last executing test programs: 3m18.934592405s ago: executing program 4 (id=931): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @func_proto={0x0, 0x300}]}}, &(0x7f0000001b80)=""/4090, 0x32, 0xffa, 0xa}, 0x28) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000510000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af5fe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x71c, 0x9, 0x8, 0xfffffff1, 0x1}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060300000000000000000006002002050005000200000005000400000000001400078008001240001000000800134000005bad12000300686173683a6e65742c706f72741eb10000000500010001f0ffff0900020073797a300000000029"], 0x60}}, 0x4000000) 3m18.566618894s ago: executing program 4 (id=934): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000007000000020000000200000f0300000002000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000fcff000000000084002e2e2e7f61"], 0x0, 0x6b, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x7f, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8000}}}, 0x4e) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x84, @mcast1}}}, 0x108) close(r1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x4001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'veth0_macvtap\x00', @random="bd26eef71247"}) 3m18.551801229s ago: executing program 4 (id=936): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304}, 0xe, {0x2, 0x4e20, @empty}}) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x38, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$inet6(0xa, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff0000000001000000850000008a00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0xc711) writev(r6, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0xff}], 0x1, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}], 0x20}}], 0x1, 0x20000084) socket$unix(0x1, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000005ac0), 0x0, 0x4881) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r7, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}, 0x20000840) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="c9e8bf2d79b59b01c7dab65537f898616fcec5fcba7ed617706adb2f3833952117079a3846433411d6da8599740f01091c3c335d715870923618ffc1790b3d7ca9acff7e38b187ffd98fc9857f60626ac50efaf489e24bbbdb32415a8c4d832673e8137be31a8e4bfc6cd23f81498dbdd1f5e843da567b2551bbe1a2eca2528a5ffa5564bf5fbebd8f4821e8f227376cf78833ff12faf4af32dd88d578"], 0x50) 3m18.250584804s ago: executing program 4 (id=939): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000700000000000000200000001803000020646c2500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b7030000f1950000850000009e00000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000025c0)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf705a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f913c4f82b73d7471ea9ea84ef5accd2361d7ac94b46f59b51e804f90", 0xd5}, {&(0x7f0000000180)="892950e2405ee8429d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f0000001280)="3b239b825229aa97f3a2cfbf4274521c2675c3a0d544c88613160b1c401a4b50038ce5870ed332205da3328ba69983871d3c8f663c1f7c8b29999c65680aacbad2824faaa3ca4fbc7bea213d95f737d81229df358deed9830e52965744f00be4ffd8701f554224b13feac4438da714ee0e3e6e6dbe3fa00bc1ec544ac892ea04bd3228b7cce4c41aae84fc54d42edc3b2f7bde030bd701217dcb80db88a0a45e9181a1e5276660", 0xa7}, {&(0x7f0000001340)="64df65acf970692ca2ee3e96064b5f6f87b87a49c7383d66ad89e2adc29e9f7f48478565c44ba2364cf6c5fb347321a3dcce4bcd39a6c8fc9e6f7ebdceac933c0d0b335ace6f6e879a6daaa4222c3e9e2b5a571731a265537979feec12471cfab8ca2571b4b0d9e43c57b215149dddbfb0fe3cef55c5fd5deb5934783775a5c7dc785f26bc45", 0x86}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0xffffffffffffffb4}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4010006cf324f5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r4) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r1, &(0x7f00000001c0), 0x20000000}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="050000000f0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000009300"/29], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x6, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="6ec595b4a5d76ac4e3b19bfb4e26735f1e5d1fd693fc0e13", 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), 0xffffffffffffffff) 3m17.293451118s ago: executing program 4 (id=949): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) ioctl$IMGETCOUNT(r0, 0x5411, 0x0) 3m14.634360174s ago: executing program 4 (id=970): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="620000400007012bbd7000fedbdf25047c00000400c28004d4fc25"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'geneve1\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2m59.525828673s ago: executing program 32 (id=970): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="620000400007012bbd7000fedbdf25047c00000400c28004d4fc25"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'geneve1\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2m33.698567202s ago: executing program 5 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xb}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x144, 0x0, 0x0, @u32=0xffffffff}, @generic='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000100039042bbd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000d017e6ff00280058b70000"], 0x28}}, 0x0) 2m33.455152099s ago: executing program 5 (id=1375): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@delchain={0x2c8, 0x65, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x10}, {0xc, 0xd}, {0x4, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x32}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x8}}, @filter_kind_options=@f_flow={{0x9}, {0x280, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1fe7d}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff01}}]}, @TCA_FLOW_ACT={0x250, 0x9, 0x0, 0x1, [@m_simple={0x130, 0x1a, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '[,/\xfd^%\x00'}, @TCA_DEF_DATA={0x8, 0x3, '$+&\x00'}]}, {0xf0, 0x6, "e2bce28a844c52fb66d8545321259c759337ccd36b3696eab2921c5c1dd2434cbf70327d3c558681ced00bfc747b2a2001d2a5ea1d21a18d2cf7ba40d252d7d6f8745d3c8a3851e359aabf3fa7b28bcb3307b38d1203ba7f9363fa28b1072e246d279e6bfe9a897575fca8ec26b9d7099fef700aeda81519ef0f1bcada7a8cddd11734c19600a8c94c4b3f5737b9c90b771ac8ff11eaedc3a2965a64c81682d6bba245abb7656e7661b2016f314924f74798376af356af9b9e51eff94e36235d8e15fed07b37d903ee9c449d69b6726aa41ad6076ec7d1c0bd301d29f46fb4e559f0b5585e0b60ea3c185bdb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x68, 0x6, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x1c, 0x6, "cd9a6e5c40c02291f1e8b0ae927dea3ca091bcf0203741dc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xb4, 0x2, 0x0, 0x0, {{0xa}, {0x70, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x1a, 0x6, "874fa85ff22ea5452d7872f291b20e2f5658da23373c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xad}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2m33.372561254s ago: executing program 5 (id=1376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xe, @empty, 0x204}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4004110}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x10}, {0xffe0}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x40) socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x0, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000040706030000000000000000000a0000130900020073797a300000110049eb95751226a3cb5bc5af466b858bf9d19f2fafddf8f1460db5dd046895893dd1c0d7bfa944f06298ad263ab5e0d8f98cd61bac235f9d888e3ab3644c316d9a768d9f9ab6db13983a73a36b6673998d8d3e09812ca49fc388ef74efe109aa639fc3e5115f447a2227d9fcf182e9f31234043e55bc07bf5ba523ec5130fb556d34b2a46907c93d4adc60c0f5ff38b05a147bcbb2a6b3135c1707079e2258c9a02db953e9a6f5a0b1e5ee52016b14e722f7d34cd78dfbec95a0c0eaeae79b457d2b"], 0x1f}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x80000001, 0x7, {{0xa, 0x4, 0x0, 0x3f, 0x28, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x13, 0x7e, [@dev={0xac, 0x14, 0x14, 0x1c}, @remote, @rand_addr=0x64010101, @remote]}]}}}}}) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000040)=@null) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000300)={@local, 0x2d, r8}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f02b61d5fbce4edf94325cf9b38c7b6341a4ead414937efa44378ef4e0ee268bc4f7e243", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'bond_slave_1\x00'}) 2m33.2142316s ago: executing program 5 (id=1377): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r1 = socket$inet6(0xa, 0x800, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000000), 0x0, 0x4000085) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socket$packet(0x11, 0x2, 0x300) 2m32.942741053s ago: executing program 5 (id=1380): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0xffffffff}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b60000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x1000009, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x2400000, 0x4f9, 0x20}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m32.625042106s ago: executing program 5 (id=1385): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf, 0x0, 0x0, 0x0, 0x20000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x1, 0x9, 0xe, 0x3, 0x3ff, 0xe, {0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x6, 0x2, 0x9, 0x7, 0x9}}, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000002c"], 0xfdef) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100b, '\x00', 0x0, r3, 0xffffffff, 0x4, 0x3}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000080)}, 0x3d) 2m17.443477474s ago: executing program 33 (id=1385): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddf, 0x0, 0x0, 0x0, 0x20000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x1, 0x9, 0xe, 0x3, 0x3ff, 0xe, {0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x6, 0x2, 0x9, 0x7, 0x9}}, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000002c"], 0xfdef) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100b, '\x00', 0x0, r3, 0xffffffff, 0x4, 0x3}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000080)}, 0x3d) 6.710606919s ago: executing program 3 (id=2771): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010021850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) 6.562466761s ago: executing program 3 (id=2774): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x22, 0x4, 0x100, 0xf3e2, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000025c0)=ANY=[@ANYBLOB="1800000002200000000000000000000000ec76412f8d5f3ca293806e9909045d5e1b840eab67f60f657e8805d68d4eed6b3394b36128e8bc716eb8b797eb8fd032a62429075d4ca269697d37f78f9add158f44fdaebf5ac91a124a13476619f202530a99292a1404cf18fb4d299940954f0100000000f70000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) write$cgroup_int(r2, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 4.656257962s ago: executing program 3 (id=2787): socket$inet6_tcp(0xa, 0x1, 0x0) 4.446085557s ago: executing program 3 (id=2791): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x0, 0x0, 0xfffffffe}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0xe6, 0xf4, 0xfffff000}, {0x6, 0xfc, 0xff, 0xffffffff}]}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0) pipe(&(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(0x3) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) close(r8) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmmsg$sock(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f00000006c0)="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", 0xfc}], 0x2}}], 0x1, 0x0) 3.837701393s ago: executing program 0 (id=2798): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x7}, 0x2}, 0x1c) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94000001010400000000000000000a00000a3c0001802c00018014000300fe80000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c0022800500010000000000080007400000000000000000"], 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}]}}]}, 0xa4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x40}}, 0x4040000) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601010000000000000000020400020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x400000000fffd, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xf5, 0x7, 0x1, 0x0, "6e6eae36ab703d28e77e09d7e14a8e69824ce5a0efbd20416d4024fdc316e83a849a69d38b4f102fd05204e4e93d5607d934e053d463dc9d61df7635dd2e81248ba650aa49cfdc55e62919ec2fd14dad6f84a3923e29c650d6eb97e17128adfc17904b231623a27fb73d836bcf675733e0893c750d5117afcb71578d0ab5f1bd2d5569e74fe2a98ccbd8b1a00407ff0cc23104e17c2381c80c357702ed544058b59161e2c9ad0c3e7b922662c0ace583ae9a8a84bbbcde73fb3a8b77f1fa69f35fb5c39272796ac9a421ee648d65191eda1d1db2a631ba7dfe633221a9e326641728df4a2dd80b1555c701ba1ff358f714"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x20c}}, 0x20008000) 3.385932501s ago: executing program 0 (id=2804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getpeername$unix(r3, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100), 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x48, 0xe6, &(0x7f0000000400)="43230a531cb0a8c7d0d8577702523d46cad6f9866f79fa6a65289b1278edfff557553d4b97dbfa0a7e2d771be32d7d779fe01efb22ba3f6ed8bb144aea1792727a0cfff014989ac8", &(0x7f0000000480)=""/230, 0x0, 0x0, 0x5d, 0x68, &(0x7f0000000580)="b4337679403b30d48528a85fddc92460d189c874c197448bb232a6404b2ebb440dcd4e1a311e395add3a49b728d770b9d6c4d9c3911f679770a3b45a28fd24e7eea71489459dcf10f14ce9a02803bd76cbefcce8dbaef378bec169d0d0", &(0x7f0000000600)="ed9aeb033c9d06a657e0c6411613c2a0e3cb672eacf5464a6f01aaa308c8d746b6cf71c5dbafb3e474f1c678163719bd461a38f34195a42bc9a518b296a9d030f30c590c79ae49f49142484a54b9946b319b7f03ac29e7a6585f96951216e668e8c719395668c5af", 0x6, 0x0, 0x230}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}}, 0x805) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r10, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r9, 0x0, 0x0, 0x42, 0x0, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r12, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.260432088s ago: executing program 2 (id=2806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x54}}, 0x804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000095) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x40000000, 0x9]}, @SEG6_ATTR_SECRET={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x4000004) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x8, 0xb249, 0x59, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x40, 0x401, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x3, 0x2c7, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x68, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @loopback, {[@timestamp={0x44, 0x28, 0x47, 0x0, 0xa, [0xfff, 0x80000001, 0x9, 0x10, 0x8001, 0x9, 0x16b, 0x7, 0x9]}, @noop, @rr={0x7, 0x7, 0xf5, [@remote]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000b00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2d8, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "908c5f4f15820d62192c21854d856d2c8ac72706c2df0f5037ee7e7bcab6420a74dd6e75210f7899031c082d9bec4173a7e708c3570f8473a3b9ccb2feec67bec2ad5c3eb2aebc39"}, @ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "51cd6a5ac30f8fbdb7bb6e9c4475cd50b6fd3270c212c457fbc5bd2686e82802fc69fcb7496bcbebee11ed257fa7a3f24ea2a92a13e82b236cb93275e6c4fd6896cb6b9a61eb5c2161efa3bd33ec84e72347b86f6a8513f0e6f4772310aebbd46ac58156550f5b7622fd55181456c2c5ad04c2e478efd52e6741b8c49977aaf837296386bfa658591d639e82b349fd352467b55b0d0368c131991f9b920d932e5564b455bad700ace512dd2791338011f40d9d8377a812f05235333922ee67a191bcef8891b77c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000b40)=0xfffffffffffffffc) r11 = socket(0x5, 0x80000, 0x2) r12 = socket$alg(0x26, 0x5, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r13, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x94, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9c5a35dff5"}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fc9a2d69558d456d50d3854d39"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x8010) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r15, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1e0, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x61}}}}, [@NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0xa}, {0x1, 0x3}, {0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x5}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x1}, {0x7}, {0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0xa}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x800, 0x4, 0x1000, 0x5, 0x3, 0x9cf, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x1ce, 0xe855, 0x3, 0x40, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe94, 0x4, 0xfff8, 0x5, 0x7, 0xfffb, 0x1, 0x5]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x5}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0x8}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0xa}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x8}, {}, {0x3, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x9}, {0x4, 0x1}, {0x6, 0x5}, {0x5, 0x3}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x5, 0x6, 0x80, 0x0, 0xfff, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8000, 0x6, 0x9ae3, 0xd600, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x7, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x4, 0x7}, {0x2}, {}, {0x3, 0x9}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0x2}, {0x5, 0xa}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x9, 0x2, 0x800, 0xb, 0x8, 0xfffb, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x2, 0x10, 0x652, 0x3, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1, 0x4, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x1}, {0x1, 0x2}, {0x7}, {0x4, 0x3}, {0x4, 0x8}, {0x2, 0x7}, {0x6, 0x7}, {0x4}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x3, 0x1, 0xfffb, 0x4, 0x9, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x2}, {0x4, 0xa}, {0x6, 0x3}, {0x6}, {0x1, 0x9}, {0x1, 0x6}, {}, {0x4, 0x6}, {0x2, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc2f, 0x1, 0x11c0, 0x1000, 0x3, 0x0, 0x1, 0x4]}}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$netrom_NETROM_T1(r11, 0x103, 0x1, &(0x7f0000001000)=0x8, 0x4) r16 = accept(r15, &(0x7f0000001040)=@pppol2tpin6, &(0x7f00000010c0)=0x80) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r16, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, r17, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0xe, 0x3b7, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000001240)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r16, 0x89f3, &(0x7f0000001340)={'ip_vti0\x00', &(0x7f0000001280)={'sit0\x00', r18, 0x80, 0x8000, 0x5, 0x7, {{0x22, 0x4, 0x0, 0x3, 0x88, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @remote, {[@lsrr={0x83, 0x2b, 0xad, [@remote, @empty, @multicast1, @rand_addr=0x64010100, @private=0xa010101, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x23, 0xb6, [@remote, @remote, @remote, @private=0xa010101, @remote, @rand_addr=0x64010101, @private=0xa010100, @empty]}, @timestamp_addr={0x44, 0x24, 0x62, 0x1, 0x0, [{@broadcast, 0x1ff}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x2}, {@multicast1, 0xfff}]}]}}}}}) 3.104747324s ago: executing program 0 (id=2809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a32000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x14, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=0x0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) (async) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) mmap(&(0x7f0000fa5000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448df, &(0x7f0000000b40)) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r8, &(0x7f0000000040), 0x0, 0x8, 0xfffffff8) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000080) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) 2.966349476s ago: executing program 1 (id=2811): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff000000000543b4b69dbfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r3, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x9c8, 0x8, 0x2, 0x4008, 0xffffffffffffffff, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r4, &(0x7f0000000380), 0x0}, 0x20) (async) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7000fcdbdf2503000000080005006bdb0000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000200)=@newtaction={0x5c, 0x32, 0x12f, 0x0, 0x25dfdbff, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a9972b1cad205dfdcf3b732a9359d8df71"}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000070a01020000000000000400010076e0"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="48000000000b0104000000000000000007000006080002400000000408000340000000000800024000000003120001002e2f636f726f75702f73797a310000000800034000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(r6, &(0x7f0000001300)={@val={0x0, 