, 0x4f) 1.62122584s ago: executing program 4 (id=4530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850103000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.57285691s ago: executing program 1 (id=4531): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r1, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="0209000902000000fffffffffedbdf250d7c393c60987a41767f65a00d097cc33e5b587b9d34c199095651001c1cf34524fc57ef0209bda9b5803f7a223433cc1e840871737aebc459f5387950ee5f6d5c936dd4399854e7ac7b6969d8f687d0703cc6e7985bde666a08785cc164034284741d8079067f420503576c6068a502e88f48d9bd7cb2c4220340a923994262db823b78d08a7d93f620933369e35556dfebc85d2a9576be2c717991ad2a8d0363845c621dd9065dbcb9c19fed225208f963010b451b057ade5ed8f9860ae87ff888b065d08e8701ca263d80229e86fcb90000000000"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) 1.542716323s ago: executing program 4 (id=4532): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) sendmmsg$sock(r0, &(0x7f0000001c80)=[{{&(0x7f0000000000)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="fd7907eda1a17a745bf05000a06f507fa03f4af755afbd5160bdf2aa29681f5a8bfac96a06ea274c0dad72ff21b4b9fe4af01f712d1de858b1d1ba0662963f8e0ae20279ed619e91b0f18c795d566d4b154e5f7e7ad163565ca1f252c689bfa38309b8ff17d9e704211d0b9bd25f4633761bfdb708d69df5d318a1929c706f43dc5c5baac607959bb22cc4a4ea155aa2579a5ea7c134", 0x96}, {&(0x7f0000000140)="ec4517fe07d40599cb1a9be7b39a157883641bb4e3a5cd651c0e9ca7708ad9bf25c4aa1431c14a7217bc5e10e88c6723ab31080d2671e4f58bbaca3ab495f87a567ad6e45747af6d6b685e0657e8de24602c7009e9579b4329a1b1c6595d45f5634f3927f5dd0ddc55a642d1e1d8f7b53b4409e8e58b9c476203445ccfd3d3a716365d", 0x83}, {&(0x7f0000000200)="36ad55abcaa0c8cc1fd46a502d65df1378eeab25f579bfd96bcd8d88f5ac855bea477862f3217c3cdc94b01ae8915decc69b5ac0691e805ebbb79979a6971c4bd4be745610354a1b55f723b0dcf1db1efab2cd3984811cf741f7074b086e7eebd06bd1c6fb3531efa2ba9c581a814777511aeba32b901fe3228694ab680fd43e38edef34944b1ae0ad47b8fe586978b4f8674d5b50fd", 0x96}, {&(0x7f00000002c0)="0983f8bf3c4b553737ee52537dfd1c8b6cba38f45f888dc462d210590afaba1e45ffb0a17b131fd4880be0324371e9", 0x2f}, {&(0x7f0000000300)="7a02417d29aefdb57b0a5034b30b91211f236c4b77e7dc0710d330eb67594e078ec45f9e205329dad5852c83e928036e8c1abdc9b41ae619b82804ceb7a9d61cd4c63bd188b18e9dbe7dc1ff95c7fa71", 0x50}, {&(0x7f0000000380)="474ecfb4210773a374a1fd0a1e0afa1bc1940900df95ae230724b2b8e1c6bf8c39f3ea40a347610b98f5b9ab079a1916e79bec13096babc0f39b7b13e9ceda451036a9f57b37406ea96905ef6a076dbc287c35c08b42f4191d89a073", 0x5c}], 0x6, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}}, {{&(0x7f0000000540)=@ll={0x11, 0x7, r1, 0x1, 0xc, 0x6, @random="e5fe2e4d141e"}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="35a65b291af3f0a40d4cd565cecb6a21bd7dd760a0966c4a0aa49bb6d5b6766fe7b2a2671f346c697a67780a1682c37a175063bdeb492c8ef63cd3061218dd03eba4b744bac5267f13b2a3f521e8926be639e6", 0x53}, {&(0x7f0000000640)="0dd335769a412eaea9a6a1e4f2dc9ac6320051f2b81d8381f61df7fbc5d4aaddba2726e2b534b3e291f855d2cecd01b996615a5731f0f8cf705fa721678ffbfedaeefceaafa517d53b4c43e8a431de6c9cd0e264bbd7ac1e4942bfd30b748d1270e5641633b9598924551b71b0ff48143793785fb3f21813c3ad237e647055f91e508e5d34199d8671dcf3868212eaea682d8db9a4250b51dec7dd5ea3f981056860fe16fca1ff23ce063ba4ce8f2127f535991d8d490a54ea9d1930db8c18bdad8cfc27cd1cdc1fe555c5e80df744c21c01f572b46ff50ea366a47cfebc47cd7c2568d2d0f1bf0ee911d5", 0xeb}], 0x2}}, {{&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000800)="b4604631e0b808122b82e64a647c3f43e128d6300c84d7f1ae600337b486d32764c6", 0x22}, {&(0x7f0000000840)="7b53343547327fab99014bf988b56fdb47494f01ac9bbf99092902ba345a089eef1eb7d0104cf94b342c4dea792302487b17a7785a32bb54056bec72e98842b9a4a89f8d605eace6003c950a09550de291af737a08293d455d8f1525a1461f559e727b75872113a343d1a26b9507b1ff174ee96d0c87c6152455911b07a49670c7a6d08cc0f764e733891f9695fc18512ed95c0dd8a919493e7b1378f82616603c06d9b5c6401475e00d49f816b931222fb8d88ef25e5302b956743ba7d8d72f0eff32308f4994f1d352e2ad2e841cb6302eb4f90df710095e4891335af96867ce52d5fd9e289d8572b1683da751ea3e2d8d6de0f6ed0707e1539fe47795213bb11f8dc764d7731f67293a4799338176e9f35e4bb80bac96fbfcbf3743b44465181a5061198a9eab3ec06dbd7f5bda1c519214d8b8a3b7df841b9a06d586f738bf1558d62704d85d38f74787391b8893ab5dc6230e577ca3e1c5113fe8c47d33c447e4265d9a2293182b5c16df37a77aacd0627445f781bbc4aa609d6a70f6aee9c6f4014248d40afdc8876f87a47578d4837e7caa0a3923bb3ffdaca905e27c676293b697fcff34bbef7b5b8c2fb98ec0f0f9f1c88aed37f4447e9ef1340abf8064d17614643b47893c695f26100564e9b3243d816e11724f764c64b396e51acc2dcfb31cdbfd4bad2dd7b25a502e02845b9cdf5188c6b6b64d3e81fa55dde766fba94a00dc42ccf0ef4ae3a6949617ae658f83d5083d179b65e582141558e949bae51d5aa11d82fe4a5989529564cb1b9139adab6a56f5e96075ce03b03b922463bd96be0307341fc8fcc3dd06937b0fb0c3b9d95fb95f30605c0e9e359d03e7e0930e558e0215a42dbf99f5589fc47d134891c21d332bbc1ae59171e8d6969863a073c03e42b6e71295dac16db871c5913f4e34fe9cd975e93b71f8c95d1a207410dedb56f0395f51490702b6e7742cdbdd9bdfd4425cc4d0141ca1ac8457013b668013dc2d310996b013a6a233220e6ad1defddb79609d1a577004bc80cd0bb940e534e65644fb6e0de160cce814f4293aa75d36253bc7c0a5cfd871b06b095e11621f66fea6c4ff46543a2b780da03f899ca953dffb23652af2bc7ec3a516e0961fcc69f9116a7e13140730cb8917fdb3f2146aaa7bca8f7db382bafd331ef18fd7d548efc8a6529d1d1feeef68209244b483c60be987beac7359ff42449b9d7827904c7e20886ba7f5411fac87f7452b4b190125fe126364024e3abdb7dfce75621b60c871eb2ad864ec4b042828ac3c5816781dc7d182186a61b8a578861d6767520c5bd5d0bd71758d805c0877e7971f3557f9d1ff719132cb7feaacbb10013a3502675a8721e7f4544926312763afab789497f2db6a331a849d501de9026b1426d1e57629258ade14793455518a35eaef6e091183f91bb6e64348507687dfd1a45c6be12a421c32ff92ff705b0350d9ed0d9ef2eb429e378845ebf87171b59d00e59a68388cc45002c2e3ac593b1e178ddddc4988b6e2c6abec4b98b6e7b1d0ce12b657a9a141d803b1bd828fbad0e0609cffa616e5d39772fdd55563c9dd4491c693fbd8d2a25308f016f0aa2b204d2fce641a856eeebc0a9a09f541dd6285ec378323486bedb698b306d949197b20cc7156b2d160f9dc1528de298ce643fb5b1eac3c8fcd46f671f433b42849d641c60c6b8c352ccb0faa2a8443e90bf5edae386d9efebe0a868a6b4468bf04a1c458692d24756cb259dd2adfbe95c7d66fe9ba4a7f047144f4883d0e16ae29509f12c3ab5a60649682a7719355ca62691140dfa86963cd011e6cceb7752b5322bfa6e7b92fb23f5fbdde84ea00abc28464b61b3ea7899b5645dabc67f9624350b378794538838ffdc90d838fee66992053fee321d7b89597439293003fc1f18e0f06f44d7d184e701a49b41cc6e0a01df0475e42c3a55c390ec3eb0a7595ed65869770c2b76003c55fd1cc952dd1404aecb729dfce999882f5edd62321f3f5d077f097b34db3c61e707195e624cad8f15169bc3afc046e7e18ca0490febbd09ac7c2660734fb3c419ff5b339cf51a171678e452cf4f7dc220c2f57b27c8915560feed3377f0263c058c0482223363566bc2420db194e4ed19fa5e153086bd220ede806811c011ddca5ad2db595331590a3ac6e987c18d1da2303047a0b3c62819f693ab1a7daf4ffcc9d567a72852d8e57c10e4140509934b30704b512645a6dfcf94d0d1a11bdb6dae22bd950fbce5777845eef6e5d0d6d124241d8e1799c830fc108f5a5d1d44c7e86dbe477c7a1c3336c71d578c0348070ad492578c9317a0bfde5512e064394c253aee37ce74b8a666c32d9fa442554c821b479ef68ef57d8c9937367857b5f2ee2396ed908a5c59f89a6ef5ceff59f22212e1776df9bb951ed686250e2d806f116a05af4c898142b8d5561e0079e8f49900ca4e3fa71eea035f260b162e5992ca6384df459eb9b434672f680eaef19590cc7216c3cb256332e7ad3ad7a472ae7c7830adfeeafcd7c0b954311e947134d9ae1e1dede0a5657af18facda9e3e0844e88486416324f30d7d6d9b066e57a8938e1be3a7727f1e6c1ef32b7ad03f211dee6c34bd93bca56b744cc128b56b23e17f04187794c6e693a30b850d3f3901584d696a243e2adc4ef69725872d2f2b84d3d5010cae961691a25a188b81ff25ef4974ad13a4e9530263c8ddbc95d886e7fbba846bf38fe03dfb16a5c8941ee614bb1a3df88884256bceb6b2bfd1dbff1c1e27930ca97b5cc93d72407aa600fe9d73df5f816fc8b01b0302c08ad1ce7c9dc2115f0e12e1fac9c500cc2e4ccfd6115253a7623455da5ca14c1f94ae5db8602ca5941e929628bdbfac0aa46095f8beef2ebec442d03bff06877d81cf860f5eb5882c6af88768fe213c93f4d2ae70901d3b0327f5072e59ddc0df1aacbf010dc0104d1796d423d030f55db13273e3bd25b05f570dde416079c0880067fa298f231ee2e1dfa28b35d3960ce2f67fc5f6bcd86759d0af01ad8d2acd021ad179419ffe1d304c58116ffa0114d4c729f8f0fc8b0d63d584123775c65f121ecd3f962aaa9ae2ca74a8e7e33569f9880386b9a580ba41417af8361cf20c76af75431a323921c7b0c98045eb2913cff499c45cda65940d28dca213e6950e53b2bd0bd32fcb6bf2a910789e6025e334c41de3b78c09dfd3b6c948cdf754a50e738941e168f15a2667b1d27393d7c4675a913bdbf70a361e6afc8ec32ca56af9fe62b81b90668ca87fe7ff12852b95ab022e97695464c4b5fc4b404e544f3d0dddd747716a6b7aba46df1a7d7fd8e6fd743f7974829f55ebc15b089aff98f40ca2d804a02f3c742a7c6111291da4982c83066691cfd10ddddeb763348a14a491643b596404dab6480f462a033d2a055b40232661c6163f80553f559edd9507732c7fcd771cd0327fd2f3f0212aa1413f414feb1e025f583eaf6fe01d24b46e2f54abe505bdbe085f18281eab31a1ff4bbfb0dd80839c5d5fe29d1876dd00a040ef202e9831eb6242933f7e546dff108052d8ac4547ccdf00dbfc22dc674dd2891d5af5ef621065d353970733d4ad2d492d69adfcfb96e9e2ba9d1da13a4697a63349bd5a039a16ef99b7b5cc357d2010fafcf03beafff7fc713ff3021555a667698ecc598ab362e797e715054f206d89ddb3f8a9d501cdbf00213bbbc98f6d855b3c9fa61a16ade881fa08b8370a4d6492ab86f3deee00c70aa85017b09b3657a292651c29ec4c065547b584711e09874fd4db66af17f2ab4f2d9007c40c44a20a4120e672133dd654890f86842b4639f7102ce3277c27305e245479f1a2b1a9297adf1e3ce54137d12aa5b3a3319754af2aa2a1de1517e90e19d59bc5feb40a1d28f27d7e90cc99a803fd1277f1d5776ae8211b233f4f47d6b566f41acd013f5d827ed6efd2bf998574e41611d1376a8c94049b602c51b74e4bcd1435e123dcce7073d0362d6eaabc4ad308ca5e068c4ff79687cfa7973fcc4bdb9c6143c0e2ddf6c01ff756f2911ce9de6328088a7a854d3648536a9719b0e0b50c69f42ee1132fa5519b2f382570e294cf939de6b826970896b0503508d510cd356d91f43bc75ab7275a6b8680bf09bae543563638764a0bb980fe923841a59609d3be2be76e975635c229c2497a59ab0fd0ab09b8d183c5a375c7feff216d140f2f8837f901fbb05c2fab9693916f4d721e89df34af801c9eef3ab32fff346f2fc857c30b9ff88eb77c846d172f381d12b5db59f43d438ab893be2121d8fd92daa78f7501f7286f3dfb55bf223bc6e691955bfc528f38a0712648115f09659218ca8ff09c167199c259787b69df6ce70ec6252cd38d9bf0f77c837d5137c4b1b0097a9ef5ac6e9fd87321ea3a7f4a90399b71c413cb7a4c17ecd657ce9d3fc635a10a91a7c58b3c9868c94deab0b82489b9974d5c4ab12ca0e88501e2b29e93df062b342a01d3e10c20c73fdec09adcf2a28db2ef38c786a217526807c0a20bd03af9cd9fb742a3867cf3d63a2f56aae52a4138099b57413b379fd8d26aa615649f4e3054e57129dfca13a080f93a254b096cfcca9498ef9f3a2062a14bf1870e0d44d181c714ac367b2b411877a4c8d04dd1df12d06b6f3ddf7f2fbc34cf3fe11efa7d54455e2a0ccbc18475aad88416f5fdb96c12140b86ba12960d469030d83446f515dd5e46dd66778fe289af29354a61d49fb6c91377e761518983b4f8bcfd7a3f4a0c80197f98492d255534e739a1eef209edcd79b307b269b0efd63eaaf6acb121963a413bfaac7fed437145e816e8751e3bca269cb4ba709c368ddc5a7add740bccce9152ce572fbe2d95975e2d1ca77411986bb0b3c806fc1a9c373e46636080e5f8d78df909e374e19f1533e8c56442eced9b06e1040d971ad46314e959224b2940a8dc6a6fb549c4ff65a902860666fbfe17da200f2c8591b66f82ed0d98c4155bb049fac0b111ab06d6ca54438d57cbc2de2d251d5382be1dbe9c9e69b94dba36912157a1b89a15efdf109c28b35ed80b01afc4cac0b5d2bee7a3af3de6cb67c2702b3250b6277c94025f52138ba4a5e9fd361829977f26f8def19d1d6d749845709ffc447880b1a0c7ae98577e6c8d9738ad3db96af612e80f9eb916e0e9224d0b6508c6e4a587d667c406f2ff406a46ab77740c0b8942e58a106817848b9fd58c701530245ff92d8c927fa7b101a7cdb60de64ba85782ef45a0d8bc1253d2b160eed29df27636aad5c2b01a772bfb2200c45450d870b4b7d4c63e7a6d29ce1985f3c02efece4f3f6e2cac26b56d0c45f191616c5277d858de7bc436a0083aed0a48916fddfd107eb902109fecc18babfdd79c52c871c3a6d711b411e3449a7f594b110b4782e968f2e8edc6635494fb61d8b1207413403b546e5edc7da8cff1eadbc3754bb9eff809f1009bf88b645761aa5ba4f1f228f3921fa4339552b94210686159321f23efd91cc37c204ddff773401f2c00bd4fe191e6a905abc3bab794046ec23f15de970f058c7283030d3dd3c587aec42b35c8aeac1b0c18cc9ea12401ef03fe95386c1ac4824ca73b44b35d63e176b9a814e1ea8a1cbee1cd81b14d5e470360fd9c7a18f78fdab5f0215c6478914c5ee24c7555dc6f713c1d663c5e0b60c43e2bf20aaffbaea398a8f3e4b63aae30bb254c1b89d8fa2022823bada8bfe8912a800d6fb6fb987bbac1a0a69dbe00986bf89957bcff658110d2ca6329f6e18fd7ba10e8dacfd72864c03225764a5f2e926", 0x1000}, {&(0x7f0000001840)="dec4200019ca53dd7cc38767a3912b5d456f465337996e7dc1adafffaed704f8ae70ea9501dd714915c6b0cb69cf8ffcdf653319b6125876f3585b4ebf02ce28c67868cb9ea847118cae1c7c626ad2f022e0f6c5483decc5768df3f7801c4c63aae33633dead57d6906163dc630cf4817f0bf96a0bea68bd73c3b8683158e076db7d1ffb13f80c54349b85a076b58ec9072d19b1b7f64ba5e7b07b20983d59c08d21e70b3e83d3cc17d3f85f1e6b8b4495ccf6eb1966411a3d2077c5d81017c1b1803333f288e806", 0xc8}, {&(0x7f0000001940)="290b452c8be0970bb21ca4fe1ab8f0b80f8bd6f53108fb7aadf9d831185705bf30e92a36f1a7d09ecbd1bf4db278e57b9f08c61f5af193a444222e9b81936694decd191b5793a02f77d1dd296cf39388aee4281e131a89da46d7e5691207d7ab8ed1b5c29419b76eb6aebc9d4fc3dbf237e8a43d0017218368625d07ed28030dd37c5691fdb7a2de9e14ed5f649d9fb65eb0651f19d610a8d052485b9982ade1ae95809dec74b4a3bfe9232371", 0xad}, {&(0x7f0000001a00)="83fff346167cc3454f969f0c6f438957d95b70557142124023d9136f4055265c917575ceac349787d5ed62708cecd3d36c7d81ae49185449173b12600f2491c03b137af57605468e83b5047882392e5f60185ed2c40ad54aa6e73dbdbe44642248aa5963d52cab86278a37b8d3ff2926c7e8537885a905a7daaf0f9e78a26bcbae55b17f94b79ee460a134852d6985285d5f29711e15dccc2ed4617aff2c777247338ed2b8e735a3589a8bb7b56b7ca6", 0xb0}, {&(0x7f0000001ac0)="238ecca1458761e24e45f2105d6b186630928b72c97ce354ee3dbddbd86dd9f632eafe89a7d06b85b46b921aec33f9f21e6fc1d7a3f86867cadc2825065af0dcc365881c63df6ac0c51c4731ac8f8599784b5c5e4aa59d5b6d38382c161a538fef257bafdcfb61ef16ffc89fd717db29991ceaabdddfcc2024fcef72a2bffc4765f18d2a5dd012d928e619dfca5489cae5582c4f8828c493e8f170886e244707fc7581ffb0996d1ec2ec45f19690b8f8d5ad4229d15e9ff491f15a", 0xbb}], 0x6, &(0x7f0000001c00)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x78}}], 0x3, 0x4000) 1.540406263s ago: executing program 3 (id=4533): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x49, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000002280)=""/159, &(0x7f0000002340)=0x9f) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000002380), &(0x7f00000023c0)=0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x89fd, &(0x7f0000000100)={'veth1_to_bond\x00', @ifru_names='ipvlan0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x400, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66580}, [@IFLA_TXQLEN={0x8, 0xd, 0xf}]}, 0x28}}, 0x54) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendfile(r4, r7, 0x0, 0x20000000002) recvmmsg$unix(r7, &(0x7f0000002100), 0x0, 0x40000020, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 1.487809785s ago: executing program 2 (id=4534): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) (async) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x200000c1) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r10, @ANYRES32=r9, @ANYRES8=r13, @ANYRESOCT], 0x128}, 0x50) (async) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r10, @ANYRES32=r9, @ANYRES8=r13, @ANYRESOCT], 0x128}, 0x50) recvmsg$unix(r13, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) r14 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r14) (async) close(r14) socketpair(0x27, 0x4, 0xd, 0x0) (async) socketpair(0x27, 0x4, 0xd, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c20000020180c200000008050303097c1a16d0ea888a99e4505936406a4c6650b48a941e89155ce3fb34bd866ad2e11e01afeb9282e504eb22a8ffe5d7a02fbe0241fa15488e1f801ee0e7cb793b7cbdc0fbe2e837582493744b2b46e67b766d721c826659bae157b7db4009ef7f7637ce0533194e2cb8e4f396687598b4ef82028a3cf447a8ab23664641b9a16d27ed4a86cc153029dcfe18fd29975025e8212ff9689273873380b0fde45c39ae8bbf932ea314f02fc6431558e5986a5a175c7f48cfd168f0aca10c48944ca096e383c335a006e15967ec"], 0x0) (async) syz_emit_ethernet(0xda, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c20000020180c200000008050303097c1a16d0ea888a99e4505936406a4c6650b48a941e89155ce3fb34bd866ad2e11e01afeb9282e504eb22a8ffe5d7a02fbe0241fa15488e1f801ee0e7cb793b7cbdc0fbe2e837582493744b2b46e67b766d721c826659bae157b7db4009ef7f7637ce0533194e2cb8e4f396687598b4ef82028a3cf447a8ab23664641b9a16d27ed4a86cc153029dcfe18fd29975025e8212ff9689273873380b0fde45c39ae8bbf932ea314f02fc6431558e5986a5a175c7f48cfd168f0aca10c48944ca096e383c335a006e15967ec"], 0x0) 1.481172258s ago: executing program 4 (id=4535): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x12, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000003500)=[{&(0x7f0000001440)="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", 0xfeb7}, {&(0x7f0000000f00)="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", 0x137}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)="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", 0xbfa}, {0x0}, {0x0}, {0x0}], 0x6c) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x0, 0x71, &(0x7f0000000040)="9026534ef77e616ca5cddfb26994cf0d6bbbad7b68dca557285f346bec2006d833f0d45fe99eecda0d0216c8f86f0e971dfd1b08b165e9cc7be5d95a7db43db92222e4e03ab4a6a1309cd2f739d0613248fa5cae0fdbd91c08632143c44ac6cb9caa1178f9f8f185b648f23fdd29046ab3", 0x3, 0x3, 0x5, 0x8, 0x100, 0x2, 0x100, 'syz0\x00'}) socket$netlink(0x10, 0x3, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x8000, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000240)={0x40002000}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) 1.28042319s ago: executing program 2 (id=4536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.272093507s ago: executing program 0 (id=4537): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) (async) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @remote}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x60}}, 0x24044000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r10, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xff, 0x0, 0x4, 0x0, "00000000000003ff"}, 0x10}, 0x1, 0x0, 0x0, 0x20041895}, 0x0) (async) sendmsg$can_raw(r10, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xff, 0x0, 0x4, 0x0, "00000000000003ff"}, 0x10}, 0x1, 0x0, 0x0, 0x20041895}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x2, 0x18, 0x8, 0x5, 0x2c, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@multicast1, 0xb, 0x14}, @sadb_key={0x6, 0x8, 0x128, 0x0, "c7b4aa6049958f7c674e387017872db117f68028e7241c5b19d32bfb7c10e1632255a1b2de"}, @sadb_key={0x1e, 0x8, 0x718, 0x0, "5e1fefee35f985a1fd0cefe390f758f9c4ce871ae29e703bb92c90f28d7e0fcb173e6413add641db07faad6f612c88b66ae7522f1da7951487b9cbcd002934892105889432ac8e92e98688de0b22ef6698918e66b3e8aa7223efb3ffdb6db647c6ec372811048aa205fc6061860c0532e12cc8525224e0b9bb13273ec72cb7c3d3325078fac66553ceaf332ee51f564b099179d929beb593ad3447a4e484caf8ef2c11512a2e8d87117bd3dc7b093a019ee7ded9dad29091e66335069a5d5780f8d6b8fe07694b1c423fe816c8ac8be9a9d1ceef7ebed96aa3c84a7c50e3854abd861e"}]}, 0x160}}, 0x10) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x2, 0x18, 0x8, 0x5, 0x2c, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@multicast1, 0xb, 0x14}, @sadb_key={0x6, 0x8, 0x128, 0x0, "c7b4aa6049958f7c674e387017872db117f68028e7241c5b19d32bfb7c10e1632255a1b2de"}, @sadb_key={0x1e, 0x8, 0x718, 