last executing test programs: 9m50.34880201s ago: executing program 1 (id=866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000697e83fe1c258129bb5ecdd95502118f490e8f3f8e68d74f2d66d78b2550fee1c73f9097cedf94364dce7d026717e03054a362a22cd4091a093b16684c906f4fc5fb9e5705be9dc3aef8259619483ecc39d1cb0b617fb07da418d2ec38127f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1a, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, r1}, @generic={0x5, 0x1, 0x6, 0x4a8b, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x27, 0xa, 0x10, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x28) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r3, 0x5, 0xfffffff7, 0x3, 0x5, 0x611, 0x1, 0x1, {r4, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x8}}, 0x2, 0x2, 0x9, 0x1, 0x17cb}}, &(0x7f0000000300)=0xb0) 9m50.012236235s ago: executing program 1 (id=870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r3, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 9m49.607855399s ago: executing program 1 (id=876): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5501c00bc5380ec5417e334bdf6cdcfaa0ff7aa50b679bffc313a324c7803d50566b11e97062e1eb55e280869944445c0d66ee1b", 0x34}, {&(0x7f0000000580)="14000000166c2163d25a80648456dc921f6b718d", 0x14}], 0x2}, 0x804) 9m49.403175046s ago: executing program 1 (id=879): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c) 9m49.244651388s ago: executing program 1 (id=881): poll(&(0x7f00000022c0), 0x58, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000400)=[{r1}], 0x1, &(0x7f00000006c0), 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x1ff) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r3, &(0x7f0000000500)=""/4096, 0x1000) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x400000008000f28, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x13, 0x0, &(0x7f0000000280)="630b776f25821ff387c5c90e101702b3f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x4044) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01200300", @ANYRES32=r9, @ANYBLOB="0c005a800800038004000100"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002000000000000090000000006001500040000008c0016808800088084000180"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 9m48.212962374s ago: executing program 1 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000190009002cbd7000000000000a201000fe0200020030000008001e00fc0300000c000900060002e2", @ANYRES32=0x0, @ANYBLOB="c855d986687695ae2087331b34e3162b297c1723d0d92a019faa34951d44ff2ab9b736919c61f92909e772caebb143d4b6bc"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) (async) pipe(&(0x7f0000000080)) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000890) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) (rerun: 64) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x3, {0x2}, {0x0, 0xf0, 0x3}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9648, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x1, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x83, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffffffb, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x10, 0x3, 0x9, 0xc, 0x8000, 0x3, 0x5, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0xa, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x301, 0x70bd2b, 0x10, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0x30}}, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c00000000000000", @ANYRES32], 0x30}}], 0x1, 0xc0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) 9m32.905524395s ago: executing program 32 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000190009002cbd7000000000000a201000fe0200020030000008001e00fc0300000c000900060002e2", @ANYRES32=0x0, @ANYBLOB="c855d986687695ae2087331b34e3162b297c1723d0d92a019faa34951d44ff2ab9b736919c61f92909e772caebb143d4b6bc"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) (async) pipe(&(0x7f0000000080)) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000890) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) (rerun: 64) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x3, {0x2}, {0x0, 0xf0, 0x3}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9648, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x1, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x83, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffffffb, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x10, 0x3, 0x9, 0xc, 0x8000, 0x3, 0x5, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0xa, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x301, 0x70bd2b, 0x10, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0x30}}, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c00000000000000", @ANYRES32], 0x30}}], 0x1, 0xc0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) 7.391985794s ago: executing program 3 (id=4433): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xec, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r6, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16a}]]}, 0x38}, 0x1, 0x0, 0x0, 0x404c055}, 0x4040000) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x4c, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008844}, 0x20000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x140d, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 6.165799079s ago: executing program 5 (id=4439): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000040)=0x2cbab48e, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="2c002d8005000400fd00000008000200030000000500010096000000080003"], 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000840)={0x1000, 0x1, 0x1, 0x2, 0x0, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0xa5adb000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @binary="11000000"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x1a4, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x8f, 0x8, "134e764523ed896ff4b6b4502b9d6b0d494b848193aa41a9b400758ec406ac8874eb24c5be230ef9da2d99d79b8d2ff1d56aa4153cdce4c55648cefc92f29908d03b31681c2304526ffcce59c7219a1be9e6dd38b6f7b6be0d344660e25600029b8bc1ab62d1d2c38e992903594ebf6bc43dd71f9316afd52457f215e368534ca4f20fdc63bb549b513f2c"}, @NFTA_OBJ_USERDATA={0x97, 0x8, "d23104fe6d0750bb1e976fce5f3d283905990f7ff4ae28d8aef610e43b4928bb045ce0863af8d15fb727fa956a964844a2c91489f9f61d022c0245fa631af817c51e6f38c1d466f8b4cc706530085d5b49b72551f9a8c57a134a8cca91641b620374eacef3e143bc7a110744fbdd84dc9d0d069165de6ba88b442ea2278ffb23bdaf6a1cdf97fdc4f5b89e3249a91e4a61217c"}, @NFTA_OBJ_USERDATA={0x4f, 0x8, "8e9e59223491b6c2994628f5e0e1ed28c22606fa8e7f61f206a9841a8d2fd8db3059a84ebf2374d77f84f6a12f8a24002e3544d57bc51a0ec2a67d12eb9ae7681ee2929bfca7dae2121072"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELSET={0x550, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0xec, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x21}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_DESC={0x134, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_DESC_CONCAT={0x128, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2450}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x258, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc12c}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0xd4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff781}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3adac4d1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x53}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae9a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf5a6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc66}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x89, 0xd, 0x1, 0x0, "d7f58503eee19d6931d420d1b4d8001069f0a4f2f9d0ba40c5c76fff12f2d3f4ae01d51ac1cf43cb1d2a4614389e781d4049eafeb32243443e8d87cb4ded90e0a0d02dffbe2eaf60a6d9e4d31e594eaf8fc73c7b850dcaa92cc8ede7246bf914db37a84e757789fe0a7b1ff231065bd39a59bf08e1a12d0e1d8b99f035964ee06aeb3a4372"}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x738}, 0x1, 0x0, 0x0, 0x200000d1}, 0x20000810) 5.943925183s ago: executing program 3 (id=4440): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="1d54ea9c3d30aa07d92afd171ad65e10d53aceca48f26ae515068fe7284065dfeaa68c8930d108569e89a429ffbb555abe306b", 0x33}, {&(0x7f0000000080)="9d68fc6d1dd2bcefef536d3900214ca0a9da8731ee8c69efb3f398be12a5996751bed4341d9b9561dfa19c7c5a5f4958b00c20c66fe1f631e2cc5f59e9385d218af1b51002f1d10b0e6d0d5b9b02b68eb57f0081a0b1b0abab023261d75adf64a016ad38cd8d51a2bb420c03b4dcdd5a562e3531918475b69c699e70fdcbd03a9bfe9cc3e216e8977c0325378e7088af0d741f844ff3f0e82d5044fa300acbffee029881aa94ebbb713cace14fbb979a89f4c1284481d2", 0xb7}, {&(0x7f0000000140)="865653b02c37e450d031acb32d959be4c7ece6c6e296bf0e3e5cdd2edadac7e60dc377ed26871a643fd35edbd1f957", 0x2f}], 0x3) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20080004) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x4, 0x2}, &(0x7f00000003c0)=0x90) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000400)=0x80000001, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @broadcast}, 0x10) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000580)={r1, &(0x7f0000000480)='\\\'..t(/\x00', 0x102, &(0x7f00000004c0)={@_ha_fsid={[0x2, 0x4]}, {0x8, 0x6, 0xb, 0xffff}}, 0x200, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x9}) (async) read(r1, &(0x7f00000005c0)=""/91, 0x5b) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000640)=""/18) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000007c0)={0x10, 0x0, "ecc37b5f87e558b90cbf3676b14d29d9"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a905b7ddb8f261e0d1740dd5e91c6c74"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80835) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000940)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x80, 0x8, 0x9, 0xffffffff, {{0x1f, 0x4, 0x3, 0x13, 0x7c, 0x66, 0x0, 0xf8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x23, 0x15, [@broadcast, @multicast1, @private=0xa010100, @multicast1, @loopback, @remote, @private=0xa010101, @multicast2]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0xf, 0xad, [@rand_addr=0x64010100, @multicast1, @rand_addr=0x64010102]}, @noop, @noop, @rr={0x7, 0x7, 0xb5, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @rr={0x7, 0xb, 0x37, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp={0x44, 0x1c, 0x83, 0x0, 0x7, [0x3, 0x5, 0x8000, 0x2d0b5aa7, 0x10000, 0x7]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'gretap0\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x7, 0x0, {{0x57, 0x4, 0x0, 0x9, 0x15c, 0x67, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xe, 0x0, [{0x5, 0x2}, {0x7, 0x6, "22d8e016"}]}, @timestamp_addr={0x44, 0x34, 0xc9, 0x1, 0x9, [{@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff}, {@empty, 0x946}, {@broadcast, 0x2}]}, @timestamp_addr={0x44, 0x44, 0xfd, 0x1, 0x0, [{@local, 0x10}, {@rand_addr=0x64010100, 0x10}, {@local, 0x9}, {@local, 0xf5}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@loopback, 0x7fffffff}, {@loopback, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x4a, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x1000}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@rand_addr=0x64010102, 0x802d}, {@rand_addr=0x64010100, 0x7f}]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "9f154a7688164aa6ae"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x0, [{@remote, 0x8000}, {@broadcast}]}, @timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0x0, [{@loopback, 0xffff}, {@loopback, 0xe65}, {@multicast2, 0xd30}, {@local, 0x80000001}, {@empty, 0x8}, {@loopback, 0x3}, {@broadcast, 0x80000001}, {@broadcast, 0x401}, {@rand_addr=0x64010102, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0x3b, 0x3, 0xf, [{@multicast1, 0x8}, {@rand_addr=0x64010101, 0xda}, {@loopback, 0xd}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000d80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000dc0)={0x1, 0x0, "90766a", 0xff, 0xe}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) (async) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000e40)={@private, @remote, @empty}, &(0x7f0000000e80)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl1\x00', &(0x7f0000000f00)={'tunl0\x00', r7, 0x8, 0x7800, 0x3, 0x5, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x67, 0x0, 0x4, 0x2b, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x20, 0x89, 0x0, 0x9, [0x4, 0x9, 0x40, 0x7, 0x3, 0xfffffe01, 0x6]}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x1, 0x4, "eb8f"}, {0x0, 0x3, "b5"}, {0x0, 0x4, "02b1"}, {0x5, 0x2}, {0x2, 0x8, "0707ad9bd6a6"}, {0x1, 0xf, "9faf62eaa38738349945193346"}, {0x7, 0xa, "6c663c468c897abd"}, {0x2, 0xb, "278140053984372c9d"}, {0x5, 0x8, "f6572183ebac"}]}, @generic={0x86, 0x6, "f600b412"}]}}}}}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000001100)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000001280)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)=@updpolicy={0xd0, 0x19, 0x800, 0x70bd25, 0x25dfdbfc, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e24, 0x8, 0x4e23, 0xa, 0x2, 0x20, 0x80, 0x67, r9, r10}, {0x0, 0x1ebe, 0x14ab, 0x40, 0xefeb, 0x0, 0xd}, {0x6, 0x2, 0x200, 0x9d4}, 0x168eea60, 0x6e6bb4, 0x1, 0x1, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0x1}}, @policy_type={0xa, 0x10, {0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000012c0)={0x1d, r7}, 0x10) (async) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000001340)={0x6, &(0x7f0000001300)=[{0xfd, 0x3, 0x81, 0x10000}, {0x77f, 0x3, 0x5, 0x7}, {0xffff, 0x0, 0xa}, {0x3ff, 0x0, 0x5, 0x101}, {0xfff, 0x8, 0x1, 0x1}, {0xe, 0x1, 0x81, 0xa3c}]}, 0x10) 2.901443006s ago: executing program 3 (id=4441): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) socket$inet6(0xa, 0xa, 0x3) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="009b2ac73184a50b82c700000000", @ANYRESOCT=r1, @ANYBLOB="00a3000000000000300012800b0001006d6163736563000020000280080005000d0000000c0001000001000000000000050003e90800000008000500aca543a707af56869c298360275c993f40ef6784028786ea848fbf97e61f247b0954e881dc00"/109, @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) 2.891224413s ago: executing program 5 (id=4442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x4, 0x7}, 0x10) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) (async) sendmmsg$alg(r2, &(0x7f0000002e80)=[{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000040)="a910ec64ed6d4496f9071f997bc8b09fd62379a8be35f5f3f7062ad6d5bb0cc4b201025fcb", 0x25}, {&(0x7f0000003240)="af08d1245c753d59b1fb0bb8e2a77f8c8edfc363c4409b64f9898061ee0ca207ada0ef76e26cb71a561955ac6c3a5cb898a923ab27030a2b630b60e3286b0cc60aba017491f0cc2e151bca43dc81a527f0299290b3dc29bf43b6d2413f5fcd72778f754d05f8fd9fecd593a5d779661fcb369822c5504f529fca8120aed9a5872276a8992404f414b714da9cef144c54140487576c6c41e17f2d4308211c6a859ca83a427786", 0xa6}, {&(0x7f0000003300)="aa5a054755081e3d9715e1c50787974f14ef08e826113ee55a9aa6cd20401aef7fa078461979f1495460abe1c145a3349568e108c98c16bb6009d299092be379a1c383bf26cdcd10d95ca8dc504ae84969b2b226a8435ecb2d5510c4e43d13b350992a26c69b20b96301ae0ed6dbf765ff68", 0x72}, {&(0x7f0000003380)="ba8b0689849c6f48987356eba6af5a7673ef551a14a2442e6e7406ee40efa47bc06a82d641e61865d5ebf2cf7486870249693714b58d8f96f6fc81bff51ab0199e4701b93197e05848b2c79b06dc74532b99855054326d264a", 0x59}, {&(0x7f0000003400)="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", 0xff}, {&(0x7f0000003500)="e8165ad83974c6379f2441a1f485ac3d00e3d985ac315ca21e3fb24ee4a5e7aa749af574e6c1910cb7692f2ef88400fbf8a928a885ed628531c465dadad5cd17df9042a1c6246d74268cb55c12a89a6561fb784c7d5128b3e874467303b3176dc7ecf5a029e87c1bcae5f7999b7d25f930f6b58b95e1b0404043b67515175ad1d9d8fa2e8645b25538410ee4715c1f6d852c35d335834800349f6a28f8bc93d6460a5dec8c33594a74702bd819a7a4433b4848ff9f3d6a586b747e28582acf3f7e6fd92ebd346756ee4a61e7e348c60fb9ea6c1d47541d90dfb5dd17af4b32bda868f83ae5c6bd70fbdf37dcd8861f5506a4cd615b", 0xf5}, {&(0x7f0000003600)="e9ddc555a8601402327cbcacb6ab618b3e70ef142de1f6576b5c06b0f34d160a650e99488f357550b9c14d5c5ced177508f32aa41d582c6facbe032d889b4e21a3ae65b0eded", 0x46}], 0x7, 0x0, 0x0, 0x40055}, {0x0, 0x0, &(0x7f0000000040)}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000005c0)="d9a811b27556456807134881a9b373bc7581b8b3f38b526a8765746d09d43003742767c3ee5d3259cf9a8d541e3492e6262c7dce0863e95d646757f935902ed4ddd61f273f3f1986f126028ba424a79c12a655b88eddddabad4a9065d8490044baa80ff1d39acd04d72297d8ba965aa1c78a2ceb7aae46ebdfa37bdf1c8db6190fac2d2f0837fa314608afda16ea5a08402225efaa", 0x95}, {&(0x7f0000000680)="ded40d7145ee77bffcf1de508b066b8353201b37c855208288ae0534d4e03ac5d0133859d00400afb4d069f105e3aa5c2d68816b8b115af201994abc5e3ea0470f810b5a7379cacf6d55a2965d939fd39d2424b00874a482fed6217879277473ebb1079f46ff81b4a844bf85d81e42cd67723930d74ddf3f5e626ce0ca1786fb04a0d8c179457ed76f896e34f6c08add2c811a0abed3798188ce33c83b485592d5ccde7095dc3aef86ee61023cbef68c8a071d4e29f09abb787da996ce4af075c42827a2b5b082cf6340fb6dde076cfbc40b8d377e8de515dc7d7a0cb6157363c20d06026ae60f1ebbe2a551f9d095c0a9daeebe79bb0a49", 0xf8}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000003700)="4684e78d7257ebc794171e4cc2d2faad8b90c45d6ca4ba3007852e1bc9a10a1b8874d8d9ce193e5601961da33b383f1b5f58601a727a95d908b12bfa6773bedafc0c816172a51f44c897ceae91cbd7972f01062b3dd00ff5641c733de2292d97a3510d70c5c98a7021e173878956ed5b5acdcd2da13afc278fb6667c088c0c25277acd47479614ebda5c83024ffe5109730b0eab943ec562142989e8b06f5cdb01a1d84de30f2fa128324299e6cb26daac8ee57321dd", 0xb6}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="85cbea05ac9bdbb018047085e2942e7c8327b1862781d11a911a12eef663780f35ffe17db48fb3ef5048e30b17e2395154de05b704c6fef4a4d2191d46869df936158660e7d2b6", 0x47}, {&(0x7f0000002900)="1332c007600d3d1851bafe277ec75e07cc6e2d259703d43341ad6a615626fc24a5c6c24126456bf9545c3a1c3aa7f7bb6f7cc1aae7a0d3e715569903a87345dfd03bab067bc7d7c7ba0d990ffb6fbaab4712704206ea5d7a66e51c5dc1b6683c6ccd34a1974591636dc64312115772db13ce538f00dae143204cf9aa107fd85cfaf2dc0a62a4702f3b473e180656126909494a0f621a48a88e7ae30f44f1a227e27de45149d83653f1d536ed7936412bce40bb7104d1c81691034aa98bc95702efce1a149c5df20333a4f681e3b83c593a9ece7cec8e8ab63d74f8d4c2a5f205", 0xe0}, {&(0x7f0000002a00)="9a08fcb8d91ce29210377b8e4afcff66f626a0601372524c9b63e84c8f16159129eca4be24b3582248eecf4b0563569fec67a64515aae89f0204237b62cbcba14b7a4350e5de94c814e348183c1e3d04a349f4", 0x53}, {&(0x7f0000002a80)="874aa40eba8995e1471e3cb2fda093cfec2e885db39bd3fc3228b7f22355b09bdf702bbc4c6ee43fe070faab0ffcc1193752100ffe18b6887b3ebd6ef65058b7d2d5cab8d17c45c18519bacc0d11d609c5d7bb20048a8c9b391c526485e6397c3722", 0x62}, {&(0x7f0000002b00)="c6b137b56728fcea5152f882e89db8a2c2e027a1fad35e66a73b8951bc16d2441ca1999f2503727336d880de8b2e8c5dfbb00a774d10ff6ad44a45a2c8ce5b75abe6667b12fd92a4cef42232d255b654173fde22329ff68639b47ee09a0ac28a61ba799a0e745adeb3731199401b0ff103c5953a9145707270a82960f3fdf907d3bb8a45", 0x84}], 0xa, &(0x7f0000005800)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x50, 0x117, 0x2, 0x3c, "9a445795b42787d3ebaf55e482d9520398987f5098f2db8ae1142fbaa48f143a53f960100370a166b099f5677e56dffe689f53819c4c64874ed67aa4"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x81}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x78, 0x117, 0x2, 0x5f, "aea5e1a482117be9dedf69a28e941439baa902a05138fa73d03e4a0f92bad02d0715e253d4668d10979afee371f960973ef89f85e0203bf2635b80ccd1ab601a62e92353abcbb80e0857124f713de999bc3a4abe8d0078099d016ff3e1d4dc"}], 0x1158, 0x40840}, {0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002d40)="ee1071b08debc28230005ba0f4262da2c97f2f66e35ac84640981a3b4da04615471e3527300dc4a8f86e125964b83814dfa95320df2fae5b439219f0ca1402cc64cd6d451f306fec2e25dd53b757257a889bae64baf6a2e781afb5709a0f9283bbcf256ddeb52fb08b7418db4c5c6e06421746597bf9bcc2737c772cda2b8ab5cd134003b630fa350b124523f444775c42cbe466f4f294b04f2ea26375a44d20e2d7b535600e5a59c2d75cf3a10b6c94a62c150f9ae0c5a35c361712895f14f5a35bf7927f8dfbaf2d46de55b24551a003b131e541a3b84450ba61f40dc67f16ffadb48b48f705a5aaa22f0a45e6900b9b0b", 