0x11}, @val={0x2, 0x3, 0x9, 0x6, 0x1, 0x1}, @eth={@random="5a676f23f5e8", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@generic={0x6005, "e4659ec8770df84e64a280f09f35d00414c57baa3b5e834cb584a3ae9adf6bf47ebaa6bade59109c6465050ae72fc9618288881821bdd6a1d257c567ed217c1744ca9e664992ed701107c17bc1ac91a8d8e2b9abba4cca4785c1d2a67ef8dce55f8a992b883781a2ffd6b59aa23697288c386123f60989357a9bf8229d2a194b937fdf3bb16f0afbfd6db1c5b208860126b262c6ea1585fa014bdb8cbaeba6b1b6f9d44b49ee1e55dd6efa389370e85161e88bd548940ddcc132f96dc7f038b4cdeef923db5aa69e9e638ab4ca0884d406882a7e0ce5"}}}}, 0xf2) (async) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000100)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) (async) r9 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.715086611s ago: executing program 0 (id=2812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRES32=r3, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x2, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = gettid() ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000000)=r7) sendmsg$nl_route(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="680000001000000429bd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="000400000000010008001300", @ANYRES32=r7, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000f2ffffffffff05001d"], 0x2c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004454) sendfile(r8, r9, 0x0, 0x5) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 2.714479275s ago: executing program 6 (id=2813): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00001abbbbbbbbbbbbaaaaaaaaaabb86dd6d002000008f11ff00000000000000000000000000000000ff020000000000000000000000000001"], 0xc9) (fail_nth: 5) 2.700096696s ago: executing program 2 (id=2814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}}, 0x810) (fail_nth: 3) 2.317892859s ago: executing program 1 (id=2815): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a008001000000020000000000000000000000000000000100000300"/259], 0x110) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=0xffffffffffffffff], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002900)=ANY=[@ANYRESDEC=r2, @ANYBLOB="e49d03b3e78acf", @ANYRESDEC=r2], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440), 0x400, 0x8094) close(0x4) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4041}, 0x88081) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r9 = socket$inet6(0xa, 0x80000, 0x3) setsockopt$inet6_int(r9, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43014037115a40eb"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 2.317600372s ago: executing program 2 (id=2816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2.277268297s ago: executing program 0 (id=2817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESOCT], 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x34}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) read$nci(r6, &(0x7f00000030c0)=""/2, 0x2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b7c62c8b01fbc9da74d5e597c7723aee497a5babd806e2f39c2534", @ANYBLOB="01000a69b34f38e655892e00001808000200", @ANYRES32=r13, @ANYBLOB="05002e00480000000c000500000000000000000005002b009502"], 0x38}, 0x1, 0x0, 0x0, 0x20004849}, 0x40050) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042cbd7000fbdbdf25240000000a0001007770616e3400000008000200", @ANYRES64=r0, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=0x0, @ANYBLOB="0a00010077f0616e31000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x44010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.897989726s ago: executing program 6 (id=2818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x82, 0x8, "0d4c5dd30eee"}, @ssrr={0x89, 0x13, 0x41, [@local, @multicast1, @local, @multicast2]}, @noop, @noop, @generic={0x86, 0x11, "33fdf09e2092cb91cb61f6ad96971d"}, @noop]}}}], 0x40}, 0x0) 1.865747697s ago: executing program 2 (id=2819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/104], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000001c80)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020200008500000082000000850000001100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)='GPL\x00', 0x108, 0x0, &(0x7f0000000440), 0x40f00, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x15}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x10, 0x10001, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x3, 0x3, 0x4, 0x9}, {0x1, 0x2, 0x2}, {0x4, 0x4, 0xb, 0x4}, {0x0, 0x3, 0x4, 0xa}], 0x10, 0xfffffff9}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1110}, {r2, 0x1042}], 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018010000756c6c2500000000072020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001000008500000006000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x5, 0xaa, 0x399}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000100)='./file0\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x90) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r9, &(0x7f0000003900)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x6, @empty, 0x75}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x30}}], 0x1, 0x80) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}}) 1.765837968s ago: executing program 1 (id=2820): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x6, 0x0, {{0x33, 0x4, 0x1, 0x3a, 0xcc, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x1f, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @rr={0x7, 0x13, 0x51, [@multicast1, @multicast2, @private=0xa010102, @multicast2]}, @rr={0x7, 0x7, 0xb2, [@local]}, @noop, @cipso={0x86, 0x30, 0x0, [{0x7, 0x2}, {0xd726d22ef6c670ae, 0x5, "42ae9d"}, {0x2, 0xd, "e7869475a2e85f64d1f061"}, {0x5, 0x6, "02b48bee"}, {0x5, 0x10, "7111e190bb526dc43d0411f5953b"}]}, @timestamp_addr={0x44, 0x44, 0x29, 0x1, 0x7, [{@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x1000000}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xe73}, {@private=0xa010102, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x722}, {@remote, 0x6}, {@empty, 0x80000000}, {@broadcast, 0x8}]}, @noop, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x0, 0x2}]}, @noop]}}}}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r6) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@empty}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@setlink={0x1d0, 0x13, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x100, 0x49015}, [@IFLA_GROUP={0x8, 0x1b, 0xfffff720}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_VFINFO_LIST={0x184, 0x16, 0x0, 0x1, [{0x138, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffff0000, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x10000000, 0x2, 0xfffffff9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80, 0x8001}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x3eb, 0xffffffff, 0x8100}}, {0x14, 0x1, {0x5, 0xb1, 0x401, 0x88a8}}, {0x14, 0x1, {0x9, 0x6e8, 0x34d, 0x88a8}}, {0x14, 0x1, {0xfffffff8, 0x17f, 0x2da332c2, 0x8100}}, {0x14, 0x1, {0x6, 0xf22, 0x2, 0x8100}}, {0x14, 0x1, {0x4, 0x2ce, 0x6, 0x8100}}, {0x14, 0x1, {0x1, 0x126, 0x0, 0x8100}}, {0x14, 0x1, {0x4, 0xdbc, 0x2, 0x9d6587dcfe100d5a}}, {0x14, 0x1, {0x2, 0x62b, 0x10, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x25}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x7, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xe05, 0x3}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{0x0, 0x1, {0x7c89, 0xdb5, 0x7, 0x88a8}}, {0x0, 0x1, {0x0, 0x1c4, 0x6, 0x8100}}, {0x0, 0x1, {0x40000, 0x0, 0x800, 0xe29ca7bdf9643e73}}]}, @IFLA_VF_RATE={0x10, 0x6, {0xcc3, 0xc, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x9}}]}]}, @IFLA_GSO_MAX_SIZE={0x4e, 0x29, 0x76484}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.722953026s ago: executing program 6 (id=2821): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669736829000000000000000000000000000000000000000000000000000000000000000400000000002475315c89acd976000000005f84031b05b376af00000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027e06a88b1f7f9c800000000000000000000000000000000000000040000003000"/232], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@empty, 0xf, 0x0, 0x0, 0x8, 0x80, 0x7}, 0x20) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1.492650794s ago: executing program 2 (id=2822): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x47, 0x0, [{0x6, 0x10, "4909be97c813bd51e2f5ddf40012"}, {0x1, 0xb, "2cb0fd0138758c7912"}, {0x7, 0xa, "5930485edffe5f09"}, {0x2, 0x7, "7df54fa1c3"}, {0x5, 0x12, "88b6ad856de1274b4aa4ea3912b32897"}, {0x1, 0x3, "aa"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xd6, 0x1, 0x5, [{@local, 0xfc000000}, {@private=0xa010100, 0x3}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @cipso={0x86, 0x29, 0x0, [{0x5, 0x7, "150857662a"}, {0x7, 0x10, "1c23e7668706a69afe503ee9e84c"}, {0x0, 0xc, "7849442f712fff0782a7"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffe, 0x0, 0x6, 0x4, 0x0, @multicast2, @empty}}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) 1.311481938s ago: executing program 1 (id=2823): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.226470972s ago: executing program 6 (id=2824): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x20, 0x10, 0xfffffff8, 0x6, {{0x9, 0x4, 0x2, 0x3b, 0x24, 0x62, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x0, [{@remote, 0x400}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x1, {0x1, 0xff, 0x7}, 0xfd}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @private=0xa010102}, 0x2, 0x1, 0x2, 0x1}}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="00feffffff000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000200001032bbd7000ffdbdf2502000000000000001e00000008001b"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = socket(0x2b, 0x1, 0x0) listen(r6, 0x0) recvfrom(r6, 0x0, 0x0, 0x40000060, 0x0, 0x0) close(r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x20, 0x10, 0xfffffff8, 0x6, {{0x9, 0x4, 0x2, 0x3b, 0x24, 0x62, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x0, [{@remote, 0x400}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x1, {0x1, 0xff, 0x7}, 0xfd}, 0x18) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @private=0xa010102}, 0x2, 0x1, 0x2, 0x1}}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="00feffffff000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000200001032bbd7000ffdbdf2502000000000000001e00000008001b"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) socket(0x2b, 0x1, 0x0) (async) listen(r6, 0x0) (async) recvfrom(r6, 0x0, 0x0, 0x40000060, 0x0, 0x0) (async) close(r4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) (async) 1.225932181s ago: executing program 2 (id=2825): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x1, 0x1, "528035", "b5ea47", 0x1, 0xd, 0x6, @any, 0x0, 0xff, 0x0, 0xf5, 0x8, 0xf9, 0x3}}}, 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 1.173333178s ago: executing program 3 (id=2826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x16}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d2, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x100000000000}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xa3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) 1.168975606s ago: executing program 1 (id=2827): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000002380), &(0x7f00000023c0)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x68, 0x0, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x68}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7b03}]}, 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x810) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x20000000002) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r2, @ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xd, 0x0, 0xa}, 0x10}, 0x94) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000580)={&(0x7f0000000240), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0xf44, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) shutdown(r1, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000140)={r4, 0x7, 0xa58, 0x3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r4, 0x29, 0x1, 0x3b38c8c2, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="8808d4fa8e8464353c", @ANYRES64=r7], 0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r10, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x30, r13, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}}, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x28, r14, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x5}]}]}, 0x28}}, 0x810) 941.809878ms ago: executing program 6 (id=2828): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getpeername$unix(r3, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100), 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x48, 0xe6, &(0x7f0000000400)="43230a531cb0a8c7d0d8577702523d46cad6f9866f79fa6a65289b1278edfff557553d4b97dbfa0a7e2d771be32d7d779fe01efb22ba3f6ed8bb144aea1792727a0cfff014989ac8", &(0x7f0000000480)=""/230, 0x0, 0x0, 0x5d, 0x68, &(0x7f0000000580)="b4337679403b30d48528a85fddc92460d189c874c197448bb232a6404b2ebb440dcd4e1a311e395add3a49b728d770b9d6c4d9c3911f679770a3b45a28fd24e7eea71489459dcf10f14ce9a02803bd76cbefcce8dbaef378bec169d0d0", &(0x7f0000000600)="ed9aeb033c9d06a657e0c6411613c2a0e3cb672eacf5464a6f01aaa308c8d746b6cf71c5dbafb3e474f1c678163719bd461a38f34195a42bc9a518b296a9d030f30c590c79ae49f49142484a54b9946b319b7f03ac29e7a6585f96951216e668e8c719395668c5af", 0x6, 0x0, 0x230}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}}, 0x805) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r10, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r9, 0x0, 0x0, 0x42, 0x0, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r12, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 271.75029ms ago: executing program 6 (id=2829): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 205.914878ms ago: executing program 3 (id=2830): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079a00000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) ioctl$IMGETCOUNT(r0, 0x5411, 0x0) 134.606773ms ago: executing program 0 (id=2831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)={0x20, r7, 0x1, 0x2, 0x25dfdbfc, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000280)={'gretap0\x00', r3, 0x700, 0x7800, 0x81, 0x6, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x65, 0x0, 0xe, 0x29, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x13, 0x76, [@dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty]}, @cipso={0x86, 0x24, 0x0, [{0x6, 0xe, "f028b8e9ae6b98c18efc7b6e"}, {0x5, 0x10, "52d3089d8448c06cf827a1d6afcc"}]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x8001, 0x0, 0x0, 0x3, 0x9}}}}]}, 0x4c}}, 0x24040084) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x27c, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x24c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2a, 0x5, "9eceb57afe012663b0a4c5c5e125fba3fbd550481ad240790d35b11ec08013ea0f9064720029"}, @ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "3bf84ed2868ecd7a85b99092e6f69d302394a64bc638bd5b9ac66828c4b3b6fef5f54eb94e53213ea1d60be6d6d5ab5251d0d9b731bad6050531e682e830dda39412b3bb85ae7fe786c78b68e643a45eca8307de32338f2ed5c52367a3cdb5e89a962541d525c4f88e925f7dbc96eeab30e412df103254a30a40c629596fcb22d566d433c4093dfed25c8eb857e64fc8a55f6df5cf8f78b91eef3ea8e64c09888fcfa761"}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xef\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'qfq\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '&.-]}(^&[*%&^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-:!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*\\]!.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "f3f34b4ddd3d7acf8d49934e70c65ec36a599322e695b813b4e5e16706cfa3676625676ae45c49d4f8c8f60c6acc6d9a6b38b4399db8122dd9cc6d7b3344dc958479cb299baeb0a81f5faa91a827a58600e38d4df429df666bc118ddb75bb240c5e71a7f1b6a8ed75546073f5d748fc28473846238b2d5889b48df9873c92a8712d147013488ef0f85e5cae33a3e68535b13acf0767fd322139020ee97a4ec006944302418520f8835daccc55d49009a202146c80dfeb083acf663f6a9ba55664c945c1826abe14449c5a43fa7bf6d4cdaf8a29177d413b3144e7fb86bde6e51509512cbd8fabf4699cb27ff710e235163b111"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x27c}}, 0x42) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x728, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x6f0, 0x2, [@TCA_ROUTE4_ACT={0x628, 0x6, [@m_connmark={0xfc, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0xfffffffd, 0x2, 0x9ae, 0x10}, 0x95a0}}]}, {0xb0, 0x6, "41b8b211ecb871c5e87eafcc638b9653a5f84cd4bf75cf9d7ea0760a7f4af597b7388d9f37843117539fc6e83b6f89f407a1d77aeda7de4e2dcb16ecc3cd37fabd3d9aab105cf0109d173ca9d1f9dd0a1eb1ef75bd3dffa42983381d870e002fc18d606a2de6797c716daa665a28fba86cd079e9e4912763658b73fabe61b6fd7e69802c734c22fcbc4a123bb92f27b9a8fbf22d56fc919c21ad2541367ee37520a7bde270fbe6332c63e9a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x104, 0x10, 0x0, 0x0, {{0xb}, {0xfffffffffffffe0b, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0x0, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8001, 0x9, 0x0, 0xfffffff8, 0xfff}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="7e6fcaf1bcba"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d1f403c0313c"}]}, {0x78, 0x6, "3e914acd1a870b31c48a76c7b2287bcf975c12bec5249dcc5a04949246ab68e1adad499274b324c6123fb582c15c0ae07490e13accf06e0401d8f3160d2d48c6b16211bdc9a96edf00ff965fb21dabe1b728ba986beacc13453cdf316b69e70b6e42d19f04bbe9b4bc92f3a8dd97220ca4f84f64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x10c, 0x14, 0x0, 0x0, {{0xc}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x4, 0x2, 0x8, 0x10001}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xf13}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x2, 0xffffffffefffffff, 0x8001, 0xf626}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x0, 0x20000000, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1efd, 0xfffffffc, 0x0, 0x6e6, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x8001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x620b}]}, {0xffffffffffffffb3, 0x6, "e1a30c6f194a418866ccf4f7d0ec8583cd585bcd45d532362ab6fb10f6f8f51aed34ce6ef95aa23f81336a3abb3e7001da50de9b3702f62a033920aa2c4144b4c33530ae9dff6d72b099c3a308dd0265429820"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x150, 0x1e, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xf, 0x7, 0x80000001, 0x401}, 0x3, r11}}]}, {0x101, 0x6, "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"}, {0xc}, {0xc}}}, @m_ct={0xc8, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0x88, 0x6, "94cb5a88cda35784a0a3d4d4a7bfcb15a52ad2895ac675031a9825685137314754bd5965f44a57c50365fc2fee16469a321e4a2eaf28e2301203b3423fc325623348efccfe7fc9520a2b904be4faef0a6dff83f2fec92337793ddd38a623a0e2afd53bb78269d7a35326f758874872de5ff7cecb34269423f579bd3fe59bfe653acd2e38"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x100, 0xc, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0xcc, 0x6, "3ceae71a900221e4093c4f0c307b371678760944435625bcaa1a7ff4d5bb6810616c0b820d97c352f8c282cb35a14e43fcc739ea12f6a611df836358b23607517f527118abe3ea58b6afb3f703cdfb508a756ef386d589fe76c92a544a4625755694408660c059b622acf425e995e77ac1bbba73b7a2631dce33724fb5bed8fc3d6ba0073db790c38af9aee8dc750506242f76adfb09e4d5acb47939e8d8db3310894bfc6da109f6d57df16789c110b1fb6fc920f21a823d61bbe51fdf0dbcbc8256925e744cdbc9"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_ACT={0xbc, 0x6, [@m_tunnel_key={0xb8, 0x15, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0xc15, 0x2, 0x80000000, 0x7}, 0x1}}]}, {0x69, 0x6, "183386a07328aea2d472a4466e77e58c627ccf545ed50315999bd6e049ebdf0994c53d4bb4528dc0e175f9056214c4514614e281005d71329863e63151cbb1615ac9391df511d15019480c889b7d03663be2d161c005907ee3c37ac486c33d4e964037fd65"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0x96, 0x72}}]}, 0x728}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRESHEX=0x0, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x22, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4730}, 0x94) 0s ago: executing program 1 (id=2832): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0a8f001abbbbbbbbbbbbaaaaaaaaaabb86dd6d002000008f11ff00000000000000000000000000000000ff020000000000000000000000000001"], 0xc9) kernel console output (not intermixed with test programs): ibute type 11 has an invalid length. [ 220.191255][T10616] net_ratelimit: 14 callbacks suppressed [ 220.191275][T10616] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 220.215239][T10616] openvswitch: netlink: Message has 75 unknown bytes. [ 220.294917][T10620] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 