0x0, "5e1fefee35f985a1fd0cefe390f758f9c4ce871ae29e703bb92c90f28d7e0fcb173e6413add641db07faad6f612c88b66ae7522f1da7951487b9cbcd002934892105889432ac8e92e98688de0b22ef6698918e66b3e8aa7223efb3ffdb6db647c6ec372811048aa205fc6061860c0532e12cc8525224e0b9bb13273ec72cb7c3d3325078fac66553ceaf332ee51f564b099179d929beb593ad3447a4e484caf8ef2c11512a2e8d87117bd3dc7b093a019ee7ded9dad29091e66335069a5d5780f8d6b8fe07694b1c423fe816c8ac8be9a9d1ceef7ebed96aa3c84a7c50e3854abd861e"}]}, 0x160}}, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100638f6af8fa4e6f3d01000000"], 0x14}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24008080) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000600)={0x0, 0x97, "a2163e98df7ef05c227f84df1306eaba6a0db6f2d8f418a473fb4ff239662d21e7396ac8e9a175d3a45e50c1d7523be83ada94a5344c707594d59602dbedc7d525901e15ff34f802b8258c1999910bc5ef3f940cd4280adea1d5cbb4afd8e9f1cd379a57880bb07859fe653bf874351e76ec618e30905bc4441a9e22c6c75872fa2970b6a766816cf561427c2677d7d480f0dddbcca85a"}, &(0x7f0000000300)=0x9f) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000480)={r12, 0x7, "b057f9013af53b"}, &(0x7f00000004c0)=0xf) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000480)={r12, 0x7, "b057f9013af53b"}, &(0x7f00000004c0)=0xf) sendmsg$inet(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r11, @ANYBLOB="0500"], 0x10) syz_emit_ethernet(0x6a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60fc414a00343c0020010000000000000000000000000001fe8000000000000000000000000000aa6203000000000000c9100000000000000000000002d4d88b3ed2ffffe0000001070800000001000203000000000000000000000c9078"], 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x10, 0x3fb, 0x2, 0x70bd27, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) 1.138854385s ago: executing program 2 (id=4538): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/1325], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269"], 0xd0060) 1.097032059s ago: executing program 0 (id=4539): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x20}, 0x94) 1.009218142s ago: executing program 4 (id=4540): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x7d, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x5, 0x2, 0xa4, 0x6}]}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r2, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r11, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x144, r11, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1e8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcee6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf8c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa02}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcfd}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 960.091246ms ago: executing program 2 (id=4541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180100008f080000000000000010000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207baff8ff00000000bfa100000000000064010000f8ffffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000540)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912b1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}, {0x0}], 0x8}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000440)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) write$cgroup_subtree(r5, 0x0, 0xd) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 882.853903ms ago: executing program 0 (id=4542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000858004000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 881.691515ms ago: executing program 3 (id=4543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@local, @empty}, &(0x7f0000000100)=0x8) 719.400582ms ago: executing program 0 (id=4544): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000800)={{0xffffffffffffffff, &(0x7f0000000240)='\\\xff-,\x00', 0xa0240, &(0x7f0000000280)={@align=0x8, {0x3, 0x7, 0x8, 0x3}}, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x8}, 0x3, &(0x7f0000000780)=[{0x1, 0xffff, &(0x7f0000000400)='syz0\x00', &(0x7f0000000540)="166dd73a4c4b22ad12521e9120a5e02d73617a0b2d472f4a02da7bc1cd24c217aa1bfb5f76657903c7280145cee8bb25f7d76d56b57eadd5e635fbf02c2158ed701342efd8a893bb10ffadb705bd9f60eee72089467b32f34e47a08438f7c8ac11d993b40854257f73df59c150e695acd17a4f76f5e275fa883ef895c99bd0f2accc0d7f4b8ecbba383448d5a691bb2528685d5e387d1cafa672f949566ff6a7a71cc290", 0xa4, 0x30}, {0x2, 0x2, &(0x7f0000000440)='#^\x00', &(0x7f0000000600)="641f018a97531dd9050910c4c4165d44ad15c5c9e30ccd63cd838c2ee80e08640ba2e875527b8f6253e0f67cdb9f61a5d99e900f897fe4d9c3faf7ee6698fd8767436c51e57f949477ec31dac841a4c7a4881aaa9d2aeedb88649758e1f1bf3c71b31f0cb4f80189916cc80c30233728dd9363e66d901f1815ce08dd8474a8f756852062f5f73afa9d7a76138b18f7f48e", 0x91, 0x20}, {0x3, 0x56, &(0x7f00000006c0)='!\x00', &(0x7f0000000700)="9ab7d1293112ee1ba266d6282c96dff5c54b98312c59ebfa28f2398d57e62be25ab361c3bfd298ea446d362d3a1dc0d9181ca1047785b4073513df73d1db97b5ff4f59b716ec418163499eae25ce75d876232fb54ac7f47898b4", 0x5a}]}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x88) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001300)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f00000008c0)=@newtclass={0x9d4, 0x28, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0x6}, {0x0, 0xe}, {0x2, 0xb}}, [@c_atm={{0x8}, {0x74, 0x2, [@TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0x8}}, @TCA_ATM_HDR={0x17, 0x3, "6b982f549d300b57cde9111bbbdbd45dcb46f4"}, @TCA_ATM_HDR={0x36, 0x3, "001195dacfa125d85dd37a8eda8736d90bbaef749af7790b18a54c223d81339c75d1b9d976fc02e6d71a464065032bf25f2d"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0x5}}, @TCA_ATM_FD={0x8, 0x1, r4}]}}, @c_cbq={{0x8}, {0x874, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x0, 0x6, 0x9, 0x4, 0x1896}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7, 0x8, 0x9, 0x61, 0xe0d, 0xfffffffc}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x1, 0x3, 0x400, 0x1, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x36, 0x0, 0x1c, 0x3, 0x8, 0x60, 0x5, 0xff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x4, 0x8, 0x9, 0x3, 0x0, 0x692, 0x5, 0x9, 0x6, 0xf, 0x2104, 0x2, 0x9, 0x4, 0x800, 0x873e, 0x9, 0x40, 0x9, 0xfffffff7, 0x5, 0x2, 0x3, 0x3, 0x2, 0xfee, 0x101, 0x6, 0x9, 0x4, 0x1000, 0x3, 0x7d4b, 0x4, 0x5, 0x8, 0x3, 0x7, 0x6, 0x0, 0x4e5f, 0x80000000, 0x2, 0x1, 0x0, 0x1, 0x10000, 0x446, 0x6, 0x9, 0x5, 0x4, 0x100, 0x3, 0x8, 0x2, 0x400, 0x40, 0xfff, 0x9, 0x3, 0x8, 0xfffffffd, 0x6, 0xd07, 0x7fff, 0x0, 0x65, 0x0, 0x5, 0x1ff, 0x6, 0x4, 0x2, 0x7, 0xd, 0x6, 0x1, 0x6, 0x9, 0xffff, 0xf, 0xfff, 0x5, 0x42, 0x9, 0xdeb, 0x70b438e7, 0x67, 0x91e, 0x7, 0x6fb, 0x9, 0x200, 0x8, 0x2000000, 0xffff, 0x7fffffff, 0x2, 0xfffffff8, 0x8, 0xfffffe01, 0x2c53, 0xa5b, 0x8000, 0x8a6b, 0x0, 0x6, 0x8, 0x8, 0x10, 0x81, 0x40, 0x9, 0x100, 0x7, 0x80000000, 0xdb4d, 0x5, 0x5, 0x9, 0x3, 0x4, 0x3a7fc000, 0x4, 0x6, 0xffff, 0x3800, 0x7, 0x4, 0x2000000, 0x2, 0x2, 0x3, 0x3, 0x8, 0x80f7, 0x0, 0x0, 0x7, 0x0, 0x2, 0x8, 0xff, 0x4, 0x3ff, 0x83, 0x3, 0x9, 0x8000, 0x5, 0x7, 0x7f, 0x0, 0x9, 0x3, 0x100, 0x100, 0xa, 0x10001, 0x62, 0x2, 0x7dcd62c7, 0x8000, 0x4, 0x1, 0x0, 0x10001, 0x3, 0x6, 0x2, 0x8, 0x5, 0x7, 0x2, 0x8, 0x7, 0x2, 0x8, 0x8, 0x7, 0x9, 0x5, 0x4, 0xc, 0x20000000, 0xe6f1, 0x40, 0x6, 0x1, 0x400, 0x4, 0xfffffffc, 0xf, 0x5, 0x7ff, 0xd, 0x9, 0xbb1, 0xc3, 0x6, 0xfffffffa, 0xf8f, 0x9, 0xace7, 0x9, 0xffffffff, 0x1, 0xe6, 0x3, 0xffff, 0x9, 0x4, 0x6e81, 0x6, 0x1, 0x101, 0x6, 0xf06, 0x7, 0x401, 0x5, 0x7fff, 0x2, 0x5, 0x0, 0x4, 0x6, 0x8, 0x4, 0x9, 0xcea, 0x10, 0x10, 0x91, 0x401, 0xfffffffa, 0x2, 0x0, 0x6, 0x3ff, 0x5, 0xfff, 0x10, 0x8, 0x2, 0x2, 0x4, 0x3, 0xfffffffc, 0x2, 0x763, 0x7, 0x4, 0x101]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0x5}, 0x7, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x800, 0x8cf8, 0x7ff, 0x2e74, 0x8, 0xffffff5a, 0x5, 0x3, 0x8, 0x10000, 0x8, 0x5c6, 0xffffff61, 0xa, 0xb, 0x70f, 0x5, 0x3, 0xfffffff8, 0x4, 0x3, 0x100, 0xf0e, 0xccc, 0x4, 0xffffffaa, 0x82, 0x0, 0x0, 0x401, 0x5, 0x7, 0x1000, 0x59f, 0x100, 0x4, 0x5, 0xb5ba, 0x10000, 0x9, 0x0, 0x3, 0x0, 0x7, 0x1, 0x0, 0x1, 0x7, 0x1, 0xc, 0x0, 0x81, 0x200, 0x2, 0x8, 0xfffffff7, 0x5c, 0x3, 0x4, 0xffff, 0xe, 0x0, 0x4, 0x5, 0x6, 0x6, 0x1, 0xc, 0x2, 0x1, 0x80000001, 0xffff, 0x6, 0x48, 0x5, 0xb, 0x0, 0xfff, 0xacaa, 0xffff, 0x0, 0x10001, 0x7, 0x6, 0x63, 0x75e, 0x9, 0x3, 0xaa4, 0x81, 0x4, 0x3, 0x4, 0x3bc, 0x5, 0x2, 0x9, 0x0, 0x800, 0x10001, 0x8, 0xffff, 0xfffffff7, 0x0, 0x6, 0x4, 0x2, 0x908e, 0x1, 0x1, 0x0, 0x4, 0x7f5, 0x5, 0xffffffff, 0x4, 0xfffffffe, 0x4, 0x2, 0x5, 0xa, 0x101, 0x9, 0x1ff, 0x8, 0x1, 0x4, 0x7, 0x29, 0x5, 0x6d, 0x5, 0xfff, 0xc30, 0x4, 0xffffffff, 0xffffffc0, 0x0, 0xfffffffb, 0x6, 0x7, 0xc1b4, 0x1, 0x1ff, 0x7, 0x7, 0x800, 0x401, 0x8, 0xfffffffb, 0x6, 0x0, 0x5, 0x0, 0x4000, 0xa05b, 0x3, 0xfffffffb, 0x8, 0x5, 0x5a3, 0x200, 0x7, 0x400, 0xa6f, 0x1000, 0xd4, 0x4, 0x8001, 0x4, 0x9, 0xffffdd1b, 0xec, 0x5, 0x1000, 0x4, 0xaf22, 0xf5b30236, 0x3, 0x7, 0x9, 0xee8, 0x8, 0x37, 0xd, 0x8, 0x800, 0xffffff9f, 0x100000, 0x80000, 0x4, 0x101, 0x7fff, 0x4b3, 0x400, 0x80, 0x5, 0x4, 0xfff, 0x9, 0x6, 0x6, 0x2, 0x3f, 0xffffffff, 0x3, 0x7, 0xcc1a, 0x3, 0x40, 0x1, 0x9, 0x8, 0x81, 0x10001, 0xf9e, 0xd, 0x6, 0x2000, 0x401, 0xfffeffff, 0x1, 0x0, 0x4, 0x871, 0x2, 0xb, 0xc0ea, 0x2, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x9, 0x0, 0x1, 0xe, 0x8, 0x65, 0x62, 0x3, 0x9, 0x2, 0x0, 0x0, 0x135e, 0x4, 0x81, 0x3, 0x7, 0x8, 0x9, 0x2bc, 0x6]}, @TCA_CBQ_RATE={0x10, 0x5, {0x64, 0x0, 0x8, 0x76a6, 0x9, 0x5}}]}}, @c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_HDR={0x20, 0x3, "0f0f1e2d0bd561e0c4b6c9a064b51044408f43d82341e6f401e011cf"}]}}, @c_cbq={{0x8}, {0x84, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x3, 0x6, 0x4, 0x327, 0x400}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x0, 0x2, 0x4, 0x400, 0x200}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2a, 0x2, 0xf, 0x9, 0x1, 0xe, 0x6, 0x7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x35, 0x0, 0x1b, 0x7, 0x4f83, 0x10001, 0x0, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x0, 0x3, 0x8, 0x200, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x1, 0x6, 0x1, 0x8001, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x1, 0x6, 0x4, 0x7, 0x7f}}]}}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x94}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000210001002cbd7000fddbdf250a000004ff0000010200000014000100fe8000000000000000000000000000aa14000100200100000000000000000000000000011400110076657468315f746f5f626174616476"], 0xa4}, 0x1, 0x0, 0x0, 0x4000841}, 0x1000c890) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000210001002cbd7000fddbdf250a000004ff0000010200000014000100fe8000000000000000000000000000aa14000100200100000000000000000000000000011400110076657468315f746f5f626174616476"], 0xa4}, 0x1, 0x0, 0x0, 0x4000841}, 0x1000c890) close(0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x1, 0x0, 0x29) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r10) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x56}, @void, @val={0xc, 0x99, {0x7, 0x44}}}}, [""]}, 0x28}}, 0x4004040) (async) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x56}, @void, @val={0xc, 0x99, {0x7, 0x44}}}}, [""]}, 0x28}}, 0x4004040) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x18, r12, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 511.180799ms ago: executing program 0 (id=4545): r0 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, 0x0, &(0x7f0000000040)) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0xc, 0x0, &(0x7f00000001c0)=""/12, 0x6, 0x0, 0x800, 0x88, &(0x7f00000005c0)="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", &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8091d9adb97d6601215cf7ba1e5d41e2619f7727ad88954b2885d5fe237171b99a062625d3d4216b9b30743ac38d9d1350ad13dda19d2a26a8aec386f02c5755bb3d6eb0d99c482bd2c2e", 0x6, 0x0, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.controllers\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0x3, 0x80000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000814) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) 344.201242ms ago: executing program 3 (id=4546): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000b8ee00000114000400fe8000000000000000000000000000aa0c00028004000100"], 0x98}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x5000000, @private1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 131.984353ms ago: executing program 3 (id=4547): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x7, 0xff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='syzkaller\x00'}, 0x94) 108.62169ms ago: executing program 0 (id=4548): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="796150869afdffffff000000007e0000000c0099006c91000014"], 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541fa1ab280102000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}]}]}, 0xa0}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 0s ago: executing program 3 (id=4549): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x109000, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x8, 0xd, 0x6, 0xb8e}, {0x2, 0x5, 0x9, 0x6}, {0x7, 0x1, 0x80, 0x2}, {0x93, 0xa, 0x65, 0xeb1}]}) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40008d0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x8000, 0x400, 0xe7}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044811) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}], 0x1}}], 0x2, 0x41, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf25090000003c0003801400020064766d72703100000000000000000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4c6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0f10}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x5080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) kernel console output (not intermixed with test programs): d allmulticast mode [ 365.258405][ T5833] Bluetooth: hci4: command tx timeout [ 365.271603][ T12] team0: Port device bridge3 removed [ 365.402813][T17837] netlink: 'syz.2.3133': attribute type 13 has an invalid length. [ 365.434069][ T5888] IPVS: starting estimator thread 0... [ 365.511279][ T12] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 365.527073][T17840] IPVS: using max 58 ests per chain, 139200 per kthread [ 365.550718][ T12] bond0 (unregistering): left promiscuous mode [ 365.557274][ T12] bond_slave_0: left promiscuous mode [ 365.562850][ T12] bond_slave_1: left promiscuous mode [ 365.571187][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.582683][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.594771][ T12] bond0 (unregistering): Released all slaves [ 365.604588][ T12] bond1 (unregistering): Released all slaves [ 365.617413][ T12] bond2 (unregistering): Released all slaves [ 365.630912][ T12] bond3 (unregistering): Released all slaves [ 365.643912][ T12] bond4 (unregistering): Released all slaves [ 365.667134][ T12] bond5 (unregistering): (slave veth5): Releasing backup interface [ 365.675754][ T12] bond5 (unregistering): Released all slaves [ 365.689279][ T12] bond6 (unregistering): Released all slaves [ 365.702940][ T12] bond7 (unregistering): Released all slaves [ 365.720488][ T12] bond8 (unregistering): Released all slaves [ 365.733737][ T12] bond9 (unregistering): Released all slaves [ 365.791635][T17827] syzkaller0: entered promiscuous mode [ 365.812732][T17827] syzkaller0: entered allmulticast mode [ 365.966878][T17834] tipc: Started in network mode [ 365.971778][T17834] tipc: Node identity e695d9a60a22, cluster identity 4711 [ 365.983434][T17834] tipc: Enabled bearer , priority 0 [ 366.001060][T17823] tipc: Resetting bearer [ 366.026322][T17823] tipc: Disabling bearer [ 366.044044][ T12] !©9: left promiscuous mode [ 366.125449][ T12] tipc: Disabling bearer [ 366.150343][ T12] tipc: Left network mode [ 366.155662][T17858] netlink: 'syz.4.3138': attribute type 1 has an invalid length. [ 366.368186][T17858] bond6: (slave geneve5): making interface the new active one [ 366.376109][T17858] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 366.406525][ T12] IPVS: stopping backup sync thread 12504 ... [ 366.441891][T17729] chnl_net:caif_netlink_parms(): no params data found [ 366.483458][ T77] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.507472][ T77] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.527957][T17871] __nla_validate_parse: 4 callbacks suppressed [ 366.527977][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3138'. [ 366.690650][ T77] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.747380][T17871] bond6 (unregistering): (slave geneve5): Releasing active interface [ 366.764502][T17871] bond6 (unregistering): Released all slaves [ 366.841707][T17873] tipc: Resetting bearer [ 366.934735][ T77] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.960688][ T77] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 367.085678][ T77] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 367.100755][T17901] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 367.295510][ T12] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 367.337173][ T5833] Bluetooth: hci4: command tx timeout [ 367.451429][T17729] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.459863][T17729] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.470500][T17729] bridge_slave_0: entered allmulticast mode [ 367.482257][T17729] bridge_slave_0: entered promiscuous mode [ 367.497618][T17729] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.510779][T17729] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.518672][T17729] bridge_slave_1: entered allmulticast mode [ 367.526343][T17729] bridge_slave_1: entered promiscuous mode [ 367.625753][T17729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.631376][T17942] netlink: 'syz.0.3153': attribute type 10 has an invalid length. [ 367.639347][T17729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.672460][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3153'. [ 367.719836][T17949] Cannot find add_set index 0 as target [ 367.729474][T17942] team0: Port device geneve0 added [ 367.748223][T17729] team0: Port device team_slave_0 added [ 367.760379][T17729] team0: Port device team_slave_1 added [ 367.805649][T17729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.812860][T17729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.845726][T17729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.859748][T17729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.867554][T17729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.894389][T17729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.034445][ T12] batadv0: left promiscuous mode [ 368.040623][ T12] veth0_virt_wifi: left promiscuous mode [ 368.048306][ T12] hsr_slave_0: left promiscuous mode [ 368.054140][ T12] hsr_slave_1: left promiscuous mode [ 368.064985][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.074066][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.110520][ T12] pimreg (unregistering): left allmulticast mode [ 368.221297][ T12] team0 (unregistering): Port device team_slave_1 removed [ 368.235808][ T12] team0 (unregistering): Port device team_slave_0 removed [ 368.364494][T17729] hsr_slave_0: entered promiscuous mode [ 368.371573][T17729] hsr_slave_1: entered promiscuous mode [ 368.379595][T17729] debugfs: 'hsr0' already exists in 'hsr' [ 368.385513][T17729] Cannot create hsr debugfs directory [ 368.633166][ T12] IPVS: stop unused estimator thread 0... [ 369.416896][ T5833] Bluetooth: hci4: command tx timeout [ 370.405761][T17932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.454264][T17729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 370.548924][T17729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 370.639423][T17729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 370.671260][T17967] wlan1 speed is unknown, defaulting to 1000 [ 370.671922][T17965] tipc: Resetting bearer [ 370.695147][T17729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 370.723580][T17967] lo speed is unknown, defaulting to 1000 [ 370.747943][T17967] wg1 speed is unknown, defaulting to 1000 [ 370.875294][T17979] wlan1 speed is unknown, defaulting to 1000 [ 370.993323][T17996] vlan2: entered promiscuous mode [ 371.005820][T17996] geneve1: entered promiscuous mode [ 371.013010][T17996] vlan2: entered allmulticast mode [ 371.021975][T17996] geneve1: entered allmulticast mode [ 371.029773][T17979] lo speed is unknown, defaulting to 1000 [ 371.039497][T17996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 371.056018][T17729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.063710][T17979] wg1 speed is unknown, defaulting to 1000 [ 371.075624][T17996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 371.101750][T17729] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.110753][T17996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 371.139526][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.146721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.158562][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.165742][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.188700][T17996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 371.228271][T17996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 371.252202][T17996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 371.281630][T17996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 371.327714][T17996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 371.498962][ T5833] Bluetooth: hci4: command tx timeout [ 371.670796][T17729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.765122][T17729] veth0_vlan: entered promiscuous mode [ 371.812620][T17729] veth1_vlan: entered promiscuous mode [ 371.936070][T17729] veth0_macvtap: entered promiscuous mode [ 372.222487][T17729] veth1_macvtap: entered promiscuous mode [ 372.278064][T17729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.303700][T18035] __nla_validate_parse: 56 callbacks suppressed [ 372.303718][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3169'. [ 372.339578][T17729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.419646][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.465211][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.546219][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3172'. [ 372.683301][T18044] tipc: Resetting bearer [ 372.701932][T18044] tipc: Resetting bearer [ 372.731396][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.815024][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.935164][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.970956][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.113927][T18063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.145486][T18063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.173661][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.182522][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.183596][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3176'. [ 373.285589][T18063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.306713][T18063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.420215][T18063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.442457][T18063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.577313][ T5833] Bluetooth: hci4: command tx timeout [ 373.590433][T18055] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 373.609333][T18055] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 373.694699][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.707545][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.718027][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.725961][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.733894][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.060609][T18063] team0: Port device netdevsim0 removed [ 374.098242][T18063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.130555][T18063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.466432][T18088] wlan1 speed is unknown, defaulting to 1000 [ 374.481976][T18088] lo speed is unknown, defaulting to 1000 [ 374.499288][T18088] wg1 speed is unknown, defaulting to 1000 [ 374.875006][ T1014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 42447 - 0 [ 375.204271][T18122] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 375.244535][ T1014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 42447 - 0 [ 375.365508][ T1014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 42447 - 0 [ 375.409564][T18129] netlink: 'syz.2.3187': attribute type 8 has an invalid length. [ 375.508872][ T1014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 42447 - 0 [ 375.679495][T18088] chnl_net:caif_netlink_parms(): no params data found [ 375.817992][ T5826] Bluetooth: hci1: command tx timeout [ 375.821531][T18143] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3191'. [ 375.934515][T18148] syzkaller1: entered promiscuous mode [ 375.958133][T18148] syzkaller1: entered allmulticast mode [ 376.023748][ T1014] bridge_slave_1: left promiscuous mode [ 376.040695][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.065953][ T1014] bridge_slave_0: left promiscuous mode [ 376.080182][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.370216][T18166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3192'. [ 376.640248][ T1014] bond3 (unregistering): (slave bridge4): Releasing active interface [ 376.881940][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.892587][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.902170][ T1014] bond0 (unregistering): Released all slaves [ 376.911646][ T1014] bond1 (unregistering): Released all slaves [ 376.926198][ T1014] bond2 (unregistering): Released all slaves [ 376.940410][ T1014] bond3 (unregistering): Released all slaves [ 376.953371][ T1014] bond4 (unregistering): Released all slaves [ 376.973872][ T1014] bond5 (unregistering): (slave veth3): Releasing backup interface [ 376.981955][ T1014] veth3: left promiscuous mode [ 376.989602][ T1014] bond5 (unregistering): Released all slaves [ 377.014259][T18088] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.022413][T18088] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.030235][T18088] bridge_slave_0: entered allmulticast mode [ 377.051246][T18088] bridge_slave_0: entered promiscuous mode [ 377.083155][T18166] bond0: entered promiscuous mode [ 377.089043][T18166] bond_slave_0: entered promiscuous mode [ 377.106041][T18166] bond_slave_1: entered promiscuous mode [ 377.142992][T18166] gretap0: entered promiscuous mode [ 377.149473][T18166] debugfs: 'hsr1' already exists in 'hsr' [ 377.155212][T18166] Cannot create hsr debugfs directory [ 377.160804][T18166] hsr1: entered promiscuous mode [ 377.184941][T18088] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.192770][T18088] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.203275][T18088] bridge_slave_1: entered allmulticast mode [ 377.212189][T18088] bridge_slave_1: entered promiscuous mode [ 377.225173][ T1014] : left promiscuous mode [ 377.247618][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3194'. [ 377.405149][T18088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.414638][ T1014] tipc: Left network mode [ 377.423543][T18088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.452316][ T35] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.462053][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.572360][ T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.589011][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.673874][ T9318] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.693208][ T9318] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.719553][T18088] team0: Port device team_slave_0 added [ 377.782963][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 377.793227][ T9318] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.802952][ T9318] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.803329][T18201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3202'. [ 377.820682][T18088] team0: Port device team_slave_1 added [ 377.874675][T18066] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.887800][T18066] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.909797][ T5826] Bluetooth: hci1: command tx timeout [ 377.920500][T18088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.929810][T18088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.957700][T18088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.009121][T18088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.027978][T18088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.074559][T18212] netlink: 'syz.2.3204': attribute type 13 has an invalid length. [ 378.098863][T18088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.231019][T18066] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.250202][T18066] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.409070][T18066] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.458831][T18066] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.523692][T18088] hsr_slave_0: entered promiscuous mode [ 378.536426][T18088] hsr_slave_1: entered promiscuous mode [ 378.548839][T18088] debugfs: 'hsr0' already exists in 'hsr' [ 378.554734][T18088] Cannot create hsr debugfs directory [ 378.575593][T18066] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.597463][T18066] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.626577][T18235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3207'. [ 378.740009][T18231] lo speed is unknown, defaulting to 1000 [ 378.793256][T18231] wg1 speed is unknown, defaulting to 1000 [ 379.636299][ T1014] hsr_slave_0: left promiscuous mode [ 379.661043][ T1014] hsr_slave_1: left promiscuous mode [ 379.667959][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.682490][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.696128][ T1014] batman_adv: batadv0: Removing interface: ipvlan2 [ 379.988412][ T5826] Bluetooth: hci1: command tx timeout [ 380.038898][T18272] lo speed is unknown, defaulting to 1000 [ 380.082475][T18088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.111929][T18088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 380.130781][T18088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 380.153788][T18088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.385045][ T1014] IPVS: stop unused estimator thread 0... [ 380.563588][T18088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.731133][T18088] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.788270][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.795471][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.825213][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.832413][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.205361][T18304] netlink: 'syz.2.3214': attribute type 30 has an invalid length. [ 381.285261][T18303] lo speed is unknown, defaulting to 1000 [ 381.395443][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 381.579660][T18310] syzkaller0: entered promiscuous mode [ 381.585234][T18310] syzkaller0: entered allmulticast mode [ 381.613144][T18088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.730791][T18321] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.738461][T18321] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.969955][T18321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.990827][T18321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.059070][ T5826] Bluetooth: hci1: command tx timeout [ 382.412161][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 382.422610][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 382.431865][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 382.442510][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 382.453053][T18342] netlink: 'syz.1.3218': attribute type 15 has an invalid length. [ 382.465008][T18345] netlink: 'syz.1.3218': attribute type 15 has an invalid length. [ 382.475883][T18342] netlink: 'syz.1.3218': attribute type 18 has an invalid length. [ 382.484607][T18345] netlink: 'syz.1.3218': attribute type 18 has an invalid length. [ 383.699127][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.715904][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.737425][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.769368][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.853321][ T1014] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.863546][ T1014] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.905863][T18364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3219'. [ 383.945561][ T9316] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.963924][ T9316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.012509][T18371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3221'. [ 384.025318][T18367] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.032779][T18367] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.104402][T18373] netlink: 'syz.1.3222': attribute type 10 has an invalid length. [ 384.123593][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.135113][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.155845][T18374] netlink: 'syz.1.3222': attribute type 10 has an invalid length. [ 384.342252][ T9316] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.370116][ T9316] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.481141][T18373] team0: Port device dummy0 added [ 384.531006][T18374] team0: Port device dummy0 removed [ 384.554337][T18374] dummy0: entered promiscuous mode [ 384.562868][T18374] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 384.585336][ T9316] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.601902][ T9316] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.652125][ T9316] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.692998][ T9316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.737593][ T9316] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.745811][ T9316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.832831][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3225'. [ 384.917601][T18088] veth0_vlan: entered promiscuous mode [ 384.962518][T18088] veth1_vlan: entered promiscuous mode [ 385.034010][T18088] veth0_macvtap: entered promiscuous mode [ 385.049945][T18088] veth1_macvtap: entered promiscuous mode [ 385.080029][T18088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.111164][T18088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.143285][T18402] tipc: Resetting bearer [ 385.156577][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.177013][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.204260][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.222277][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.255562][T18413] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3230'. [ 385.284461][T18411] lo speed is unknown, defaulting to 1000 [ 385.296578][T18414] netlink: 'syz.1.3231': attribute type 1 has an invalid length. [ 385.332231][T18414] bond1: entered promiscuous mode [ 385.339524][T18414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.412819][T18414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.425453][T18414] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 385.436068][T18414] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 385.449453][T18414] bond1: (slave vti0): making interface the new active one [ 385.457199][T18414] vti0: entered promiscuous mode [ 385.463877][T18414] bond1: (slave vti0): Enslaving as an active interface with an up link [ 385.479510][ T8898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.497898][ T8898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.549888][ T9316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.559557][ T9316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.868361][T18434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3235'. [ 385.885326][T18434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3235'. [ 385.910211][T18434] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3235'. [ 386.033957][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 386.058781][T18446] bridge_slave_1: left allmulticast mode [ 386.064560][T18446] bridge_slave_1: left promiscuous mode [ 386.072648][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.083337][T18446] bridge_slave_0: left allmulticast mode [ 386.089174][T18446] bridge_slave_0: left promiscuous mode [ 386.095694][T18446] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.104518][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 386.128420][T18451] netlink: 336 bytes leftover after parsing attributes in process `syz.1.3238'. [ 386.463921][T18459] syzkaller0: entered promiscuous mode [ 386.473738][T18459] syzkaller0: entered allmulticast mode [ 386.517937][T18447] syzkaller1: entered promiscuous mode [ 386.538474][T18447] syzkaller1: entered allmulticast mode [ 386.899019][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.908691][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.931621][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.939356][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 386.947996][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.955612][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.215696][T18487] lo speed is unknown, defaulting to 1000 [ 387.298473][T18506] netlink: 'syz.1.3252': attribute type 10 has an invalid length. [ 387.311073][T18481] lo speed is unknown, defaulting to 1000 [ 387.316729][T18506] team0: Port device geneve0 added [ 387.363850][T18483] lo speed is unknown, defaulting to 1000 [ 387.369832][ T8898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.397067][ T8898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.436017][ T8898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.463860][ T8898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.543107][T18524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.835043][T18538] macvtap1: entered promiscuous mode [ 387.852712][T18538] bridge0: entered promiscuous mode [ 387.859761][T18538] macvtap1: entered allmulticast mode [ 387.865284][T18538] bridge0: entered allmulticast mode [ 387.872284][T18538] bridge0: port 3(macvtap1) entered blocking state [ 387.879172][T18538] bridge0: port 3(macvtap1) entered disabled state [ 387.888583][T18538] bridge0: left allmulticast mode [ 387.893664][T18538] bridge0: left promiscuous mode [ 387.907926][T18540] block nbd5: server does not support multiple connections per device. [ 387.916552][T18540] block nbd5: shutting down sockets [ 387.939024][T18543] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 387.940108][T18544] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 387.995588][T18545] vlan2: entered allmulticast mode [ 388.003139][T18550] netlink: 'syz.4.3262': attribute type 7 has an invalid length. [ 388.024535][T18545] team0: entered allmulticast mode [ 388.030384][T18545] team_slave_0: entered allmulticast mode [ 388.036404][T18545] team_slave_1: entered allmulticast mode [ 388.042770][T18545] geneve0: entered allmulticast mode [ 388.092459][T18551] netlink: 'syz.4.3262': attribute type 7 has an invalid length. [ 388.813736][T18578] lo speed is unknown, defaulting to 1000 [ 389.016958][ T5827] Bluetooth: hci3: command tx timeout [ 389.233599][T18481] chnl_net:caif_netlink_parms(): no params data found [ 389.549418][T18601] __nla_validate_parse: 13 callbacks suppressed [ 389.549436][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 389.768472][T18597] lo speed is unknown, defaulting to 1000 [ 389.947915][T18481] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.955226][T18481] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.974943][T18481] bridge_slave_0: entered allmulticast mode [ 389.992149][T18481] bridge_slave_0: entered promiscuous mode [ 390.020895][T18481] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.035011][T18481] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.050760][T18481] bridge_slave_1: entered allmulticast mode [ 390.068837][T18481] bridge_slave_1: entered promiscuous mode [ 390.213665][T18481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.240646][T18481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.412343][T18481] team0: Port device team_slave_0 added [ 390.443397][T18481] team0: Port device team_slave_1 added [ 390.684016][T18481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.706931][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.739102][T18481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.752742][T18481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.771247][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.827784][T18481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.890703][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 391.060210][T18481] hsr_slave_0: entered promiscuous mode [ 391.073076][T18481] hsr_slave_1: entered promiscuous mode [ 391.096991][ T5827] Bluetooth: hci3: command tx timeout [ 391.127610][T18481] debugfs: 'hsr0' already exists in 'hsr' [ 391.133384][T18481] Cannot create hsr debugfs directory [ 391.356596][T18639] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3285'. [ 391.487860][T18643] bridge_slave_1: left allmulticast mode [ 391.493548][T18643] bridge_slave_1: left promiscuous mode [ 391.517592][T18643] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.700938][T18481] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.719830][T18481] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.735796][T18654] sctp: [Deprecated]: syz.2.3290 (pid 18654) Use of int in max_burst socket option deprecated. [ 391.735796][T18654] Use struct sctp_assoc_value instead [ 391.891810][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 391.913815][T18664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.939852][T18481] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.952177][T18481] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.980700][T18670] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3294'. [ 391.996380][T18671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.009155][T18672] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3294'. [ 392.024784][T18481] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.035039][T18481] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.052267][T18672] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3294'. [ 392.125458][T18481] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.135400][T18481] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.171445][T18675] netlink: 'syz.4.3296': attribute type 1 has an invalid length. [ 392.279789][T18481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.303610][T18481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.315626][T18481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.329257][T18481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.420866][T18481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.438521][T18481] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.451754][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.459067][ T8898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.473678][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.480854][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.656321][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3299'. [ 392.680907][T18694] netlink: 'syz.4.3300': attribute type 5 has an invalid length. [ 392.701424][T18694] ip6erspan0: entered promiscuous mode [ 392.750518][T18698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3301'. [ 392.935376][T18701] netlink: 'syz.2.3301': attribute type 4 has an invalid length. [ 392.995209][T18701] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3301'. [ 393.009931][T18481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.036260][T18705] lo speed is unknown, defaulting to 1000 [ 393.134097][T18711] pim6reg99999999: entered allmulticast mode [ 393.164354][T18481] veth0_vlan: entered promiscuous mode [ 393.179075][ T5827] Bluetooth: hci3: command tx timeout [ 393.205571][T18481] veth1_vlan: entered promiscuous mode [ 393.235399][T18481] veth0_macvtap: entered promiscuous mode [ 393.246062][T18481] veth1_macvtap: entered promiscuous mode [ 393.334965][T18481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.366529][T18481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.439532][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.463408][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.550033][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.572101][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.651013][T18729] lo speed is unknown, defaulting to 1000 [ 393.693477][T18735] macsec1: entered promiscuous mode [ 393.699203][T18735] macsec1: entered allmulticast mode [ 393.786892][ T9316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.807265][ T9316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.868042][T18740] netlink: 'syz.4.3315': attribute type 4 has an invalid length. [ 393.902850][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.927921][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.270307][T18753] batadv_slave_0: Caught tx_queue_len zero misconfig [ 394.523799][T18760] lo speed is unknown, defaulting to 1000 [ 394.677545][T18770] __nla_validate_parse: 4 callbacks suppressed [ 394.677561][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3325'. [ 394.678353][T18769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3325'. [ 394.748750][T18773] 8021q: VLANs not supported on vxcan0 [ 394.852558][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 394.877795][T18775] bridge_slave_1: left allmulticast mode [ 394.883481][T18775] bridge_slave_1: left promiscuous mode [ 394.890877][T18775] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.971476][T18775] bridge_slave_0: left allmulticast mode [ 394.990702][T18775] bridge_slave_0: left promiscuous mode [ 394.996604][T18775] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.257815][ T5827] Bluetooth: hci3: command tx timeout [ 395.292358][T18785] team_slave_0: left allmulticast mode [ 395.302036][T18785] team0 (unregistering): Port device team_slave_0 removed [ 395.311944][T18785] team_slave_1: left allmulticast mode [ 395.325685][T18785] team0 (unregistering): Port device team_slave_1 removed [ 395.357724][T18785] geneve0: left allmulticast mode [ 395.379097][T18785] team0 (unregistering): Port device geneve0 removed [ 395.400989][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.415576][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.472975][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.500288][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.885655][T18816] bond0: entered promiscuous mode [ 395.895216][T18816] bond_slave_0: entered promiscuous mode [ 395.912204][T18816] bond_slave_1: entered promiscuous mode [ 395.927205][T18816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3337'. [ 395.993931][T18820] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3339'. [ 396.150074][T18830] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3342'. [ 396.424553][T18846] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3348'. [ 396.635383][T18859] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20002 [ 396.641111][T18857] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3351'. [ 396.662518][T18857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.676685][T18857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.688063][T18857] bond0 (unregistering): Released all slaves [ 396.980811][T18877] netlink: 'syz.4.3358': attribute type 13 has an invalid length. [ 397.003825][T18878] lo speed is unknown, defaulting to 1000 [ 397.087013][T18883] x_tables: duplicate underflow at hook 1 [ 397.134161][T18880] bridge0: entered promiscuous mode [ 397.167482][T18885] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 397.207402][T18885] syzkaller0: entered promiscuous mode [ 397.222782][T18885] syzkaller0: entered allmulticast mode [ 397.422927][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 397.617124][T18899] netlink: 'syz.3.3365': attribute type 1 has an invalid length. [ 397.660523][T18899] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3365'. [ 397.814305][T18903] syzkaller0: entered promiscuous mode [ 397.836913][T18903] syzkaller0: entered allmulticast mode [ 397.890844][T18906] syzkaller0: entered promiscuous mode [ 397.896502][T18906] syzkaller0: entered allmulticast mode [ 398.073841][T18918] netlink: zone id is out of range [ 398.079346][T18918] netlink: zone id is out of range [ 398.084618][T18918] netlink: zone id is out of range [ 398.090562][T18918] netlink: zone id is out of range [ 398.096570][T18918] netlink: zone id is out of range [ 398.103589][T18918] netlink: zone id is out of range [ 398.120462][T18918] netlink: zone id is out of range [ 398.328821][T18929] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 398.425698][T18928] bond1: option lacp_active: invalid value (8) [ 398.462842][T18928] bond1 (unregistering): Released all slaves [ 398.624310][T18939] lo speed is unknown, defaulting to 1000 [ 398.704025][T18948] openvswitch: netlink: Flow key attr not present in new flow. [ 399.225905][T18968] netlink: 'syz.2.3385': attribute type 4 has an invalid length. [ 399.878771][T18994] bond0: Unable to set up delay as MII monitoring is disabled [ 399.899811][T18994] bond0 (unregistering): Released all slaves [ 400.006052][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.046121][T18999] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 400.064725][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.352921][T19009] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 400.418156][T19011] __nla_validate_parse: 12 callbacks suppressed [ 400.418174][T19011] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3400'. [ 400.515649][T19018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3402'. [ 400.536310][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3402'. [ 401.225625][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3407'. [ 401.424160][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3411'. [ 401.471006][T19055] tipc: Enabled bearer , priority 0 [ 401.486423][T19055] syzkaller0: entered promiscuous mode [ 401.498755][T19055] syzkaller0: entered allmulticast mode [ 401.518385][T19055] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 401.537612][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 401.668213][T19063] tipc: Resetting bearer [ 401.702782][T19054] tipc: Resetting bearer [ 401.740835][T19054] tipc: Disabling bearer [ 401.819545][ T5827] Bluetooth: hci3: command tx timeout [ 402.197598][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3417'. [ 402.223466][T19084] netlink: 'syz.2.3417': attribute type 1 has an invalid length. [ 402.248281][T19082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3418'. [ 402.468521][T19084] bond2: entered promiscuous mode [ 402.491512][T19084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.659285][T19081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.668434][T19081] bond2: (slave bond3): making interface the new active one [ 402.675798][T19081] bond3: entered promiscuous mode [ 402.681779][T19081] bond2: (slave bond3): Enslaving as an active interface with an up link [ 404.419915][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3422'. [ 404.490504][T19113] net_ratelimit: 2 callbacks suppressed [ 404.490522][T19113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.531390][T19106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3422'. [ 404.539555][T19116] vlan3: entered promiscuous mode [ 404.555739][T19116] bridge0: entered promiscuous mode [ 404.563426][T19113] xt_CT: No such helper "snmp_trap" [ 404.585363][T19112] lo speed is unknown, defaulting to 1000 [ 404.645623][T19120] netlink: 'syz.0.3428': attribute type 11 has an invalid length. [ 404.650423][T19122] xt_hashlimit: size too large, truncated to 1048576 [ 405.544265][T19178] ip6gre1: entered promiscuous mode [ 405.563069][T19178] ip6gre1: entered allmulticast mode [ 406.090550][T19215] __nla_validate_parse: 3 callbacks suppressed [ 406.090568][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3453'. [ 406.245733][T19228] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3453'. [ 406.299019][T19230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3456'. [ 406.320228][T19230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3456'. [ 406.514486][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3457'. [ 407.311597][T19264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3468'. [ 407.434176][T19273] geneve2: entered promiscuous mode [ 407.441363][T19273] geneve2: entered allmulticast mode [ 407.539221][T19274] tipc: Enabling of bearer rejected, failed to enable media [ 407.821236][T19287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 407.856743][T19291] lo speed is unknown, defaulting to 1000 [ 408.154369][T19310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3478'. [ 408.163708][T19310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3478'. [ 408.409220][T19332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.474484][T19338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3486'. [ 408.476518][T19332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.535889][T19340] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 408.550809][T19340] netlink: 'syz.3.3487': attribute type 1 has an invalid length. [ 409.067145][T19364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.773294][T19397] netlink: 'syz.4.3500': attribute type 2 has an invalid length. [ 409.804320][T19397] !: entered promiscuous mode [ 409.902664][T19401] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 409.927325][T19401] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 410.031920][T19402] netlink: 'syz.2.3503': attribute type 30 has an invalid length. [ 410.422281][T19421] syzkaller1: entered promiscuous mode [ 410.435165][T19421] syzkaller1: entered allmulticast mode [ 410.502809][T19431] syzkaller0: entered promiscuous mode [ 410.526844][T19431] syzkaller0: entered allmulticast mode [ 410.534708][T19433] lo: Caught tx_queue_len zero misconfig [ 410.587558][T19431] 0: reclassify loop, rule prio 0, protocol 800 [ 410.708338][T19443] x_tables: duplicate underflow at hook 1 [ 410.844704][T19455] netlink: 'syz.4.3520': attribute type 1 has an invalid length. [ 410.858719][T19455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.967787][T19462] tipc: Started in network mode [ 410.978237][T19462] tipc: Node identity eadf5042928f, cluster identity 4711 [ 410.994612][T19462] tipc: Enabled bearer , priority 0 [ 411.006690][T19463] syzkaller0: entered promiscuous mode [ 411.013395][T19463] syzkaller0: entered allmulticast mode [ 411.041865][T19463] tipc: Resetting bearer [ 411.059744][T19463] tipc: Disabling bearer [ 411.286152][T19488] xt_policy: neither incoming nor outgoing policy selected [ 411.444384][T19494] netlink: 'syz.4.3534': attribute type 2 has an invalid length. [ 411.495368][T19494] netlink: 'syz.4.3534': attribute type 1 has an invalid length. [ 411.556285][T19494] __nla_validate_parse: 15 callbacks suppressed [ 411.556327][T19494] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3534'. [ 411.634280][T19503] tipc: Enabled bearer , priority 14 [ 411.643408][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3537'. [ 411.643429][T19507] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 411.674088][T19507] bond2: entered promiscuous mode [ 411.693053][T19507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.733683][T19512] sctp: [Deprecated]: syz.0.3540 (pid 19512) Use of int in max_burst socket option deprecated. [ 411.733683][T19512] Use struct sctp_assoc_value instead [ 411.904499][T19524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3542'. [ 411.914444][T19524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3542'. [ 411.924374][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3542'. [ 412.028009][T19534] xt_connbytes: Forcing CT accounting to be enabled [ 412.053817][T19538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3548'. [ 412.091772][T19534] Cannot find set identified by id 65470 to match [ 412.121540][T19529] bond1: option arp_interval: invalid value (18446744073709551615) [ 412.134503][T19529] bond1: option arp_interval: allowed values 0 - 2147483647 [ 412.154236][T19529] bond1 (unregistering): Released all slaves [ 412.363749][T19557] batadv_slave_0: entered promiscuous mode [ 412.406276][T19563] batadv_slave_0: left promiscuous mode [ 412.416504][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3555'. [ 412.418941][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3555'. [ 