0xf2}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7b7ad61543c613ac6bc8dcb8d1857e52454043cdad23cb35067f3c737e4cac8fc84e911e2e4d45e9b092b97b20f56a75de9d931346d0d621b7a24e9579e3037ce1392e6cb0f84efea8ccb926081bf5efaa5de638df588e38315a18b3d726a6b8a59766d3498754fbca4fd0d5a8ca0ef9c9c135d4efc491c0152f55"], 0x10f8, 0x4040081}, {0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003f80)="04e0a5a57107b10ce78fd74f18e3f2d3012c4b377afd459a54e151891c5503af37f98f59e2d142c8e5ad3ac463ef97bfc81e51c48506dfa4e0", 0x39}, {&(0x7f0000003fc0)="3306a989d230b6ee6827f5424a4c282b0bb8b65ad44b6a6e3d8bafe2858220c085cc46977ac5974f3cb4989998af793048ce4d44dd2b1a7a7767a241fb2d59c8a83795d8daae6932f4576c7ea4e0af70854b0b5399ea9b2256b0c8268b24c22c226a11bc5e30650e47e82e8603fdf10fda1e70b3d78c8f74d8f770af21e46590f8", 0x81}, {&(0x7f0000004080)="4597cbc675fe946674e96aa4f7397b704d3e40a924aae45b33c967fd26f259e9cd31aed67080138ceb88d3c61ab58faccc75a6d37d3cfd111b569fe2bd5e9d0af4c27c6e41ee82d05bab20bfe33be1fb921716a87683c92e108fe13a2eb229339fc2416fa860b31546133e05535f94ce6ef4d982bc7536acbeb2c1ceb9841e76bb41e587f1e2a892d4677062df1dc8923f686045702398f1bed1ab23765315e8d30562ea1089c62f4ef2ca4860f7e3df6f0a46f006484fdc8e4a772846d1c0c4a83345ed16272f38af7639a0d3cd0d4ab067af5fc75879d93776abf1ac471b24416ef09460014d40309421b669743e9e6852b916d2", 0xf5}, {&(0x7f0000004180)="29a7698d00abb2b21118914aba3233251a235493983240241d291abc55dbbcb526369916e3dc177e0fbe4e5476c1537174581cdaf20d0243a58042cc92fefce7e1e9f5b2c87416bdd17220efa52d27d70b4bf3e12c7be46c792b54eac3600d8e8474092e21bdcf7369822cc481547e011ccbe6a1d77fc79e993c40441cd87d13f24569d11af4ef28114f7462dae61ec20b79daeb3dfd8332dcef281cacf75d39778cbe32007157cd73e50ed24c223080819520c306692616141f3cdde856241b119f7be69d64a61bd9fe6429c148103489c90eda18dd9089e3faf8caf4f5cc0f90bdf86da67c56e07b66561786bc", 0xee}, {&(0x7f0000004280)="5fa1b7aa63a2ef6fabdd2e200fe4d2c3e155a782af0bb864ffa1f5ca6bea869ea3d7b25b4e", 0x25}], 0x5, &(0x7f00000037c0)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000e0000000000000111701000002000000c8000000826e7d70e49e467934c97a8cd2c9520132243cd2e43e154c198bd2e50ee5871ad3af35952214c46ac24cc93f05b10002868921f2ebd70ea1f7fd5a6fcd0c25d218e67904da6702cad4a69c87d8a8fdf4cd500264981a39b7ec1f48edf9ebed4c8a13eb06c6dd19d356468ef9dd6da0090f3c65c3e968c6ccc8748a653618a0c67b0a0000000001000000be7d211fceec23ad009990d3c159a4a4a6cd19c3d716ad9d59d17d31dca1be694365a9a9d554f8b2975a38608979df558942d48238a9008f397eea0e68d80000000000010000000000001701000002000000e5000000ee0e8206ef9d9827c7fa1afb12b4f9dcea7965b90c4d6d7cd076130b79faa5d80c8458d8f1f11c2ef987674d4e6c7307004b02bdeb97279af70f850dca3e97c26c3ed2e0c66c6825a4d1dd5c7109fa8b1a05062f52aada4f6d3d1da2dac9070550a56c890757500a3314cbcb12d8c5bc1f2051de9013fb32e14a749ceee5448111c114e9a5060b9d6711a31006bdcdcd433829e3220caa3cb9ae0dcd2983c6f24b9ee94ff782e48d8f112a3e9ac85682432dcdb19aa7a9fe3e8557a102fd9c2b4b16c24789998a7b311b5d17670f7f7356f355a32f0000000000000018b5bda4af181be3c2b157baf528fae852105d67364ce6d768b901ed971da1030fa84df573416ba87e23daff45b4c50573eed9231c6df309d89c1eb6aada44c5bd9dcf84f94b2e57f7cf6124c34ea4b1d9a25773116c2d605d527a09e83db3104da49d9be7ba5a611163000978e9030000000000000063b899aba29c6a2bdcaf9b90ed62000000000000000000000000000000007d7513f678c9fd25a6dd81ff335331c826349aeb2778be090905b999317c17994c98341c54b67536c0ad50ef92575d3d66c65fe1bbc318ef7ead5cbe9bbbb27372d79b59c5e4633cb852f5ffdc115c6a08216f0460d5abb7599c8a9cec223230602f314091a6fe774fb167824a11ba3658b6edd12390d8fdbfec67104bb1438fce0477ade4a5d6ccbb6a99cd210591"], 0x1f8}], 0x5, 0x1) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) (async) r4 = socket(0x2, 0x4, 0x7) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000280)) pipe(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0xffffffffffffffff, 0x40) (async) r7 = openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x7a05, 0x1700) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r8) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="22000000ee1c2b446d4a3a8b7caffacf0ab5a76c79763f5746efc7276b394ebd0d45c2c1860dae86f7e4dc7e", @ANYRES16=r9, @ANYRES16=r8, @ANYRESHEX=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20008811}, 0x890) connect$inet(r5, 0x0, 0xfffffffffffffdab) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0x1000) (async) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) write$cgroup_int(r7, &(0x7f0000000200)=0x10001, 0x12) (async) socket$inet_udp(0x2, 0x2, 0x0) 2.881935947s ago: executing program 2 (id=4443): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f8000000000000000000000000000000000000000000006a50dc87623c3539e8e41b2b4e6046efb584ee861665bb3b7f4b4803540c98433b2b8f33d90e9d48d55830"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r2, 0x220, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x200400c1}, 0x8002) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRESDEC], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0xe, 0x0, 0x0, 0x5, 0x0, 0xed}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0x1800}]}}, &(0x7f0000000f40)=""/4087, 0x32, 0xff7, 0x2}, 0x28) 2.426288478s ago: executing program 3 (id=4446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd70000000000001000000080001000300000014000480050003008000000005000300070000000800020003"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e0000001080002"], 0x64}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x861}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604"], 0x0) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x1f) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x93, 0x20040000}], 0x1, 0x8004) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff020000000000000000000000000001010390787f00000060e1f5880007e023b7241fab762b746300ffff"], 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(r10, &(0x7f00000003c0)=[{&(0x7f0000000100)="ba", 0x1}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f0000000400)=r2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="f300404e0700000000000000000036e9ee09e2ccef3cbe4336bdd205903ec4045bb4f4feec7a0c25da370e463bd2b01bec5f66ea092941a6147456f0adb9763b6204933200"/80, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) 2.166755525s ago: executing program 5 (id=4447): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x11700}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4600}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = epoll_create1(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d2688a2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000100)={0x11, @multicast1, 0x4e23, 0x0, 'lblc\x00', 0x30, 0x6, 0x112}, 0x2c) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000900)={&(0x7f00000007c0)=[{0x2, 0x0, 0x3, 0x6, 0x1ff, 0x10001, 0x8000000000000000, 0x26cb7944}, {0x1, 0x0, 0xff, 0x3, 0x2, 0x5, 0x1, 0x101}, {0x2, 0x0, 0x4, 0x3, 0xb, 0x1, 0x8, 0xffffffff}, {0x3, 0x0, 0x88b8, 0xde, 0x10, 0x8, 0x3, 0x1}, {0x3, 0x0, 0x93, 0xffffffffffffffb0, 0x1, 0x6, 0x9, 0x1}], 0x5, 0x38, 0x0, 0x7fffffffffffffff}) (async) r7 = socket(0x10, 0x80803, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000097cd4498bf2c450dd7f12fb3721a5a2962f83d5c964cd469d5317bd12f4852766f9db06df89eca8aaab6ba2a9a49560f0bdbc2", @ANYRES16=r10, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000100007800c00018008000100", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x5679, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x138}}, 0x800) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) 1.951907349s ago: executing program 5 (id=4448): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907002400", 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0x7}]}, &(0x7f0000003ac0)=0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038002e001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r4, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.856996165s ago: executing program 4 (id=4450): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0x7}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/182, 0xb6, 0x0, &(0x7f0000000380)=""/118, 0x76}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000480)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0xf, 0xf, 0x7, 0xb84, 0x7}, @exit, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}], &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x89, &(0x7f0000000600)=""/137, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x8, 0xfffffff7, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x3, 0xe, 0x8}, {0x3, 0x2, 0x10, 0xb}], 0x10, 0x5}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') connect(r3, &(0x7f0000000440)=@isdn={0x22, 0x7, 0x4, 0x9, 0xe1}, 0x80) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1402, 0x200, 0x5, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x815) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x212, 0xffffffff, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "ee6a4130f0506500"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000ac0)=@broute={'broute\x00', 0x20, 0x3, 0x3a2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000700], 0x0, &(0x7f0000000280), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x60, 0x88e5, 'wg2\x00', 'dvmrp0\x00', 'vcan0\x00', 'hsr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x9e, 0xce, 0x106, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x2, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0x3, 0x2, [{0x5, 0x7770836d03a036db, 0x8035, 'ipvlan1\x00', 'vcan0\x00', 'hsr0\x00', 'netpci0\x00', @random="a6247c17bf56", [0x0, 0xff, 0x0, 0x0, 0xff], @random="d583a979b317", [0x0, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}], @common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x11, 0x4, 0x8864, 'veth1_macvtap\x00', 'pimreg1\x00', 'team0\x00', 'syzkaller1\x00', @random="9b2c879354c9", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xb6d4590f5d87285a, 0x0, 0xff], 0x6e, 0xce, 0xfe, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x41a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) write$cgroup_int(r9, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x54, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffffffffffe04}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000500000000000000000000040000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xc3c, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x9, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xd}, @jmp={0x5, 0x0, 0x7, 0x9, 0x0, 0x409d3fff583e3e41, 0x1}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x3, 0x3, 0x647397956fd6c219, 0x1, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000100)='GPL\x00', 0x81, 0xfd, &(0x7f0000000140)=""/253, 0x41000, 0x18, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x2, 0xffffdeed, 0x4}, 0x10, r1, r2, 0x2, &(0x7f0000000ac0)=[r9, r13, r14, r15, r16], &(0x7f0000000b00)=[{0x1, 0x3, 0x9, 0xb}, {0x2, 0x3, 0x4, 0x7}], 0x10, 0x7ff}, 0x94) 1.73231184s ago: executing program 2 (id=4451): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) (async) socket$nl_rdma(0x10, 0x3, 0x14) 1.63312271s ago: executing program 0 (id=4452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@float={0x8, 0x0, 0x0, 0x10, 0x8}, @enum={0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @const={0xa, 0x0, 0x0, 0xa, 0x4}, @ptr={0x1}]}, {0x0, [0x1e, 0x61, 0x5f]}}, &(0x7f0000000200)=""/197, 0x65, 0xc5, 0x1, 0x8b, 0x10000, @value=r1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x4, 0x1, 0x4, 0x1}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090027bd70000000030007005942184b5f09a7b61e00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 1.492142046s ago: executing program 0 (id=4453): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20021081}], 0x1, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20021081}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000002000)="98", 0x1}], 0x1, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.341107666s ago: executing program 3 (id=4454): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000600), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) close(0x3) 1.272925302s ago: executing program 4 (id=4455): sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r3, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x101}]}}}]}]}], {0x14}}, 0xe0}}, 0x44840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x4}, 0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.191610481s ago: executing program 0 (id=4456): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000240)) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xfff2}, {0x0, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4cad4809, 0x400}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x7}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfffffff6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x58f04d8a}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0x90}}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x1e, 0x802, 0x0) r7 = epoll_create1(0x80000) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x1c0002009}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0xfffffffffffffd14, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x4, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x4008052) 981.047731ms ago: executing program 5 (id=4457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r2, @ANYBLOB="010024bd7000fcdbdf2501000000000000000141"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5786dd6c370c8900082b0000000000000000000023000000000000fe8000000000000000000000000000aa"], 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) 934.596443ms ago: executing program 2 (id=4458): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000240)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffe, 0x0, 0x49, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x2, 0x0, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102, 0x80}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000}, {@multicast1, 0x6}, {@local}, {@rand_addr=0x64010101}, {@multicast1}, {@loopback}]}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x4, 0x0, &(0x7f0000001680)="db6928e8"}, 0x50) sendto$llc(r0, &(0x7f0000000000)="f726295027e80dd177b0c04fad195080bfad534bb89d47f863de5e0f1a26a37dc7023d0bd04e100f3be77ae184b1fe0a2d83489394216ec25573809b237754305a94685f9a0d08262c29c1331addc258f3bc83c7f262412e1a15fec020ddfdba264edb803c637c6e25c537e34884cbfba69a615297", 0x75, 0x4, &(0x7f0000000080)={0x1a, 0x307, 0x1, 0x0, 0x9, 0x6d, @multicast}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@frag={{0x30}, {[0x7fffffff, 0x50], 0x3, 0x0, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x5, 0x5, 0x33, 'netbios-ns\x00', 'syz1\x00', {0xd4c2}}}}, {{@ipv6={@private2, @local, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'pimreg1\x00', 'batadv0\x00', {0xff}, {}, 0x67, 0x5, 0x0, 0x72}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000240)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffe, 0x0, 0x49, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x2, 0x0, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102, 0x80}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000}, {@multicast1, 0x6}, {@local}, {@rand_addr=0x64010101}, {@multicast1}, {@loopback}]}]}}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x4, 0x0, &(0x7f0000001680)="db6928e8"}, 0x50) (async) sendto$llc(r0, &(0x7f0000000000)="f726295027e80dd177b0c04fad195080bfad534bb89d47f863de5e0f1a26a37dc7023d0bd04e100f3be77ae184b1fe0a2d83489394216ec25573809b237754305a94685f9a0d08262c29c1331addc258f3bc83c7f262412e1a15fec020ddfdba264edb803c637c6e25c537e34884cbfba69a615297", 0x75, 0x4, &(0x7f0000000080)={0x1a, 0x307, 0x1, 0x0, 0x9, 0x6d, @multicast}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@frag={{0x30}, {[0x7fffffff, 0x50], 0x3, 0x0, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x5, 0x5, 0x33, 'netbios-ns\x00', 'syz1\x00', {0xd4c2}}}}, {{@ipv6={@private2, @local, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'pimreg1\x00', 'batadv0\x00', {0xff}, {}, 0x67, 0x5, 0x0, 0x72}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) 876.841825ms ago: executing program 4 (id=4459): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x8, 0x167, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000900)=ANY=[@ANYRESHEX=r5], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000e40)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000007b40)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r10, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000740)={0xbe, {{0x2, 0x4e20, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}}]}, 0x190) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000022000000910a40000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{}, [@jmp={0x5, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r11 = socket(0x2000000015, 0x80005, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) recvfrom$packet(r11, 0x0, 0x0, 0x40000022, 0x0, 0x0) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r11) sendmsg$DEVLINK_CMD_TRAP_SET(r11, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="24010000", @ANYRES16=r12, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) getsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f00000002c0), &(0x7f00000003c0)=0x8) (async) ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, &(0x7f0000000a00)="7d8d99f08e72aec0308ccc6c2b811ace6a8d0a95098134a4ea538aa3bd4a71844603e60ed408fc9f0a14cc902ba9ea44790f7861bb7394d338ff01662e3a139d78b2eeda88cf1627a15c7ff9cfdec07635f74f5ee844d14e45f4dacc22635795a9e45919abed0fe9f494ae7ea3e0cbba2887d1fb55300c1ceb359b01e0f4878b3aab0332b0199aa08fd25a3923192a7f1acd901528f66b3f3d057344bc9572533567de0e9a97aaf1f58001d78a43ec3f8849e123ef72f63b1c6b89944243846349949407d4") 745.386698ms ago: executing program 0 (id=4460): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x20}}], 0x1, 0x800) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x28, 0x2, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0xfffffffe}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 697.123488ms ago: executing program 2 (id=4461): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 657.060141ms ago: executing program 5 (id=4462): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x200, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0x0, 0xa}, {0x10, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40055}, 0x4c050) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000120000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001"], 0x34}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r10 = socket(0x8000000010, 0x2, 0x4) write(r10, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000001030000000000000000000500000608000740000000002c00020008020000080002004000000008000100000200000800010008040000080001000d0a00000c000580080001005241530010001700000000800000000000000008"], 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000004) r11 = accept4(r1, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80, 0x800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r11, 0x6612) 565.794899ms ago: executing program 4 (id=4463): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000e9ff000080"], 0x26}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) connect$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x8000, @none, 0x100, 0x2}, 0xe) (async, rerun: 64) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (rerun: 64) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r3, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20126084}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x800) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%-5lx \x00'}, 0x20) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x4, '\x00', 