220.547051][T10627] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.778259][T10649] Cannot find add_set index 2 as target [ 220.961894][T10647] batadv0: entered promiscuous mode [ 220.980407][T10647] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.998073][T10647] batadv0: left promiscuous mode [ 221.484349][T10681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.751100][T10691] netlink: 'syz.5.1245': attribute type 1 has an invalid length. [ 221.894225][T10692] netlink: 'syz.1.1244': attribute type 21 has an invalid length. [ 221.939935][T10694] __nla_validate_parse: 17 callbacks suppressed [ 221.939954][T10694] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1245'. [ 222.204379][T10699] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1247'. [ 222.662178][T10722] bond4: Removing last ns target with arp_interval on [ 222.775123][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'. [ 222.818244][T10735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'. [ 222.848789][T10736] : renamed from batadv_slave_0 [ 222.882973][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 223.311196][T10757] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1265'. [ 223.349052][T10757] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.355073][T10762] netlink: 'syz.3.1263': attribute type 3 has an invalid length. [ 223.397049][T10762] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 223.423095][T10762] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1263'. [ 223.452561][T10757] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.616239][T10757] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.647709][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 223.741670][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 223.796314][T10757] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.985075][ T7497] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.089604][ T7497] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.128227][ T7497] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.194479][ T7497] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.542402][T10808] xt_TCPMSS: Only works on TCP SYN packets [ 224.581738][T10808] bond0: (slave team0): Releasing backup interface [ 224.634484][T10808] bond0: (slave dummy0): Releasing backup interface [ 224.668317][T10808] bridge_slave_0: left allmulticast mode [ 224.674332][T10808] bridge_slave_0: left promiscuous mode [ 224.680250][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.973460][T10840] netlink: 'syz.2.1282': attribute type 83 has an invalid length. [ 225.066326][T10847] ipt_ECN: cannot use operation on non-tcp rule [ 225.140940][T10808] bridge_slave_1: left allmulticast mode [ 225.154193][T10808] bridge_slave_1: left promiscuous mode [ 225.184426][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.199325][T10808] bond0: (slave bond_slave_0): Releasing backup interface [ 225.227991][T10808] bond0: (slave bond_slave_1): Releasing backup interface [ 225.252924][T10808] team0: Port device team_slave_0 removed [ 225.271036][T10808] team0: Port device team_slave_1 removed [ 225.286991][T10808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.296255][T10808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.307900][T10808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.317586][T10808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.329877][T10808] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.418931][T10838] syzkaller0: entered promiscuous mode [ 225.424654][T10838] syzkaller0: entered allmulticast mode [ 226.085208][T10869] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 227.240074][T10886] netlink: 'syz.5.1293': attribute type 10 has an invalid length. [ 227.262253][T10888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 227.265532][T10886] bridge0: port 3(macsec0) entered blocking state [ 227.305156][T10886] bridge0: port 3(macsec0) entered disabled state [ 227.313697][T10886] macsec0: entered allmulticast mode [ 227.329238][T10886] veth1_macvtap: entered allmulticast mode [ 227.341366][T10893] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 227.354085][T10886] macsec0: entered promiscuous mode [ 227.360295][T10886] bridge0: port 3(macsec0) entered blocking state [ 227.366901][T10886] bridge0: port 3(macsec0) entered forwarding state [ 227.677144][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 227.690542][T10909] pim6reg1: entered promiscuous mode [ 227.696178][T10909] pim6reg1: entered allmulticast mode [ 227.706996][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'. [ 227.719911][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1299'. [ 227.789427][T10922] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 227.823713][T10922] netlink: 'syz.3.1302': attribute type 2 has an invalid length. [ 227.834074][T10922] netlink: 'syz.3.1302': attribute type 2 has an invalid length. [ 227.846058][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1302'. [ 227.907861][ T7499] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 227.924209][ T7499] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 227.961392][ T7499] bond0: now running without any active interface! [ 228.340849][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 228.350178][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1309'. [ 228.359847][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 228.369504][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1309'. [ 228.380027][T10953] netlink: 'syz.1.1309': attribute type 6 has an invalid length. [ 228.503707][T10958] netlink: 'syz.5.1310': attribute type 39 has an invalid length. [ 228.607417][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1313'. [ 228.709043][T10973] syzkaller0: entered promiscuous mode [ 228.714924][T10973] syzkaller0: entered allmulticast mode [ 228.722945][T10970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.301067][T11009] netlink: 'syz.5.1325': attribute type 10 has an invalid length. [ 230.316356][T11009] bond0: entered promiscuous mode [ 230.321904][T11009] bond_slave_0: entered promiscuous mode [ 230.328043][T11009] bond_slave_1: entered promiscuous mode [ 230.334916][T11009] bridge0: port 4(bond0) entered blocking state [ 230.370648][T11009] bridge0: port 4(bond0) entered disabled state [ 230.379552][T11009] bond0: entered allmulticast mode [ 230.387984][T11009] bond_slave_0: entered allmulticast mode [ 230.412075][T11009] bond_slave_1: entered allmulticast mode [ 230.446035][T11009] bridge0: port 4(bond0) entered blocking state [ 230.452517][T11009] bridge0: port 4(bond0) entered forwarding state [ 230.486934][T11023] gretap0: entered promiscuous mode [ 230.547431][T11018] gretap0: left promiscuous mode [ 230.610811][T11018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.638536][T11028] netlink: 'syz.5.1328': attribute type 1 has an invalid length. [ 230.981246][T11048] netlink: 'syz.0.1332': attribute type 13 has an invalid length. [ 231.324460][ T3504] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.351221][T11043] ip6_vti0 speed is unknown, defaulting to 1000 [ 231.507345][ T38] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.528971][ T38] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.547219][ T38] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.021709][T11071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.037535][T11071] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 232.276529][T11075] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.735125][T11089] __nla_validate_parse: 5 callbacks suppressed [ 232.735144][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1342'. [ 232.772703][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1342'. [ 232.788935][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1342'. [ 233.015279][T11095] : entered promiscuous mode [ 233.129814][T11095] ip6_vti0 speed is unknown, defaulting to 1000 [ 233.199501][T11099] netlink: 'syz.1.1345': attribute type 5 has an invalid length. [ 233.781741][T11110] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 234.061212][T11119] : entered promiscuous mode [ 234.253228][T11119] dvmrp6: entered allmulticast mode [ 234.360653][T11129] tipc: Enabled bearer , priority 0 [ 234.394687][T11129] syzkaller0: entered promiscuous mode [ 234.400217][T11129] syzkaller0: entered allmulticast mode [ 234.596339][T11129] tipc: Resetting bearer [ 234.644215][T11128] tipc: Resetting bearer [ 234.693409][T11128] tipc: Disabling bearer [ 234.849956][T11131] x_tables: duplicate entry at hook 3 [ 234.935559][T11149] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.307589][T11163] netlink: 'syz.3.1365': attribute type 21 has an invalid length. [ 235.337589][T11166] IPVS: Error connecting to the multicast addr [ 235.347809][T11163] netlink: 'syz.3.1365': attribute type 6 has an invalid length. [ 235.362027][T11163] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1365'. [ 235.546396][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1370'. [ 235.616358][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1370'. [ 235.632046][T11179] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 235.642331][T11179] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 235.941323][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 236.021730][T11197] ip6_vti0 speed is unknown, defaulting to 1000 [ 236.512903][T11214] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 236.575043][T11216] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 236.601567][T11216] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1379'. [ 236.690155][T11228] IPVS: set_ctl: invalid protocol: 53 172.20.20.187:20003 [ 236.735845][T11221] netlink: 'syz.0.1379': attribute type 2 has an invalid length. [ 236.799163][T11235] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1382'. [ 236.833030][T11232] tipc: Enabling of bearer rejected, failed to enable media [ 236.842574][T11232] syzkaller0: entered promiscuous mode [ 236.851062][T11232] syzkaller0: entered allmulticast mode [ 237.034236][ T5852] Bluetooth: hci5: command 0x0405 tx timeout [ 237.186841][T11249] syzkaller0: entered promiscuous mode [ 237.192446][T11249] syzkaller0: entered allmulticast mode [ 237.720225][T11263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'. [ 237.752519][T11263] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1392'. [ 237.847779][T11265] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1393'. [ 237.860367][T11266] openvswitch: netlink: Message has 4 unknown bytes. [ 238.075030][T11284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.238084][T11293] bond3: Unable to set down delay as MII monitoring is disabled [ 238.249206][T11293] bond3 (unregistering): Released all slaves [ 238.342032][T11296] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1403'. [ 238.353243][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1403'. [ 238.443071][T11298] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.846661][T11310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1407'. [ 239.088082][T11323] openvswitch: netlink: Message has 572 unknown bytes. [ 239.106878][T11323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.154952][T11326] openvswitch: netlink: Message has 572 unknown bytes. [ 239.173052][T11326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.217579][T11317] syzkaller0: entered promiscuous mode [ 239.223302][T11317] syzkaller0: entered allmulticast mode [ 240.850785][T11338] bond1: option mode: unable to set because the bond device has slaves [ 240.873661][T11341] bond1: (slave veth1): Enslaving as an active interface with an up link [ 240.896009][T11342] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 241.084816][T11358] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 241.100856][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 241.291438][T11367] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.519068][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1424'. [ 241.934177][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 241.962495][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 241.980539][T11388] tipc: Enabled bearer , priority 10 [ 241.998988][T11384] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1425'. [ 242.569373][T11415] bridge0: port 1(veth0_to_bridge) entered blocking state [ 242.590909][T11415] bridge0: port 1(veth0_to_bridge) entered disabled state [ 242.598743][T11415] veth0_to_bridge: entered allmulticast mode [ 242.609404][T11415] veth0_to_bridge: entered promiscuous mode [ 242.663686][T11419] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.670763][T11420] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 242.682778][T11420] SET target dimension over the limit! [ 242.699220][T11422] tunl0: Caught tx_queue_len zero misconfig [ 242.809657][T11428] netlink: 'syz.2.1439': attribute type 4 has an invalid length. [ 242.820570][T11427] netlink: 'syz.0.1440': attribute type 61 has an invalid length. [ 242.827162][T11428] netlink: 'syz.2.1439': attribute type 4 has an invalid length. [ 243.096345][T11435] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.621978][T11469] xt_connbytes: Forcing CT accounting to be enabled [ 243.780599][T11474] syzkaller0: entered promiscuous mode [ 243.797720][T11474] syzkaller0: entered allmulticast mode [ 243.871851][T11476] vlan4: entered allmulticast mode [ 243.882333][T11476] bond0: entered allmulticast mode [ 243.889174][T11476] bond_slave_0: entered allmulticast mode [ 243.895843][T11476] bond_slave_1: entered allmulticast mode [ 243.900786][T11477] __nla_validate_parse: 1 callbacks suppressed [ 243.900836][T11477] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1453'. [ 243.915770][T11480] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1453'. [ 243.976079][T11477] team0: Port device bond0 removed [ 243.988801][T11477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.999050][T11477] bond_slave_0: left allmulticast mode [ 244.009330][T11477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.020585][T11477] bond_slave_1: left allmulticast mode [ 244.029352][T11477] bond0 (unregistering): Released all slaves [ 244.064821][T11479] bond3: option arp_validate: invalid value (18446744073491447809) [ 244.080993][T11479] bond3 (unregistering): Released all slaves [ 244.369209][T11493] bridge5: entered promiscuous mode [ 244.409989][T11493] bridge6: entered promiscuous mode [ 244.426236][T11493] bridge7: entered promiscuous mode [ 244.442960][T11493] bridge8: entered promiscuous mode [ 244.460206][T11493] bridge9: entered promiscuous mode [ 244.482464][T11493] bridge10: entered promiscuous mode [ 244.573155][T11493] bridge11: entered promiscuous mode [ 244.670967][T11493] bridge12: entered promiscuous mode [ 244.733230][T11493] bridge13: entered promiscuous mode [ 244.742948][T11504] ip6_vti0 speed is unknown, defaulting to 1000 [ 244.770145][T11493] bridge14: entered promiscuous mode [ 244.812084][T11493] bridge15: entered promiscuous mode [ 244.830765][T11493] bridge16: entered promiscuous mode [ 244.869104][T11493] bridge17: entered promiscuous mode [ 244.900728][T11493] bridge18: entered promiscuous mode [ 244.924227][T11493] bridge19: entered promiscuous mode [ 244.965065][T11493] bridge20: entered promiscuous mode [ 244.996666][T11493] bridge21: entered promiscuous mode [ 245.029900][T11493] bridge22: entered promiscuous mode [ 245.060147][T11493] bridge23: entered promiscuous mode [ 245.108545][T11493] bridge24: entered promiscuous mode [ 245.110823][T11512] xt_hashlimit: max too large, truncated to 1048576 [ 245.152702][T11493] bridge25: entered promiscuous mode [ 245.281673][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'. [ 245.367708][T11521] netlink: 'syz.0.1468': attribute type 12 has an invalid length. [ 245.467717][T11528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1468'. [ 246.243214][T11549] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1477'. [ 246.337068][T11556] Cannot find del_set index 4 as target [ 246.506574][T11566] ip6_vti0 speed is unknown, defaulting to 1000 [ 246.588207][T11570] xt_CT: No such helper "netbios-ns" [ 246.646073][T11574] netlink: 'syz.0.1485': attribute type 1 has an invalid length. [ 246.892217][T11580] bond3: left promiscuous mode [ 246.897882][T11580] veth3: left promiscuous mode [ 246.988118][T11591] netlink: 'syz.1.1488': attribute type 33 has an invalid length. [ 246.996148][T11591] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1488'. [ 247.122899][T11587] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.161828][T11594] netlink: 744 bytes leftover after parsing attributes in process `syz.2.1492'. [ 247.762392][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'. [ 247.957589][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 247.972604][T11624] netlink: zone id is out of range [ 247.982651][T11624] netlink: zone id is out of range [ 248.032862][T11624] netlink: zone id is out of range [ 248.048750][T11624] netlink: zone id is out of range [ 248.060535][T11624] netlink: zone id is out of range [ 248.076812][T11624] netlink: zone id is out of range [ 248.110151][T11624] netlink: zone id is out of range [ 248.122473][T11624] netlink: zone id is out of range [ 248.128109][T11624] netlink: zone id is out of range [ 248.133440][T11624] netlink: zone id is out of range [ 248.152331][T11627] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 248.165154][T11627] bond3 (unregistering): Released all slaves [ 248.560390][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 248.860322][T11666] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 248.869421][T11666] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 248.880742][T11666] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 248.981280][T11673] pim6reg: entered allmulticast mode [ 248.997151][T11673] pim6reg: left allmulticast mode [ 249.142494][T11673] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 249.293302][T11681] __nla_validate_parse: 2 callbacks suppressed [ 249.293321][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 249.357145][T11685] dvmrp6: left allmulticast mode [ 249.552971][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 249.562412][T11698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.571281][T11698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.741932][T11706] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.941428][T11714] netlink: 'syz.3.1524': attribute type 3 has an invalid length. [ 250.071343][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 250.101281][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 250.151395][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 250.736710][T11717] infiniband syz1: set down [ 250.741362][T11717] infiniband syz1: added xfrm0 [ 250.748258][ T7836] xfrm0 speed is unknown, defaulting to 1000 [ 250.793152][T11717] RDS/IB: syz1: added [ 250.801698][T11717] smc: adding ib device syz1 with port count 1 [ 250.808636][T11717] smc: ib device syz1 port 1 has no pnetid [ 250.822935][ T7588] xfrm0 speed is unknown, defaulting to 1000 [ 250.832881][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 251.027191][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 251.282950][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 251.549941][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 251.733111][T11768] ip6_vti0 speed is unknown, defaulting to 1000 [ 251.852656][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 251.866648][T11784] netlink: 'syz.3.1543': attribute type 5 has an invalid length. [ 252.046156][T11783] syz_tun: entered allmulticast mode [ 252.231145][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 252.276303][T11790] syzkaller0: entered promiscuous mode [ 252.288572][T11790] syzkaller0: entered allmulticast mode [ 252.386219][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.398394][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.415109][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.423415][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.434025][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.500268][T11793] ip6_vti0 speed is unknown, defaulting to 1000 [ 252.801631][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'. [ 252.846764][T11806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.908559][T11806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.920544][T11806] bond3: (slave bond0): Enslaving as an active interface with an up link [ 252.931832][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 253.105702][T11808] bond3 (unregistering): (slave bond0): Releasing backup interface [ 253.132315][T11808] bond3 (unregistering): Released all slaves [ 253.372182][T11793] xfrm0 speed is