412.594755][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3558'. [ 412.710068][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3560'. [ 412.746945][ T924] tipc: Node number set to 3971471782 [ 413.039209][T19598] Cannot find del_set index 0 as target [ 413.231513][T19602] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 413.742650][T19636] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 413.928618][T19649] syzkaller0: entered promiscuous mode [ 413.934524][T19631] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.934871][T11472] IPVS: starting estimator thread 0... [ 413.958007][T19649] syzkaller0: entered allmulticast mode [ 413.998920][T19654] tipc: Enabled bearer , priority 0 [ 414.006122][T19649] tipc: Started in network mode [ 414.024870][T19649] tipc: Node identity 2e58a5cfc468, cluster identity 4711 [ 414.042338][T19649] tipc: Enabled bearer , priority 0 [ 414.049804][T19652] IPVS: using max 32 ests per chain, 76800 per kthread [ 414.057651][T19654] syzkaller0: entered promiscuous mode [ 414.064564][T19654] syzkaller0: entered allmulticast mode [ 414.094429][T19656] tipc: Failed to remove unknown binding: 66,0,0/718463465:3329644831/3329644833 [ 414.103921][T19656] tipc: Failed to remove unknown binding: 66,0,0/718463465:3329644831/3329644832 [ 414.113605][T19649] tipc: Resetting bearer [ 414.118365][T19656] tipc: Failed to remove unknown binding: 66,0,0/718463465:3329644831/3329644833 [ 414.129258][T19649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.137742][T19649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.146613][T19656] tipc: Failed to remove unknown binding: 66,0,0/718463465:3329644831/3329644832 [ 414.182713][T19654] tipc: Resetting bearer [ 414.189020][T19654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.201664][T19648] tipc: Resetting bearer [ 414.248500][T19648] tipc: Disabling bearer [ 414.283516][T19660] tipc: Resetting bearer [ 414.321482][T19660] tipc: Disabling bearer [ 414.469209][T19675] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 414.519132][T19675] tunl0: Caught tx_queue_len zero misconfig [ 414.531256][T19681] veth0: entered promiscuous mode [ 414.556402][ T29] audit: type=1800 audit(1771316172.467:11): pid=19679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3587" name="7" dev="tmpfs" ino=356 res=0 errno=0 [ 414.562611][T19681] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 414.650501][T19680] veth0: left promiscuous mode [ 414.803425][T19692] netlink: 'syz.3.3590': attribute type 1 has an invalid length. [ 414.888178][T19692] bond2: entered promiscuous mode [ 414.893848][T19692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.139458][T19716] openvswitch: netlink: Message has 16 unknown bytes. [ 415.275459][T19724] : entered promiscuous mode [ 415.412811][T19733] netlink: 'syz.0.3602': attribute type 1 has an invalid length. [ 415.426387][T19728] lo speed is unknown, defaulting to 1000 [ 415.459645][T19734] netlink: 'syz.3.3604': attribute type 2 has an invalid length. [ 415.490682][T19736] bond5 (unregistering): Released all slaves [ 415.537522][T19740] netlink: 'syz.3.3604': attribute type 2 has an invalid length. [ 415.576308][T19734] : entered promiscuous mode [ 415.582415][T19740] : left promiscuous mode [ 416.359535][T19782] netlink: 'syz.2.3616': attribute type 13 has an invalid length. [ 416.683254][T19794] lo speed is unknown, defaulting to 1000 [ 416.798894][T19803] syzkaller1: entered promiscuous mode [ 416.804404][T19803] syzkaller1: entered allmulticast mode [ 416.981875][T19808] gretap0: entered promiscuous mode [ 416.982755][T19810] IPVS: length: 177 != 8 [ 417.105886][T19817] æÿîÿ: entered promiscuous mode [ 417.250780][T19825] lo speed is unknown, defaulting to 1000 [ 417.270795][T19826] lo speed is unknown, defaulting to 1000 [ 417.341889][T19832] __nla_validate_parse: 9 callbacks suppressed [ 417.341909][T19832] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.3631'. [ 417.805022][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3640'. [ 417.827968][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3640'. [ 417.846013][T19142] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.855301][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3640'. [ 417.865696][T19142] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.896945][T19142] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.907178][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3640'. [ 417.915096][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.064933][T19865] netlink: set zone limit has 4 unknown bytes [ 420.461872][T19843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.728588][T19894] netlink: 'syz.3.3650': attribute type 1 has an invalid length. [ 420.736695][T19894] netlink: 'syz.3.3650': attribute type 2 has an invalid length. [ 420.774063][T19894] netlink: 'syz.3.3650': attribute type 1 has an invalid length. [ 420.785982][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3649'. [ 420.801224][T19894] netlink: 'syz.3.3650': attribute type 3 has an invalid length. [ 420.832426][T19900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.843900][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3649'. [ 420.888931][T19900] macsec2: entered promiscuous mode [ 420.894264][T19900] bond0: entered promiscuous mode [ 420.900175][T19900] macsec2: entered allmulticast mode [ 420.905615][T19900] bond0: entered allmulticast mode [ 420.927578][T19900] bond0: left allmulticast mode [ 420.937799][T19900] bond0: left promiscuous mode [ 421.035385][T19906] lo speed is unknown, defaulting to 1000 [ 421.051113][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3656'. [ 421.723897][T19948] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3663'. [ 421.751383][T19949] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3664'. [ 421.778268][T19948] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 421.795408][T19951] netlink: 'syz.4.3665': attribute type 6 has an invalid length. [ 421.899837][T19956] FAULT_INJECTION: forcing a failure. [ 421.899837][T19956] name failslab, interval 1, probability 0, space 0, times 0 [ 421.936410][T19956] CPU: 1 UID: 0 PID: 19956 Comm: syz.4.3666 Not tainted syzkaller #0 PREEMPT(full) [ 421.936435][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.936447][T19956] Call Trace: [ 421.936454][T19956] [ 421.936461][T19956] dump_stack_lvl+0xe8/0x150 [ 421.936488][T19956] should_fail_ex+0x412/0x560 [ 421.936516][T19956] should_failslab+0xa8/0x100 [ 421.936537][T19956] ? skb_clone+0x212/0x3a0 [ 421.936559][T19956] kmem_cache_alloc_noprof+0x87/0x650 [ 421.936578][T19956] ? apparmor_capable+0x137/0x1a0 [ 421.936603][T19956] skb_clone+0x212/0x3a0 [ 421.936629][T19956] ? nfnetlink_rcv+0x4b0/0x27b0 [ 421.936653][T19956] nfnetlink_rcv+0x4e2/0x27b0 [ 421.936687][T19956] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.936707][T19956] ? __dev_queue_xmit+0x274/0x3850 [ 421.936726][T19956] ? __local_bh_enable_ip+0xd0/0x130 [ 421.936750][T19956] ? __dev_queue_xmit+0x1e6c/0x3850 [ 421.936766][T19956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.936790][T19956] ? __dev_queue_xmit+0x274/0x3850 [ 421.936809][T19956] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 421.936843][T19956] ? ref_tracker_free+0x693/0x840 [ 421.936861][T19956] ? __copy_skb_header+0xa3/0x4a0 [ 421.936882][T19956] ? __pfx_ref_tracker_free+0x10/0x10 [ 421.936917][T19956] ? skb_clone+0x246/0x3a0 [ 421.936940][T19956] ? __netlink_deliver_tap+0x807/0x850 [ 421.936956][T19956] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.936988][T19956] netlink_unicast+0x80f/0x9b0 [ 421.937017][T19956] ? __pfx_netlink_unicast+0x10/0x10 [ 421.937041][T19956] ? netlink_sendmsg+0x650/0xb40 [ 421.937055][T19956] ? skb_put+0x11b/0x210 [ 421.937077][T19956] netlink_sendmsg+0x813/0xb40 [ 421.937103][T19956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.937123][T19956] ? aa_sock_msg_perm+0xf1/0x1b0 [ 421.937147][T19956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.937169][T19956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.937183][T19956] ____sys_sendmsg+0xa68/0xad0 [ 421.937204][T19956] ? __might_fault+0xaf/0x130 [ 421.937228][T19956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.937256][T19956] ? import_iovec+0x73/0xa0 [ 421.937276][T19956] ___sys_sendmsg+0x2a5/0x360 [ 421.937294][T19956] ? __lock_acquire+0x6b5/0x2cf0 [ 421.937316][T19956] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.937366][T19956] ? __fget_files+0x2a/0x420 [ 421.937382][T19956] ? __fget_files+0x3a0/0x420 [ 421.937406][T19956] __x64_sys_sendmsg+0x1bd/0x2a0 [ 421.937428][T19956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.937456][T19956] ? __pfx_ksys_write+0x10/0x10 [ 421.937487][T19956] do_syscall_64+0x14d/0xf80 [ 421.937506][T19956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.937522][T19956] ? trace_irq_disable+0x37/0x100 [ 421.937539][T19956] ? clear_bhb_loop+0x40/0x90 [ 421.937560][T19956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.937575][T19956] RIP: 0033:0x7f3bffb9bf79 [ 421.937591][T19956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.937605][T19956] RSP: 002b:00007f3c00b22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.937630][T19956] RAX: ffffffffffffffda RBX: 00007f3bffe15fa0 RCX: 00007f3bffb9bf79 [ 421.937643][T19956] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 421.937653][T19956] RBP: 00007f3c00b22090 R08: 0000000000000000 R09: 0000000000000000 [ 421.937663][T19956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.937673][T19956] R13: 00007f3bffe16038 R14: 00007f3bffe15fa0 R15: 00007ffecce65ec8 [ 421.937701][T19956] [ 422.324063][T19953] lo speed is unknown, defaulting to 1000 [ 422.422053][T19962] lo speed is unknown, defaulting to 1000 [ 422.563378][T19974] netlink: 'syz.3.3671': attribute type 1 has an invalid length. [ 422.674553][T19973] bond0: (slave rose0): Enslaving as an active interface with an up link [ 422.731469][T19974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.740617][T19974] bond3: (slave bond4): making interface the new active one [ 422.748562][T19984] __nla_validate_parse: 1 callbacks suppressed [ 422.748579][T19984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3671'. [ 422.768609][T19974] bond3: (slave bond4): Enslaving as an active interface with an up link [ 422.782893][T19964] lo speed is unknown, defaulting to 1000 [ 422.799260][T19980] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 422.822668][T19984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.921628][T19980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3671'. [ 422.934974][T19974] vlan3: entered promiscuous mode [ 422.960411][T19974] bond3: entered promiscuous mode [ 422.977220][T19974] bond4: entered promiscuous mode [ 423.021612][T19990] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 423.204093][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3677'. [ 423.218820][T20001] FAULT_INJECTION: forcing a failure. [ 423.218820][T20001] name failslab, interval 1, probability 0, space 0, times 0 [ 423.232065][T20001] CPU: 1 UID: 0 PID: 20001 Comm: syz.1.3679 Not tainted syzkaller #0 PREEMPT(full) [ 423.232090][T20001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.232101][T20001] Call Trace: [ 423.232107][T20001] [ 423.232113][T20001] dump_stack_lvl+0xe8/0x150 [ 423.232139][T20001] should_fail_ex+0x412/0x560 [ 423.232166][T20001] should_failslab+0xa8/0x100 [ 423.232190][T20001] __kmalloc_noprof+0xe8/0x760 [ 423.232208][T20001] ? __kasan_kmalloc+0x93/0xb0 [ 423.232228][T20001] ? nla_strdup+0x9d/0x140 [ 423.232244][T20001] ? __kmalloc_cache_noprof+0x31c/0x660 [ 423.232267][T20001] nla_strdup+0x9d/0x140 [ 423.232283][T20001] nf_tables_newtable+0x491/0x1910 [ 423.232301][T20001] ? nfnetlink_subsys_unregister+0x1a2/0x1b0 [ 423.232337][T20001] nfnetlink_rcv+0x1240/0x27b0 [ 423.232357][T20001] ? is_bpf_text_address+0x26/0x2b0 [ 423.232411][T20001] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 423.232431][T20001] ? stack_trace_save+0xa9/0x100 [ 423.232492][T20001] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.232519][T20001] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.232553][T20001] netlink_unicast+0x80f/0x9b0 [ 423.232583][T20001] ? __pfx_netlink_unicast+0x10/0x10 [ 423.232608][T20001] ? netlink_sendmsg+0x650/0xb40 [ 423.232623][T20001] ? skb_put+0x11b/0x210 [ 423.232645][T20001] netlink_sendmsg+0x813/0xb40 [ 423.232671][T20001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.232691][T20001] ? aa_sock_msg_perm+0xf1/0x1b0 [ 423.232714][T20001] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.232738][T20001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.232754][T20001] ____sys_sendmsg+0xa68/0xad0 [ 423.232775][T20001] ? __might_fault+0xaf/0x130 [ 423.232799][T20001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.232828][T20001] ? import_iovec+0x73/0xa0 [ 423.232848][T20001] ___sys_sendmsg+0x2a5/0x360 [ 423.232867][T20001] ? __lock_acquire+0x6b5/0x2cf0 [ 423.232890][T20001] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.232943][T20001] ? __fget_files+0x2a/0x420 [ 423.232960][T20001] ? __fget_files+0x3a0/0x420 [ 423.232985][T20001] __x64_sys_sendmsg+0x1bd/0x2a0 [ 423.233007][T20001] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.233035][T20001] ? __pfx_ksys_write+0x10/0x10 [ 423.233065][T20001] do_syscall_64+0x14d/0xf80 [ 423.233085][T20001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.233101][T20001] ? trace_irq_disable+0x37/0x100 [ 423.233118][T20001] ? clear_bhb_loop+0x40/0x90 [ 423.233138][T20001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.233153][T20001] RIP: 0033:0x7fd571f9bf79 [ 423.233169][T20001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.233182][T20001] RSP: 002b:00007fd5701f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.233200][T20001] RAX: ffffffffffffffda RBX: 00007fd572215fa0 RCX: 00007fd571f9bf79 [ 423.233212][T20001] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 423.233223][T20001] RBP: 00007fd5701f6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.233234][T20001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.233244][T20001] R13: 00007fd572216038 R14: 00007fd572215fa0 R15: 00007ffe8f53fa08 [ 423.233272][T20001] [ 423.264878][T19997] netlink: 'syz.3.3678': attribute type 10 has an invalid length. [ 423.563835][T19998] kthread_run failed with err -4 [ 423.620014][T19997] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.638352][ T9328] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 423.639521][T19997] bond0: (slave team0): Enslaving as an active interface with an up link [ 423.737914][T20015] : renamed from veth0_to_bond (while UP) [ 423.940665][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 424.160478][T20042] FAULT_INJECTION: forcing a failure. [ 424.160478][T20042] name failslab, interval 1, probability 0, space 0, times 0 [ 424.184368][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 424.206562][T20042] CPU: 1 UID: 0 PID: 20042 Comm: syz.3.3690 Not tainted syzkaller #0 PREEMPT(full) [ 424.206586][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 424.206597][T20042] Call Trace: [ 424.206603][T20042] [ 424.206611][T20042] dump_stack_lvl+0xe8/0x150 [ 424.206637][T20042] should_fail_ex+0x412/0x560 [ 424.206665][T20042] should_failslab+0xa8/0x100 [ 424.206689][T20042] __kmalloc_cache_noprof+0x88/0x660 [ 424.206710][T20042] ? nfnetlink_rcv+0xfe1/0x27b0 [ 424.206738][T20042] nfnetlink_rcv+0xfe1/0x27b0 [ 424.206790][T20042] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 424.206826][T20042] ? ref_tracker_free+0x693/0x840 [ 424.206872][T20042] ? __netlink_deliver_tap+0x807/0x850 [ 424.206887][T20042] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.206920][T20042] netlink_unicast+0x80f/0x9b0 [ 424.206951][T20042] ? __pfx_netlink_unicast+0x10/0x10 [ 424.206975][T20042] ? netlink_sendmsg+0x650/0xb40 [ 424.206989][T20042] ? skb_put+0x11b/0x210 [ 424.207012][T20042] netlink_sendmsg+0x813/0xb40 [ 424.207035][T20042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.207055][T20042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 424.207079][T20042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.207111][T20042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.207127][T20042] ____sys_sendmsg+0xa68/0xad0 [ 424.207147][T20042] ? __might_fault+0xaf/0x130 [ 424.207173][T20042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.207202][T20042] ? import_iovec+0x73/0xa0 [ 424.207223][T20042] ___sys_sendmsg+0x2a5/0x360 [ 424.207241][T20042] ? __lock_acquire+0x6b5/0x2cf0 [ 424.207263][T20042] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.207317][T20042] ? __fget_files+0x2a/0x420 [ 424.207333][T20042] ? __fget_files+0x3a0/0x420 [ 424.207357][T20042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 424.207380][T20042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.207405][T20042] ? __pfx_ksys_write+0x10/0x10 [ 424.207436][T20042] do_syscall_64+0x14d/0xf80 [ 424.207456][T20042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.207472][T20042] ? trace_irq_disable+0x37/0x100 [ 424.207489][T20042] ? clear_bhb_loop+0x40/0x90 [ 424.207509][T20042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.207524][T20042] RIP: 0033:0x7f339cd9bf79 [ 424.207540][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.207553][T20042] RSP: 002b:00007f339dcbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.207571][T20042] RAX: ffffffffffffffda RBX: 00007f339d015fa0 RCX: 00007f339cd9bf79 [ 424.207584][T20042] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 424.207595][T20042] RBP: 00007f339dcbc090 R08: 0000000000000000 R09: 0000000000000000 [ 424.207606][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.207616][T20042] R13: 00007f339d016038 R14: 00007f339d015fa0 R15: 00007ffdb4961bf8 [ 424.207646][T20042] [ 424.382368][T20040] veth1_to_hsr: entered promiscuous mode [ 424.547259][T20040] macvtap1: entered promiscuous mode [ 424.552759][T20040] macvtap1: entered allmulticast mode [ 424.558212][T20040] veth1_to_hsr: entered allmulticast mode [ 424.652349][T20050] netlink: 428 bytes leftover after parsing attributes in process `syz.3.3693'. [ 424.755569][T20050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3693'. [ 425.111481][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3698'. [ 425.324019][T20076] lo speed is unknown, defaulting to 1000 [ 425.452929][T20097] FAULT_INJECTION: forcing a failure. [ 425.452929][T20097] name failslab, interval 1, probability 0, space 0, times 0 [ 425.466118][T20097] CPU: 0 UID: 0 PID: 20097 Comm: syz.3.3704 Not tainted syzkaller #0 PREEMPT(full) [ 425.466152][T20097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.466174][T20097] Call Trace: [ 425.466182][T20097] [ 425.466189][T20097] dump_stack_lvl+0xe8/0x150 [ 425.466216][T20097] should_fail_ex+0x412/0x560 [ 425.466250][T20097] should_failslab+0xa8/0x100 [ 425.466274][T20097] __kmalloc_cache_noprof+0x88/0x660 [ 425.466296][T20097] ? nfnetlink_rcv+0xfe1/0x27b0 [ 425.466324][T20097] nfnetlink_rcv+0xfe1/0x27b0 [ 425.466379][T20097] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 425.466417][T20097] ? ref_tracker_free+0x693/0x840 [ 425.466467][T20097] ? __netlink_deliver_tap+0x807/0x850 [ 425.466484][T20097] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.466518][T20097] netlink_unicast+0x80f/0x9b0 [ 425.466549][T20097] ? __pfx_netlink_unicast+0x10/0x10 [ 425.466573][T20097] ? netlink_sendmsg+0x650/0xb40 [ 425.466589][T20097] ? skb_put+0x11b/0x210 [ 425.466611][T20097] netlink_sendmsg+0x813/0xb40 [ 425.466637][T20097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.466659][T20097] ? aa_sock_msg_perm+0xf1/0x1b0 [ 425.466682][T20097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.466705][T20097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.466721][T20097] ____sys_sendmsg+0xa68/0xad0 [ 425.466741][T20097] ? __might_fault+0xaf/0x130 [ 425.466769][T20097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.466796][T20097] ? import_iovec+0x73/0xa0 [ 425.466816][T20097] ___sys_sendmsg+0x2a5/0x360 [ 425.466834][T20097] ? __lock_acquire+0x6b5/0x2cf0 [ 425.466856][T20097] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.466910][T20097] ? __fget_files+0x2a/0x420 [ 425.466926][T20097] ? __fget_files+0x3a0/0x420 [ 425.466952][T20097] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.466974][T20097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.467002][T20097] ? __pfx_ksys_write+0x10/0x10 [ 425.467033][T20097] do_syscall_64+0x14d/0xf80 [ 425.467054][T20097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.467071][T20097] ? clear_bhb_loop+0x40/0x90 [ 425.467092][T20097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.467114][T20097] RIP: 0033:0x7f339cd9bf79 [ 425.467131][T20097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.467145][T20097] RSP: 002b:00007f339dcbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.467163][T20097] RAX: ffffffffffffffda RBX: 00007f339d015fa0 RCX: 00007f339cd9bf79 [ 425.467176][T20097] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 425.467187][T20097] RBP: 00007f339dcbc090 R08: 0000000000000000 R09: 0000000000000000 [ 425.467197][T20097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.467208][T20097] R13: 00007f339d016038 R14: 00007f339d015fa0 R15: 00007ffdb4961bf8 [ 425.467243][T20097] [ 425.720631][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3703'. [ 426.383563][T20117] netlink: 'syz.2.3708': attribute type 12 has an invalid length. [ 426.404855][T20117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3708'. [ 426.683919][T20129] lo: entered allmulticast mode [ 426.765982][T20140] netlink: 'syz.4.3718': attribute type 1 has an invalid length. [ 427.000605][T20155] syz_tun: entered promiscuous mode [ 427.010289][T20155] syz_tun: refused to change device tx_queue_len [ 427.018081][T20155] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 427.279111][T20166] syzkaller0: entered promiscuous mode [ 427.285082][T20166] syzkaller0: entered allmulticast mode [ 429.298544][T20174] ip6tnl0: Caught tx_queue_len zero misconfig [ 429.495151][T20215] netlink: 'syz.2.3739': attribute type 15 has an invalid length. [ 429.554561][T20225] __nla_validate_parse: 1 callbacks suppressed [ 429.554580][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'. [ 429.621441][T20225] lo speed is unknown, defaulting to 1000 [ 429.745008][T20232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3744'. [ 429.758872][T20232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3744'. [ 429.880499][T20240] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3748'. [ 430.106692][T20244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3749'. [ 430.231809][T20246] syzkaller1: entered promiscuous mode [ 430.237700][T20246] syzkaller1: entered allmulticast mode [ 430.339449][T20260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3752'. [ 430.351484][T20260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3752'. [ 430.700745][T20287] netlink: 'syz.4.3757': attribute type 3 has an invalid length. [ 430.731243][T20287] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3757'. [ 431.439984][T20333] Bluetooth: MGMT ver 1.23 [ 431.688169][T20333] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 431.698277][T20333] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 431.745674][T20343] gtp0: entered promiscuous mode [ 431.771392][T20333] netlink: 'syz.0.3768': attribute type 29 has an invalid length. [ 431.950814][T20355] tipc: Started in network mode [ 431.955976][T20355] tipc: Node identity 62b9557fba4c, cluster identity 4711 [ 431.964105][T20355] tipc: Enabled bearer , priority 0 [ 432.021704][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3778'. [ 432.080947][T20354] tipc: Disabling bearer [ 432.134028][T20375] IPVS: length: 46 != 24 [ 432.157777][T20372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3780'. [ 432.323597][T20382] syzkaller0: entered promiscuous mode [ 432.330164][T20382] syzkaller0: entered allmulticast mode [ 432.989522][T20435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.027096][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.297247][ T5901] page_pool_release_retry() stalled pool shutdown: id 141, 1 inflight 60 sec [ 434.618536][T20484] __nla_validate_parse: 10 callbacks suppressed [ 434.618548][T20484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3808'. [ 435.858014][T20424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.033609][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3813'. [ 436.044843][T20489] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 436.057669][T20489] bond2 (unregistering): Released all slaves [ 436.204851][T20503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3814'. [ 436.238408][T20503] tipc: Enabled bearer , priority 0 [ 436.245815][T20503] syzkaller0: entered promiscuous mode [ 436.257392][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 436.266267][T20505] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3816'. [ 436.279638][T20503] syzkaller0: entered allmulticast mode [ 436.323161][T20502] tipc: Resetting bearer [ 436.331588][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 436.340862][T20505] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3816'. [ 436.369615][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 436.382578][T20502] tipc: Disabling bearer [ 436.585774][T20527] netlink: 'syz.2.3820': attribute type 1 has an invalid length. [ 436.672583][T20527] bond5: entered promiscuous mode [ 436.678850][T20527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.688513][T20533] tipc: Enabled bearer , priority 10 [ 436.719686][T20527] tipc: Enabling of bearer rejected, failed to enable media [ 436.765224][T20527] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 436.794131][T20527] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 436.836495][T20527] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 437.080824][T20559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3828'. [ 437.389795][T20584] bond5: entered promiscuous mode [ 437.395360][T20584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 437.684966][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3842'. [ 437.739730][T20608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.999647][T20589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.067057][T20629] netlink: 'syz.0.3850': attribute type 8 has an invalid length. [ 438.265739][T20644] netlink: 'syz.2.3858': attribute type 3 has an invalid length. [ 438.273918][T20644] netlink: 'syz.2.3858': attribute type 1 has an invalid length. [ 438.769860][T20679] sctp: [Deprecated]: syz.3.3870 (pid 20679) Use of int in max_burst socket option deprecated. [ 438.769860][T20679] Use struct sctp_assoc_value instead [ 438.950327][T20695] geneve3: entered promiscuous mode [ 438.955694][T20695] geneve3: entered allmulticast mode [ 438.967898][T20692] lo speed is unknown, defaulting to 1000 [ 438.967929][T20055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.983964][T20055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.993878][T20695] veth0: entered promiscuous mode [ 439.018627][T20695] veth0 (unregistering): left promiscuous mode [ 439.049568][T20055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.068193][T20055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.591649][T20722] lo speed is unknown, defaulting to 1000 [ 439.643857][T20728] vlan3: entered allmulticast mode [ 439.649225][T20728] team0: entered allmulticast mode [ 439.654347][T20728] team_slave_0: entered allmulticast mode [ 439.664898][T20728] team_slave_1: entered allmulticast mode [ 439.738906][T20736] __nla_validate_parse: 14 callbacks suppressed [ 439.738926][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3888'. [ 439.838348][T20736] IPVS: set_ctl: invalid protocol: 59 10.65.1.0:20001 [ 439.948035][T20736] netlink: 'syz.1.3888': attribute type 1 has an invalid length. [ 440.248773][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 440.532014][T20764] netlink: 840 bytes leftover after parsing attributes in process `syz.2.3893'. [ 440.556641][T20769] netlink: 'syz.1.3894': attribute type 10 has an invalid length. [ 440.570315][T20764] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3893'. [ 440.845019][T20775] syzkaller0: entered promiscuous mode [ 440.879784][T20775] syzkaller0: entered allmulticast mode [ 440.886693][T20772] tipc: Enabled bearer , priority 0 [ 440.895158][T20772] syzkaller0: entered promiscuous mode [ 440.900919][T20772] syzkaller0: entered allmulticast mode [ 441.065897][T20787] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3899'. [ 441.097196][T20770] tipc: Resetting bearer [ 441.275872][T20795] sctp: [Deprecated]: syz.0.3901 (pid 20795) Use of int in max_burst socket option. [ 441.275872][T20795] Use struct sctp_assoc_value instead [ 441.410268][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3902'. [ 441.479576][T20770] tipc: Disabling bearer [ 443.411440][ T5888] tipc: Node number set to 3639956863 [ 443.716256][T20811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3906'. [ 443.797303][T20794] lo speed is unknown, defaulting to 1000 [ 443.940345][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3908'. [ 444.007172][T20831] netlink: 'syz.2.3910': attribute type 13 has an invalid length. [ 444.070377][T20831] gretap0: refused to change device tx_queue_len [ 444.081925][T20831] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 444.242917][T20845] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 444.323936][T20847] bond5: (slave geneve4): making interface the new active one [ 444.333268][T20847] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 444.384620][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 444.423865][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 444.518034][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 444.534051][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 444.568876][T20853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.720054][T20862] syzkaller0: entered promiscuous mode [ 444.726260][T20862] syzkaller0: entered allmulticast mode [ 444.887741][T20873] netlink: 'syz.1.3923': attribute type 10 has an invalid length. [ 444.906852][T20873] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3923'. [ 444.968425][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3923'. [ 445.071254][T20873] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 445.357314][T20895] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3929'. [ 445.391118][T20895] ksmbd: Unknown IPC event: 1, ignore. [ 445.688869][T20922] tipc: Enabling of bearer rejected, failed to enable media [ 445.794277][T20931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.851774][T20930] lo speed is unknown, defaulting to 1000 [ 446.018557][T20940] tipc: Enabling of bearer rejected, failed to enable media [ 446.287943][T20954] team0: Port device erspan0 added [ 446.468736][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 446.531229][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 446.569417][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 446.607768][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 446.649666][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 446.667508][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 446.713230][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 447.339099][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 447.361023][T21010] netlink: 'syz.1.3955': attribute type 1 has an invalid length. [ 447.375883][T21010] netlink: 'syz.1.3955': attribute type 3 has an invalid length. [ 447.417961][T21010] netlink: 'syz.1.3955': attribute type 1 has an invalid length. [ 447.425850][T21010] NCSI netlink: No device for ifindex 609091586 [ 447.686058][T21032] netem: unknown loss type 0 [ 447.691175][T21032] netem: change failed [ 447.945413][T21049] netlink: 'syz.0.3966': attribute type 4 has an invalid length. [ 447.966241][T21053] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 448.010036][T21059] x_tables: duplicate underflow at hook 2 [ 448.118906][T21064] team0: Device veth3 is up. Set it down before adding it as a team port [ 448.282255][T21071] netlink: 'syz.4.3972': attribute type 1 has an invalid length. [ 448.309806][T21071] netlink: 'syz.4.3972': attribute type 3 has an invalid length. [ 449.126969][T21134] validate_nla: 1 callbacks suppressed [ 449.126987][T21134] netlink: 'syz.2.3990': attribute type 4 has an invalid length. [ 449.567280][T21160] bond0: (slave rose0): Releasing backup interface [ 449.618392][T21160] vlan2: entered promiscuous mode [ 449.664935][T21163] tipc: Enabled bearer , priority 0 [ 449.713282][T21162] tipc: Disabling bearer [ 450.031832][T21179] __nla_validate_parse: 76 callbacks suppressed [ 450.031850][T21179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4004'. [ 450.193441][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4007'. [ 450.203208][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4007'. [ 450.239328][T21183] netlink: 'syz.1.4007': attribute type 14 has an invalid length. [ 450.254417][T21183] netlink: 'syz.1.4007': attribute type 12 has an invalid length. [ 450.342739][T21196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4010'. [ 450.501132][T21194] netlink: 'syz.1.4009': attribute type 1 has an invalid length. [ 450.509356][T21194] netlink: 'syz.1.4009': attribute type 1 has an invalid length. [ 450.545265][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.668524][T21216] openvswitch: netlink: IP tunnel dst address not specified [ 450.810373][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4018'. [ 450.924671][T21230] lo speed is unknown, defaulting to 1000 [ 450.936244][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4021'. [ 451.010270][T21238] tipc: Enabling of bearer rejected, failed to enable media [ 451.120374][T21241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'. [ 451.135889][T21241] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 451.174637][T21241] openvswitch: netlink: Message has -2 unknown bytes. [ 451.183893][T21241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.328081][T21252] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 451.400623][T21245] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 451.593693][T21267] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4029'. [ 452.102011][T21283] syzkaller0: entered promiscuous mode [ 452.138047][T21283] syzkaller0: entered allmulticast mode [ 452.229362][T21292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.461205][T21304] lo speed is unknown, defaulting to 1000 [ 452.491647][T21307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4041'. [ 452.798333][T21314] netlink: 'syz.4.4044': attribute type 1 has an invalid length. [ 452.864783][T21314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4044'. [ 452.884967][T21314] bond1: (slave bridge2): making interface the new active one [ 452.893445][T21314] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 452.912259][T21315] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 452.926035][T21314] macvlan2: entered promiscuous mode [ 452.931950][T21314] macvlan2: entered allmulticast mode [ 452.940250][T21314] bond1: entered promiscuous mode [ 452.945378][T21314] bridge2: entered promiscuous mode [ 452.951517][T21314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 452.959543][T21314] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 452.976355][T21314] bond1: left promiscuous mode [ 452.981346][T21314] bridge2: left promiscuous mode [ 453.144039][T21330] sctp: [Deprecated]: syz.2.4049 (pid 21330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.144039][T21330] Use struct sctp_sack_info instead [ 453.307345][T21342] netlink: 'syz.2.4053': attribute type 11 has an invalid length. [ 453.449371][T21350] IPv6: Can't replace route, no match found [ 453.536669][T21356] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 453.575598][T21359] netlink: 'syz.3.4056': attribute type 5 has an invalid length. [ 453.606232][T21359] geneve2: entered promiscuous mode [ 453.612106][T21359] geneve2: entered allmulticast mode [ 453.630394][T20060] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 58383 - 0 [ 453.657024][T20060] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 58383 - 0 [ 453.693736][T20060] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 58383 - 0 [ 453.703033][T20060] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 58383 - 0 [ 454.428140][T21417] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 454.470120][T21420] netlink: 'syz.3.4073': attribute type 1 has an invalid length. [ 454.470249][T21416] vlan0: entered allmulticast mode [ 454.491568][T21416] veth0_to_bond: entered allmulticast mode [ 454.495612][T21422] netlink: 'syz.1.4076': attribute type 5 has an invalid length. [ 454.508044][T21420] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 454.535720][T21422] ip6erspan1: entered promiscuous mode [ 454.695858][T21436] lo speed is unknown, defaulting to 1000 [ 454.696450][T21438] netlink: 'syz.3.4080': attribute type 33 has an invalid length. [ 454.931971][T21455] bridge0: port 3(ip6gretap0) entered blocking state [ 454.962829][T21455] bridge0: port 3(ip6gretap0) entered disabled state [ 454.970474][T21455] ip6gretap0: entered allmulticast mode [ 454.978572][T21455] ip6gretap0: entered promiscuous mode [ 454.985975][T21455] bridge0: port 3(ip6gretap0) entered blocking state [ 454.992881][T21455] bridge0: port 3(ip6gretap0) entered forwarding state [ 