0x0, @fallback=0xf, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, &(0x7f0000000040), &(0x7f0000000080)='syzkaller\x00', 0x8, 0x26, &(0x7f00000000c0)=""/38, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2a, r2, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xf, 0x81, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x3, &(0x7f0000000480)=[r6, r7, 0x1, r8], &(0x7f00000004c0)=[{0x1, 0x1, 0x10, 0x9}, {0x0, 0x3, 0xd, 0x3}, {0x2, 0x5, 0x2, 0xb8b5ea73f60cb4f4}], 0x10, 0x7}, 0x94) (async) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0xc6, 0x41, 0xc0, 0x7}}], 0x20, 0x4048800}, 0x0) 546.099485ms ago: executing program 0 (id=4464): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4820, @broadcast}, 0x10) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000180)={0x2, 0x0, @multicast1, 0x2}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRESHEX, @ANYRESHEX=r7], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002800128009000100766574680000000018232a44c7d325b8d2000000", @ANYRES32=0x0, @ANYBLOB="4004010000000000000a00005dac83936bba3d819e588fd10bf3baf44e8f3e82f7e69e1160c52a957cda085c3bad9bbdf5149b389c2175984c296d2ae71a7bd01710db5daca423efffcd3266fefec5974e0d9157b6b582f83622e2e704fbc9709f7eae9400feacf59c1833b9638a6f5a362d87b9038a4195ec7a2dc6600459e59eecfd55985ae6bef457c3ec76e2e676d5a3b56f01846449f3154a7c4c5379aebc58b66e6c9253ce028fd224830dcd8a28fc9198c7704e8c52e5bf83c544", @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000002090104000000000000000b8cabd20aa69119ef363d3ad6ce9707a75875ba3819f416f53d6a4919daa1c7d18fc02d56850ddc4a49713b13b24b97946f9a5bca87b132c3db252ac51b0560fced318527f1a078bf6fa62a4165ec1aa8b8b75c4faf2e207b5ab77759b01a78090ab689590fdad3a3a746a8fbd9827c036b59c65b08ce1fde8f785a6265ee758d048486b897f7c45aa7bd7ee1c2086be39b0302dd78c0e5c9ce08ae43a4a523a3ab6a12"], 0x14}, 0x1, 0x0, 0x0, 0x24008840}, 0x10) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) socket(0x10, 0x803, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200800, 0x0) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r11}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r11}, 0x38) 434.706234ms ago: executing program 2 (id=4465): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x33fe0}}, 0x4000050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 297.898098ms ago: executing program 4 (id=4466): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010069bd7000fedbdf253f00000008000300", @ANYRES32=r7, @ANYBLOB="3c005e80080009000800001008000600c7f20000080005004d0000000800050022000000080007"], 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r5, 0xa00, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1b}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xea85}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x8044) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) (async, rerun: 64) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40400) (rerun: 64) r8 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x29, "322e860567997d0457ea220451f5c0bf019f60e94b9e55f65e27232bc238b939d37d006d39067ff813"}, &(0x7f0000000280)=0x4d) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) 221.064599ms ago: executing program 3 (id=4467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb", @ANYRESDEC=r0], 0xfdef) unshare(0x22020600) socket$netlink(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1, 0x21}], 0x1, 0x1000) 144.634101ms ago: executing program 2 (id=4468): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x80800) recvfrom$l2tp6(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 137.412462ms ago: executing program 0 (id=4469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x0, 0x2e, 0x9, 0x0, 0x0, 0x3, 0xf258, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000003280)=""/4121, 0x40f00, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x409}, 0x94) 0s ago: executing program 4 (id=4470): unshare(0x4040200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): family 0 port 6081 - 0 [ 513.517310][T18724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.541809][T18724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.551241][T18724] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.562183][T18724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.575078][T18724] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 513.704065][T18533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.721888][T18533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.888441][T18744] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3023'. [ 513.910506][T18533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.922796][T18533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.032516][T18747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3025'. [ 514.267285][T18759] netlink: 'syz.5.3027': attribute type 61 has an invalid length. [ 514.275959][T18760] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 514.299990][T18533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 514.332953][T18533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.349841][T18533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 514.379860][T18533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.390104][T18533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 514.414976][T18533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.437269][T18533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 514.455658][T18533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.668639][T18767] bridge4: entered promiscuous mode [ 514.683153][T18767] bridge4: entered allmulticast mode [ 514.770969][T18783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3030'. [ 514.867879][T18533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.907210][T18785] netlink: 'syz.4.3031': attribute type 4 has an invalid length. [ 514.925202][T18533] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.957637][T17197] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.964906][T17197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.029664][T17200] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.036999][T17200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.059070][ T5620] Bluetooth: hci2: command tx timeout [ 515.154993][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 515.190864][T18791] netlink: 'syz.4.3033': attribute type 10 has an invalid length. [ 515.227555][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'. [ 515.287806][T18791] geneve5: entered promiscuous mode [ 515.320022][T18791] geneve5: entered allmulticast mode [ 515.420289][T18806] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 515.524451][T18810] netlink: 'syz.5.3037': attribute type 3 has an invalid length. [ 515.551532][T18810] netlink: 'syz.5.3037': attribute type 3 has an invalid length. [ 515.731060][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 515.791508][T18817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3038'. [ 515.828415][T18822] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 515.841603][T18822] bond8 (unregistering): Released all slaves [ 516.188443][T18846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.506426][T18533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.670731][T18533] veth0_vlan: entered promiscuous mode [ 516.733138][T18533] veth1_vlan: entered promiscuous mode [ 516.752455][T18871] netlink: 'syz.5.3049': attribute type 12 has an invalid length. [ 516.872940][T18533] veth0_macvtap: entered promiscuous mode [ 516.926072][T18533] veth1_macvtap: entered promiscuous mode [ 517.035590][T18533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.091706][T18533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.139015][ T5620] Bluetooth: hci2: command tx timeout [ 517.181647][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.288790][ T9448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.340256][T17197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.406269][T18897] netlink: 'syz.4.3055': attribute type 1 has an invalid length. [ 517.436275][T18902] netlink: 'syz.4.3055': attribute type 1 has an invalid length. [ 517.444391][ T9448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.472243][T18905] netlink: 'syz.5.3054': attribute type 1 has an invalid length. [ 517.545228][T18897] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 517.556305][T18902] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 517.601355][T18905] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 517.834339][T18918] netlink: 'syz.4.3059': attribute type 9 has an invalid length. [ 517.843800][T18917] __nla_validate_parse: 3 callbacks suppressed [ 517.843829][T18917] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3058'. [ 517.873854][ T9448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.907157][ T9448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.952739][T18917] 0·: renamed from hsr0 [ 517.977737][T18917] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 518.000760][T18917] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.024151][T18917] 0·: entered allmulticast mode [ 518.030636][T18917] hsr_slave_0: entered allmulticast mode [ 518.041276][T18917] hsr_slave_1: entered allmulticast mode [ 518.047030][T18924] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 518.057284][T18917] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 518.263717][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.307069][ T9457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.336024][ T9457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.379900][T18931] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 518.393117][T18931] syzkaller1: linktype set to 823 [ 518.535648][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 518.632408][T18949] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3065'. [ 518.953890][T18956] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 519.101576][T18938] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 519.312990][T18963] vti0: entered promiscuous mode [ 519.345667][T18963] vti0: entered allmulticast mode [ 519.383945][T18963] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3071'. [ 520.345456][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 520.360538][T17340] Bluetooth: hci3: command 0x0401 tx timeout [ 520.374824][T18980] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 520.385748][T18980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 520.400943][T18980] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 520.410482][T18980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 520.534057][T18989] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3077'. [ 520.697105][T18995] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 520.735308][T18995] bridge2: entered allmulticast mode [ 521.772371][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 521.795534][T19008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3080'. [ 521.813141][T19008] IPv6: addrconf: prefix option has invalid lifetime [ 521.874881][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 521.885339][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 521.922391][T19016] netlink: 'syz.3.3082': attribute type 16 has an invalid length. [ 521.961245][T19016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3082'. [ 522.102023][T19022] tipc: Enabling of bearer rejected, failed to enable media [ 522.210793][T19027] veth9: entered promiscuous mode [ 522.224059][T19027] veth9: entered allmulticast mode [ 522.239406][T19027] team0: Device veth9 is up. Set it down before adding it as a team port [ 522.499223][ T5620] Bluetooth: hci4: command tx timeout [ 522.517479][T19034] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 522.686306][T19039] netlink: 'syz.5.3086': attribute type 4 has an invalid length. [ 523.459147][T19056] __nla_validate_parse: 4 callbacks suppressed [ 523.459166][T19056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3092'. [ 523.578469][T18970] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.608011][T18970] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.640431][T18970] bridge_slave_0: entered allmulticast mode [ 523.654590][T18970] bridge_slave_0: entered promiscuous mode [ 523.743090][T18970] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.765185][T18970] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.798770][T18970] bridge_slave_1: entered allmulticast mode [ 523.822920][T18970] bridge_slave_1: entered promiscuous mode [ 523.930047][T19069] syz_tun: entered allmulticast mode [ 523.964598][T18970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.979907][T18970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.110528][T18970] team0: Port device team_slave_0 added [ 524.128407][T18970] team0: Port device team_slave_1 added [ 524.223849][ T9448] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 524.254938][T18970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.263738][T18970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.293907][T18970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.307044][T18970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.314694][T18970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.341661][T18970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.411875][T18970] hsr_slave_0: entered promiscuous mode [ 524.418951][T18970] hsr_slave_1: entered promiscuous mode [ 524.425487][T18970] debugfs: 'hsr0' already exists in 'hsr' [ 524.431878][T18970] Cannot create hsr debugfs directory [ 524.579402][ T5620] Bluetooth: hci4: command tx timeout [ 526.668998][ T5620] Bluetooth: hci4: command tx timeout [ 527.124977][T19077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.199093][T18970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 527.246099][T18970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.284087][T18970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 527.319744][T18970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.350019][T19105] sctp: [Deprecated]: syz.4.3105 (pid 19105) Use of int in max_burst socket option. [ 527.350019][T19105] Use struct sctp_assoc_value instead [ 527.366583][T18970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 527.381568][T19108] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3102'. [ 527.407678][T18970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.429983][T19100] syzkaller1: entered promiscuous mode [ 527.448404][T19100] syzkaller1: entered allmulticast mode [ 527.462047][T18970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 527.488508][T18970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.804362][T18970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.850903][T18970] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.877415][T17201] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.884683][T17201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.916310][T17201] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.923580][T17201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.962472][T19142] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3111'. [ 528.028459][T17201] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 528.556978][T18970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.646600][T18970] veth0_vlan: entered promiscuous mode [ 528.668130][T18970] veth1_vlan: entered promiscuous mode [ 528.719201][T18970] veth0_macvtap: entered promiscuous mode [ 528.734327][T18970] veth1_macvtap: entered promiscuous mode [ 528.749148][ T5620] Bluetooth: hci4: command tx timeout [ 528.811650][T18970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.843377][T18970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.352356][ T1020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.393537][ T1020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.503521][T17197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.514809][T17197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.664266][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3123'. [ 529.924365][T19207] netlink: 'syz.5.3125': attribute type 1 has an invalid length. [ 529.952552][T19207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 529.981070][T19207] bond6: (slave geneve3): making interface the new active one [ 529.992682][T19207] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 530.880510][T19144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.009953][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.048102][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.110651][T19218] xt_limit: Overflow, try lower: 0/0 [ 531.147574][T17197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.160251][T17197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.265842][T19227] syz_tun: left allmulticast mode [ 531.274323][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 531.431432][T19233] ip6gre2: entered promiscuous mode [ 531.449055][T19233] ip6gre2: entered allmulticast mode [ 531.687285][T19245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3137'. [ 531.722135][T19245] netlink: 'syz.2.3137': attribute type 12 has an invalid length. [ 531.741895][T19245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3137'. [ 531.883307][T18980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 531.896793][T18980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 531.905681][T18980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 531.918968][T18980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 531.928078][T18980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 532.146903][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3137'. [ 532.314982][ T6081] syz1: Port: 1 Link DOWN [ 532.352043][T17201] smbdirect: ib_dev[syz1] removed [ 532.399645][T19271] C: renamed from veth1_to_team [ 532.437819][T19271] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3142'. [ 533.138458][T19288] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 533.170930][T19288] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 533.718415][T19298] netlink: 'syz.3.3147': attribute type 5 has an invalid length. [ 534.027924][T18980] Bluetooth: hci0: command tx timeout [ 534.266315][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.100102][T18980] Bluetooth: hci0: command tx timeout [ 536.262316][T19303] xt_hashlimit: size too large, truncated to 1048576 [ 536.325566][T19304] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.367361][T19304] bridge_slave_0 (unregistering): left allmulticast mode [ 536.393650][T19304] bridge_slave_0 (unregistering): left promiscuous mode [ 536.423917][T19304] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.526669][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3151'. [ 536.569915][T19330] sctp: [Deprecated]: syz.3.3149 (pid 19330) Use of int in maxseg socket option. [ 536.569915][T19330] Use struct sctp_assoc_value instead [ 537.003960][T19343] x_tables: duplicate entry at hook 1 [ 537.034164][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 537.233858][T19350] geneve2: entered promiscuous mode [ 537.245387][T19350] netlink: 'syz.0.3159': attribute type 1 has an invalid length. [ 537.462454][T19361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.516111][T17197] IPVS: starting estimator thread 0... [ 537.517862][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3160'. [ 537.620361][T19366] IPVS: using max 26 ests per chain, 62400 per kthread [ 537.729381][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3166'. [ 537.750803][T19378] can: request_module (can-proto-0) failed. [ 537.945711][T19374] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.003431][T19386] bond7: (slave batadv1): Opening slave failed [ 538.178978][T18980] Bluetooth: hci0: command tx timeout [ 