unknown, defaulting to 1000 [ 253.643020][T11717] xfrm0 speed is unknown, defaulting to 1000 [ 253.680817][T11831] SET target dimension over the limit! [ 253.829993][T11793] chnl_net:caif_netlink_parms(): no params data found [ 253.977678][T11840] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 254.157636][T11843] syzkaller0: entered promiscuous mode [ 254.174502][T11843] syzkaller0: entered allmulticast mode [ 254.214700][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.231420][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.251299][T11793] bridge_slave_0: entered allmulticast mode [ 254.300887][T11793] bridge_slave_0: entered promiscuous mode [ 254.358287][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.383994][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.404784][T11793] bridge_slave_1: entered allmulticast mode [ 254.412629][T11793] bridge_slave_1: entered promiscuous mode [ 254.474209][ T5852] Bluetooth: hci6: command tx timeout [ 254.652408][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.683114][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.709457][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1562'. [ 254.756817][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 254.776571][T11793] team0: Port device team_slave_0 added [ 254.842471][T11793] team0: Port device team_slave_1 added [ 254.965348][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.972352][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.030289][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.104803][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.111813][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.175117][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.297602][T11890] : entered promiscuous mode [ 255.422748][T11884] syzkaller0: entered promiscuous mode [ 255.428474][T11884] syzkaller0: entered allmulticast mode [ 255.451301][T11793] hsr_slave_0: entered promiscuous mode [ 255.474724][T11793] hsr_slave_1: entered promiscuous mode [ 255.484905][T11793] debugfs: 'hsr0' already exists in 'hsr' [ 255.490779][T11793] Cannot create hsr debugfs directory [ 256.555514][ T5852] Bluetooth: hci6: command tx timeout [ 257.026400][T11912] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.518276][T11912] xfrm0 speed is unknown, defaulting to 1000 [ 257.585920][T11793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 257.612520][T11793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 257.642935][T11793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 257.672055][T11793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 257.724406][T11951] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.827190][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 257.856495][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 257.981611][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.007564][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.057865][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.065102][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.113123][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.120351][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.231794][T11951] xfrm0 speed is unknown, defaulting to 1000 [ 258.313598][T11945] delete_channel: no stack [ 258.496243][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1591'. [ 258.606119][T11987] net_ratelimit: 4 callbacks suppressed [ 258.606140][T11987] openvswitch: netlink: Invalid VLAN frame [ 258.639916][ T5852] Bluetooth: hci6: command tx timeout [ 258.701907][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.723797][T11980] ip6_vti0 speed is unknown, defaulting to 1000 [ 258.965139][T11998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1595'. [ 259.184586][T11793] veth0_vlan: entered promiscuous mode [ 259.213665][T11793] veth1_vlan: entered promiscuous mode [ 259.278831][T11793] veth0_macvtap: entered promiscuous mode [ 259.309300][T11980] xfrm0 speed is unknown, defaulting to 1000 [ 259.315607][T11793] veth1_macvtap: entered promiscuous mode [ 259.384493][T11793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.419345][T11793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.463133][ T7495] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.472386][ T7495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.504677][ T7495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.513549][ T7495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.528391][T12008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1597'. [ 260.093357][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 260.141058][ T7495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.150347][ T7495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.257653][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.296219][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.707691][T12041] netlink: 'syz.6.1603': attribute type 39 has an invalid length. [ 260.720000][ T5852] Bluetooth: hci6: command tx timeout [ 260.848602][T12041] veth0_macvtap: left promiscuous mode [ 261.031614][T12048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1604'. [ 261.346174][T12059] netlink: 'syz.6.1607': attribute type 13 has an invalid length. [ 261.673122][T12059] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.680950][T12059] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.875062][T12059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.893244][T12059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.150916][T12077] bridge0: port 1(macvtap2) entered blocking state [ 262.170565][T12077] bridge0: port 1(macvtap2) entered disabled state [ 262.192254][T12077] macvtap2: entered allmulticast mode [ 262.209824][T12077] bridge0: entered allmulticast mode [ 262.241709][T12077] macvtap2: left allmulticast mode [ 262.267382][T12077] bridge0: left allmulticast mode [ 262.341797][ T1134] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.363121][ T1134] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.427923][ T1134] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.462615][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 262.475355][ T1134] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.587529][T12100] macvtap1: entered promiscuous mode [ 262.592867][T12100] veth1_to_hsr: entered promiscuous mode [ 262.601346][T12100] macvtap1: entered allmulticast mode [ 262.606930][T12100] veth1_to_hsr: entered allmulticast mode [ 262.841478][T12111] openvswitch: netlink: IP tunnel dst address not specified [ 263.025729][T12115] netlink: 'syz.1.1620': attribute type 29 has an invalid length. [ 263.046693][T12115] netlink: 'syz.1.1620': attribute type 29 has an invalid length. [ 263.058714][T12115] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1620'. [ 263.126568][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1622'. [ 263.136240][T12118] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 263.180038][T12120] netlink: 'syz.0.1623': attribute type 1 has an invalid length. [ 263.246638][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1623'. [ 263.252513][T12120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.293962][T12122] bond5: entered promiscuous mode [ 263.357508][T12120] bond5: (slave dummy0): making interface the new active one [ 263.369257][T12120] dummy0: entered promiscuous mode [ 263.382281][T12120] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 263.440408][T12134] sctp: [Deprecated]: syz.2.1625 (pid 12134) Use of int in max_burst socket option. [ 263.440408][T12134] Use struct sctp_assoc_value instead [ 263.645633][T12120] bond5 (unregistering): (slave dummy0): Releasing active interface [ 263.654386][T12120] dummy0: left promiscuous mode [ 263.663173][T12120] bond5 (unregistering): Released all slaves [ 263.802359][T12146] ip6_vti0 speed is unknown, defaulting to 1000 [ 263.902864][T12157] tipc: Enabled bearer , priority 0 [ 263.919366][T12157] syzkaller0: entered promiscuous mode [ 263.979096][T12157] syzkaller0: entered allmulticast mode [ 264.012964][T12157] netlink: 'syz.0.1632': attribute type 13 has an invalid length. [ 264.258570][T12146] xfrm0 speed is unknown, defaulting to 1000 [ 265.542313][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 266.849053][T12151] tipc: Resetting bearer [ 266.891252][T12151] tipc: Disabling bearer [ 266.901684][ T5983] tipc: Node number set to 2881986672 [ 267.061840][T12184] netlink: 'syz.6.1641': attribute type 1 has an invalid length. [ 267.074190][T12184] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1641'. [ 267.325253][T12200] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1643'. [ 267.345911][T12200] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1643'. [ 267.379633][T12199] netlink: 'syz.1.1645': attribute type 3 has an invalid length. [ 267.387636][T12188] ip6_vti0 speed is unknown, defaulting to 1000 [ 267.531274][T12207] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1646'. [ 267.825825][T12195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1644'. [ 267.897347][T12227] atomic_op ffff888057ba2998 conn xmit_atomic 0000000000000000 [ 267.916164][T12198] syz_tun: left allmulticast mode [ 267.935037][T12227] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.145569][T12234] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1649'. [ 268.250070][T12225] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1649'. [ 268.267201][T12188] xfrm0 speed is unknown, defaulting to 1000 [ 269.624013][ T30] audit: type=1800 audit(1769074195.544:4): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1656" name=CB dev="tmpfs" ino=81 res=0 errno=0 [ 269.630303][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 269.744847][T12277] sit0: entered promiscuous mode [ 269.750180][T12277] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1657'. [ 270.228383][T12289] netlink: 'syz.6.1659': attribute type 10 has an invalid length. [ 270.266625][T12289] veth1_macvtap: left promiscuous mode [ 270.310398][T12289] team0: Device veth1_macvtap failed to register rx_handler [ 270.667123][T12304] batadv_slave_1: entered promiscuous mode [ 270.724264][T12303] batadv_slave_1: left promiscuous mode [ 271.002351][T12318] __nla_validate_parse: 4 callbacks suppressed [ 271.002373][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1669'. [ 271.078427][T12320] sctp: [Deprecated]: syz.1.1670 (pid 12320) Use of int in max_burst socket option. [ 271.078427][T12320] Use struct sctp_assoc_value instead [ 271.177435][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1671'. [ 271.201539][T12321] tipc: Enabled bearer , priority 0 [ 271.209039][T12320] syzkaller0: entered promiscuous mode [ 271.214823][T12320] syzkaller0: entered allmulticast mode [ 271.226600][T12321] tipc: Resetting bearer [ 271.245028][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1671'. [ 271.265364][T12319] tipc: Resetting bearer [ 271.344551][T12319] tipc: Disabling bearer [ 271.376043][T12324] netlink: 'syz.6.1671': attribute type 2 has an invalid length. [ 271.481488][T12337] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1673'. [ 271.486322][T12334] netlink: 'syz.3.1674': attribute type 2 has an invalid length. [ 271.553468][T12337] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 272.239972][T12363] Unsupported ieee802154 address type: 0 [ 272.500339][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 272.806546][T12367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.894713][T12367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.287608][T12369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.317214][T12370] syzkaller0: entered promiscuous mode [ 273.334198][T12370] syzkaller0: entered allmulticast mode [ 273.460153][T12395] lo: Caught tx_queue_len zero misconfig [ 273.798063][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1693'. [ 273.849389][T12414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.879365][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1693'. [ 273.969207][ T30] audit: type=1800 audit(1769074199.924:5): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1695" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1697 res=0 errno=0 [ 274.024110][T12429] netlink: 'syz.2.1695': attribute type 5 has an invalid length. [ 274.031906][T12429] netlink: 'syz.2.1695': attribute type 17 has an invalid length. [ 274.082085][T12429] erspan0: entered promiscuous mode [ 274.210901][T12429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.248460][ T5983] ip6_vti0 speed is unknown, defaulting to 1000 [ 274.267795][ T5983] syz2: Port: 1 Link ACTIVE [ 274.310503][ T7836] ip6_vti0 speed is unknown, defaulting to 1000 [ 274.310625][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 274.570847][T12456] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.202000][T12456] xfrm0 speed is unknown, defaulting to 1000 [ 275.216941][T12467] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.346299][T12479] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 275.389605][T12479] bridge_slave_0: left allmulticast mode [ 275.406599][T12479] bridge_slave_0: left promiscuous mode [ 275.425266][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.452908][T12479] bridge_slave_1: left allmulticast mode [ 275.469185][T12479] bridge_slave_1: left promiscuous mode [ 275.484199][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.509251][T12479] team0: Port device team_slave_0 removed [ 275.542282][T12479] team0: Port device team_slave_1 removed [ 275.550386][T12479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.568540][T12479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.601636][T12479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.642913][T12479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.674837][T12479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 275.694322][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 275.956321][T12467] xfrm0 speed is unknown, defaulting to 1000 [ 276.029613][T12484] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.175446][T12493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'. [ 276.209345][T12493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'. [ 276.218872][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'. [ 276.408386][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1715'. [ 276.558127][ T30] audit: type=1800 audit(1769074202.514:6): pid=12498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1715" name="memory.events" dev="tmpfs" ino=1730 res=0 errno=0 [ 276.630384][T12511] netlink: 'syz.1.1718': attribute type 15 has an invalid length. [ 276.757282][T12484] xfrm0 speed is unknown, defaulting to 1000 [ 276.826676][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 276.874913][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 276.950990][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 276.965370][T12521] IPv6: addrconf: prefix option has invalid lifetime [ 276.992672][T12526] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 277.014341][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 277.030520][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 277.067755][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 277.103127][T12529] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 277.138318][T12532] tipc: Enabled bearer , priority 0 [ 277.161811][T12532] syzkaller0: entered promiscuous mode [ 277.174123][T12532] syzkaller0: entered allmulticast mode [ 277.214766][T12521] siw: device registration error -23 [ 277.324601][T12532] tipc: Resetting bearer [ 277.608031][T12541] vlan2: entered promiscuous mode [ 277.888557][T12532] tipc: Resetting bearer [ 277.934821][T12532] tipc: Disabling bearer [ 278.194444][ T5983] IPVS: starting estimator thread 0... [ 278.308045][T12557] IPVS: using max 32 ests per chain, 76800 per kthread [ 278.767597][T12584] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.998392][T12584] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.192609][T12584] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.267805][T12603] siw: device registration error -23 [ 279.401289][T12584] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.491486][T12609] @0Ù€: renamed from bond_slave_1 [ 279.822645][T12627] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 279.918475][T12612] IPVS: set_ctl: invalid protocol: 0 138.1.1.2:20001 [ 280.060334][T12612] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.102884][T12641] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 280.229402][T12643] sit0: left promiscuous mode [ 280.433278][T12612] xfrm0 speed is unknown, defaulting to 1000 [ 280.481627][T12654] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 280.524637][T12654] openvswitch: netlink: Message has 8 unknown bytes. [ 280.585230][T12657] syzkaller0: entered promiscuous mode [ 280.590780][T12657] syzkaller0: entered allmulticast mode [ 282.024816][T12698] netlink: 'syz.6.1772': attribute type 1 has an invalid length. [ 282.033523][T12698] netlink: 'syz.6.1772': attribute type 1 has an invalid length. [ 282.114926][T12700] __nla_validate_parse: 90 callbacks suppressed [ 282.114941][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 282.133151][T12705] bond2: (slave geneve2): making interface the new active one [ 282.159575][T12705] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 282.187553][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 282.219008][ T7497] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.229418][ T7497] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.246449][ T7497] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.279613][ T7497] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.430307][T12715] ip6_vti0 speed is unknown, defaulting to 1000 [ 282.449754][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 282.695857][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 282.997467][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 283.054773][T12754] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 283.281309][T12715] xfrm0 speed is unknown, defaulting to 1000 [ 283.548932][T12767] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.716171][T12773] syzkaller0: entered promiscuous mode [ 283.734937][T12773] syzkaller0: entered allmulticast mode [ 283.745386][T12773] FAULT_INJECTION: forcing a failure. [ 283.745386][T12773] name failslab, interval 1, probability 0, space 0, times 1 [ 283.774281][T12773] CPU: 1 UID: 0 PID: 12773 Comm: syz.3.1789 Not tainted syzkaller #0 PREEMPT(full) [ 283.774309][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 283.774335][T12773] Call Trace: [ 283.774343][T12773] [ 283.774353][T12773] dump_stack_lvl+0xe8/0x150 [ 283.774387][T12773] should_fail_ex+0x412/0x560 [ 283.774434][T12773] should_failslab+0xa8/0x100 [ 283.774461][T12773] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 283.774494][T12773] ? __alloc_skb+0x186/0x7d0 [ 283.774525][T12773] ? __alloc_skb+0x1d0/0x7d0 [ 283.774551][T12773] ? __local_bh_enable_ip+0xd0/0x130 [ 283.774580][T12773] __alloc_skb+0x1d0/0x7d0 [ 283.774625][T12773] netlink_sendmsg+0x5d4/0xb40 [ 283.774657][T12773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.774683][T12773] ? aa_file_perm+0x12d/0x1630 [ 283.774710][T12773] ? aa_sock_msg_perm+0xf1/0x1b0 [ 283.774738][T12773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.774756][T12773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.774780][T12773] __sock_sendmsg+0x21c/0x270 [ 283.774807][T12773] ____sys_sendmsg+0x4d7/0x810 [ 283.774825][T12773] ? __might_fault+0xaf/0x130 [ 283.774860][T12773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.774889][T12773] ? import_iovec+0x73/0xa0 [ 283.774913][T12773] ___sys_sendmsg+0x2a5/0x360 [ 283.774931][T12773] ? __lock_acquire+0x6b5/0x2cf0 [ 283.774956][T12773] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.775050][T12773] ? __fget_files+0x2a/0x420 [ 283.775082][T12773] ? __fget_files+0x3a0/0x420 [ 283.775119][T12773] __x64_sys_sendmsg+0x1bd/0x2a0 [ 283.775143][T12773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.775174][T12773] ? __pfx_ksys_write+0x10/0x10 [ 283.775205][T12773] do_syscall_64+0xe2/0xf80 [ 283.775237][T12773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.775256][T12773] ? trace_irq_disable+0x37/0x100 [ 283.775284][T12773] ? clear_bhb_loop+0x60/0xb0 [ 283.775327][T12773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.775349][T12773] RIP: 0033:0x7f966f79acb9 [ 283.775368][T12773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.775387][T12773] RSP: 002b:00007f96705a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.775411][T12773] RAX: ffffffffffffffda RBX: 00007f966fa15fa0 RCX: 00007f966f79acb9 [ 283.775427][T12773] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 