455.115323][T21455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.170445][T21455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.236065][T21466] __nla_validate_parse: 15 callbacks suppressed [ 455.236086][T21466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4087'. [ 455.365316][T21469] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4088'. [ 455.396431][T21469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 455.686570][T21497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4095'. [ 455.806152][T21503] netlink: 'syz.3.4100': attribute type 3 has an invalid length. [ 455.818870][T21503] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4100'. [ 455.872999][T21503] netlink: 'syz.3.4100': attribute type 10 has an invalid length. [ 455.926498][T21503] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 456.034439][T21515] netlink: 'syz.3.4102': attribute type 1 has an invalid length. [ 456.088908][T21515] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 456.123692][T21504] netlink: 'syz.2.4099': attribute type 11 has an invalid length. [ 456.244292][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4103'. [ 456.315943][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4103'. [ 456.375209][T21538] sctp: [Deprecated]: syz.0.4107 (pid 21538) Use of int in max_burst socket option. [ 456.375209][T21538] Use struct sctp_assoc_value instead [ 456.651924][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4112'. [ 456.830238][T21574] netlink: 'syz.1.4117': attribute type 1 has an invalid length. [ 456.830830][T21575] netlink: 'syz.1.4117': attribute type 1 has an invalid length. [ 456.847535][T21576] hsr0: entered promiscuous mode [ 456.870781][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'. [ 456.915181][T21576] hsr_slave_0: left promiscuous mode [ 456.952902][T21576] hsr_slave_1: left promiscuous mode [ 456.998998][T21576] hsr0 (unregistering): left promiscuous mode [ 457.130362][T21599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4123'. [ 457.225807][T21601] lo speed is unknown, defaulting to 1000 [ 457.672630][T21622] nbd: nbd64 already in use [ 457.824141][T21508] udevd[21508]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 458.165603][T21634] netlink: 'syz.4.4130': attribute type 22 has an invalid length. [ 458.175973][T21641] lo speed is unknown, defaulting to 1000 [ 458.183404][T21634] netlink: 'syz.4.4130': attribute type 22 has an invalid length. [ 458.411992][T21660] tipc: Enabled bearer , priority 0 [ 458.419344][T21661] tipc: Enabling of bearer rejected, already enabled [ 458.462224][T21660] syzkaller0: entered promiscuous mode [ 458.467855][T21660] syzkaller0: entered allmulticast mode [ 458.498354][T21659] tipc: Resetting bearer [ 458.534109][T21659] tipc: Disabling bearer [ 458.852001][T21676] lo speed is unknown, defaulting to 1000 [ 459.021598][T21697] can: request_module (can-proto-3) failed. [ 459.021653][T21692] can: request_module (can-proto-3) failed. [ 459.066039][T21703] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 459.401700][T21722] lo: Caught tx_queue_len zero misconfig [ 459.684338][T21734] validate_nla: 5 callbacks suppressed [ 459.684356][T21734] netlink: 'syz.2.4155': attribute type 1 has an invalid length. [ 459.704082][T21737] netlink: 'syz.4.4153': attribute type 83 has an invalid length. [ 460.320407][T21758] __nla_validate_parse: 12 callbacks suppressed [ 460.320426][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 460.490501][T21767] lo speed is unknown, defaulting to 1000 [ 460.545789][T21758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4162'. [ 460.558953][T21758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4162'. [ 460.641053][T21773] sctp: [Deprecated]: syz.1.4166 (pid 21773) Use of int in max_burst socket option. [ 460.641053][T21773] Use struct sctp_assoc_value instead [ 460.983339][T21785] dvmrp0: entered allmulticast mode [ 461.123539][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'. [ 461.999237][T21813] netlink: 'syz.4.4176': attribute type 1 has an invalid length. [ 462.168786][T21824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.304193][T21820] bond2: (slave veth5): Enslaving as an active interface with a down link [ 462.408991][T21828] lo speed is unknown, defaulting to 1000 [ 462.428511][T21832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4180'. [ 462.823284][T21846] lo speed is unknown, defaulting to 1000 [ 462.861663][T21856] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 462.882869][T21837] bond0: (slave dummy0): Releasing backup interface [ 462.922194][T21837] dummy0: left promiscuous mode [ 463.025811][T21862] syzkaller0: entered promiscuous mode [ 463.031643][T21862] syzkaller0: entered allmulticast mode [ 463.040316][T21862] 0: reclassify loop, rule prio 0, protocol 700 [ 463.416647][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4191'. [ 463.580343][T21884] veth3: entered promiscuous mode [ 464.263936][T21916] nbd: must specify a device to reconfigure [ 464.384937][T21919] dvmrp0: entered allmulticast mode [ 464.417286][T21923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4198'. [ 464.436860][T21923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4198'. [ 464.445844][T21923] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4198'. [ 464.556669][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4201'. [ 464.731766][T21941] batman_adv: batadv0: Adding interface: macvlan2 [ 464.738574][T21941] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 464.763027][T21940] vxcan1: entered promiscuous mode [ 464.786714][T21940] netlink: 'syz.0.4203': attribute type 7 has an invalid length. [ 464.794809][T21940] netlink: 'syz.0.4203': attribute type 8 has an invalid length. [ 464.863757][T21943] netlink: 'syz.1.4206': attribute type 1 has an invalid length. [ 465.009205][T21943] bond7: (slave bridge2): making interface the new active one [ 465.032401][T21943] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 465.370422][T21969] netlink: 'syz.4.4215': attribute type 10 has an invalid length. [ 465.400641][T21969] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 465.434322][T21974] netlink: 'syz.1.4217': attribute type 10 has an invalid length. [ 465.843674][T21992] vlan2: entered promiscuous mode [ 465.849031][T21992] geneve1: entered promiscuous mode [ 465.854613][T21992] vlan2: entered allmulticast mode [ 465.861085][T21992] geneve1: entered allmulticast mode [ 466.074669][T22005] netlink: 'syz.2.4225': attribute type 1 has an invalid length. [ 466.076374][T22004] tipc: Enabled bearer , priority 0 [ 466.145588][T22004] syzkaller0: entered promiscuous mode [ 466.167764][T22004] syzkaller0: entered allmulticast mode [ 466.174573][T22004] tipc: Resetting bearer [ 466.215912][T22005] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.250307][T22006] bond6: (slave veth3): Enslaving as an active interface with a down link [ 466.321739][T22014] bond6: (slave veth5): Enslaving as an active interface with a down link [ 466.364297][T22009] lo speed is unknown, defaulting to 1000 [ 466.370897][T22002] tipc: Resetting bearer [ 467.677519][T22002] tipc: Disabling bearer [ 467.686102][T22005] bond6: entered allmulticast mode [ 467.858401][T22035] ip6tnl0: Caught tx_queue_len zero misconfig [ 467.870183][T22036] __nla_validate_parse: 5 callbacks suppressed [ 467.870202][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4233'. [ 468.063027][T22051] geneve2: entered promiscuous mode [ 468.140168][T22051] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 468.154704][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 468.171478][T22058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4238'. [ 468.268122][T22051] bond2 (unregistering): Released all slaves [ 468.268145][T22063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4238'. [ 468.692497][T22078] netlink: 'syz.0.4244': attribute type 2 has an invalid length. [ 468.902697][T22088] netlink: 'syz.0.4246': attribute type 1 has an invalid length. [ 468.939788][T22095] netlink: 'syz.3.4250': attribute type 1 has an invalid length. [ 468.963517][T22091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.975360][T22091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.007067][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4250'. [ 469.016671][T22093] netlink: 'syz.1.4249': attribute type 29 has an invalid length. [ 469.051789][T22095] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.073493][T22096] bond2: (slave geneve3): making interface the new active one [ 469.083383][T22096] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 469.110830][T22100] bond6: (slave gretap2): making interface the new active one [ 469.120224][T22100] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 469.150671][T22091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.179177][T22091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.202186][T19144] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 469.229441][T19144] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 469.242492][T19144] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 469.277605][T19144] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 469.373710][T22091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.381112][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4253'. [ 469.405825][T22091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.430281][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4253'. [ 469.456124][T22108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4253'. [ 469.493467][T22117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4256'. [ 469.504607][T22114] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.521998][T22114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.529293][T22114] IPv6: NLM_F_CREATE should be set when creating new route [ 469.536537][T22114] IPv6: NLM_F_CREATE should be set when creating new route [ 469.543779][T22114] IPv6: NLM_F_CREATE should be set when creating new route [ 469.571206][T22091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.597032][T22091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.607858][T22115] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 469.655628][T22117] ip6gretap1: entered promiscuous mode [ 469.662544][T22117] ip6gretap1: entered allmulticast mode [ 469.702535][T22108] geneve3: entered promiscuous mode [ 469.714573][T22108] geneve3: entered allmulticast mode [ 469.758447][T20055] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [1, 2] type 2 family 0 port 256 - 0 [ 469.767498][T20055] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 469.776520][T20055] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 469.845329][T20055] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 469.982382][T20055] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.991670][T20055] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.035825][T20055] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.056861][T20055] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.086239][T20055] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.106981][T20055] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.115256][T22138] lo speed is unknown, defaulting to 1000 [ 470.139861][T20055] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.149015][T20055] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.178314][ T9316] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 470.206995][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 470.336287][T22164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4266'. [ 470.379208][T22162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.469890][T22159] bond0: (slave rose0): Enslaving as an active interface with an up link [ 470.884109][T22181] lo speed is unknown, defaulting to 1000 [ 470.932996][T22184] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 471.020433][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 471.302076][T20060] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 471.315103][T20060] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 471.717180][ T924] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 471.777845][T22214] validate_nla: 4 callbacks suppressed [ 471.777863][T22214] netlink: 'syz.2.4282': attribute type 2 has an invalid length. [ 471.823165][T22214] openvswitch: netlink: Flow key attr not present in new flow. [ 471.842125][T22223] erspan0: entered promiscuous mode [ 472.168413][ T29] audit: type=1800 audit(1771316230.087:12): pid=22238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4287" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1059 res=0 errno=0 [ 472.533118][T22257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.702723][T22259] lo speed is unknown, defaulting to 1000 [ 472.770790][T22258] lo speed is unknown, defaulting to 1000 [ 472.899894][T22274] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 472.920331][ T29] audit: type=1804 audit(1771316230.807:13): pid=22274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4296" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1122 res=1 errno=0 [ 472.951735][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 472.966989][ T29] audit: type=1800 audit(1771316230.807:14): pid=22274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4296" name="cgroup.controllers" dev="tmpfs" ino=1122 res=0 errno=0 [ 472.989526][ T29] audit: type=1800 audit(1771316230.807:15): pid=22274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4296" name="cgroup.controllers" dev="tmpfs" ino=1122 res=0 errno=0 [ 473.144171][T22288] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 473.260132][ T8898] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 473.315161][T22290] tipc: Resetting bearer [ 473.387335][ T924] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 473.690258][T22311] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 473.713048][T11472] IPVS: starting estimator thread 0... [ 473.805199][T22319] __nla_validate_parse: 12 callbacks suppressed [ 473.805219][T22319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4309'. [ 473.810570][T22321] netlink: 'syz.3.4310': attribute type 11 has an invalid length. [ 473.831358][T22317] IPVS: using max 36 ests per chain, 86400 per kthread [ 473.897118][ T924] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 473.950702][T22327] xt_connbytes: Forcing CT accounting to be enabled [ 473.966499][T22327] Cannot find set identified by id 65470 to match [ 474.183777][T22335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4314'. [ 474.400002][T22350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4318'. [ 474.485593][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4319'. [ 474.486377][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4319'. [ 474.545027][T22356] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.4320'. [ 474.576580][T22356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4320'. [ 474.596689][T22356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4320'. [ 474.613050][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 474.622358][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 474.784427][T22373] Cannot find del_set index 1536 as target [ 474.870785][T22385] netlink: 'syz.1.4328': attribute type 11 has an invalid length. [ 475.042277][T22395] vlan3: entered promiscuous mode [ 475.060523][T22395] geneve1: entered promiscuous mode [ 475.079614][T22395] vlan3: entered allmulticast mode [ 475.107088][T22395] geneve1: entered allmulticast mode [ 475.166717][T22406] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 475.278583][T22415] nbd: couldn't find a device at index 65546 [ 475.299081][T22410] 8021q: adding VLAN 0 to HW filter on device bond8 [ 475.308249][T22410] team0: Port device bond8 added [ 475.476039][T22419] syzkaller0: entered promiscuous mode [ 475.481815][T22419] syzkaller0: entered allmulticast mode [ 475.497005][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 475.676790][T22439] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 475.717782][T22439] team0 (unregistering): Port device team_slave_0 removed [ 475.747432][T22439] team0 (unregistering): Failed to send options change via netlink (err -105) [ 475.766694][T22439] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 475.782285][T22439] team0 (unregistering): Port device team_slave_1 removed [ 475.798364][T22439] team0 (unregistering): Failed to send options change via netlink (err -105) [ 475.813837][T22439] team0 (unregistering): Failed to send port change of device erspan0 via netlink (err -105) [ 475.825128][T22439] team0 (unregistering): Port device erspan0 removed [ 475.962263][T22456] RDS: rds_bind could not find a transport for ::1400:0:ffff:ffff, load rds_tcp or rds_rdma? [ 476.009841][T22459] netlink: 'syz.4.4347': attribute type 29 has an invalid length. [ 476.125984][T22467] netlink: 'syz.1.4350': attribute type 11 has an invalid length. [ 476.594118][T22484] lo speed is unknown, defaulting to 1000 [ 476.611179][T22490] netlink: 'syz.4.4353': attribute type 5 has an invalid length. [ 476.758675][T22501] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:0 [ 477.247084][T22523] 8021q: VLANs not supported on vxcan0 [ 477.309677][T22528] netlink: 'syz.3.4365': attribute type 1 has an invalid length. [ 477.371198][T22532] netlink: 'syz.1.4367': attribute type 11 has an invalid length. [ 477.405793][T22534] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 477.417625][T22534] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 477.565297][T22543] netlink: 'syz.2.4368': attribute type 1 has an invalid length. [ 477.580243][T22545] bond7: (slave bridge3): Enslaving as an active interface with a down link [ 478.111653][ T29] audit: type=1800 audit(1771316236.027:16): pid=22571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4373" name=CB dev="tmpfs" ino=1132 res=0 errno=0 [ 478.465015][T22566] wg1 speed is unknown, defaulting to 1000 [ 478.465971][T22578] lo speed is unknown, defaulting to 1000 [ 478.476892][T22566] wg1 speed is unknown, defaulting to 1000 [ 478.477667][T22566] wg1 speed is unknown, defaulting to 1000 [ 478.529943][T22580] Bluetooth: MGMT ver 1.23 [ 478.537196][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.590843][T22584] netlink: 'syz.2.4377': attribute type 11 has an invalid length. [ 478.663670][T22585] netlink: 'syz.2.4377': attribute type 11 has an invalid length. [ 478.794081][T22597] netlink: 'syz.0.4379': attribute type 11 has an invalid length. [ 478.817773][T22566] infiniband sy+Û: RDMA CMA: cma_listen_on_dev, error -98 [ 478.830308][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.855837][T22584] __nla_validate_parse: 11 callbacks suppressed [ 478.855852][T22584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4377'. [ 