538.378835][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3168'. [ 538.388075][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3168'. [ 538.397635][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3168'. [ 538.406939][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3168'. [ 538.416101][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3168'. [ 538.425381][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3168'. [ 538.434526][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3168'. [ 538.513665][T19254] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.538180][T19254] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.560425][T19254] bridge_slave_0: entered allmulticast mode [ 538.587153][T19254] bridge_slave_0: entered promiscuous mode [ 538.614099][T19254] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.632819][T19254] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.649827][T19254] bridge_slave_1: entered allmulticast mode [ 538.673287][T19254] bridge_slave_1: entered promiscuous mode [ 538.776754][T19254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.812930][T19254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.934500][T19254] team0: Port device team_slave_0 added [ 538.955871][T19254] team0: Port device team_slave_1 added [ 539.095151][T19254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.104596][T19254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.134946][T19254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.180556][T19254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.195245][T19254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.245133][T19254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.294944][T19428] netlink: 'syz.2.3175': attribute type 1 has an invalid length. [ 539.434719][T19429] netlink: 'syz.2.3175': attribute type 11 has an invalid length. [ 539.479433][T19429] netlink: 'syz.2.3175': attribute type 4 has an invalid length. [ 539.627609][T19254] hsr_slave_0: entered promiscuous mode [ 539.683357][T19254] hsr_slave_1: entered promiscuous mode [ 539.708306][T19254] debugfs: 'hsr0' already exists in 'hsr' [ 539.720432][T19254] Cannot create hsr debugfs directory [ 539.929873][T19448] vlan2: entered promiscuous mode [ 539.935439][T19448] bridge0: entered promiscuous mode [ 540.261480][T18980] Bluetooth: hci0: command tx timeout [ 540.496221][T19254] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.536613][T19254] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.575578][T19477] netlink: 'syz.5.3186': attribute type 4 has an invalid length. [ 540.629790][T19473] netlink: 'syz.5.3186': attribute type 63 has an invalid length. [ 540.730707][T19254] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.746260][T19254] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.802948][T19485] tipc: Started in network mode [ 540.821192][T19485] tipc: Node identity 869e8b6be766, cluster identity 4711 [ 540.842888][T19485] tipc: Enabled bearer , priority 0 [ 540.912692][T19254] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.953642][T19254] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.163717][T19490] syzkaller0: entered promiscuous mode [ 541.169465][T19490] syzkaller0: entered allmulticast mode [ 541.175990][T19490] tipc: Resetting bearer [ 541.199844][T19254] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.219791][T19254] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.254360][T19484] tipc: Resetting bearer [ 543.859481][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 544.123037][T19484] tipc: Disabling bearer [ 544.140428][T10111] tipc: Node number set to 1643678571 [ 544.974220][T19533] veth0_to_hsr: left promiscuous mode [ 545.000345][T19533] bridge3: left promiscuous mode [ 545.009740][T19533] bridge3: left allmulticast mode [ 545.045276][T19533] ip6gre2: left promiscuous mode [ 545.050375][T19533] ip6gre2: left allmulticast mode [ 545.065805][T19559] __nla_validate_parse: 20 callbacks suppressed [ 545.065825][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3207'. [ 545.079106][ T1020] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.100557][ T1020] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.174581][T19559] bond2: option broadcast_neighbor: invalid value (3) [ 545.182752][T19551] xt_hashlimit: size too large, truncated to 1048576 [ 545.195345][T19559] bond2 (unregistering): Released all slaves [ 545.545480][T19568] tun0: tun_chr_ioctl cmd 1074025675 [ 545.551628][T19568] tun0: persist enabled [ 545.593831][T19568] tun0: tun_chr_ioctl cmd 1074025675 [ 545.602244][T19568] tun0: persist enabled [ 545.768806][T17201] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.798278][T17201] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.811623][T19254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.859178][T19254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.887596][T19254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 545.969562][T19254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.995812][T19254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.032857][T19580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3211'. [ 546.043406][T19580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3211'. [ 546.061024][T19254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.074618][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 546.103329][T19254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 546.144080][T19254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.198853][ T9457] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.222912][ T9457] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.253109][ T9457] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.278443][ T9457] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.477585][T19607] syzkaller0: entered promiscuous mode [ 546.490992][T19607] syzkaller0: entered allmulticast mode [ 546.514624][T19607] 0: reclassify loop, rule prio 0, protocol 700 [ 546.577950][T19616] TCP: TCP_TX_DELAY enabled [ 546.842593][T19254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.894750][T19632] netlink: 'syz.0.3220': attribute type 1 has an invalid length. [ 547.036205][T19254] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.090299][T19636] macvlan2: entered promiscuous mode [ 547.103428][T19636] macvlan2: entered allmulticast mode [ 547.213026][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.220325][ T9448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.287599][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.294966][ T9448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.005431][T19676] syzkaller0: entered promiscuous mode [ 548.019986][T19676] syzkaller0: entered allmulticast mode [ 548.311378][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3232'. [ 548.370693][T19699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3232'. [ 548.389890][T19699] bridge5: port 1(veth0_to_bond) entered blocking state [ 548.397228][T19699] bridge5: port 1(veth0_to_bond) entered disabled state [ 548.408400][T19699] veth0_to_bond: entered allmulticast mode [ 548.417745][T19699] veth0_to_bond: entered promiscuous mode [ 548.503930][T19702] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.511701][T19702] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.593617][T19702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.607098][T19702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.776365][T17202] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.802082][T17202] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.830384][T17202] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.861486][T17200] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.890503][T19717] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3236'. [ 548.925559][T19254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.424553][T19740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3240'. [ 549.572549][T19254] veth0_vlan: entered promiscuous mode [ 549.623195][T19254] veth1_vlan: entered promiscuous mode [ 549.708135][T19254] veth0_macvtap: entered promiscuous mode [ 549.746238][T19254] veth1_macvtap: entered promiscuous mode [ 549.777009][T19254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.799986][ T9457] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 549.813112][T19254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.912889][ T9448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.939538][ T9448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.968679][ T9457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.977709][ T9457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.595710][T19750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.721315][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.766954][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.826181][T19774] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3252'. [ 552.851307][T19774] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3252'. [ 552.872684][ T9457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.896077][ T9457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.643701][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 553.916621][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3268'. [ 553.952641][T19824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3268'. [ 553.963652][T19824] tc_dump_action: action bad kind [ 554.136360][T19830] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3267'. [ 554.150549][T19830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3267'. [ 554.207149][T19830] netlink: 'syz.2.3267': attribute type 11 has an invalid length. [ 554.403360][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3273'. [ 554.627175][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 554.658476][T19853] netdevsim netdevsim2: Direct firmware load for .® failed with error -2 [ 554.670968][T19853] netdevsim netdevsim2: Falling back to sysfs fallback for: .® [ 555.130947][T19857] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 555.152358][T19857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.165548][T19857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.183930][T19857] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 555.196159][T19857] bond0 (unregistering): Released all slaves [ 555.467760][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3281'. [ 555.495530][T19852] netdevsim netdevsim2: Direct firmware load for .® failed with error -2 [ 555.530220][T19852] netdevsim netdevsim2: Falling back to sysfs fallback for: .® [ 555.573622][T19875] vlan4: entered promiscuous mode [ 555.598488][T19875] veth0_to_bridge: entered promiscuous mode [ 555.832075][T19891] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 556.024530][T19900] netlink: 'syz.3.3288': attribute type 1 has an invalid length. [ 556.079360][T19905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 556.088340][T19903] netlink: 'syz.0.3290': attribute type 1 has an invalid length. [ 556.488926][T19937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.536741][T19939] ip_tables: iptables: counters copy to user failed while replacing table [ 556.667873][T19942] veth2: entered allmulticast mode [ 557.777704][T20008] ip6t_REJECT: ECHOREPLY is not supported [ 558.433484][T20040] __nla_validate_parse: 46 callbacks suppressed [ 558.433506][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'. [ 559.008370][T20079] x_tables: duplicate underflow at hook 1 [ 559.499922][T17200] IPVS: starting estimator thread 0... [ 559.609014][T20100] IPVS: using max 33 ests per chain, 79200 per kthread [ 559.727534][T20111] syzkaller0: entered promiscuous mode [ 559.742874][T20111] syzkaller0: entered allmulticast mode [ 559.842407][T20124] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.854627][T20125] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3347'. [ 559.900945][T20111] tipc: Enabled bearer , priority 0 [ 560.007360][T20111] tipc: Resetting bearer [ 560.041333][T20132] Cannot find set identified by id 0 to match [ 560.137516][T20111] tipc: Disabling bearer [ 560.237648][T20146] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3356'. [ 560.918380][T20185] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3364'. [ 561.236927][T20204] netlink: 'syz.3.3367': attribute type 1 has an invalid length. [ 561.265441][T20206] netlink: 'syz.4.3368': attribute type 7 has an invalid length. [ 561.278107][T20204] netlink: 'syz.3.3367': attribute type 1 has an invalid length. [ 561.529956][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3373'. [ 563.464508][T20299] netlink: 'syz.3.3391': attribute type 1 has an invalid length. [ 563.527035][T20299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.534474][T20306] netlink: 'syz.2.3392': attribute type 8 has an invalid length. [ 563.547920][T20306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3392'. [ 563.753471][T20308] bond2: (slave veth5): Enslaving as an active interface with a down link [ 563.768213][T20319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3395'. [ 563.790494][T20316] bond2: entered allmulticast mode [ 563.804321][T20317] IPVS: set_ctl: invalid protocol: 148 224.0.0.2:20004 [ 563.814008][T20317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.871131][T20323] netlink: 'syz.0.3395': attribute type 2 has an invalid length. [ 563.881117][T20323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3395'. [ 563.900014][T20323] : entered promiscuous mode [ 563.923701][T20327] netlink: 'syz.4.3397': attribute type 1 has an invalid length. [ 563.933228][T20327] netlink: 'syz.4.3397': attribute type 2 has an invalid length. [ 563.959994][T20330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3397'. [ 563.971005][T20327] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3397'. [ 564.070340][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3399'. [ 566.259446][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.460527][T20299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.478187][T20343] netlink: 'syz.5.3400': attribute type 1 has an invalid length. [ 566.507764][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3400'. [ 566.631069][T20347] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3401'. [ 566.761855][T20357] openvswitch: netlink: Duplicate or invalid key (type 0). [ 566.773982][T20360] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 566.791140][T20357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.844463][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 567.214368][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 567.234619][T20380] netlink: 'syz.0.3411': attribute type 12 has an invalid length. [ 567.252873][T20380] netlink: 'syz.0.3411': attribute type 11 has an invalid length. [ 567.383719][T20383] block nbd5: server does not support multiple connections per device. [ 567.404786][T20383] block nbd5: shutting down sockets [ 567.453391][T20386] netlink: 'syz.5.3414': attribute type 21 has an invalid length. [ 567.481307][T20386] netlink: 'syz.5.3414': attribute type 1 has an invalid length. [ 568.141459][T20383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.159515][T20383] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 568.185438][T20383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 568.196681][T20383] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 568.231073][T20383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 568.238070][T20383] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 568.263407][T20383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.270155][T20383] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 568.963632][T20428] __nla_validate_parse: 7 callbacks suppressed [ 568.963653][T20428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3424'. [ 569.269392][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 569.875560][T20445] netlink: 'syz.5.3433': attribute type 1 has an invalid length. [ 569.893084][T20441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3431'. [ 570.100025][T20457] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3436'. [ 570.332746][T20470] Bluetooth: MGMT ver 1.23 [ 570.571907][T20486] ip_tables: iptables: counters copy to user failed while replacing table [ 570.851782][T20499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3447'. [ 571.181097][T20520] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 571.189373][T20520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3452'. [ 571.200913][T20519] netlink: 'syz.4.3453': attribute type 10 has an invalid length. [ 571.229610][T20519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.243685][T20519] team0: Port device netdevsim1 added [ 571.574855][T20533] syzkaller0: entered promiscuous mode [ 571.589800][T20533] syzkaller0: entered allmulticast mode [ 571.653179][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'. [ 571.776047][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 571.810143][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 571.920394][T20548] netlink: 'syz.5.3461': attribute type 3 has an invalid length. [ 571.931236][T20548] netlink: 'syz.5.3461': attribute type 1 has an invalid length. [ 571.944336][T20548] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3461'. [ 571.953689][T20549] IPv6: addrconf: prefix option has invalid lifetime [ 572.025783][T20549] openvswitch: netlink: Flow key attr not present in new flow. [ 572.183421][T20557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 572.554712][T20572] ip6gre1: entered promiscuous mode [ 572.591358][T20572] ip6gre1: entered allmulticast mode [ 572.718044][T20584] syzkaller0: entered promiscuous mode [ 572.747980][T20584] syzkaller0: entered allmulticast mode [ 572.945067][T20596] vxcan3: entered promiscuous mode [ 572.962347][T20600] tipc: Started in network mode [ 572.969370][T20600] tipc: Node identity 6a6ae8d68d68, cluster identity 4711 [ 572.977690][T20600] tipc: Enabled bearer , priority 0 [ 572.985337][T20603] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 573.298760][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 573.478922][T20583] tipc: Resetting bearer [ 573.534338][T20583] tipc: Disabling bearer [ 573.726913][T20643] veth3: entered allmulticast mode [ 573.916252][T20661] netlink: 'syz.0.3492': attribute type 1 has an invalid length. [ 574.140548][T20668] pim6reg1: entered promiscuous mode [ 574.154087][T20668] pim6reg1: entered allmulticast mode [ 574.261169][T20673] __nla_validate_parse: 18 callbacks suppressed [ 574.261188][T20673] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3498'. [ 574.433109][T20647] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.3489:20647 [ 574.441270][T20686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3500'. [ 574.441301][T20686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3500'. [ 574.460254][T20684] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 574.496048][T20689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.503399][T20689] IPv6: NLM_F_CREATE should be set when creating new route [ 574.510720][T20689] IPv6: NLM_F_CREATE should be set when creating new route [ 574.517965][T20689] IPv6: NLM_F_CREATE should be set when creating new route [ 574.569340][T20691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.767407][T20699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.811085][T20704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'. [ 574.824720][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 575.012947][T20713] netlink: 'syz.5.3505': attribute type 3 has an invalid length. [ 575.484826][T20744] netlink: Invalid conntrack timeout [ 