283.775441][T12773] RBP: 00007f96705a2090 R08: 0000000000000000 R09: 0000000000000000 [ 283.775454][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.775467][T12773] R13: 00007f966fa16038 R14: 00007f966fa15fa0 R15: 00007ffd6a6da058 [ 283.775502][T12773] [ 284.084194][T12767] xfrm0 speed is unknown, defaulting to 1000 [ 284.371200][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1792'. [ 284.487442][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1792'. [ 285.621642][T12811] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 285.630760][T12811] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1801'. [ 285.640608][T12811] NCSI netlink: No device for ifindex 0 [ 285.679495][T12811] lo: Caught tx_queue_len zero misconfig [ 285.835157][T12820] tipc: Started in network mode [ 285.840181][T12820] tipc: Node identity ac14140f, cluster identity 4711 [ 285.864272][T12820] tipc: New replicast peer: 255.255.255.255 [ 285.980447][T12820] tipc: Enabled bearer , priority 6 [ 285.990383][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 286.002412][T12826] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 286.130702][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'. [ 286.185856][T12829] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 286.242155][T12829] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 286.287973][T12829] bond0: (slave vxcan3): making interface the new active one [ 286.327762][T12829] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 286.573234][T12826] bond0 (unregistering): (slave vxcan3): Releasing backup interface [ 286.728283][T12826] bond0 (unregistering): Released all slaves [ 287.054968][T12851] netlink: 'syz.0.1811': attribute type 21 has an invalid length. [ 287.063131][T12851] netlink: 'syz.0.1811': attribute type 5 has an invalid length. [ 287.071193][T12851] netlink: 'syz.0.1811': attribute type 6 has an invalid length. [ 287.095289][ T5983] tipc: Node number set to 2886997007 [ 287.172288][T12854] syzkaller0: entered promiscuous mode [ 287.178222][T12854] syzkaller0: entered allmulticast mode [ 287.195671][T12854] macsec1: entered promiscuous mode [ 287.201247][T12854] macsec1: entered allmulticast mode [ 287.456429][T12860] ip6_vti0 speed is unknown, defaulting to 1000 [ 287.718123][T12871] openvswitch: netlink: IP tunnel dst address not specified [ 287.788448][T12876] netlink: 'syz.1.1819': attribute type 15 has an invalid length. [ 287.870484][T12860] xfrm0 speed is unknown, defaulting to 1000 [ 288.226617][T12893] ip6tnl0: Caught tx_queue_len zero misconfig [ 288.447917][T12898] netlink: 'syz.6.1827': attribute type 1 has an invalid length. [ 288.501822][T12898] bond3: entered promiscuous mode [ 288.508980][T12898] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.521362][T12901] __nla_validate_parse: 3 callbacks suppressed [ 288.561817][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'. [ 288.620620][T12904] bond0: (slave team0): Releasing backup interface [ 288.667316][T12904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.731219][T12898] bond3: (slave bridge2): making interface the new active one [ 288.754861][T12898] bridge2: entered promiscuous mode [ 288.764221][T12898] bridge2: left promiscuous mode [ 288.890984][T12901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.134602][ T30] audit: type=1800 audit(1769074215.094:7): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1832" name="memory.events" dev="tmpfs" ino=318 res=0 errno=0 [ 289.154350][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1832'. [ 289.262360][T12935] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 289.308006][T12935] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1836'. [ 289.339222][T12937] ip6tnl0: Caught tx_queue_len zero misconfig [ 289.827967][T12955] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1842'. [ 290.052956][T12964] sctp: [Deprecated]: syz.6.1841 (pid 12964) Use of int in max_burst socket option deprecated. [ 290.052956][T12964] Use struct sctp_assoc_value instead [ 290.421866][T12980] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 290.603386][T12982] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.686675][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 290.938303][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1860'. [ 291.101341][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1862'. [ 291.124316][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 291.176183][T13021] openvswitch: netlink: IP tunnel dst address not specified [ 291.202814][T12982] xfrm0 speed is unknown, defaulting to 1000 [ 291.410805][T13028] sctp: [Deprecated]: syz.3.1865 (pid 13028) Use of int in max_burst socket option. [ 291.410805][T13028] Use struct sctp_assoc_value instead [ 291.466580][T13032] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 291.478684][T13032] tipc: Enabled bearer , priority 6 [ 291.505855][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1864'. [ 291.515389][T13032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1864'. [ 291.524674][T13032] macvlan0: entered allmulticast mode [ 291.530104][T13032] veth1_vlan: entered allmulticast mode [ 291.725811][T13041] netlink: 'syz.3.1867': attribute type 3 has an invalid length. [ 291.789772][T13044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.818205][T13046] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 291.883655][T13046] netlink: 'syz.6.1869': attribute type 11 has an invalid length. [ 291.963553][T13055] netlink: 'syz.6.1873': attribute type 39 has an invalid length. [ 292.305392][T13072] bond6: entered allmulticast mode [ 292.311230][T13072] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.319793][T13081] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 292.420639][T13079] batadv0: entered promiscuous mode [ 292.440416][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.742238][T13091] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.887779][T13091] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.019749][T13091] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.037868][T13108] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.052339][T13119] netlink: 'syz.0.1883': attribute type 13 has an invalid length. [ 293.257735][T13091] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.297611][T13108] xfrm0 speed is unknown, defaulting to 1000 [ 293.391053][ T6083] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.415385][ T6083] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.448030][ T6083] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.472706][ T7492] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.568907][T13094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.841290][T13135] ip6tnl1: entered promiscuous mode [ 293.847444][T13135] ip6tnl1: entered allmulticast mode [ 293.860041][T13134] delete_channel: no stack [ 293.866552][T13134] delete_channel: no stack [ 293.872872][T13134] __nla_validate_parse: 6 callbacks suppressed [ 293.872891][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1890'. [ 293.925649][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1890'. [ 294.107641][T13152] netlink: 'syz.2.1894': attribute type 1 has an invalid length. [ 294.132005][T13152] netlink: 'syz.2.1894': attribute type 6 has an invalid length. [ 294.146956][T13152] netlink: 'syz.2.1894': attribute type 3 has an invalid length. [ 294.336231][T13160] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1896'. [ 294.644925][T13175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1902'. [ 294.941049][T13191] syzkaller0: entered promiscuous mode [ 294.950593][T13191] syzkaller0: entered allmulticast mode [ 294.974313][T13186] netlink: 'syz.1.1905': attribute type 2 has an invalid length. [ 294.989918][T13192] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.055436][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 295.078591][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1909'. [ 295.317684][T13192] xfrm0 speed is unknown, defaulting to 1000 [ 295.416035][T13215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1913'. [ 295.447540][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 295.470017][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 295.513614][T13219] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.541220][T13222] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 295.834899][T13240] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.854330][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1920'. [ 295.998491][T13247] netlink: 'syz.0.1923': attribute type 3 has an invalid length. [ 296.085146][T13253] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.116390][T13253] team0: Port device bond7 added [ 296.137542][T13244] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.213915][T13247] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 296.513395][T13244] xfrm0 speed is unknown, defaulting to 1000 [ 296.874001][T13299] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 296.980633][T13299] bond4: entered promiscuous mode [ 296.985934][T13299] bond4: entered allmulticast mode [ 297.005545][T13299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.020162][T13282] ip6_vti0 speed is unknown, defaulting to 1000 [ 297.353456][T13282] xfrm0 speed is unknown, defaulting to 1000 [ 297.933453][T13328] netlink: 'syz.3.1942': attribute type 2 has an invalid length. [ 298.970350][T13354] __nla_validate_parse: 13 callbacks suppressed [ 298.970370][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 299.134280][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1952'. [ 299.230481][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 299.824500][T13394] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1962'. [ 300.293219][T13413] batadv_slave_0: entered promiscuous mode [ 300.336195][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 300.388863][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1967'. [ 300.525525][T13429] openvswitch: netlink: Key type 123 is out of range max 32 [ 300.712469][T13416] batadv_slave_0: left promiscuous mode [ 301.424550][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.432672][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.440637][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.448588][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.456537][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.464444][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.472343][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.480275][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.488208][T13460] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 301.807685][T13494] netlink: 'syz.6.1986': attribute type 21 has an invalid length. [ 301.815850][T13494] netlink: 'syz.6.1986': attribute type 1 has an invalid length. [ 301.823604][T13494] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1986'. [ 302.026003][T13499] nbd0: detected capacity change from 0 to 127 [ 302.050558][T13492] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1987'. [ 302.115773][ T5852] block nbd0: Receive control failed (result -104) [ 302.410499][T13517] netlink: 'syz.2.1990': attribute type 8 has an invalid length. [ 302.731816][T13527] netlink: 'syz.2.1992': attribute type 32 has an invalid length. [ 302.817425][T13532] netlink: 'syz.6.1993': attribute type 1 has an invalid length. [ 303.104300][T13549] netlink: 'syz.3.2001': attribute type 13 has an invalid length. [ 303.402280][T13570] xt_l2tp: v2 doesn't support IP mode [ 303.531392][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 303.581603][T13549] veth1_to_hsr: left allmulticast mode [ 303.597563][T13549] veth1_to_hsr: left promiscuous mode [ 303.730785][T13567] tipc: Enabled bearer , priority 0 [ 303.754331][ T38] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.785262][ T38] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.829807][T13587] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2007'. [ 303.841427][ T38] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.918056][T13567] tipc: Disabling bearer [ 304.080552][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2008'. [ 304.139713][ T38] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.191479][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2008'. [ 304.518338][T13617] syzkaller0: entered promiscuous mode [ 304.538747][T13617] syzkaller0: entered allmulticast mode [ 304.704696][T13625] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2017'. [ 304.724826][T13633] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2020'. [ 304.770975][T13630] netem: incorrect gi model size [ 304.777410][T13630] netem: change failed [ 304.807139][T13637] bond0: (slave erspan0): Error: Device is in use and cannot be enslaved [ 304.935332][T13644] netlink: 'syz.3.2022': attribute type 2 has an invalid length. [ 305.051306][T13644] : entered promiscuous mode [ 305.078062][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'. [ 305.150946][T13654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2024'. [ 305.266576][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'. [ 305.366813][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 305.374584][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 305.381672][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 305.391485][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 305.399874][ T11] block nbd0: Dead connection, failed to find a fallback [ 305.407257][ T11] block nbd0: shutting down sockets [ 305.412837][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.422813][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 305.431368][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.441000][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 305.448825][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.458371][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 305.466321][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.475936][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 305.485149][T13040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.506166][T13040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 305.524758][T13040] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.534624][T13040] Buffer I/O error on dev nbd0, logical block 1, async page read [ 305.542464][T13040] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.552049][T13040] Buffer I/O error on dev nbd0, logical block 2, async page read [ 305.560036][T13040] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.569789][T13040] Buffer I/O error on dev nbd0, logical block 3, async page read [ 305.577775][T13040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.587358][T13040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 305.596427][T13040] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.609862][T13040] Buffer I/O error on dev nbd0, logical block 1, async page read [ 305.634618][T13040] ldm_validate_partition_table(): Disk read failed. [ 305.651125][T13040] Dev nbd0: unable to read RDB block 0 [ 305.674770][T13040] nbd0: unable to read partition table [ 305.720235][T13040] ldm_validate_partition_table(): Disk read failed. [ 305.744326][T13040] Dev nbd0: unable to read RDB block 0 [ 305.760771][T13676] netlink: 'syz.6.2028': attribute type 2 has an invalid length. [ 305.794974][T13040] nbd0: unable to read partition table [ 305.806088][T13676] netlink: 'syz.6.2028': attribute type 1 has an invalid length. [ 305.856441][T13676] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2028'. [ 305.979511][T13668] syzkaller0: entered promiscuous mode [ 305.990347][T13668] syzkaller0: entered allmulticast mode [ 306.127812][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 306.127812][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 306.275127][T13705] sctp: [Deprecated]: syz.3.2036 (pid 13705) Use of int in max_burst socket option. [ 306.275127][T13705] Use struct sctp_assoc_value instead [ 307.764733][T13711] tipc: Enabled bearer , priority 0 [ 307.827617][T13711] tipc: Disabling bearer [ 307.898185][T13725] netlink: 'syz.1.2040': attribute type 32 has an invalid length. [ 307.980612][T13725] bond5: Setting coupled_control to off (0) [ 308.002508][T13735] netlink: 'syz.3.2043': attribute type 4 has an invalid length. [ 308.029628][T13735] netlink: 'syz.3.2043': attribute type 8 has an invalid length. [ 308.097228][T13739] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.271658][T13744] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 308.603264][T13739] xfrm0 speed is unknown, defaulting to 1000 [ 308.636649][T13740] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.724758][T13740] xfrm0 speed is unknown, defaulting to 1000 [ 309.959960][T13823] __nla_validate_parse: 6 callbacks suppressed [ 309.959980][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'. [ 310.059855][T13816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.069841][T13816] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.085556][T13816] net_ratelimit: 46 callbacks suppressed [ 310.085567][T13816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.818661][T13843] netlink: 'syz.3.2068': attribute type 10 has an invalid length. [ 310.830895][T13843] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 310.849292][T13843] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 310.859755][T13843] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 311.402263][T13854] netlink: 'syz.1.2073': attribute type 2 has an invalid length. [ 311.674670][T13865] netlink: 'syz.6.2078': attribute type 1 has an invalid length. [ 311.730571][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2076'. [ 311.762936][T13871] netlink: 'syz.6.2078': attribute type 1 has an invalid length. [ 311.804242][T13867] netem: change failed [ 312.068804][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2080'. [ 312.200840][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 312.338415][T13879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2081'. [ 312.373094][T13879] vlan2: entered promiscuous mode [ 312.384164][T13879] bond0: entered promiscuous mode [ 312.394828][T13879] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 312.417152][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2083'. [ 312.428015][T13885] syzkaller0: entered promiscuous mode [ 312.441422][T13885] syzkaller0: entered allmulticast mode [ 312.487257][T13885] 0: reclassify loop, rule prio 0, protocol 800 [ 312.650408][T13899] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 312.659660][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 312.673163][T13899] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2086'. [ 312.683269][T13899] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2086'. [ 312.753412][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 312.841559][T13908] netlink: 'syz.0.2086': attribute type 11 has an invalid length. [ 313.611854][T13937] syzkaller0: entered promiscuous mode [ 313.633527][T13937] syzkaller0: entered allmulticast mode [ 313.867565][T13947] netlink: 'syz.3.2100': attribute type 1 has an invalid length. [ 313.957817][T13951] ip6_vti0 speed is unknown, defaulting to 1000 [ 314.154079][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 314.405837][T13951] xfrm0 speed is unknown, defaulting to 1000 [ 314.447437][T13975] sock: sock_set_timeout: `syz.6.2106' (pid 13975) tries to set negative timeout [ 314.857759][T13996] syzkaller0: entered promiscuous mode [ 314.867666][T13996] syzkaller0: entered allmulticast mode [ 315.036552][T13997] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.146951][T14013] __nla_validate_parse: 10 callbacks suppressed [ 315.146970][T14013] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.2114'. [ 315.211910][T14015] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2115'. [ 315.368751][T14018] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2116'. [ 315.492689][T13997] xfrm0 speed is unknown, defaulting to 1000 [ 315.499566][T14017] block nbd1: server does not support multiple connections per device. [ 315.516007][T14017] block nbd1: shutting down sockets [ 315.675428][T14017] netlink: 'syz.1.2116': attribute type 10 has an invalid length. [ 315.683332][T14017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'. [ 316.365195][T14056] syzkaller0: entered promiscuous mode [ 316.370855][T14056] syzkaller0: entered allmulticast mode [ 316.548090][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2127'. [ 316.902003][T14080] netlink: 'syz.0.2132': attribute type 2 has an invalid length. [ 316.925000][T14079] netlink: 'syz.2.2131': attribute type 1 has an invalid length. [ 316.939838][T14079] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2131'. [ 