478.883137][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.925556][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.971762][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.053529][T22607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 479.112793][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.135638][T22607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 479.146466][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.231435][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.250651][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.265071][T22613] netlink: 'syz.3.4382': attribute type 10 has an invalid length. [ 479.267681][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.274040][T22613] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 479.294272][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.313561][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.331270][T22566] wg1 speed is unknown, defaulting to 1000 [ 479.426466][T22615] netlink: 'syz.4.4383': attribute type 11 has an invalid length. [ 479.928709][T22639] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4390'. [ 479.963899][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4392'. [ 479.974172][T22639] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4390'. [ 480.020881][T22645] netlink: 'syz.3.4390': attribute type 1 has an invalid length. [ 480.024656][T22639] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4390'. [ 480.129531][T22650] netlink: 'syz.4.4394': attribute type 11 has an invalid length. [ 480.142434][T22645] 8021q: adding VLAN 0 to HW filter on device bond8 [ 480.533704][T22667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4397'. [ 480.894763][T22647] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 480.908477][T22647] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 480.932518][T22685] FAULT_INJECTION: forcing a failure. [ 480.932518][T22685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.006700][T22685] CPU: 1 UID: 0 PID: 22685 Comm: syz.4.4404 Not tainted syzkaller #0 PREEMPT(full) [ 481.006728][T22685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.006738][T22685] Call Trace: [ 481.006745][T22685] [ 481.006752][T22685] dump_stack_lvl+0xe8/0x150 [ 481.006776][T22685] should_fail_ex+0x412/0x560 [ 481.006804][T22685] _copy_from_user+0x2d/0xb0 [ 481.006823][T22685] ___sys_sendmsg+0x1c6/0x360 [ 481.006843][T22685] ? __lock_acquire+0x6b5/0x2cf0 [ 481.006866][T22685] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.006920][T22685] ? __fget_files+0x2a/0x420 [ 481.006936][T22685] ? __fget_files+0x3a0/0x420 [ 481.006963][T22685] __x64_sys_sendmsg+0x1bd/0x2a0 [ 481.006986][T22685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.007016][T22685] ? __pfx_ksys_write+0x10/0x10 [ 481.007045][T22685] do_syscall_64+0x14d/0xf80 [ 481.007064][T22685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.007079][T22685] ? trace_irq_disable+0x37/0x100 [ 481.007096][T22685] ? clear_bhb_loop+0x40/0x90 [ 481.007116][T22685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.007132][T22685] RIP: 0033:0x7f3bffb9bf79 [ 481.007148][T22685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.007162][T22685] RSP: 002b:00007f3c00b22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.007180][T22685] RAX: ffffffffffffffda RBX: 00007f3bffe15fa0 RCX: 00007f3bffb9bf79 [ 481.007193][T22685] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 481.007204][T22685] RBP: 00007f3c00b22090 R08: 0000000000000000 R09: 0000000000000000 [ 481.007214][T22685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.007224][T22685] R13: 00007f3bffe16038 R14: 00007f3bffe15fa0 R15: 00007ffecce65ec8 [ 481.007251][T22685] [ 481.339703][T22689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4405'. [ 481.507872][T22697] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 481.638135][T22703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4410'. [ 482.267954][T22740] batadv_slave_0: entered promiscuous mode [ 482.288414][T22739] batadv_slave_0: left promiscuous mode [ 482.535864][T22759] lo speed is unknown, defaulting to 1000 [ 482.687370][T22762] netlink: 'syz.2.4427': attribute type 11 has an invalid length. [ 482.808011][T22759] wg1 speed is unknown, defaulting to 1000 [ 482.941709][T22767] lo speed is unknown, defaulting to 1000 [ 483.394090][T22779] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 483.423742][T22767] wg1 speed is unknown, defaulting to 1000 [ 484.219089][ T5833] Bluetooth: hci3: command 0x0405 tx timeout [ 484.297184][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 485.173693][T22808] __nla_validate_parse: 14 callbacks suppressed [ 485.173712][T22808] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4436'. [ 485.191342][T22808] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4436'. [ 485.202098][T22808] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 485.319477][T22814] netlink: 'syz.4.4439': attribute type 11 has an invalid length. [ 485.429154][T22824] block nbd0: not configured, cannot reconfigure [ 485.683041][T22839] Cannot find set identified by id 65534 to match [ 485.745388][T22826] lo speed is unknown, defaulting to 1000 [ 486.644062][T22883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.710229][T22826] wg1 speed is unknown, defaulting to 1000 [ 486.968775][T22902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4457'. [ 487.324388][T22918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4464'. [ 487.412620][T22924] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4464'. [ 487.554457][T22932] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4467'. [ 487.639444][T22932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4467'. [ 487.684903][T22941] netlink: 'syz.3.4470': attribute type 1 has an invalid length. [ 487.693258][T22941] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4470'. [ 487.929120][T22959] lo speed is unknown, defaulting to 1000 [ 487.945706][T22971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4477'. [ 487.974398][T22971] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4477'. [ 487.986239][T22971] netlink: 'syz.1.4477': attribute type 6 has an invalid length. [ 487.996887][T22971] netlink: 'syz.1.4477': attribute type 5 has an invalid length. [ 488.261861][T22978] lo speed is unknown, defaulting to 1000 [ 488.281717][T22959] wg1 speed is unknown, defaulting to 1000 [ 488.329881][T22982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.429334][T22982] lo speed is unknown, defaulting to 1000 [ 488.511212][T22991] FAULT_INJECTION: forcing a failure. [ 488.511212][T22991] name failslab, interval 1, probability 0, space 0, times 0 [ 488.563074][T22991] CPU: 0 UID: 0 PID: 22991 Comm: syz.4.4483 Not tainted syzkaller #0 PREEMPT(full) [ 488.563098][T22991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.563108][T22991] Call Trace: [ 488.563114][T22991] [ 488.563121][T22991] dump_stack_lvl+0xe8/0x150 [ 488.563146][T22991] should_fail_ex+0x412/0x560 [ 488.563172][T22991] should_failslab+0xa8/0x100 [ 488.563194][T22991] ? skb_clone+0x212/0x3a0 [ 488.563213][T22991] kmem_cache_alloc_noprof+0x87/0x650 [ 488.563230][T22991] ? __netlink_lookup+0xc6/0x8b0 [ 488.563253][T22991] skb_clone+0x212/0x3a0 [ 488.563277][T22991] __netlink_deliver_tap+0x404/0x850 [ 488.563304][T22991] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.563323][T22991] netlink_deliver_tap+0x19c/0x1b0 [ 488.563340][T22991] netlink_unicast+0x7e3/0x9b0 [ 488.563371][T22991] ? __pfx_netlink_unicast+0x10/0x10 [ 488.563393][T22991] ? netlink_sendmsg+0x650/0xb40 [ 488.563407][T22991] ? skb_put+0x11b/0x210 [ 488.563425][T22991] netlink_sendmsg+0x813/0xb40 [ 488.563448][T22991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.563466][T22991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.563486][T22991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.563508][T22991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.563523][T22991] ____sys_sendmsg+0xa68/0xad0 [ 488.563542][T22991] ? __might_fault+0xaf/0x130 [ 488.563567][T22991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.563594][T22991] ? import_iovec+0x73/0xa0 [ 488.563616][T22991] ___sys_sendmsg+0x2a5/0x360 [ 488.563635][T22991] ? __lock_acquire+0x6b5/0x2cf0 [ 488.563669][T22991] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.563723][T22991] ? __fget_files+0x2a/0x420 [ 488.563739][T22991] ? __fget_files+0x3a0/0x420 [ 488.563766][T22991] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.563789][T22991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.563819][T22991] ? __pfx_ksys_write+0x10/0x10 [ 488.563854][T22991] do_syscall_64+0x14d/0xf80 [ 488.563875][T22991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.563890][T22991] ? trace_irq_disable+0x37/0x100 [ 488.563907][T22991] ? clear_bhb_loop+0x40/0x90 [ 488.563927][T22991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.563944][T22991] RIP: 0033:0x7f3bffb9bf79 [ 488.563963][T22991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.563978][T22991] RSP: 002b:00007f3c00b22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.563996][T22991] RAX: ffffffffffffffda RBX: 00007f3bffe15fa0 RCX: 00007f3bffb9bf79 [ 488.564008][T22991] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 488.564017][T22991] RBP: 00007f3c00b22090 R08: 0000000000000000 R09: 0000000000000000 [ 488.564028][T22991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.564038][T22991] R13: 00007f3bffe16038 R14: 00007f3bffe15fa0 R15: 00007ffecce65ec8 [ 488.564067][T22991] [ 489.117684][T22978] wg1 speed is unknown, defaulting to 1000 [ 489.627665][T22982] wg1 speed is unknown, defaulting to 1000 [ 489.769627][T23042] netlink: 'syz.2.4496': attribute type 1 has an invalid length. [ 489.961547][T23050] netlink: 'syz.3.4499': attribute type 1 has an invalid length. [ 489.971643][T23050] netlink: 'syz.3.4499': attribute type 1 has an invalid length. [ 489.980561][T23050] netlink: 'syz.3.4499': attribute type 8 has an invalid length. [ 490.553044][T23057] netlink: 'syz.3.4500': attribute type 2 has an invalid length. [ 490.579028][T23057] netlink: 'syz.3.4500': attribute type 1 has an invalid length. [ 491.681275][T23076] xt_hashlimit: size too large, truncated to 1048576 [ 491.688221][T23076] xt_hashlimit: max too large, truncated to 1048576 [ 491.762754][T23080] __nla_validate_parse: 14 callbacks suppressed [ 491.762771][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4508'. [ 491.801079][T23082] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4509'. [ 492.577480][T23121] netlink: 'syz.3.4519': attribute type 1 has an invalid length. [ 492.602787][T23121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4519'. [ 492.656149][T23118] syzkaller0: entered promiscuous mode [ 492.663913][T23118] syzkaller0: entered allmulticast mode [ 492.715981][T23118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4518'. [ 493.688726][T23160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4526'. [ 493.698299][T23160] netlink: 'syz.3.4526': attribute type 7 has an invalid length. [ 493.706046][T23160] netlink: 'syz.3.4526': attribute type 8 has an invalid length. [ 493.717136][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4526'. [ 494.968034][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4533'. [ 494.990418][T23179] lo speed is unknown, defaulting to 1000 [ 494.996272][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4533'. [ 495.009215][T23180] syzkaller1: entered promiscuous mode [ 495.014719][T23180] syzkaller1: entered allmulticast mode [ 495.026490][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4531'. [ 495.708681][T23203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4540'. [ 495.751307][T23179] wg1 speed is unknown, defaulting to 1000 [ 496.086492][T23227] netlink: 'syz.3.4546': attribute type 1 has an invalid length. [ 496.467739][ C1] ------------[ cut here ]------------ [ 496.473459][ C1] ODEBUG: free active (active state 0) object: ffff8880570d9490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 496.486413][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: ksoftirqd/1/23 [ 496.496980][ C1] Modules linked in: [ 496.501267][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 496.510522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.520659][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 496.527045][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 496.546737][ C1] RSP: 0018:ffffc900001d7908 EFLAGS: 00010246 [ 496.552829][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a517178 RCX: 0000000000000000 [ 496.560872][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 496.568985][ C1] RBP: ffffffff8bcf4a00 R08: ffff8880570d9490 R09: ffffffff8bcf5d20 [ 496.577028][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff8880570d9600 [ 496.585010][ C1] R13: ffffffff901b4570 R14: ffff8880570d9000 R15: ffff8880570d9490 [ 496.593024][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 496.601996][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.608627][ C1] CR2: 0000001b2f41aff8 CR3: 000000007df76000 CR4: 00000000003526f0 [ 496.616613][ C1] Call Trace: [ 496.619928][ C1] [ 496.622869][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 496.628568][ C1] kfree+0x13a/0x610 [ 496.632475][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 496.637634][ C1] rose_timer_expiry+0x4cb/0x600 [ 496.642606][ C1] ? call_timer_fn+0x178/0x5a0 [ 496.647410][ C1] call_timer_fn+0x192/0x5a0 [ 496.652015][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 496.657521][ C1] ? call_timer_fn+0xd4/0x5a0 [ 496.662214][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 496.667379][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.672591][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 496.678116][ C1] __run_timer_base+0x652/0x8b0 [ 496.682999][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 496.688426][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 496.693393][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 496.698459][ C1] run_timer_softirq+0xb7/0x170 [ 496.703322][ C1] handle_softirqs+0x22a/0x7c0 [ 496.708136][ C1] ? run_ksoftirqd+0x36/0x60 [ 496.712760][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 496.717822][ C1] run_ksoftirqd+0x36/0x60 [ 496.722256][ C1] smpboot_thread_fn+0x541/0xa50 [ 496.727251][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 496.732301][ C1] kthread+0x388/0x470 [ 496.736399][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 496.741931][ C1] ? __pfx_kthread+0x10/0x10 [ 496.746542][ C1] ret_from_fork+0x51e/0xb90 [ 496.751194][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 496.756319][ C1] ? __switch_to+0xc7d/0x1400 [ 496.761050][ C1] ? __pfx_kthread+0x10/0x10 [ 496.765663][ C1] ret_from_fork_asm+0x1a/0x30 [ 496.770872][ C1] [ 496.773921][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 496.781211][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 496.790409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.800459][ C1] Call Trace: [ 496.803729][ C1] [ 496.806647][ C1] vpanic+0x1e0/0x670 [ 496.810631][ C1] panic+0xc5/0xd0 [ 496.814340][ C1] ? __pfx_panic+0x10/0x10 [ 496.818756][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 496.823687][ C1] __warn+0x315/0x4a0 [ 496.827656][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 496.833367][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 496.839086][ C1] __report_bug+0x29a/0x540 [ 496.843595][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.849401][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 496.855116][ C1] ? __pfx___report_bug+0x10/0x10 [ 496.860142][ C1] ? kfree+0x1c1/0x610 [ 496.864216][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 496.869324][ C1] ? call_timer_fn+0x192/0x5a0 [ 496.874076][ C1] ? __run_timer_base+0x652/0x8b0 [ 496.879084][ C1] ? run_timer_softirq+0xb7/0x170 [ 496.884087][ C1] ? handle_softirqs+0x22a/0x7c0 [ 496.889009][ C1] ? run_ksoftirqd+0x36/0x60 [ 496.893586][ C1] ? kthread+0x388/0x470 [ 496.897830][ C1] ? ret_from_fork+0x51e/0xb90 [ 496.902579][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 496.907507][ C1] report_bug_entry+0x19a/0x290 [ 496.912345][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 496.918051][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 496.923845][ C1] handle_bug+0xca/0x200 [ 496.928079][ C1] exc_invalid_op+0x1a/0x50 [ 496.932569][ C1] asm_exc_invalid_op+0x1a/0x20 [ 496.937403][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 496.943721][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 496.963403][ C1] RSP: 0018:ffffc900001d7908 EFLAGS: 00010246 [ 496.969471][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a517178 RCX: 0000000000000000 [ 496.977437][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 496.985402][ C1] RBP: ffffffff8bcf4a00 R08: ffff8880570d9490 R09: ffffffff8bcf5d20 [ 496.993364][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff8880570d9600 [ 497.001322][ C1] R13: ffffffff901b4570 R14: ffff8880570d9000 R15: ffff8880570d9490 [ 497.009288][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 497.014652][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 497.020281][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 497.025911][ C1] kfree+0x13a/0x610 [ 497.029790][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 497.034894][ C1] rose_timer_expiry+0x4cb/0x600 [ 497.039822][ C1] ? call_timer_fn+0x178/0x5a0 [ 497.044571][ C1] call_timer_fn+0x192/0x5a0 [ 497.049142][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 497.054587][ C1] ? call_timer_fn+0xd4/0x5a0 [ 497.059251][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 497.064354][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.069539][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 497.074991][ C1] __run_timer_base+0x652/0x8b0 [ 497.079836][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 497.085203][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 497.090145][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 497.095169][ C1] run_timer_softirq+0xb7/0x170 [ 497.100014][ C1] handle_softirqs+0x22a/0x7c0 [ 497.104778][ C1] ? run_ksoftirqd+0x36/0x60 [ 497.109369][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 497.114384][ C1] run_ksoftirqd+0x36/0x60 [ 497.118791][ C1] smpboot_thread_fn+0x541/0xa50 [ 497.123718][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 497.128733][ C1] kthread+0x388/0x470 [ 497.132789][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 497.138233][ C1] ? __pfx_kthread+0x10/0x10 [ 497.142812][ C1] ret_from_fork+0x51e/0xb90 [ 497.147392][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 497.152512][ C1] ? __switch_to+0xc7d/0x1400 [ 497.157196][ C1] ? __pfx_kthread+0x10/0x10 [ 497.161790][ C1] ret_from_fork_asm+0x1a/0x30 [ 497.166567][ C1] [ 497.170078][ C1] Kernel Offset: disabled [ 497.174392][ C1] Rebooting in 86400 seconds..