575.501292][T20744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.558336][T20750] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3515'. [ 575.598860][T20748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3514'. [ 575.633386][T20755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3516'. [ 575.653117][T20757] xt_l2tp: v2 doesn't support IP mode [ 575.680631][T20755] tap0: tun_chr_ioctl cmd 1074025672 [ 575.686578][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3517'. [ 575.696817][T20755] tap0: ignored: set checksum disabled [ 575.714898][T20757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3517'. [ 575.943226][T20762] netlink: 'syz.2.3519': attribute type 2 has an invalid length. [ 576.715333][T20807] netlink: 'syz.0.3532': attribute type 3 has an invalid length. [ 578.256436][T20878] netlink: 'syz.2.3555': attribute type 2 has an invalid length. [ 578.354115][T20878] syz_tun: entered allmulticast mode [ 578.594772][T20901] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001 [ 578.700905][T20905] sctp: [Deprecated]: syz.0.3561 (pid 20905) Use of int in max_burst socket option. [ 578.700905][T20905] Use struct sctp_assoc_value instead [ 579.988362][T20939] __nla_validate_parse: 10 callbacks suppressed [ 579.988383][T20939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3570'. [ 580.164352][T20946] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3571'. [ 580.232688][T20946] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3571'. [ 580.242437][T20946] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3571'. [ 580.277779][T20946] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3571'. [ 580.291862][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3572'. [ 580.434189][T20947] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3571'. [ 580.469263][T17197] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 580.502733][T17197] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 580.520479][T17197] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 580.539544][T17197] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 580.561174][T20947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.582025][T20947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.596654][T20947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.612638][T20958] sch_fq: defrate 8 ignored. [ 580.647445][T20947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.879805][T20970] ip_tables: iptables: counters copy to user failed while replacing table [ 580.891698][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 581.059210][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.485521][T21000] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 581.545106][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3586'. [ 581.570155][T21000] netlink: 'syz.4.3586': attribute type 30 has an invalid length. [ 581.681007][T17197] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.705024][T21002] syzkaller0: entered promiscuous mode [ 581.714615][T21002] syzkaller0: entered allmulticast mode [ 581.800009][T17197] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.821855][T17197] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.843318][T21005] syzkaller0: entered promiscuous mode [ 581.856109][T21005] syzkaller0: entered allmulticast mode [ 581.979464][T17197] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.099373][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.380868][T21022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 582.531302][T21031] netlink: 'syz.3.3599': attribute type 16 has an invalid length. [ 582.552407][T21031] netlink: 'syz.3.3599': attribute type 30 has an invalid length. [ 583.140203][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.245795][T21039] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 583.437891][T21043] sctp: [Deprecated]: syz.4.3602 (pid 21043) Use of int in maxseg socket option. [ 583.437891][T21043] Use struct sctp_assoc_value instead [ 583.545372][T10111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.581062][T21048] netlink: 'syz.0.3605': attribute type 1 has an invalid length. [ 584.292853][T21085] 8021q: VLANs not supported on ip_vti0 [ 585.528242][T21137] __nla_validate_parse: 4 callbacks suppressed [ 585.528263][T21137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3632'. [ 585.677891][T21154] netlink: 'syz.5.3635': attribute type 25 has an invalid length. [ 585.687519][T21154] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3635'. [ 585.923249][T21161] netlink: 'syz.3.3637': attribute type 2 has an invalid length. [ 585.957024][T21162] netlink: 'syz.3.3637': attribute type 2 has an invalid length. [ 586.261025][T10129] net_ratelimit: 10 callbacks suppressed [ 586.261046][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.368007][T21190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3644'. [ 586.377388][T21190] netlink: 'syz.5.3644': attribute type 2 has an invalid length. [ 586.402573][T21190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3644'. [ 586.403164][T21189] tipc: Cannot configure node identity twice [ 586.693981][T21217] openvswitch: netlink: Multiple metadata blocks provided [ 586.797311][T21217] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3648'. [ 586.911755][T21225] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 586.976655][T21227] gretap1: entered allmulticast mode [ 586.996469][T21227] bond1: (slave gretap1): making interface the new active one [ 587.005028][T21227] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 587.165396][T21237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 587.191517][T21237] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 587.216627][T21237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3655'. [ 587.299163][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.379144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.024766][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3666'. [ 588.054220][T21270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3666'. [ 588.126894][T21272] bridge0: entered allmulticast mode [ 588.349222][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.065579][T21324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.097193][T21307] netlink: 'syz.0.3672': attribute type 13 has an invalid length. [ 589.114228][T21307] netlink: 'syz.0.3672': attribute type 17 has an invalid length. [ 589.133845][T21324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.155788][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'. [ 589.217532][T21307] gretap0: refused to change device tx_queue_len [ 589.234874][T21324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.244868][T21307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 589.265016][T21324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.293651][T21329] netlink: 'syz.0.3672': attribute type 1 has an invalid length. [ 589.349989][T21329] netlink: 'syz.0.3672': attribute type 2 has an invalid length. [ 590.373968][T21369] macsec0: entered promiscuous mode [ 590.398026][T21369] bridge0: entered promiscuous mode [ 590.543640][T21374] syzkaller1: entered promiscuous mode [ 590.560783][T21374] syzkaller1: entered allmulticast mode [ 591.244081][T21399] __nla_validate_parse: 6 callbacks suppressed [ 591.244108][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3695'. [ 591.275546][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3695'. [ 591.460142][T10129] net_ratelimit: 7 callbacks suppressed [ 591.460161][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.460557][T21406] tipc: Enabling of bearer rejected, failed to enable media [ 591.545398][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 591.698294][T21427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.803672][T21433] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 591.826155][T21434] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 591.859543][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.870229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.963345][T21443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 592.032962][T21443] bond3: option broadcast_neighbor: invalid value (3) [ 592.051607][T21443] bond3 (unregistering): Released all slaves [ 592.074424][T21452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 592.096883][T21440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'. [ 592.115645][T21452] macvtap0: entered promiscuous mode [ 592.134560][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 592.143811][T21452] erspan0: entered promiscuous mode [ 592.149758][T21452] macvtap0: entered allmulticast mode [ 592.155382][T21452] erspan0: entered allmulticast mode [ 592.168485][T21440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.200235][T21453] erspan0: left allmulticast mode [ 592.206699][T21453] erspan0: left promiscuous mode [ 592.231677][T21453] macvtap0: left promiscuous mode [ 592.238295][T21453] macvtap0: left allmulticast mode [ 592.380817][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3712'. [ 592.433809][T21460] netlink: 'syz.0.3712': attribute type 32 has an invalid length. [ 592.441945][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3712'. [ 592.472736][T21460] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 592.510505][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.514570][T21460] macvlan2: entered promiscuous mode [ 592.539021][T21460] macvlan2: entered allmulticast mode [ 592.545172][T21460] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 592.647751][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3715'. [ 592.755851][T21478] Cannot find add_set index 1 as target [ 592.785724][T21478] netlink: 'syz.0.3716': attribute type 4 has an invalid length. [ 592.804359][T21481] Cannot find del_set index 17 as target [ 592.939978][T17201] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.954220][T17201] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.966914][T17201] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.986655][T17201] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.203373][T21512] tipc: Enabled bearer , priority 10 [ 593.293032][T21517] ip6tnl1: entered allmulticast mode [ 593.293864][T21518] netlink: 'syz.0.3730': attribute type 3 has an invalid length. [ 593.341292][T21521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.353795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.487479][T21530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.498085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.516575][T21530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.538982][T21530] pim6reg1: entered promiscuous mode [ 593.544366][T21530] pim6reg1: entered allmulticast mode [ 593.714849][T21539] netlink: 'syz.5.3737': attribute type 1 has an invalid length. [ 593.756658][T21539] 8021q: adding VLAN 0 to HW filter on device bond9 [ 593.815190][T21542] bond9: (slave veth5): Enslaving as an active interface with a down link [ 593.854007][T21539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.864927][T21539] bond9: (slave batadv0): making interface the new active one [ 593.874756][T21539] batadv0: entered promiscuous mode [ 593.882168][T21539] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 593.926405][T21539] bond9 (unregistering): (slave veth5): Releasing active interface [ 593.944346][T21539] bond9 (unregistering): (slave batadv0): Releasing active interface [ 593.958931][T21539] bond9 (unregistering): Released all slaves [ 594.136865][T21547] netlink: 'syz.3.3738': attribute type 1 has an invalid length. [ 594.177658][T21547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 594.234539][T21554] bond3: (slave veth9): Enslaving as an active interface with a down link [ 594.263141][T21556] netlink: 'syz.5.3740': attribute type 1 has an invalid length. [ 594.292414][T21547] bridge0: left allmulticast mode [ 594.304685][T21547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.313431][T21547] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.331299][T21547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.392278][T21547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.402470][T21547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.416501][T21547] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.428158][T21547] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.440447][T21547] 0·: left allmulticast mode [ 594.445130][T21547] hsr_slave_0: left allmulticast mode [ 594.453031][T21547] hsr_slave_1: left allmulticast mode [ 594.475274][T21554] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 594.484832][T21554] bond3: (slave batadv1): making interface the new active one [ 594.495008][T21554] batadv1: entered promiscuous mode [ 594.501447][T21554] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 594.515483][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.522834][ T9470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.535625][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.542849][ T9470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.603768][T21562] 8021q: VLANs not supported on sit0 [ 594.712808][T21568] nbd: must specify a size in bytes for the device [ 595.095775][T21565] tipc: Enabled bearer , priority 0 [ 595.121450][T21565] syzkaller0: entered promiscuous mode [ 595.137558][T21565] syzkaller0: entered allmulticast mode [ 595.157598][T21564] tipc: Resetting bearer [ 595.206460][T21564] tipc: Disabling bearer [ 595.953145][T21620] syzkaller0: entered promiscuous mode [ 595.958993][T21620] syzkaller0: entered allmulticast mode [ 596.090427][T21627] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.286460][T21643] __nla_validate_parse: 17 callbacks suppressed [ 596.286479][T21643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3766'. [ 596.336651][T21644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3766'. [ 596.602934][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3770'. [ 596.761468][T21658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3771'. [ 596.948427][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3774'. [ 597.101207][T21668] bond2 (unregistering): Released all slaves [ 597.386985][T21689] syzkaller0: entered promiscuous mode [ 597.398963][T21689] syzkaller0: entered allmulticast mode [ 597.517554][T21694] netlink: 'syz.3.3781': attribute type 1 has an invalid length. [ 597.595168][T21699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 597.632463][T21699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 597.687492][T21694] bond4: entered promiscuous mode [ 597.700934][T21694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 597.735032][T21705] bond0: (slave ip6tnl0): refused to change device type [ 597.842497][T21708] ip6erspan0: entered allmulticast mode [ 598.587825][T21740] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3792'. [ 598.633866][T21742] netlink: 'syz.5.3794': attribute type 1 has an invalid length. [ 598.657816][T21745] Cannot find set identified by id 0 to match [ 598.675735][T21742] 8021q: adding VLAN 0 to HW filter on device bond9 [ 598.736467][T21747] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3796'. [ 599.094814][T21767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3801'. [ 599.876058][T21792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.962955][T21795] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20003 [ 600.576987][T21803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.753672][T21785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.766175][T21785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.782255][T21785] net_ratelimit: 8 callbacks suppressed [ 600.782268][T21785] A link change request failed with some changes committed already. Interface ip may have been left with an inconsistent configuration, please check. [ 600.812694][ T1020] bridge5: port 1(veth0_to_bond) entered blocking state [ 600.819915][ T1020] bridge5: port 1(veth0_to_bond) entered forwarding state [ 601.006731][T21818] nft_compat: unsupported protocol 1 [ 601.193195][T21821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.223037][T21821] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.241212][T21821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.311418][T21821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.356590][T21821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.367558][T21821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.384922][T21821] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 601.407724][T21842] __nla_validate_parse: 6 callbacks suppressed [ 601.407745][T21842] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3821'. [ 601.436670][T17200] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.444002][T17200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.481489][T17200] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.488760][T17200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.632215][T21853] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3826'. [ 602.514708][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3835'. [ 602.582328][T21888] syzkaller1: entered promiscuous mode [ 602.590832][T21888] syzkaller1: entered allmulticast mode [ 604.042381][T21952] netlink: 'syz.0.3854': attribute type 4 has an invalid length. [ 604.094743][T21952] netlink: 'syz.0.3854': attribute type 4 has an invalid length. [ 604.417982][T21979] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 604.456757][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.464040][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.544136][T21983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3865'. [ 604.583418][T21983] gtp0: entered promiscuous mode [ 604.594215][T21983] gtp0: entered allmulticast mode [ 604.611300][T21983] team0: Device gtp0 is of different type [ 604.675317][T21985] syzkaller0: entered promiscuous mode [ 604.684120][T21985] syzkaller0: entered allmulticast mode [ 604.734140][T21985] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3864'. [ 604.762649][T21993] tipc: Started in network mode [ 604.774513][T21993] tipc: Node identity 5a2d00a07b17, cluster identity 4711 [ 604.784029][T21993] tipc: Enabled bearer , priority 0 [ 604.806987][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3868'. [ 604.826931][T21998] netlink: 'syz.3.3869': attribute type 2 has an invalid length. [ 604.841772][T21999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.051155][T21993] tipc: Disabling bearer [ 605.391299][T22026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.423188][T22026] syzkaller1: entered promiscuous mode [ 605.429361][T22026] syzkaller1: entered allmulticast mode [ 605.645831][T22037] netlink: 'syz.5.3882': attribute type 1 has an invalid length. [ 605.726671][T22037] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.810655][T22047] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 605.836636][T22047] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 605.857652][T22047] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 605.880390][T17201] batadv1: left promiscuous mode [ 606.028897][T22060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3889'. [ 606.246773][T22068] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3892'. [ 606.276050][T22071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3894'. [ 606.518989][T22084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3898'. [ 606.691727][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 606.704693][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 606.719926][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 606.734558][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 606.743761][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 606.831687][T18980] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 