316.949685][T14080] netlink: 'syz.0.2132': attribute type 1 has an invalid length. [ 316.958512][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 316.979835][T14080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2132'. [ 317.067957][T14085] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.2133'. [ 317.268304][T14092] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 320.288554][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'. [ 320.332133][T14113] dummy0: entered allmulticast mode [ 320.369078][T14112] dummy0: left allmulticast mode [ 320.501483][T14121] netlink: 'syz.1.2144': attribute type 6 has an invalid length. [ 320.518510][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2144'. [ 320.677477][T14134] sit0: entered promiscuous mode [ 320.742687][T14134] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 320.764433][T14134] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2147'. [ 320.868594][T14144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2149'. [ 321.612809][T14171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2158'. [ 321.742586][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 321.756579][T14179] tipc: Enabled bearer , priority 10 [ 321.774852][T14179] syzkaller0: entered promiscuous mode [ 321.784232][T14179] syzkaller0: entered allmulticast mode [ 321.839014][T14173] tipc: Resetting bearer [ 321.855312][T14172] tipc: Resetting bearer [ 321.896445][T14178] netlink: 'syz.0.2160': attribute type 178 has an invalid length. [ 321.925769][T14172] tipc: Disabling bearer [ 322.107505][T14188] bond5: option arp_validate: invalid value (18446744073491447809) [ 322.118628][T14192] netlink: 'syz.0.2164': attribute type 13 has an invalid length. [ 322.129736][T14188] bond5 (unregistering): Released all slaves [ 322.370884][T14206] netlink: 'syz.1.2169': attribute type 6 has an invalid length. [ 322.491283][T14214] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.2166'. [ 322.563490][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2170'. [ 322.628032][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2170'. [ 322.895373][T14229] netlink: 'syz.1.2172': attribute type 5 has an invalid length. [ 323.001298][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 323.013411][T14239] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 323.268189][T14257] IPv6: Can't replace route, no match found [ 323.522604][T14274] x_tables: duplicate underflow at hook 3 [ 323.553869][T14274] x_tables: duplicate underflow at hook 3 [ 323.559855][T14274] x_tables: duplicate underflow at hook 3 [ 323.583963][T14274] x_tables: duplicate underflow at hook 3 [ 323.589847][T14274] x_tables: duplicate underflow at hook 3 [ 323.611777][T14274] x_tables: duplicate underflow at hook 3 [ 323.634314][T14274] x_tables: duplicate underflow at hook 3 [ 323.640210][T14274] x_tables: duplicate underflow at hook 3 [ 323.659105][T14274] x_tables: duplicate underflow at hook 3 [ 323.674081][T14274] x_tables: duplicate underflow at hook 3 [ 323.718770][T14283] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 323.989703][T14303] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.012006][T14307] sctp: [Deprecated]: syz.0.2193 (pid 14307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.012006][T14307] Use struct sctp_sack_info instead [ 324.385589][T14326] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 324.442629][T14303] xfrm0 speed is unknown, defaulting to 1000 [ 324.467137][T14321] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.637661][T14331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.667422][T14331] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.707672][T14331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.865371][T14337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.152251][T14348] tipc: Started in network mode [ 325.165529][T14348] tipc: Node identity f28ae32bac5c, cluster identity 4711 [ 325.194981][T14348] tipc: Enabled bearer , priority 0 [ 325.202046][T14350] syzkaller0: entered promiscuous mode [ 325.219398][T14350] syzkaller0: entered allmulticast mode [ 325.246136][T14349] tipc: Enabling of bearer rejected, already enabled [ 325.281410][T14347] tipc: Resetting bearer [ 325.316192][T14347] tipc: Disabling bearer [ 325.327351][T14321] xfrm0 speed is unknown, defaulting to 1000 [ 325.897478][T14362] sctp: [Deprecated]: syz.2.2206 (pid 14362) Use of int in maxseg socket option. [ 325.897478][T14362] Use struct sctp_assoc_value instead [ 326.546389][T14379] __nla_validate_parse: 7 callbacks suppressed [ 326.546414][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 326.590317][T14379] netlink: 'syz.2.2211': attribute type 2 has an invalid length. [ 326.669064][T14386] batadv_slave_0: Caught tx_queue_len zero misconfig [ 326.734089][T14379] ip6_vti0 speed is unknown, defaulting to 1000 [ 327.132459][T14379] xfrm0 speed is unknown, defaulting to 1000 [ 327.173836][T14402] ip6_vti0 speed is unknown, defaulting to 1000 [ 327.242485][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 327.765512][T14402] xfrm0 speed is unknown, defaulting to 1000 [ 328.738627][T14455] vlan0: entered promiscuous mode [ 328.828270][T14458] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2233'. [ 328.899826][T14458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2233'. [ 328.936480][T14468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.246285][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2238'. [ 329.486598][T14481] ip6_vti0 speed is unknown, defaulting to 1000 [ 329.552938][T14484] syzkaller0: entered promiscuous mode [ 329.571603][T14484] syzkaller0: entered allmulticast mode [ 329.819251][T14500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2244'. [ 329.944354][ T5852] block nbd1: Receive control failed (result -1) [ 330.006718][T14481] xfrm0 speed is unknown, defaulting to 1000 [ 330.370329][T14508] bond6: option tlb_dynamic_lb: invalid value (5) [ 330.405884][T14508] bond6 (unregistering): Released all slaves [ 330.611320][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2248'. [ 330.746941][T14522] ip6_vti0 speed is unknown, defaulting to 1000 [ 330.770351][T14524] netlink: 'syz.1.2250': attribute type 4 has an invalid length. [ 331.035755][T14522] xfrm0 speed is unknown, defaulting to 1000 [ 331.119386][T14538] netlink: 'syz.0.2253': attribute type 21 has an invalid length. [ 331.152236][T14538] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2253'. [ 332.406545][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 332.659058][T14587] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 332.682945][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 332.693243][T14595] netlink: 'syz.3.2268': attribute type 3 has an invalid length. [ 332.709502][T14593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2270'. [ 332.825660][T14593] geneve2: entered promiscuous mode [ 332.845706][T14593] geneve2: entered allmulticast mode [ 332.868150][ T6083] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.928662][ T6083] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.944252][ T6083] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.961404][ T6083] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.123015][T14602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.371063][T14620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2279'. [ 333.385130][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'. [ 333.426071][T14624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2280'. [ 333.487628][T14626] netlink: 'syz.6.2281': attribute type 1 has an invalid length. [ 333.542203][T14626] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.561716][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2281'. [ 333.612216][T14639] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2281'. [ 333.647898][T14641] ip6_vti0 speed is unknown, defaulting to 1000 [ 333.899225][T14658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.911460][T14658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.944074][T14658] hsr0: entered promiscuous mode [ 333.949224][T14658] hsr0: entered allmulticast mode [ 333.963932][T14658] hsr_slave_0: entered allmulticast mode [ 333.979870][T14658] hsr_slave_1: entered allmulticast mode [ 334.114159][T14667] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2291'. [ 334.185314][T14667] tipc: Enabled bearer , priority 0 [ 334.206461][T14666] tipc: Disabling bearer [ 334.242151][T14641] xfrm0 speed is unknown, defaulting to 1000 [ 334.252859][T14646] ip6_vti0 speed is unknown, defaulting to 1000 [ 334.259915][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2294'. [ 334.382054][T14674] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.655952][T14673] bond6 (unregistering): Released all slaves [ 334.698640][T14646] xfrm0 speed is unknown, defaulting to 1000 [ 334.855409][T14692] netlink: 'syz.1.2297': attribute type 13 has an invalid length. [ 334.874267][T14692] netlink: 'syz.1.2297': attribute type 17 has an invalid length. [ 335.307937][T14693] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.477802][T14693] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.661653][T14693] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.807762][T14708] syzkaller0: entered promiscuous mode [ 335.817937][T14708] syzkaller0: entered allmulticast mode [ 335.827483][T14693] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.990071][ T1134] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 336.126984][ T66] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 336.194903][ T66] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 336.297718][ T6083] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 336.537676][T14737] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.737151][T14744] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 336.759563][T14737] xfrm0 speed is unknown, defaulting to 1000 [ 337.027904][T14758] erspan0: left allmulticast mode [ 337.038664][T14758] ip6tnl0: left promiscuous mode [ 337.044564][T14758] ip6tnl0: left allmulticast mode [ 337.055823][T14758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 337.074262][T14756] ip6_vti0 speed is unknown, defaulting to 1000 [ 337.403489][T14768] syzkaller0: entered promiscuous mode [ 337.418336][T14768] syzkaller0: entered allmulticast mode [ 337.524202][T14756] xfrm0 speed is unknown, defaulting to 1000 [ 337.540776][T14760] ip6_vti0 speed is unknown, defaulting to 1000 [ 337.579275][T14765] __nla_validate_parse: 1 callbacks suppressed [ 337.579296][T14765] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2316'. [ 337.662628][T14778] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2319'. [ 337.688518][T14778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.727630][T14783] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2319'. [ 338.026138][T14788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2321'. [ 338.063969][T14776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2319'. [ 338.342547][T14795] 8021q: VLANs not supported on ip6_vti0 [ 338.364259][T14782] ip6_vti0 speed is unknown, defaulting to 1000 [ 338.365569][T14760] xfrm0 speed is unknown, defaulting to 1000 [ 339.099816][T14782] xfrm0 speed is unknown, defaulting to 1000 [ 339.743535][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2330'. [ 340.039903][T14826] pim6reg: entered allmulticast mode [ 340.084317][T14826] pim6reg: left allmulticast mode [ 341.154256][T14860] siw: device registration error -23 [ 341.486717][T14875] netlink: 'syz.1.2342': attribute type 10 has an invalid length. [ 341.518666][T14875] team0: Cannot enslave team device to itself [ 341.528012][T14875] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.796574][T14889] dummy0: entered allmulticast mode [ 342.179744][T14912] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2351'. [ 342.191685][T14915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2352'. [ 342.285182][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2352'. [ 342.481121][T14912] veth0_to_bridge: left allmulticast mode [ 342.489302][T14912] veth0_to_bridge: left promiscuous mode [ 342.506877][T14912] bridge0: port 1(veth0_to_bridge) entered disabled state [ 342.547888][T14912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.640561][ T7492] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 342.660098][T14947] netlink: 'syz.1.2355': attribute type 3 has an invalid length. [ 342.726895][T14947] syz_tun: entered allmulticast mode [ 342.805362][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 342.869550][T14947] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 343.238850][T14946] syz_tun: left allmulticast mode [ 343.263039][T14968] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2362'. [ 343.473197][T14979] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2365'. [ 343.515257][T14984] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2366'. [ 343.619397][T14990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2371'. [ 343.631913][T14992] syz.3.2369 (14992) used obsolete PPPIOCDETACH ioctl [ 343.649044][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'. [ 343.665647][T14994] sctp: [Deprecated]: syz.6.2370 (pid 14994) Use of int in max_burst socket option. [ 343.665647][T14994] Use struct sctp_assoc_value instead [ 343.689812][T14992] ip6gretap0: entered promiscuous mode [ 343.782971][T14992] ip6gretap0: left promiscuous mode [ 343.854498][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2374'. [ 343.963470][T15012] netlink: 'syz.1.2376': attribute type 30 has an invalid length. [ 344.090198][T15008] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.104436][T15015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.388859][T15034] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 344.429472][T15025] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.528928][T15034] IPVS: Error connecting to the multicast addr [ 345.021934][T15070] syzkaller0: entered promiscuous mode [ 345.027980][T15070] syzkaller0: entered allmulticast mode [ 345.332938][T15025] xfrm0 speed is unknown, defaulting to 1000 [ 345.556148][T15086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2394'. [ 346.874244][ T5844] Bluetooth: hci6: command 0x0405 tx timeout [ 346.954209][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 347.524882][T15180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2407'. [ 347.634815][T15187] bond0: (slave rose0): Error: Device can not be enslaved while up [ 347.805333][T15193] netlink: 'syz.3.2409': attribute type 21 has an invalid length. [ 347.814720][T15193] netlink: 'syz.3.2409': attribute type 22 has an invalid length. [ 347.822674][T15193] netlink: 'syz.3.2409': attribute type 23 has an invalid length. [ 347.832015][T15193] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2409'. [ 348.072600][T15202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2411'. [ 348.193280][T15208] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.273856][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 348.291614][T15205] macsec2: entered promiscuous mode [ 348.298663][T15205] syzkaller0: entered promiscuous mode [ 348.362364][T15221] netlink: 'syz.3.2417': attribute type 29 has an invalid length. [ 348.371611][T15221] netlink: 'syz.3.2417': attribute type 29 has an invalid length. [ 348.541779][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'. [ 348.806722][T15230] bond2: left promiscuous mode [ 348.811564][T15230] gre1: left promiscuous mode [ 348.835267][T15230] macvtap1: left promiscuous mode [ 348.846311][T15230] macvtap1: left allmulticast mode [ 348.863417][T15230] ip6gre1: left promiscuous mode [ 348.910685][T15230] sit3: left promiscuous mode [ 348.934078][T15230] sit3: left allmulticast mode [ 348.987980][T15230] gretap1: left promiscuous mode [ 349.041365][T15230] bridge5: left promiscuous mode [ 349.055932][T15230] bridge6: left promiscuous mode [ 349.079953][T15230] bridge7: left promiscuous mode [ 349.101052][T15230] bridge8: left promiscuous mode [ 349.116801][T15230] bridge9: left promiscuous mode [ 349.132376][T15230] bridge10: left promiscuous mode [ 349.141917][T15230] bridge11: left promiscuous mode [ 349.152412][T15230] bridge12: left promiscuous mode [ 349.163260][T15230] bridge13: left promiscuous mode [ 349.177532][T15230] bridge14: left promiscuous mode [ 349.185811][T15230] bridge15: left promiscuous mode [ 349.194539][T15230] bridge16: left promiscuous mode [ 349.202195][T15230] bridge17: left promiscuous mode [ 349.211044][T15230] bridge18: left promiscuous mode [ 349.225348][T15230] bridge19: left promiscuous mode [ 349.242051][T15230] bridge20: left promiscuous mode [ 349.250594][T15230] bridge21: left promiscuous mode [ 349.258334][T15230] bridge22: left promiscuous mode [ 349.265994][T15230] bridge23: left promiscuous mode [ 349.274490][T15230] bridge24: left promiscuous mode [ 349.281731][T15230] bridge25: left promiscuous mode [ 349.291531][T15230] ip6tnl1: left promiscuous mode [ 349.313964][T15230] ip6tnl1: left allmulticast mode [ 349.323496][T15230] vlan2: left promiscuous mode [ 349.333903][T15230] bond0: left promiscuous mode [ 349.338888][T15230] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 349.352727][T15230] geneve2: left promiscuous mode [ 349.358336][T15230] geneve2: left allmulticast mode [ 349.400347][T15244] batman_adv: batadv0: Adding interface: geneve3 [ 349.407334][T15244] batman_adv: batadv0: The MTU of interface geneve3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.445791][T15244] batman_adv: batadv0: Interface activated: geneve3 [ 349.463257][T15213] syzkaller0 (unregistering): left promiscuous mode [ 349.804527][T15268] dvmrp1: entered allmulticast mode [ 349.825268][T15268] dvmrp1: left allmulticast mode [ 349.994103][ T5844] Bluetooth: hci5: command 0x0405 tx timeout [ 350.132854][T15289] siw: device registration error -23 [ 350.250274][T15289] xt_TCPMSS: Only works on TCP SYN packets [ 350.726719][T15318] veth1_to_team: entered promiscuous mode [ 350.732660][T15318] veth1_to_team: entered allmulticast mode [ 350.870323][T15326] syzkaller0: entered promiscuous mode [ 350.891622][T15326] syzkaller0: entered allmulticast mode [ 351.087997][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 351.129087][T15335] syz_tun: entered allmulticast mode [ 351.248299][T15338] syz_tun (unregistering): left allmulticast mode [ 351.311839][T15337] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.464347][T15351] netlink: 'syz.3.2451': attribute type 39 has an invalid length. [ 351.618761][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2453'. [ 351.636626][T15359] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2454'. [ 351.842163][T15361] vlan2: entered promiscuous mode [ 351.872856][T15361] macvtap0: entered promiscuous mode [ 351.937673][T15337] xfrm0 speed is unknown, defaulting to 1000 [ 352.194348][T15379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2459'. [ 352.203985][T15379] mac80211_hwsim hwsim9 wlan1: Device is already in use. [ 352.258203][T15389] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2460'. [ 352.298530][T15389] gretap0: entered promiscuous mode [ 352.327303][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2460'. [ 352.518450][T15400] netlink: 'syz.0.2464': attribute type 9 has an invalid length. [ 352.857859][T15406] syzkaller1: entered promiscuous mode [ 352.864757][T15406] syzkaller1: entered allmulticast mode [ 353.287806][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 353.313894][T15446] netlink: 'syz.3.2473': attribute type 20 has an invalid length. [ 353.370406][T15446] netlink: 'syz.3.2473': attribute type 21 has an invalid length. [ 353.474056][T15450] @0Ù: renamed from bond_slave_1 [ 354.003863][T15463] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 354.012014][T15463] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2474'. [ 354.139785][T15468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.185819][T15468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.221373][T15468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.304734][T15476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2478'. [ 354.324596][T15470] bond9: ARP target 9.0.0.0 is already present [ 354.338797][T15470] bond9: option arp_ip_target: invalid value (9) [ 354.359279][T15470] bond9 (unregistering): Released all slaves [ 354.392907][T15478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2479'. [ 354.546709][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2481'. [ 354.556263][T15482] nbd: illegal input index -1113835520 [ 354.565622][T15482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2481'. [ 354.840132][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 354.948191][T15499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2484'. [ 354.969853][T15499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2484'. [ 354.990718][T15501] geneve4: entered promiscuous mode [ 355.162938][T15512] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 2, id = 0 [ 355.194331][T15509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2489'. [ 355.474252][T15530] bridge_slave_0: left allmulticast mode [ 355.480058][T15530] bridge_slave_0: left promiscuous mode [ 355.534522][T15530] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.011558][T15530] bridge_slave_1: left allmulticast mode [ 356.022355][T15530] bridge_slave_1: left promiscuous mode [ 356.028652][T15530] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.040226][T15530] bond0: (slave bond_slave_0): Releasing backup interface [ 356.052920][T15558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.063442][T15530] bond_slave_0: left promiscuous mode [ 356.070494][T15530] bond_slave_0: left allmulticast mode [ 356.079696][T15530] bond0: (slave bond_slave_1): Releasing backup interface [ 356.089066][T15530] bond_slave_1: left promiscuous mode [ 356.095105][T15530] bond_slave_1: left allmulticast mode [ 356.102927][T15530] team0: Port device team_slave_0 removed [ 356.110671][T15530] team0: Port device team_slave_1 removed [ 356.117957][T15530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.467064][T15579] netlink: 'syz.2.2509': attribute type 4 has an invalid length. [ 356.500470][T15579] netlink: 'syz.2.2509': attribute type 4 has an invalid length. [ 356.876589][T15608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.895742][T15608] netlink: 'syz.1.2519': attribute type 6 has an invalid length. [ 356.903656][T15608] netlink: 'syz.1.2519': attribute type 7 has an invalid length. [ 356.912590][T15608] netlink: 'syz.1.2519': attribute type 8 has an invalid length. [ 357.314953][T15628] openvswitch: netlink: Key type 123 is out of range max 32 [ 357.352162][T15632] syzkaller0: entered promiscuous mode [ 357.359387][T15632] syzkaller0: entered allmulticast mode [ 357.548117][T15645] netlink: 'syz.6.2533': attribute type 46 has an invalid length. [ 357.677257][T15655] netlink: 'syz.1.2534': attribute type 1 has an invalid length. [ 358.381522][T15667] bond6: option lacp_active: invalid value (8) [ 358.391532][T15667] bond6 (unregistering): Released all slaves [ 358.498970][T15671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.755060][T15688] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.108179][T15688] xfrm0 speed is unknown, defaulting to 1000 [ 359.556011][T15732] netlink: 'syz.2.2553': attribute type 2 has an invalid length. [ 359.577763][T15731] __nla_validate_parse: 8 callbacks suppressed [ 359.577785][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2554'. [ 359.602309][T15732] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2553'. [ 359.751798][T15740] netlink: 'syz.1.2555': attribute type 10 has an invalid length. [ 359.763550][T15740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2555'. [ 360.661865][T15767] netlink: 'syz.6.2563': attribute type 11 has an invalid length. [ 360.983844][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2565'. [ 361.615632][T15797] openvswitch: netlink: IP tunnel dst address not specified [ 361.698730][T15787] netlink: 'syz.6.2567': attribute type 1 has an invalid length. [ 361.757515][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'. [ 362.032421][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2578'. [ 362.070192][T15820] SET target dimension over the limit! [ 362.223101][T15827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.320324][T15833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.365048][T15838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2583'. [ 362.794746][ T5852] Bluetooth: hci6: link tx timeout [ 362.801100][ T5852] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 362.813108][ T5852] Bluetooth: hci6: link tx timeout [ 362.818302][ T5852] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 362.966730][ T5852] Bluetooth: hci6: link tx timeout [ 362.972191][ T5852] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 362.981687][ T5852] Bluetooth: hci6: link tx timeout [ 362.987328][ T5852] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 362.996679][ T5852] Bluetooth: hci6: link tx timeout [ 363.002013][ T5852] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 363.010145][ T5852] Bluetooth: hci6: link tx timeout [ 363.015522][ T5852] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.433510][T15892] ip6_vti0 speed is unknown, defaulting to 1000 [ 363.494452][ T5852] Bluetooth: hci6: link tx timeout [ 363.499730][ T5852] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 363.507698][ T5852] Bluetooth: hci6: link tx timeout [ 363.512923][ T5852] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.605300][ T5852] Bluetooth: hci6: link tx timeout [ 363.611722][ T5852] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 363.619682][ T5852] Bluetooth: hci6: link tx timeout [ 363.625041][ T5852] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.626156][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2595'. [ 363.754157][T15900] netlink: 'syz.1.2595': attribute type 10 has an invalid length. [ 363.900817][T15900] veth0_vlan: left promiscuous mode [ 363.927695][T15891] nbd19: detected capacity change from 0 to 14636698788956735 [ 363.944422][T15907] tipc: Trying to set illegal importance in message [ 363.952815][T15900] veth0_vlan: entered promiscuous mode [ 363.975235][T15900] team0: Device veth0_vlan failed to register rx_handler [ 364.085327][ T5852] block nbd19: Receive control failed (result -104) [ 364.254000][T15897] netlink: 'syz.2.2594': attribute type 13 has an invalid length. [ 364.310966][T15897] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2594'. [ 364.387269][ T5852] Bluetooth: hci6: link tx timeout [ 364.395017][ T5852] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 364.402737][ T5852] Bluetooth: hci6: link tx timeout [ 364.409574][ T5852] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.425085][T15892] xfrm0 speed is unknown, defaulting to 1000 [ 364.522316][T15946] netlink: 'syz.6.2605': attribute type 1 has an invalid length. [ 364.572154][T15946] netlink: 'syz.6.2605': attribute type 2 has an invalid length. [ 364.636296][T15952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.646592][ T5852] Bluetooth: hci6: link tx timeout [ 364.651828][ T5852] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 364.659622][ T5852] Bluetooth: hci6: link tx timeout [ 364.665370][ T5852] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.739965][T15958] syzkaller0: entered promiscuous mode [ 364.746583][T15958] syzkaller0: entered allmulticast mode [ 364.853456][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'. [ 364.878253][ T5852] Bluetooth: hci6: command 0x0405 tx timeout [ 364.895179][T15960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2610'. [ 365.006015][T15966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2610'. [ 365.595499][T15988] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.796406][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 365.814172][T16014] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 365.821958][T16014] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2619'. [ 365.996846][T16021] openvswitch: netlink: IP tunnel TTL not specified. [ 366.541563][T16018] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.549286][T15988] xfrm0 speed is unknown, defaulting to 1000 [ 366.603959][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2622'. [ 366.812496][T16031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.957161][ T5852] Bluetooth: hci6: command 0x0405 tx timeout [ 367.211550][T16055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2627'. [ 367.298492][T16058] netlink: 'syz.6.2628': attribute type 28 has an invalid length. [ 367.319904][T16058] netlink: 'syz.6.2628': attribute type 1 has an invalid length. [ 367.618204][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2632'. [ 367.746273][T16018] xfrm0 speed is unknown, defaulting to 1000 [ 367.864352][T16093] netlink: 320 bytes leftover after parsing attributes in process `syz.6.2634'. [ 367.873464][T16093] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2634'. [ 367.907462][T16094] netlink: 'syz.2.2633': attribute type 6 has an invalid length. [ 368.388581][T16107] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 369.572208][T16152] gre0: entered promiscuous mode [ 369.833606][T16165] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 369.990155][T16170] __nla_validate_parse: 6 callbacks suppressed [ 369.990176][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2650'. [ 370.017843][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2653'. [ 370.696854][T16197] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.870297][T16216] m1Ie5nè‹Ò: entered promiscuous mode [ 370.986645][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2662'. [ 370.999289][T16197] xfrm0 speed is unknown, defaulting to 1000 [ 371.288057][T16228] netlink: 'syz.2.2667': attribute type 3 has an invalid length. [ 371.359167][T16229] siw: device registration error -23 [ 371.365789][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2667'. [ 371.420562][T16244] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2670'. [ 371.488750][T16250] netlink: 'syz.1.2671': attribute type 1 has an invalid length. [ 371.538319][T16248] sctp: [Deprecated]: syz.6.2672 (pid 16248) Use of int in max_burst socket option deprecated. [ 371.538319][T16248] Use struct sctp_assoc_value instead [ 371.621875][T16242] wg1: entered promiscuous mode [ 371.633187][T16242] wg1: entered allmulticast mode [ 372.255498][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 372.392828][T16285] syzkaller0: entered promiscuous mode [ 372.399572][T16285] syzkaller0: entered allmulticast mode [ 372.644006][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'. [ 372.985046][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2687'. [ 373.166815][T16313] bond0: (slave rose0): Error: Device can not be enslaved while up [ 373.275746][T15863] udevd[15863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 373.308548][T15863] udevd[15863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 373.489176][T16327] netlink: 'syz.3.2690': attribute type 10 has an invalid length. [ 373.538049][T16334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2693'. [ 373.569613][T16336] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2694'. [ 373.701722][T16340] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.845114][T16348] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.917862][T16348] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.970412][T16340] xfrm0 speed is unknown, defaulting to 1000 [ 373.985473][T16348] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.054334][T16348] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.148178][ T3504] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.177525][ T3504] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.200482][ T3504] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.235945][ T3504] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.931149][T16386] netlink: 'syz.6.2707': attribute type 1 has an invalid length. [ 374.988287][T16390] netlink: 'syz.0.2709': attribute type 1 has an invalid length. [ 375.345895][T16404] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.682729][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.692361][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.700332][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.709467][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.717477][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 375.820369][T16424] __nla_validate_parse: 5 callbacks suppressed [ 375.820387][T16424] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2716'. [ 375.886623][T16427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2718'. [ 375.945112][T16418] bridge4: entered promiscuous mode [ 375.950685][T16418] bridge4: entered allmulticast mode [ 375.966669][T16418] team0: Port device bridge4 added [ 375.972246][T16415] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.979640][T16404] xfrm0 speed is unknown, defaulting to 1000 [ 376.355399][T16436] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2721'. [ 376.382049][T16436] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2721'. [ 376.548377][T16415] xfrm0 speed is unknown, defaulting to 1000 [ 376.587522][T16445] netlink: 'syz.6.2723': attribute type 1 has an invalid length. [ 376.595441][T16445] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2723'. [ 377.056345][T16466] netlink: 'syz.3.2728': attribute type 2 has an invalid length. [ 377.065884][T16466] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 377.628333][T16491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2732'. [ 377.668514][T16415] chnl_net:caif_netlink_parms(): no params data found [ 377.757898][ T5844] Bluetooth: hci7: command tx timeout [ 377.864231][T16503] netlink: 'syz.6.2735': attribute type 11 has an invalid length. [ 377.882412][T16503] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.2735'. [ 377.909994][T16415] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.928507][T16415] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.946915][T16415] bridge_slave_0: entered allmulticast mode [ 377.965375][T16415] bridge_slave_0: entered promiscuous mode [ 377.990145][T16504] netlink: 'syz.2.2734': attribute type 1 has an invalid length. [ 378.011806][T16415] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.020899][T16504] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2734'. [ 378.040890][T16415] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.052108][T16415] bridge_slave_1: entered allmulticast mode [ 378.061197][T16415] bridge_slave_1: entered promiscuous mode [ 378.092129][T16507] netlink: 'syz.0.2736': attribute type 5 has an invalid length. [ 378.177068][T16415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.218387][T16415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.321315][T16415] team0: Port device team_slave_0 added [ 378.333058][T16415] team0: Port device team_slave_1 added [ 378.368869][T16415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.375961][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.402759][T16415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.416065][T16415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.423029][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.450191][T16415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.549155][T16415] hsr_slave_0: entered promiscuous mode [ 378.566423][T16415] hsr_slave_1: entered promiscuous mode [ 378.575007][T16415] debugfs: 'hsr0' already exists in 'hsr' [ 378.580843][T16415] Cannot create hsr debugfs directory [ 378.606182][T16531] netlink: 'syz.3.2741': attribute type 1 has an invalid length. [ 378.634332][T16531] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2741'. [ 378.945282][T16543] netlink: 'syz.2.2745': attribute type 4 has an invalid length. [ 378.977344][T16415] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.994164][T16541] netlink: 'syz.2.2745': attribute type 4 has an invalid length. [ 379.060375][T16547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2746'. [ 379.095024][T16543] netlink: 'syz.2.2745': attribute type 4 has an invalid length. [ 379.149265][T16415] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.265717][T16415] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.365540][T16415] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.451244][T16554] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.742653][T16415] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.795825][T16554] xfrm0 speed is unknown, defaulting to 1000 [ 379.797346][T16415] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.834187][ T5844] Bluetooth: hci7: command tx timeout [ 379.849385][T16415] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.899453][T16415] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 380.351555][T16415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.418699][T16415] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.445550][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.452762][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.482714][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.489923][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.498947][T16576] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 381.324730][T16415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.443473][T16415] veth0_vlan: entered promiscuous mode [ 381.502927][T16415] veth1_vlan: entered promiscuous mode [ 381.636092][T16415] veth0_macvtap: entered promiscuous mode [ 381.664843][T16415] veth1_macvtap: entered promiscuous mode [ 381.712797][T16415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.749347][T16415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.791379][ T7496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.820688][ T7496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.840878][ T7496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.871643][ T7496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.924082][ T5844] Bluetooth: hci7: command tx timeout [ 382.106639][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.136762][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.252923][ T7496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.270279][ T7496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.304390][T16632] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 382.344071][T16632] __nla_validate_parse: 2 callbacks suppressed [ 382.344087][T16632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2765'. [ 382.535921][T16642] tipc: Enabling of bearer rejected, failed to enable media [ 382.676240][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 383.188931][T16667] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 383.328674][T16671] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.501397][T16677] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 383.522071][T16677] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2777'. [ 383.716260][T16686] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 383.764413][T16686] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 383.789703][T16686] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 383.826735][T16686] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 383.858509][T16686] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 383.883975][T16686] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 383.903997][T16686] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 383.928187][T16686] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 383.946153][T16686] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 384.004924][ T5844] Bluetooth: hci7: command tx timeout [ 384.013645][T16689] m1Ie5nè‹Ò: entered promiscuous mode [ 384.051173][T16671] xfrm0 speed is unknown, defaulting to 1000 [ 384.192133][T16698] FAULT_INJECTION: forcing a failure. [ 384.192133][T16698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.241550][T16698] CPU: 0 UID: 0 PID: 16698 Comm: syz.1.2782 Not tainted syzkaller #0 PREEMPT(full) [ 384.241579][T16698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 384.241595][T16698] Call Trace: [ 384.241603][T16698] [ 384.241612][T16698] dump_stack_lvl+0xe8/0x150 [ 384.241645][T16698] should_fail_ex+0x412/0x560 [ 384.241678][T16698] _copy_from_user+0x2d/0xb0 [ 384.241700][T16698] ___sys_sendmsg+0x1c6/0x360 [ 384.241719][T16698] ? __lock_acquire+0x6b5/0x2cf0 [ 384.241744][T16698] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.241798][T16698] ? __fget_files+0x2a/0x420 [ 384.241822][T16698] ? __fget_files+0x3a0/0x420 [ 384.241855][T16698] __x64_sys_sendmsg+0x1bd/0x2a0 [ 384.241878][T16698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.241906][T16698] ? __pfx_ksys_write+0x10/0x10 [ 384.241937][T16698] do_syscall_64+0xe2/0xf80 [ 384.241966][T16698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.241984][T16698] ? trace_irq_disable+0x37/0x100 [ 384.242010][T16698] ? clear_bhb_loop+0x60/0xb0 [ 384.242033][T16698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.242058][T16698] RIP: 0033:0x7f2f8c79acb9 [ 384.242078][T16698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.242096][T16698] RSP: 002b:00007f2f8d725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.242119][T16698] RAX: ffffffffffffffda RBX: 00007f2f8ca15fa0 RCX: 00007f2f8c79acb9 [ 