606.839245][T18980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 606.846778][T18980] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 606.861140][T18980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 606.869214][T18980] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 607.059378][T22099] Bluetooth: ISO socket layer initialized [ 607.648116][T22131] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3908'. [ 608.394138][T22147] Bluetooth: MGMT ver 1.23 [ 608.445020][T22147] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3911'. [ 608.472928][T22147] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3911'. [ 608.765504][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3913'. [ 608.900317][ T5620] Bluetooth: hci1: command tx timeout [ 609.307333][T22088] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.314905][T22088] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.322886][T22088] bridge_slave_0: entered allmulticast mode [ 609.332221][T22088] bridge_slave_0: entered promiscuous mode [ 609.341543][T22088] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.348955][T22088] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.356212][T22088] bridge_slave_1: entered allmulticast mode [ 609.365274][T22088] bridge_slave_1: entered promiscuous mode [ 609.371539][T22180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3918'. [ 609.417683][T22088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.444488][T22180] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 609.447392][T22088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.499399][T22180] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 609.550442][T22180] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 609.568966][T22185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3921'. [ 609.611702][T22189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3922'. [ 609.646474][T22088] team0: Port device team_slave_0 added [ 609.677789][T22088] team0: Port device team_slave_1 added [ 609.705452][T22192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.791167][T22088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.798342][T22088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.826940][T22088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.846501][T22088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.857837][T22088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.887907][T22198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3924'. [ 609.902419][T22088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.988474][T22088] hsr_slave_0: entered promiscuous mode [ 609.996238][T22088] hsr_slave_1: entered promiscuous mode [ 610.003375][T22088] debugfs: 'hsr0' already exists in 'hsr' [ 610.010351][T22088] Cannot create hsr debugfs directory [ 610.117681][T22206] netlink: 'syz.4.3924': attribute type 15 has an invalid length. [ 610.151983][T22206] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3924'. [ 610.582447][T22221] netlink: 'syz.2.3929': attribute type 11 has an invalid length. [ 610.863344][T22223] netlink: 'syz.3.3928': attribute type 30 has an invalid length. [ 610.921963][T22088] bond0: (slave netdevsim1): Releasing backup interface [ 610.985006][ T5620] Bluetooth: hci1: command tx timeout [ 611.060499][T22223] bond5: option arp_missed_max: invalid value (0) [ 611.067353][T22223] bond5: option arp_missed_max: allowed values 1 - 255 [ 611.083244][T22223] bond5 (unregistering): Released all slaves [ 611.383035][T22257] bridge1: entered allmulticast mode [ 612.179136][T22251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.244757][T22088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 612.320683][T22088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.332116][T22088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.376151][T22088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.386838][T22088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 612.415642][T22088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.432811][T22088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 612.445135][T22088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 612.521150][T22288] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 612.559186][T22288] sch_tbf: burst 4 is lower than device lo mtu (11337746) ! [ 612.606393][T22088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.633667][T22088] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.647955][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.655269][ T9448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.678198][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.685432][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.817030][T22291] __nla_validate_parse: 1 callbacks suppressed [ 612.817045][T22291] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3943'. [ 612.968375][T22299] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3944'. [ 613.061929][ T5620] Bluetooth: hci1: command tx timeout [ 613.088442][T22299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3944'. [ 613.508266][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3945'. [ 613.652654][T22323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3950'. [ 613.675850][T22323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3950'. [ 613.762873][T22088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.014127][T22344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3953'. [ 614.259328][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 614.274052][T22088] veth0_vlan: entered promiscuous mode [ 614.314443][T22088] veth1_vlan: entered promiscuous mode [ 614.412976][T22088] veth0_macvtap: entered promiscuous mode [ 614.436974][T22088] veth1_macvtap: entered promiscuous mode [ 614.460696][T22088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.482189][T22356] netlink: 'syz.3.3956': attribute type 15 has an invalid length. [ 614.495543][T22088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.560670][T17197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.669959][T17200] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.689974][T17197] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.707117][T17197] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.052034][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3960'. [ 615.142269][ T5620] Bluetooth: hci1: command tx timeout [ 615.459168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.751315][T22328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.858167][T17200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.878203][T17200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.964642][T17197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.978145][T22377] netlink: 'syz.4.3961': attribute type 1 has an invalid length. [ 616.978322][T17197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.074025][T22377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.121646][T22383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.136783][T22383] bond1: (slave nlmon0): The slave device specified does not support setting the MAC address [ 617.153806][T22383] bond1: (slave nlmon0): Error -95 calling set_mac_address [ 617.290070][T22399] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3965'. [ 617.363614][T22405] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3965'. [ 617.487270][T22377] bond1: entered promiscuous mode [ 617.498787][T22377] bond1: entered allmulticast mode [ 617.687792][T22388] syzkaller0: entered promiscuous mode [ 617.699822][T22388] syzkaller0: entered allmulticast mode [ 617.743128][T22420] netlink: 'syz.0.3967': attribute type 1 has an invalid length. [ 617.819767][T22421] netlink: 'syz.4.3966': attribute type 1 has an invalid length. [ 617.836277][T22421] __nla_validate_parse: 1 callbacks suppressed [ 617.836298][T22421] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3966'. [ 617.865989][T22421] netlink: 'syz.4.3966': attribute type 1 has an invalid length. [ 617.881472][T22421] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.3966'. [ 617.951203][T22427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3968'. [ 617.965206][T22431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'. [ 617.975282][T22429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3968'. [ 617.996168][ T9457] IPVS: starting estimator thread 0... [ 618.112903][T22433] IPVS: using max 27 ests per chain, 64800 per kthread [ 620.499744][T22415] gre2: entered promiscuous mode [ 620.504812][T22415] gre2: entered allmulticast mode [ 620.746124][T22447] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3974'. [ 620.769296][T22447] tipc: Started in network mode [ 620.783356][T22447] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 620.870019][T22447] tipc: Enabled bearer , priority 5 [ 620.921861][T22455] netlink: 'syz.2.3976': attribute type 4 has an invalid length. [ 621.101988][T22451] syzkaller0: entered promiscuous mode [ 621.115452][T22451] syzkaller0: entered allmulticast mode [ 624.233532][T22457] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 624.268010][T10116] tipc: Node number set to 4269801488 [ 624.295610][T17197] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 624.329100][T17197] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 624.337671][ T5844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 624.576067][T22492] netlink: 'syz.0.3986': attribute type 1 has an invalid length. [ 624.654132][T22488] syzkaller0: entered promiscuous mode [ 624.666093][T22488] syzkaller0: entered allmulticast mode [ 624.720219][T10116] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 624.842189][T22510] ip6gre2: entered promiscuous mode [ 624.847478][T22510] ip6gre2: entered allmulticast mode [ 624.855989][T17197] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.872118][T17197] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.880434][T22510] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.889721][ T5844] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.917970][T22500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3987'. [ 624.942431][T22500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3987'. [ 624.954027][ T5844] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 625.059374][ T5844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.083452][T22521] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3989'. [ 625.205133][T22525] syz_tun: entered allmulticast mode [ 627.582094][T22495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.953016][T22558] netlink: 'syz.0.3999': attribute type 5 has an invalid length. [ 628.297616][T22573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4006'. [ 628.331175][T22573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4006'. [ 628.437859][T22578] veth10: entered promiscuous mode [ 628.480900][T22581] netlink: 'syz.4.4009': attribute type 1 has an invalid length. [ 628.632883][T22586] syzkaller0: entered promiscuous mode [ 628.640534][T22586] syzkaller0: entered allmulticast mode [ 628.829820][T22603] ip_tables: iptables: counters copy to user failed while replacing table [ 629.061539][T22614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4018'. [ 629.190639][T22621] Cannot find add_set index 0 as target [ 629.621038][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 629.621057][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.840735][T22639] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 629.955618][T17197] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 630.010072][T22641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.066981][T22641] IPv6: NLM_F_CREATE should be specified when creating new route [ 630.082067][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4027'. [ 630.091675][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880557f8800: rx timeout, send abort [ 630.269139][T18980] Bluetooth: hci1: command 0x0405 tx timeout [ 630.590461][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056bb0800: rx timeout, send abort [ 630.599881][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880557f8800: abort rx timeout. Force session deactivation [ 630.628608][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888056bb0800: connection exists (fe ff). last cmd: 20 [ 630.878383][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805623ac00: rx timeout, send abort [ 631.114423][T22678] syzkaller0: entered promiscuous mode [ 631.136712][T22678] syzkaller0: entered allmulticast mode [ 631.386860][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805623ac00: abort rx timeout. Force session deactivation [ 632.214162][T22724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'. [ 632.329256][T22724] siw: device registration error -23 [ 632.516739][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4055'. [ 632.808150][T22755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.816541][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4059'. [ 632.854874][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4060'. [ 632.998780][T22753] sctp: [Deprecated]: syz.4.4059 (pid 22753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.998780][T22753] Use struct sctp_sack_info instead [ 633.306806][T22766] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4062'. [ 633.348265][T22761] tipc: Started in network mode [ 633.368924][T22761] tipc: Node identity 7f000001, cluster identity 4711 [ 633.417889][T22761] tipc: Enabled bearer , priority 5 [ 633.513456][T22774] openvswitch: netlink: IP tunnel dst address not specified [ 633.547422][T22774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.562038][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4064'. [ 633.606820][T22775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 633.805984][T22790] netlink: 'syz.5.4068': attribute type 10 has an invalid length. [ 633.933555][T22795] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4068'. [ 633.973873][T22790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.140793][T22790] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 634.169458][T22795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4068'. [ 634.245346][T22795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4068'. [ 634.539166][T10116] tipc: Node number set to 2130706433 [ 634.783131][T22824] xt_hashlimit: size too large, truncated to 1048576 [ 634.803510][T22824] xt_hashlimit: invalid interval [ 634.972012][T22831] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 634.990304][T22828] ovs-system: entered promiscuous mode [ 635.006682][T22831] IPVS: length: 15 != 166593648320 [ 635.277460][ T9457] IPVS: starting estimator thread 0... [ 635.309401][T22844] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 635.378772][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 635.404899][T22847] IPVS: using max 28 ests per chain, 67200 per kthread [ 637.308770][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 638.566970][T22887] tipc: New replicast peer: 100.1.1.2 [ 638.589704][T22887] tipc: Enabled bearer , priority 5 [ 638.629933][T22897] netlink: 'syz.5.4091': attribute type 1 has an invalid length. [ 638.647992][T22897] __nla_validate_parse: 1 callbacks suppressed [ 638.648011][T22897] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4091'. [ 638.692874][T22897] netlink: 'syz.5.4091': attribute type 1 has an invalid length. [ 638.836271][T22906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4095'. [ 638.885500][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4096'. [ 638.889436][T22907] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4094'. [ 638.982537][T22920] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4099'. [ 639.053265][T22915] netlink: 'syz.4.4097': attribute type 3 has an invalid length. [ 639.087090][T22915] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 639.417238][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'. [ 639.504265][T22941] batadv_slave_0: entered promiscuous mode [ 639.718744][T10116] tipc: Node number set to 3875727574 [ 639.729026][T22960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'. [ 640.182618][T22965] ip6erspan0: entered allmulticast mode [ 640.193500][T22967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4106'. [ 640.214161][T22967] tipc: Enabling of bearer rejected, failed to enable media [ 640.346315][T22941] batadv_slave_0: left promiscuous mode [ 640.667530][T22979] tipc: Enabling of bearer rejected, failed to enable media [ 640.853697][T22992] IPv6: NLM_F_CREATE should be specified when creating new route [ 641.084231][T23000] syzkaller0: entered promiscuous mode [ 641.122378][T23000] syzkaller0: entered allmulticast mode [ 641.162664][T23004] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 641.197901][T23001] pim6reg1: entered promiscuous mode [ 641.216943][T23001] pim6reg1: entered allmulticast mode [ 641.243892][T23007] xt_hashlimit: Unknown mode mask FFF88A7B, kernel too old? [ 641.305570][T23003] netlink: 'syz.3.4117': attribute type 1 has an invalid length. [ 641.373807][T23011] netlink: 'syz.2.4119': attribute type 1 has an invalid length. [ 641.532225][T23010] macvtap1: entered allmulticast mode [ 641.708709][T23015] macvtap2: entered allmulticast mode [ 641.730473][T23030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 641.742400][T23014] bridge1: entered promiscuous mode [ 641.760383][T23029] netlink: 'syz.4.4122': attribute type 1 has an invalid length. [ 641.771336][T23014] bridge1: entered allmulticast mode [ 641.786550][T23029] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4122'. [ 641.803785][T23014] team0: Port device bridge1 added [ 641.832419][T23029] xt_hashlimit: size too large, truncated to 1048576 [ 641.914518][T23003] bond6: (slave bridge4): making interface the new active one [ 641.953361][T23003] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 641.995830][T23027] ip6tnl1: entered allmulticast mode [ 642.012903][T23018] syzkaller0: left promiscuous mode [ 642.029815][T23018] syzkaller0: left allmulticast mode [ 642.456776][T23048] FAULT_INJECTION: forcing a failure. [ 642.456776][T23048] name failslab, interval 1, probability 0, space 0, times 0 [ 642.492183][T23048] CPU: 1 UID: 0 PID: 23048 Comm: syz.3.4127 Not tainted syzkaller #0 PREEMPT(full) [ 642.492212][T23048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.492230][T23048] Call Trace: [ 642.492238][T23048] [ 642.492248][T23048] dump_stack_lvl+0xe8/0x150 [ 642.492282][T23048] should_fail_ex+0x40c/0x560 [ 642.492314][T23048] should_failslab+0xa8/0x100 [ 642.492345][T23048] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 642.492370][T23048] ? skb_clone+0x212/0x3a0 [ 642.492469][T23048] ? skb_clone+0x212/0x3a0 [ 642.492504][T23048] skb_clone+0x212/0x3a0 [ 642.492535][T23048] __netlink_deliver_tap+0x413/0x860 [ 642.492627][T23048] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.492656][T23048] netlink_deliver_tap+0x19c/0x1b0 [ 642.492685][T23048] netlink_sendskb+0x68/0x140 [ 642.492712][T23048] netlink_rcv_skb+0x2a4/0x4a0 [ 642.492740][T23048] ? __pfx_genl_rcv_msg+0x10/0x10 [ 642.492763][T23048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.492806][T23048] ? down_read+0x2be/0x330 [ 642.492831][T23048] genl_rcv+0x28/0x40 [ 642.492849][T23048] netlink_unicast+0x7bb/0x940 [ 642.492886][T23048] netlink_sendmsg+0x813/0xb40 [ 642.492925][T23048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.492958][T23048] ? aa_sock_msg_perm+0xf1/0x1b0 [ 642.493030][T23048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.493057][T23048] sock_sendmsg_nosec+0x13a/0x180 [ 642.493144][T23048] ____sys_sendmsg+0x54e/0x850 [ 642.493177][T23048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.493215][T23048] ? import_iovec+0x73/0xa0 [ 