384.242135][T16698] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000004 [ 384.242149][T16698] RBP: 00007f2f8d725090 R08: 0000000000000000 R09: 0000000000000000 [ 384.242162][T16698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.242175][T16698] R13: 00007f2f8ca16038 R14: 00007f2f8ca15fa0 R15: 00007ffdb5bd3fc8 [ 384.242211][T16698] [ 384.528104][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 384.783919][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'. [ 385.042916][T16718] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2789'. [ 385.506011][T16726] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.791153][T16752] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2797'. [ 385.890467][T16756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2798'. [ 385.921955][T16756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2798'. [ 385.981738][T16756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2798'. [ 386.080870][T16761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.165646][T16726] xfrm0 speed is unknown, defaulting to 1000 [ 386.791060][T16802] tc_dump_action: action bad kind [ 386.855072][T16807] FAULT_INJECTION: forcing a failure. [ 386.855072][T16807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.868821][T16807] CPU: 1 UID: 0 PID: 16807 Comm: syz.2.2814 Not tainted syzkaller #0 PREEMPT(full) [ 386.868847][T16807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 386.868859][T16807] Call Trace: [ 386.868866][T16807] [ 386.868874][T16807] dump_stack_lvl+0xe8/0x150 [ 386.868905][T16807] should_fail_ex+0x412/0x560 [ 386.868936][T16807] _copy_from_iter+0x1d3/0x1670 [ 386.868976][T16807] ? rcu_is_watching+0x15/0xb0 [ 386.869001][T16807] ? __pfx__copy_from_iter+0x10/0x10 [ 386.869028][T16807] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 386.869076][T16807] ? netlink_sendmsg+0x650/0xb40 [ 386.869097][T16807] ? skb_put+0x11b/0x210 [ 386.869129][T16807] netlink_sendmsg+0x6c0/0xb40 [ 386.869161][T16807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.869186][T16807] ? aa_file_perm+0x12d/0x1630 [ 386.869212][T16807] ? aa_sock_msg_perm+0xf1/0x1b0 [ 386.869240][T16807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.869258][T16807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.869281][T16807] __sock_sendmsg+0x21c/0x270 [ 386.869308][T16807] ____sys_sendmsg+0x4d7/0x810 [ 386.869327][T16807] ? __might_fault+0xaf/0x130 [ 386.869362][T16807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.869390][T16807] ? import_iovec+0x73/0xa0 [ 386.869413][T16807] ___sys_sendmsg+0x2a5/0x360 [ 386.869431][T16807] ? __lock_acquire+0x6b5/0x2cf0 [ 386.869455][T16807] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.869509][T16807] ? __fget_files+0x2a/0x420 [ 386.869550][T16807] ? __fget_files+0x3a0/0x420 [ 386.869587][T16807] __x64_sys_sendmsg+0x1bd/0x2a0 [ 386.869610][T16807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.869641][T16807] ? __pfx_ksys_write+0x10/0x10 [ 386.869674][T16807] do_syscall_64+0xe2/0xf80 [ 386.869704][T16807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.869724][T16807] ? trace_irq_disable+0x37/0x100 [ 386.869752][T16807] ? clear_bhb_loop+0x60/0xb0 [ 386.869777][T16807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.869797][T16807] RIP: 0033:0x7f6696b9acb9 [ 386.869815][T16807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.869833][T16807] RSP: 002b:00007f6697a6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.869855][T16807] RAX: ffffffffffffffda RBX: 00007f6696e15fa0 RCX: 00007f6696b9acb9 [ 386.869871][T16807] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000004 [ 386.869884][T16807] RBP: 00007f6697a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 386.869896][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.869908][T16807] R13: 00007f6696e16038 R14: 00007f6696e15fa0 R15: 00007fff80fa28a8 [ 386.869941][T16807] [ 387.161511][T16808] æÿîÿ: entered promiscuous mode [ 387.259322][T16815] FAULT_INJECTION: forcing a failure. [ 387.259322][T16815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.280766][T16815] CPU: 0 UID: 0 PID: 16815 Comm: syz.6.2813 Not tainted syzkaller #0 PREEMPT(full) [ 387.280792][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 387.280803][T16815] Call Trace: [ 387.280810][T16815] [ 387.280819][T16815] dump_stack_lvl+0xe8/0x150 [ 387.280847][T16815] should_fail_ex+0x412/0x560 [ 387.280877][T16815] _copy_to_user+0x31/0xb0 [ 387.280898][T16815] simple_read_from_buffer+0xe1/0x170 [ 387.280926][T16815] proc_fail_nth_read+0x1bb/0x230 [ 387.280949][T16815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.280972][T16815] ? rw_verify_area+0x2a6/0x4d0 [ 387.280999][T16815] ? tun_chr_write_iter+0x18a/0x200 [ 387.281018][T16815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.281065][T16815] vfs_read+0x20c/0xa70 [ 387.281082][T16815] ? fdget_pos+0x246/0x320 [ 387.281113][T16815] ? __pfx___mutex_lock+0x10/0x10 [ 387.281132][T16815] ? __pfx_vfs_read+0x10/0x10 [ 387.281152][T16815] ? __fget_files+0x2a/0x420 [ 387.281181][T16815] ? __fget_files+0x3a0/0x420 [ 387.281204][T16815] ? __fget_files+0x2a/0x420 [ 387.281237][T16815] ksys_read+0x150/0x270 [ 387.281258][T16815] ? __pfx_ksys_read+0x10/0x10 [ 387.281290][T16815] do_syscall_64+0xe2/0xf80 [ 387.281319][T16815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.281338][T16815] ? trace_irq_disable+0x37/0x100 [ 387.281365][T16815] ? clear_bhb_loop+0x60/0xb0 [ 387.281389][T16815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.281408][T16815] RIP: 0033:0x7fc1ae15b58e [ 387.281426][T16815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.281442][T16815] RSP: 002b:00007fc1af101fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.281464][T16815] RAX: ffffffffffffffda RBX: 00007fc1af1026c0 RCX: 00007fc1ae15b58e [ 387.281478][T16815] RDX: 000000000000000f RSI: 00007fc1af1020a0 RDI: 0000000000000006 [ 387.281491][T16815] RBP: 00007fc1af102090 R08: 0000000000000000 R09: 0000000000000000 [ 387.281502][T16815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.281514][T16815] R13: 00007fc1ae416128 R14: 00007fc1ae416090 R15: 00007ffef0679ee8 [ 387.281545][T16815] [ 387.523182][T16818] validate_nla: 31 callbacks suppressed [ 387.523206][T16818] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 387.536751][T16818] __nla_validate_parse: 107 callbacks suppressed [ 387.536772][T16818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2815'. [ 387.868744][T16829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2819'. [ 387.922812][T16830] tipc: Enabling of bearer rejected, failed to enable media [ 387.977576][T16837] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2821'. [ 388.017437][T16837] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 388.096099][T16837] 0ªî{X¹¦: entered allmulticast mode [ 388.131011][T16837] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 388.726511][T16869] netlink: 'syz.6.2828': attribute type 1 has an invalid length. [ 388.774919][T16869] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2828'. [ 389.514442][ T31] INFO: task syz.5.1385:11241 blocked for more than 143 seconds. [ 389.530080][T16883] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.538758][ T31] Not tainted syzkaller #0 [ 389.544609][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.562309][ T31] task:syz.5.1385 state:D stack:26048 pid:11241 tgid:11240 ppid:10294 task_flags:0x400140 flags:0x00080002 [ 389.600809][ T31] Call Trace: [ 389.609513][ T31] [ 389.615589][ T31] __schedule+0x14ef/0x4fb0 [ 389.625793][ T31] ? __pfx___schedule+0x10/0x10 [ 389.637673][ T31] ? schedule+0x90/0x360 [ 389.647724][ T31] schedule+0x164/0x360 [ 389.657634][ T31] schedule_preempt_disabled+0x13/0x30 [ 389.668807][ T31] __mutex_lock+0x7fe/0x1300 [ 389.681651][ T31] ? __mutex_lock+0x5ac/0x1300 [ 389.694172][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 389.705083][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 389.717197][ T31] ? stack_trace_save+0xa9/0x100 [ 389.725063][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 389.731710][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 389.744130][ T31] ? kasan_save_track+0x4f/0x80 [ 389.754696][ T31] ? kasan_save_track+0x3e/0x80 [ 389.764496][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 389.774974][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 389.785397][ T31] ? netlink_dump+0x1ef/0xe80 [ 389.795726][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 389.806870][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 389.819969][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 389.830504][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 389.841430][ T31] ? genl_rcv+0x28/0x40 [ 389.850983][ T31] ? netlink_unicast+0x80f/0x9b0 [ 389.862008][ T31] ? netlink_sendmsg+0x813/0xb40 [ 389.872867][ T31] ? __sock_sendmsg+0x21c/0x270 [ 389.878873][ T31] ? ____sys_sendmsg+0x4d7/0x810 [ 389.884024][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 389.889145][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 389.894700][ T31] ? do_syscall_64+0xe2/0xf80 [ 389.899686][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.921085][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 389.936910][ T31] ? rcu_is_watching+0x15/0xb0 [ 389.948229][ T31] ? trace_kmalloc+0x1f/0xb0 [ 389.959593][ T31] ? __kmalloc_node_track_caller_noprof+0x577/0x7f0 [ 389.967199][T16883] xfrm0 speed is unknown, defaulting to 1000 [ 389.974718][ T31] genl_dumpit+0x10b/0x1b0 [ 389.984002][ T31] netlink_dump+0x722/0xe80 [ 389.994753][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 390.003802][ T31] ? genl_start+0x499/0x6c0 [ 390.013209][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 390.023999][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 390.040044][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 390.050152][ T31] ? genl_get_cmd+0x4a8/0x930 [ 390.060246][ T31] ? __pfx_genl_start+0x10/0x10 [ 390.070334][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 390.080447][ T31] ? __pfx_genl_done+0x10/0x10 [ 390.090571][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 390.095492][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.100746][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 390.108393][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.114469][ T31] netlink_rcv_skb+0x232/0x4b0 [ 390.120023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.125358][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.130744][ T31] ? genl_rcv+0x19/0x40 [ 390.135202][ T31] ? down_read+0x272/0x2e0 [ 390.139895][ T31] ? genl_rcv+0xd/0x40 [ 390.144978][ T31] genl_rcv+0x28/0x40 [ 390.149075][ T31] netlink_unicast+0x80f/0x9b0 [ 390.154470][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 390.159880][ T31] ? netlink_sendmsg+0x650/0xb40 [ 390.165360][ T31] ? skb_put+0x11b/0x210 [ 390.169733][ T31] netlink_sendmsg+0x813/0xb40 [ 390.176670][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.182083][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.187661][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.192991][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.199108][ T31] __sock_sendmsg+0x21c/0x270 [ 390.204667][ T31] ____sys_sendmsg+0x4d7/0x810 [ 390.209677][ T31] ? __might_fault+0xaf/0x130 [ 390.214804][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.221034][ T31] ? import_iovec+0x73/0xa0 [ 390.225984][ T31] ___sys_sendmsg+0x2a5/0x360 [ 390.230722][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 390.236986][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.242248][ T31] ? futex_wait+0x29a/0x380 [ 390.247360][ T31] ? __fget_files+0x2a/0x420 [ 390.252004][ T31] ? __fget_files+0x3a0/0x420 [ 390.257761][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 390.262765][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.269041][ T31] ? rcu_is_watching+0x15/0xb0 [ 390.274102][ T31] do_syscall_64+0xe2/0xf80 [ 390.278657][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.285334][ T31] ? trace_irq_disable+0x37/0x100 [ 390.290402][ T31] ? clear_bhb_loop+0x60/0xb0 [ 390.324066][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.330093][ T31] RIP: 0033:0x7f0dab39acb9 [ 390.340469][ T31] RSP: 002b:00007f0dac180028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.354073][ T31] RAX: ffffffffffffffda RBX: 00007f0dab615fa0 RCX: 00007f0dab39acb9 [ 390.372354][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 390.392569][ T31] RBP: 00007f0dab408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 390.402672][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.422914][ T31] R13: 00007f0dab616038 R14: 00007f0dab615fa0 R15: 00007ffd93348de8 [ 390.443145][ T31] [ 390.446865][ T31] [ 390.446865][ T31] Showing all locks held in the system: [ 390.476527][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 390.481867][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 390.513747][ T31] 1 lock held by khungtaskd/31: [ 390.518743][ T31] #0: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.528996][ T31] 3 locks held by kworker/u8:3/38: [ 390.534528][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 390.544595][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 390.553544][ T31] #2: ffff8880b86260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 390.562850][ T31] 3 locks held by kworker/u8:8/1134: [ 390.568556][ T31] #0: ffff88813fe29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 390.580559][ T31] #1: ffffc900040ffbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 390.591655][ T31] #2: ffffffff8f7a8848 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 390.601300][ T31] 2 locks held by kworker/u8:10/1170: [ 390.606772][ T31] #0: ffff88813fe29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 390.618853][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 390.628730][ T31] 2 locks held by getty/5591: [ 390.633460][ T31] #0: ffff88814cd140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.648923][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 390.659504][ T31] 2 locks held by syz.4.970/9687: [ 390.665613][ T31] #0: ffffffff8f8169f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.673961][ T31] #1: ffffffff8e678968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 390.684651][ T31] 3 locks held by syz.5.1385/11241: [ 390.689895][ T31] #0: ffffffff8f8169f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 390.698247][ T31] #1: ffff8880453856f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 390.709121][ T31] #2: ffffffff8e678968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 390.720698][ T31] 1 lock held by udevd/15861: [ 390.725708][ T31] #0: ffff888034a7c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 390.735527][ T31] 1 lock held by syz.6.2829/16876: [ 390.740686][ T31] #0: ffffffff8f7a8848 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 390.750189][ T31] 5 locks held by syz.3.2830/16883: [ 390.755495][ T31] #0: ffffffff8f799ed0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cb/0x570 [ 390.765115][ T31] #1: ffffffff8f5036f0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 390.776265][ T31] #2: ffffffff8f5038b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 390.787356][ T31] #3: ffff888034cc4f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 390.798445][ T31] #4: ffffffff8f7a8848 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 390.808310][ T31] 2 locks held by syz.1.2832/16886: [ 390.813551][ T31] #0: ffffffff8f7a8848 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 390.822892][ T31] #1: ffffffff8e360c38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 390.834960][ T31] [ 390.837357][ T31] ============================================= [ 390.837357][ T31] [ 390.848179][ T31] NMI backtrace for cpu 1 [ 390.848199][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 390.848223][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 390.848235][ T31] Call Trace: [ 390.848245][ T31] [ 390.848253][ T31] dump_stack_lvl+0xe8/0x150 [ 390.848285][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 390.848310][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 390.848336][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 390.848365][ T31] sys_info+0x135/0x170 [ 390.848385][ T31] watchdog+0xf90/0xfe0 [ 390.848420][ T31] ? watchdog+0x209/0xfe0 [ 390.848456][ T31] kthread+0x726/0x8b0 [ 390.848488][ T31] ? __pfx_watchdog+0x10/0x10 [ 390.848516][ T31] ? __pfx_kthread+0x10/0x10 [ 390.848548][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.848576][ T31] ? __pfx_kthread+0x10/0x10 [ 390.848606][ T31] ret_from_fork+0x51b/0xa40 [ 390.848632][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 390.848652][ T31] ? __switch_to+0xc82/0x1410 [ 390.848687][ T31] ? __pfx_kthread+0x10/0x10 [ 390.848717][ T31] ret_from_fork_asm+0x1a/0x30 [ 390.848763][ T31] [ 390.848798][ T31] Sending NMI from CPU 1 to CPUs 0: [ 390.971423][ C0] NMI backtrace for cpu 0 [ 390.971443][ C0] CPU: 0 UID: 0 PID: 16856 Comm: syz.2.2825 Not tainted syzkaller #0 PREEMPT(full) [ 390.971464][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 390.971476][ C0] RIP: 0010:kasan_check_range+0x9d/0x2c0 [ 390.971506][ C0] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 390.971522][ C0] RSP: 0018:ffffc9000407f868 EFLAGS: 00000246 [ 390.971539][ C0] RAX: ffffffff8944f301 RBX: fffffffffffffff5 RCX: ffffffff8944f3f4 [ 390.971554][ C0] RDX: 0000000000000001 RSI: 0000000000000080 RDI: ffffc9000407f940 [ 390.971567][ C0] RBP: 0000000000000000 R08: ffffc9000407f9bf R09: 1ffff9200080ff37 [ 390.971580][ C0] R10: dffffc0000000000 R11: fffff5200080ff2d R12: 0000000000000010 [ 390.971593][ C0] R13: ffffc9000407fce0 R14: fffff5200080ff38 R15: 1ffff9200080ff28 [ 390.971607][ C0] FS: 00007f6697a4c6c0(0000) GS:ffff888125929000(0000) knlGS:0000000000000000 [ 390.971624][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.971637][ C0] CR2: 0000200000b7f030 CR3: 0000000076cae000 CR4: 00000000003526f0 [ 390.971657][ C0] Call Trace: [ 390.971664][ C0] [ 390.971674][ C0] __asan_memset+0x22/0x50 [ 390.971704][ C0] ____sys_recvmsg+0xd4/0x4a0 [ 390.971726][ C0] ? __might_fault+0xaf/0x130 [ 390.971754][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 390.971772][ C0] ? __asan_memset+0x22/0x50 [ 390.971801][ C0] ? __import_iovec+0x40e/0x7e0 [ 390.971826][ C0] ? import_iovec+0x73/0xa0 [ 390.971846][ C0] ___sys_recvmsg+0x215/0x590 [ 390.971867][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 390.971908][ C0] do_recvmmsg+0x334/0x800 [ 390.971931][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 390.971968][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 390.971989][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 390.972015][ C0] do_syscall_64+0xe2/0xf80 [ 390.972048][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.972067][ C0] ? trace_irq_disable+0x37/0x100 [ 390.972093][ C0] ? clear_bhb_loop+0x60/0xb0 [ 390.972114][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.972133][ C0] RIP: 0033:0x7f6696b9acb9 [ 390.972148][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.972165][ C0] RSP: 002b:00007f6697a4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 390.972183][ C0] RAX: ffffffffffffffda RBX: 00007f6696e16090 RCX: 00007f6696b9acb9 [ 390.972197][ C0] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 390.972210][ C0] RBP: 00007f6696c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 390.972222][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 390.972233][ C0] R13: 00007f6696e16128 R14: 00007f6696e16090 R15: 00007fff80fa28a8 [ 390.972257][ C0] [ 391.268398][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 391.275282][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.284406][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 391.294489][ T31] Call Trace: [ 391.297789][ T31] [ 391.300753][ T31] vpanic+0x1e0/0x670 [ 391.304784][ T31] panic+0xc5/0xd0 [ 391.308567][ T31] ? __pfx_panic+0x10/0x10 [ 391.313017][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 391.318423][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 391.324603][ T31] watchdog+0xfda/0xfe0 [ 391.328798][ T31] ? watchdog+0x209/0xfe0 [ 391.333169][ T31] kthread+0x726/0x8b0 [ 391.337285][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.341990][ T31] ? __pfx_kthread+0x10/0x10 [ 391.346604][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.351822][ T31] ? __pfx_kthread+0x10/0x10 [ 391.356430][ T31] ret_from_fork+0x51b/0xa40 [ 391.361029][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.366152][ T31] ? __switch_to+0xc82/0x1410 [ 391.370850][ T31] ? __pfx_kthread+0x10/0x10 [ 391.375458][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.380266][ T31] [ 391.383951][ T31] Kernel Offset: disabled [ 391.388285][ T31] Rebooting in 86400 seconds..