642.493275][T23048] ___sys_sendmsg+0x2a5/0x360 [ 642.493301][T23048] ? __lock_acquire+0x683/0x2cf0 [ 642.493333][T23048] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.493400][T23048] ? __fget_files+0x2a/0x420 [ 642.493426][T23048] ? __fget_files+0x3a2/0x420 [ 642.493464][T23048] __x64_sys_sendmsg+0x1b1/0x290 [ 642.493495][T23048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.493543][T23048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.493570][T23048] do_syscall_64+0x174/0x580 [ 642.493601][T23048] ? trace_irq_disable+0x3b/0x140 [ 642.493626][T23048] ? clear_bhb_loop+0x70/0xc0 [ 642.493652][T23048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.493673][T23048] RIP: 0033:0x7efc27f9e0d9 [ 642.493693][T23048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.493711][T23048] RSP: 002b:00007efc28e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.493733][T23048] RAX: ffffffffffffffda RBX: 00007efc28225fa0 RCX: 00007efc27f9e0d9 [ 642.493748][T23048] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 642.493760][T23048] RBP: 00007efc28e99090 R08: 0000000000000000 R09: 0000000000000000 [ 642.493772][T23048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.493785][T23048] R13: 00007efc28226038 R14: 00007efc28225fa0 R15: 00007ffc0afca3a8 [ 642.493820][T23048] [ 642.925627][T23055] netlink: 'syz.4.4129': attribute type 1 has an invalid length. [ 642.965471][T23057] netlink: 'syz.5.4131': attribute type 1 has an invalid length. [ 643.307354][T23081] tun1: tun_chr_ioctl cmd 1074025675 [ 643.320234][T23081] tun1: persist enabled [ 643.374178][T23085] netlink: 'syz.3.4139': attribute type 1 has an invalid length. [ 643.413861][T23085] 8021q: adding VLAN 0 to HW filter on device bond7 [ 643.952759][T23104] ip_tables: iptables: counters copy to user failed while replacing table [ 643.979417][T23104] __nla_validate_parse: 2 callbacks suppressed [ 643.979436][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4145'. [ 644.182647][T23114] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004 [ 644.224219][T23119] xt_hashlimit: size too large, truncated to 1048576 [ 644.281557][T23116] netlink: 'syz.5.4150': attribute type 7 has an invalid length. [ 644.357276][T23116] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4150'. [ 644.388275][T23126] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 644.409402][T23126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.424715][T23126] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 644.474714][T23128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 644.766580][T23135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4154'. [ 644.784967][T23137] FAULT_INJECTION: forcing a failure. [ 644.784967][T23137] name failslab, interval 1, probability 0, space 0, times 0 [ 644.798086][T23137] CPU: 0 UID: 0 PID: 23137 Comm: syz.5.4155 Not tainted syzkaller #0 PREEMPT(full) [ 644.798115][T23137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 644.798128][T23137] Call Trace: [ 644.798136][T23137] [ 644.798145][T23137] dump_stack_lvl+0xe8/0x150 [ 644.798179][T23137] should_fail_ex+0x40c/0x560 [ 644.798209][T23137] should_failslab+0xa8/0x100 [ 644.798242][T23137] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 644.798268][T23137] ? skb_clone+0x212/0x3a0 [ 644.798293][T23137] ? skb_clone+0x212/0x3a0 [ 644.798328][T23137] skb_clone+0x212/0x3a0 [ 644.798360][T23137] __netlink_deliver_tap+0x413/0x860 [ 644.798408][T23137] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.798438][T23137] netlink_deliver_tap+0x19c/0x1b0 [ 644.798467][T23137] netlink_sendskb+0x68/0x140 [ 644.798497][T23137] netlink_rcv_skb+0x2a4/0x4a0 [ 644.798526][T23137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.798548][T23137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.798590][T23137] ? down_read+0x2be/0x330 [ 644.798616][T23137] genl_rcv+0x28/0x40 [ 644.798633][T23137] netlink_unicast+0x7bb/0x940 [ 644.798670][T23137] netlink_sendmsg+0x813/0xb40 [ 644.798708][T23137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.798741][T23137] ? aa_sock_msg_perm+0xf1/0x1b0 [ 644.798768][T23137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.798794][T23137] sock_sendmsg_nosec+0x13a/0x180 [ 644.798829][T23137] ____sys_sendmsg+0x54e/0x850 [ 644.798861][T23137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.798897][T23137] ? import_iovec+0x73/0xa0 [ 644.798931][T23137] ___sys_sendmsg+0x2a5/0x360 [ 644.798956][T23137] ? __lock_acquire+0x683/0x2cf0 [ 644.798987][T23137] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.799054][T23137] ? __fget_files+0x2a/0x420 [ 644.799079][T23137] ? __fget_files+0x3a2/0x420 [ 644.799118][T23137] __x64_sys_sendmsg+0x1b1/0x290 [ 644.799148][T23137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.799195][T23137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.799218][T23137] do_syscall_64+0x174/0x580 [ 644.799246][T23137] ? trace_irq_disable+0x3b/0x140 [ 644.799271][T23137] ? clear_bhb_loop+0x70/0xc0 [ 644.799297][T23137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.799318][T23137] RIP: 0033:0x7f7f70b9e0d9 [ 644.799337][T23137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.799354][T23137] RSP: 002b:00007f7f719be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.799376][T23137] RAX: ffffffffffffffda RBX: 00007f7f70e25fa0 RCX: 00007f7f70b9e0d9 [ 644.799398][T23137] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 644.799411][T23137] RBP: 00007f7f719be090 R08: 0000000000000000 R09: 0000000000000000 [ 644.799423][T23137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.799434][T23137] R13: 00007f7f70e26038 R14: 00007f7f70e25fa0 R15: 00007ffc7ea62888 [ 644.799469][T23137] [ 645.124261][T23139] netlink: 'syz.4.4154': attribute type 28 has an invalid length. [ 645.132428][T23139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4154'. [ 645.271902][T23144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4157'. [ 645.448229][T23160] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4160'. [ 645.662410][T23169] syzkaller0: entered promiscuous mode [ 645.670062][T23174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4165'. [ 645.681838][T23169] syzkaller0: entered allmulticast mode [ 645.706484][T23174] bridge0: port 3(veth0) entered blocking state [ 645.723238][T23174] bridge0: port 3(veth0) entered disabled state [ 645.734947][T23174] veth0: entered allmulticast mode [ 645.753049][T23174] veth0: entered promiscuous mode [ 645.764087][T23174] bridge0: port 3(veth0) entered blocking state [ 645.770592][T23174] bridge0: port 3(veth0) entered forwarding state [ 645.916794][T23187] netlink: Conntrack attr has 4 unknown bytes [ 645.936605][T23187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.148251][T23195] FAULT_INJECTION: forcing a failure. [ 646.148251][T23195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.186299][T23195] CPU: 0 UID: 0 PID: 23195 Comm: syz.5.4169 Not tainted syzkaller #0 PREEMPT(full) [ 646.186333][T23195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.186347][T23195] Call Trace: [ 646.186357][T23195] [ 646.186366][T23195] dump_stack_lvl+0xe8/0x150 [ 646.186405][T23195] should_fail_ex+0x40c/0x560 [ 646.186440][T23195] _copy_from_user+0x2d/0xb0 [ 646.186476][T23195] kstrtouint_from_user+0xd6/0x180 [ 646.186508][T23195] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 646.186564][T23195] proc_fail_nth_write+0x8e/0x210 [ 646.186597][T23195] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 646.186638][T23195] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 646.186669][T23195] vfs_write+0x296/0xba0 [ 646.186714][T23195] ? __pfx_vfs_write+0x10/0x10 [ 646.186784][T23195] ? __fget_files+0x2a/0x420 [ 646.186821][T23195] ? __fget_files+0x3a2/0x420 [ 646.186849][T23195] ? __fget_files+0x2a/0x420 [ 646.186898][T23195] ksys_write+0x150/0x270 [ 646.186937][T23195] ? __pfx_ksys_write+0x10/0x10 [ 646.186980][T23195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.187005][T23195] do_syscall_64+0x174/0x580 [ 646.187038][T23195] ? trace_irq_disable+0x3b/0x140 [ 646.187065][T23195] ? clear_bhb_loop+0x70/0xc0 [ 646.187092][T23195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.187115][T23195] RIP: 0033:0x7f7f70b5e90e [ 646.187136][T23195] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 646.187155][T23195] RSP: 002b:00007f7f719bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 646.187180][T23195] RAX: ffffffffffffffda RBX: 00007f7f719be6c0 RCX: 00007f7f70b5e90e [ 646.187197][T23195] RDX: 0000000000000001 RSI: 00007f7f719be0a0 RDI: 0000000000000004 [ 646.187211][T23195] RBP: 00007f7f719be090 R08: 0000000000000000 R09: 0000000000000000 [ 646.187225][T23195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.187239][T23195] R13: 00007f7f70e26038 R14: 00007f7f70e25fa0 R15: 00007ffc7ea62888 [ 646.187282][T23195] [ 646.667198][T23207] syzkaller0: entered promiscuous mode [ 646.683175][T23207] syzkaller0: entered allmulticast mode [ 647.309763][T23227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4178'. [ 647.706642][T23226] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 647.729148][T22234] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 647.819147][T23260] ip6tnl2: entered allmulticast mode [ 647.907543][ T9457] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 647.942168][T22231] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 647.953604][ T9457] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 648.037893][T23273] netlink: 'syz.5.4191': attribute type 4 has an invalid length. [ 648.076706][T23274] netlink: 'syz.3.4193': attribute type 1 has an invalid length. [ 648.435408][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'. [ 648.503018][T22233] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 648.630592][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4204'. [ 648.663349][T22231] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 648.684099][T23320] netlink: 'syz.3.4204': attribute type 10 has an invalid length. [ 648.807511][T23328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.818005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.893651][T23320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.913345][T23320] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 648.978860][T22233] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 649.468846][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 649.515412][T23355] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 649.822977][T23370] __nla_validate_parse: 1 callbacks suppressed [ 649.822998][T23370] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4222'. [ 649.840814][T23370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4222'. [ 649.850082][T23370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4222'. [ 649.933069][T23374] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4224'. [ 650.010246][T23378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4226'. [ 650.206579][T23382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4225'. [ 650.468872][T23390] bridge0: port 3(veth0) entered disabled state [ 650.475447][T23390] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.483129][T23390] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.534315][T23396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4230'. [ 650.601542][T23399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4230'. [ 650.639999][T23400] Cannot find del_set index 4 as target [ 650.706311][T23390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.728155][T23390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.763005][T23403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4232'. [ 650.783379][T23390] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 650.800540][T23390] bond2: left allmulticast mode [ 650.813099][T23390] ip6tnl1: left allmulticast mode [ 650.833817][T23390] bond4: left promiscuous mode [ 650.869216][T23390] macvtap1: left allmulticast mode [ 650.875162][T23390] macvtap2: left allmulticast mode [ 650.901045][T23390] ip6tnl2: left allmulticast mode [ 650.928795][T17197] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.957925][T17197] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.002505][T17197] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.033745][T17197] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.165614][T23418] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4235'. [ 651.297621][T23429] ip6gretap1: entered allmulticast mode [ 651.338723][T23429] batman_adv: batadv0: Adding interface: ip6gretap1 [ 651.360690][T23429] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.410078][T23429] batman_adv: batadv0: Interface activated: ip6gretap1 [ 651.614504][T23444] netlink: 'syz.3.4240': attribute type 3 has an invalid length. [ 651.641764][T23444] netlink: 'syz.3.4240': attribute type 3 has an invalid length. [ 651.682215][T23445] veth1_vlan: left promiscuous mode [ 651.690122][T23445] veth0_vlan: left promiscuous mode [ 651.697285][T23445] veth0_vlan: entered promiscuous mode [ 651.729348][T23445] veth1_vlan: entered promiscuous mode [ 651.755094][T23445] veth1_macvtap: left promiscuous mode [ 651.763718][T23445] veth0_macvtap: left promiscuous mode [ 651.771215][T23445] veth1_macvtap: entered promiscuous mode [ 651.787862][T23445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.800571][T23445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.810877][T23445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.822754][T23445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.853773][T23445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.911960][T22233] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 652.015886][ T9457] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 652.039676][T22231] openvswitch: cpu_id mismatch with handler threads [ 652.099216][ T9457] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.144981][ T9457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.188622][ T1020] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.221284][T22231] openvswitch: cpu_id mismatch with handler threads [ 652.230225][ T1020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.301305][ T1020] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.324398][ T1020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.351563][T23440] netlink: 'syz.4.4239': attribute type 1 has an invalid length. [ 652.367139][T23440] netlink: 'syz.4.4239': attribute type 2 has an invalid length. [ 652.410856][T23469] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 652.439341][ T1020] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.458436][ T1020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.645016][T23478] netlink: 'syz.3.4246': attribute type 23 has an invalid length. [ 652.818381][T23486] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 652.823070][T22234] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 652.875564][T23498] tap0: tun_chr_ioctl cmd 1074025672 [ 652.900199][T23498] tap0: ignored: set checksum disabled [ 653.756827][T23546] syzkaller0: entered promiscuous mode [ 653.763015][T23546] syzkaller0: entered allmulticast mode [ 653.948785][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 656.018777][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.360549][T23557] __nla_validate_parse: 10 callbacks suppressed [ 657.360570][T23557] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4262'. [ 657.383169][T23557] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4262'. [ 657.455876][T23578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4266'. [ 657.516746][T23580] bridge_slave_0: left allmulticast mode [ 657.556935][T23580] bridge_slave_0: left promiscuous mode [ 657.579766][T23580] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.597819][T23580] bridge_slave_1: left allmulticast mode [ 657.612081][T23580] bridge_slave_1: left promiscuous mode [ 657.618453][T23580] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.641494][T23580] bond0: (slave bond_slave_0): Releasing backup interface [ 657.672646][T23580] bond0: (slave bond_slave_1): Releasing backup interface [ 657.703992][T23580] team0: Port device team_slave_0 removed [ 657.717850][T23580] team0: Port device team_slave_1 removed [ 657.725864][T23580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.733452][T23580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.742745][T23580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.751550][T23580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.763113][T23580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 657.996464][T23591] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4270'. [ 658.122030][T23609] ipip0: entered promiscuous mode [ 658.145762][T23612] ip6gre1: entered promiscuous mode [ 658.160280][T23612] ip6gre1: entered allmulticast mode [ 658.160659][T23614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4276'. [ 658.176915][T17202] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.185453][T23612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.193236][T17202] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.203029][T22234] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.217030][T23611] netlink: zone id is out of range [ 658.234077][T23611] netlink: zone id is out of range [ 658.248940][T23611] netlink: zone id is out of range [ 658.259440][T23611] netlink: zone id is out of range [ 658.264662][T23611] netlink: zone id is out of range [ 658.270400][T23611] netlink: zone id is out of range [ 658.416258][T23623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4280'. [ 658.476988][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'. [ 658.493978][T23627] veth0_macvtap: left promiscuous mode [ 658.632487][T23631] netlink: 'syz.2.4283': attribute type 30 has an invalid length. [ 658.678303][T23631] bond3: option arp_missed_max: invalid value (0) [ 658.688829][T22234] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.702991][T23631] bond3: option arp_missed_max: allowed values 1 - 255 [ 658.716948][T23631] bond3 (unregistering): Released all slaves [ 658.753167][T23636] netlink: 'syz.3.4284': attribute type 13 has an invalid length. [ 658.763461][T23636] netlink: 'syz.3.4284': attribute type 12 has an invalid length. [ 658.840172][T23638] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4285'. [ 658.859897][T23638] netlink: 'syz.4.4285': attribute type 33 has an invalid length. [ 658.869761][T22234] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.882471][T23638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4285'. [ 658.926227][T23638] ip6gre1: entered promiscuous mode [ 658.939112][T23638] ip6gre1: entered allmulticast mode [ 658.962245][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4287'. [ 659.091785][T23649] ipvlan2: entered promiscuous mode [ 659.100177][T23649] team0: Device ipvlan2 failed to register rx_handler [ 659.164399][T23654] xfrm0: entered allmulticast mode [ 659.170982][T23654] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 659.191649][T23654] netlink: 'syz.3.4290': attribute type 11 has an invalid length. [ 659.259546][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804737cc00: rx timeout, send abort [ 659.302091][T23664] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 659.514361][T23668] can: request_module (can-proto-0) failed. [ 659.612013][T23684] tipc: Failed to remove unknown binding: 66,1,1/1643678571:3700673489/3700673508 [ 659.622823][T23684] tipc: Failed to remove unknown binding: 66,1,1/1643678571:3700673489/3700673508 [ 659.768001][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804737cc00: abort rx timeout. Force session deactivation [ 659.949343][T23703] netlink: del zone limit has 4 unknown bytes [ 660.518349][T17197] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 662.338703][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.379020][T23730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.542218][T23766] __nla_validate_parse: 4 callbacks suppressed [ 663.542240][T23766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 663.631540][T23770] netlink: 'syz.4.4322': attribute type 1 has an invalid length. [ 663.676704][T23778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4326'. [ 663.700558][T23778] net_ratelimit: 4 callbacks suppressed [ 663.700602][T23778] openvswitch: netlink: Missing key (keys=40, expected=100) [ 663.821133][T23770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 663.885613][T23783] bond3: (slave veth3): Enslaving as an active interface with a down link [ 663.930388][T23796] netlink: 'syz.0.4329': attribute type 1 has an invalid length. [ 663.981199][T23799] netlink: 'syz.5.4330': attribute type 17 has an invalid length. [ 664.010249][T23791] syzkaller0: entered promiscuous mode [ 664.015923][T23791] syzkaller0: entered allmulticast mode [ 664.175184][T23807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4332'. [ 664.184663][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 664.615905][T23802] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.623666][T23802] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.116785][T23802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.174014][T23802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.055377][T23818] syzkaller0: entered promiscuous mode [ 668.061973][T23818] syzkaller0: entered allmulticast mode [ 668.068464][T23819] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4336'. [ 668.081170][T23843] bridge0: port 3(netdevsim0) entered blocking state [ 668.111054][T23843] bridge0: port 3(netdevsim0) entered disabled state [ 668.140612][T23843] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 668.215990][T23848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4341'. [ 668.237018][T23848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4341'. [ 668.248127][T23843] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 668.308365][T23853] macvtap1: entered promiscuous mode [ 668.327541][T23853] bridge0: entered promiscuous mode [ 668.428822][T17197] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.458823][T17197] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.485817][T17197] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 668.491482][T23871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4344'. [ 668.516110][T23869] xt_hashlimit: size too large, truncated to 1048576 [ 668.523385][T17197] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.555998][T17197] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.604180][T17197] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 668.638021][T23875] @0Ù: renamed from bond_slave_1 (while UP) [ 668.669164][T23880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4346'. [ 668.795735][T23882] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 668.816505][T17201] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.827106][T17201] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.836337][T17201] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 668.845908][T23880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4346'. [ 668.858770][T17200] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.867933][T17200] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.892667][T17200] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 668.990080][T23888] tipc: Enabled bearer , priority 0 [ 669.011332][T23888] syzkaller0: entered promiscuous mode [ 669.025268][T23888] syzkaller0: entered allmulticast mode [ 669.043465][T23888] tipc: Resetting bearer [ 669.069452][T23888] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 669.103958][T23888] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 669.163982][T23888] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 669.196319][T23899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4352'. [ 669.275215][T23888] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 669.290778][T23901] ip_tables: iptables: counters copy to user failed while replacing table [ 669.530544][T23887] tipc: Resetting bearer [ 669.577819][T23887] tipc: Disabling bearer [ 669.622266][T23920] netlink: zone id is out of range [ 669.627595][T23920] netlink: zone id is out of range [ 669.641754][T23920] netlink: zone id is out of range [ 669.653242][T23920] netlink: zone id is out of range [ 669.658853][T23920] netlink: zone id is out of range [ 669.673844][T23920] netlink: zone id is out of range [ 669.683401][T23920] netlink: zone id is out of range [ 669.701423][T23920] netlink: zone id is out of range [ 669.718243][T23920] netlink: zone id is out of range [ 669.847833][T23928] netlink: 'syz.4.4363': attribute type 4 has an invalid length. [ 669.949521][T23931] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4364'. [ 670.055837][T23939] netlink: 'syz.3.4368': attribute type 1 has an invalid length. [ 670.097516][T23942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4369'. [ 670.118437][T23942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4369'. [ 670.128309][T23939] bond8: entered promiscuous mode [ 670.128734][T23939] 8021q: adding VLAN 0 to HW filter on device bond8 [ 670.142319][T23946] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4366'. [ 670.165560][T23939] 8021q: adding VLAN 0 to HW filter on device bond8 [ 670.185265][T23939] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 670.206099][T23939] bond8: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 670.217546][T23948] netlink: 'syz.2.4366': attribute type 1 has an invalid length. [ 670.225933][T23939] bond8: (slave gre1): making interface the new active one [ 670.233472][T23939] gre1: entered promiscuous mode [ 670.241323][T23939] bond8: (slave gre1): Enslaving as an active interface with an up link [ 670.353890][T23951] tipc: Enabled bearer , priority 0 [ 670.370272][T23951] syzkaller0: entered promiscuous mode [ 670.386085][T23951] syzkaller0: entered allmulticast mode [ 670.404211][T23953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4371'. [ 670.569690][T23963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4374'. [ 670.579466][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.608939][T23951] tipc: Resetting bearer [ 670.651803][T23951] tipc: Disabling bearer [ 671.011979][T23980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4378'. [ 671.572020][ T1020] nci: nci_rx_work: unknown MT 0x1 [ 672.765555][T24046] geneve3: entered promiscuous mode [ 672.779251][T17200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.788259][T17200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.798015][T17200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.808209][T17200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.369536][T23995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 674.386555][T24048] netlink: 'syz.3.4396': attribute type 23 has an invalid length. [ 674.604748][T24053] __nla_validate_parse: 6 callbacks suppressed [ 674.604770][T24053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4398'. [ 674.643638][T24059] net_ratelimit: 4 callbacks suppressed [ 674.643661][T24059] netlink: Conntrack attr has 4 unknown bytes [ 674.655810][T24059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.690445][T24059] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4399'. [ 674.710227][T24059] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4399'. [ 674.795867][T24069] netlink: 'syz.4.4401': attribute type 1 has an invalid length. [ 674.812613][T24069] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4401'. [ 674.863846][T24071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4402'. [ 675.748286][T24110] žÿ: renamed from team_slave_1 [ 675.886567][T24113] netlink: 'syz.2.4410': attribute type 21 has an invalid length. [ 675.901556][T24113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4410'. [ 676.020957][T24119] netlink: 'syz.0.4411': attribute type 1 has an invalid length. [ 676.045123][T24119] gretap1: entered allmulticast mode [ 676.101608][T24122] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 678.259434][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 680.819761][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 685.941372][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 686.579136][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.818920][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 719.218768][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.780120][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 742.258843][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 752.498842][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 752.505450][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 762.741161][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.099409][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 780.256195][T24141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4417'. [ 780.274588][T24139] sock: sock_timestamping_bind_phc: sock not bind to device [ 780.307634][T24143] syzkaller0: entered promiscuous mode [ 780.321984][T24143] syzkaller0: entered allmulticast mode [ 780.476248][T24151] rdma_rxe: rxe_newlink: failed to add bond0 [ 780.491232][T24151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4420'. [ 780.511334][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 780.654559][T24156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.685081][T24165] ip_tables: iptables: counters copy to user failed while replacing table [ 780.711670][T24167] ip_tables: iptables: counters copy to user failed while replacing table [ 780.728033][T24165] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x11 [ 780.758211][T24167] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x11 [ 780.775519][T24156] netdevsim netdevsim5 €Â: renamed from netdevsim0 (while UP) [ 780.885437][T24167] syzkaller0: left promiscuous mode [ 780.902549][T24167] syzkaller0: left allmulticast mode [ 781.264457][T24175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4427'. [ 781.431089][T24196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4431'. [ 781.578177][T24202] netlink: 'syz.3.4433': attribute type 1 has an invalid length. [ 781.614972][T24197] bond3: entered promiscuous mode [ 781.637141][T24197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 781.731808][T24202] 8021q: adding VLAN 0 to HW filter on device bond9 [ 781.859969][T24211] netlink: 'syz.2.4434': attribute type 2 has an invalid length. [ 781.903057][T24202] bond9: (slave veth13): Enslaving as an active interface with a down link [ 781.953265][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4433'. [ 781.974109][T24215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4435'. [ 782.038194][T24204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.063408][T24204] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.102835][T24204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.161622][T24204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.172626][T24204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.181427][T24204] xfrm0: left allmulticast mode [ 782.195404][T24204] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 782.209745][T24204] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.225944][T24204] veth1_vlan: left promiscuous mode [ 782.233865][T24204] veth0_vlan: left promiscuous mode [ 782.242382][T24204] veth0_vlan: entered promiscuous mode [ 782.250065][T24204] veth1_vlan: entered promiscuous mode [ 782.265287][T24204] tipc: Resetting bearer [ 782.272646][T24204] tipc: Resetting bearer [ 782.286280][T24204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.305115][T24204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 782.328323][T24204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 782.346333][T24204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.390199][T24204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.446884][T24204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 782.483839][T24204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 782.501432][T24204] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 782.510189][T24204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 782.520048][T24204] 8021q: adding VLAN 0 to HW filter on device bond5 [ 782.555772][T24204] 8021q: adding VLAN 0 to HW filter on device bond6 [ 782.568814][T24204] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 782.585270][T24204] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 782.605416][T24204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 782.636883][T24204] ip6gre1: left promiscuous mode [ 782.643708][T24204] ip6gre1: left allmulticast mode [ 782.661828][T24204] bond8: left promiscuous mode [ 782.673885][T24204] gre1: left promiscuous mode [ 782.679678][ T951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 782.702599][T24204] geneve3: left promiscuous mode [ 782.737342][T24208] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 782.748384][T24208] bond9: (slave batadv2): making interface the new active one [ 782.759457][T24208] batadv2: entered promiscuous mode [ 782.765507][T24208] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 782.786493][ T5733] bridge4: entered promiscuous mode [ 782.810993][T17202] bridge0: port 3(veth0) entered blocking state [ 782.817477][T17202] bridge0: port 3(veth0) entered forwarding state [ 782.826861][T17202] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.834198][T17202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.848110][T17202] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.855492][T17202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.974606][T24230] syzkaller0: entered promiscuous mode [ 782.980710][T24230] syzkaller0: entered allmulticast mode [ 783.539640][ T951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 785.792822][ T9448] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.881548][ T9457] bond9: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 785.957811][ T9448] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 785.988156][T17202] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.082556][T17202] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 786.125461][T17202] bond2: (slave veth5): making interface the new active one [ 786.181095][T17202] bond2: active interface up! [ 786.215157][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 786.230520][ T9448] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.257594][ T9457] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 786.280838][ T5844] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 786.292189][ T9457] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 786.462733][T24277] netlink: 'syz.0.4444': attribute type 2 has an invalid length. [ 786.521908][T24280] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 786.849634][ T5844] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 786.900729][ T5844] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 786.991643][T24304] netlink: 'syz.5.4448': attribute type 46 has an invalid length. [ 787.030365][T17197] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.112381][T24303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4449'. [ 787.270858][T24308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4450'. [ 787.462386][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4450'. [ 788.339068][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.388027][T24370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4462'. [ 788.427344][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'. [ 788.460567][T24374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4464'. [ 788.474901][T24370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4462'. [ 788.772143][ C1] ------------[ cut here ]------------ [ 788.777745][ C1] len > ((int)(~0U >> 1)) [ 788.777778][ C1] WARNING: ./include/linux/skbuff.h:2864 at qdisc_pkt_len_segs_init+0x4b4/0xa30, CPU#1: syz.3.4467/24385 [ 788.793643][ C1] Modules linked in: [ 788.797610][ C1] CPU: 1 UID: 0 PID: 24385 Comm: syz.3.4467 Not tainted syzkaller #0 PREEMPT(full) [ 788.807091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 788.817251][ C1] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 788.823621][ C1] Code: 00 00 02 00 31 ff e8 6b aa 25 f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 1a a6 25 f8 45 89 e7 e9 2c ff ff ff e8 0d a6 25 f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 ba a7 25 f8 41 39 dc 0f [ 788.843341][ C1] RSP: 0018:ffffc90000a08660 EFLAGS: 00010246 [ 788.849532][ C1] RAX: ffffffff89a15b53 RBX: 0000000000000003 RCX: ffff888031d2dd00 [ 788.857580][ C1] RDX: 0000000000000100 RSI: 00000000fffffff6 RDI: 0000000000000000 [ 788.865650][ C1] RBP: ffff888026aba000 R08: ffffc90000a0889f R09: 0000000000000000 [ 788.873721][ C1] R10: ffffc90000a08830 R11: fffff52000141114 R12: 00000000fffffff6 [ 788.881787][ C1] R13: dffffc0000000000 R14: 1ffff11004d5741b R15: ffff88804901c4d8 [ 788.889894][ C1] FS: 00007efc28e996c0(0000) GS:ffff88812504c000(0000) knlGS:0000000000000000 [ 788.898925][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.905570][ C1] CR2: 0000200000010000 CR3: 0000000047652000 CR4: 00000000003526f0 [ 788.913640][ C1] Call Trace: [ 788.916987][ C1] [ 788.919927][ C1] __netif_receive_skb_core+0x13aa/0x30b0 [ 788.925817][ C1] ? clockevents_program_event+0x491/0x630 [ 788.931742][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 788.937869][ C1] ? lock_acquire+0x106/0x350 [ 788.942687][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 788.948803][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 788.955352][ C1] ? __lock_acquire+0x683/0x2cf0 [ 788.960413][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 788.966748][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 788.973196][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 788.979988][ C1] ? dev_gro_receive+0x1097/0x2380 [ 788.985267][ C1] napi_complete_done+0x299/0x730 [ 788.990401][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 788.996023][ C1] ? gro_cell_poll+0x175/0x5d0 [ 789.000987][ C1] gro_cell_poll+0x5ab/0x5d0 [ 789.005659][ C1] ? gro_cell_poll+0x175/0x5d0 [ 789.010532][ C1] __napi_poll+0xaa/0x330 [ 789.014948][ C1] net_rx_action+0x61d/0xf50 [ 789.019664][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 789.024847][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 789.030193][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 789.035534][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 789.040855][ C1] ? sched_clock+0x3f/0x60 [ 789.045339][ C1] handle_softirqs+0x225/0x840 [ 789.050199][ C1] ? do_softirq+0x76/0xd0 [ 789.054595][ C1] ? tun_rx_batched+0x185/0x790 [ 789.059616][ C1] do_softirq+0x76/0xd0 [ 789.064618][ C1] [ 789.067595][ C1] [ 789.070608][ C1] __local_bh_enable_ip+0xf8/0x130 [ 789.075764][ C1] ? tun_rx_batched+0x185/0x790 [ 789.080790][ C1] tun_rx_batched+0x616/0x790 [ 789.085697][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 789.091344][ C1] ? tun_get_user+0x2717/0x4370 [ 789.096268][ C1] ? tun_get_user+0x2717/0x4370 [ 789.101417][ C1] ? tun_get_user+0x23cb/0x4370 [ 789.106454][ C1] ? tun_get_user+0x23cb/0x4370 [ 789.111432][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 789.116875][ C1] ? tun_get_user+0x2717/0x4370 [ 789.121943][ C1] ? tun_get_user+0x2717/0x4370 [ 789.126884][ C1] tun_get_user+0x2b44/0x4370 [ 789.131890][ C1] ? aa_file_perm+0x18b/0x15f0 [ 789.136897][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 789.141777][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 789.146991][ C1] ? __lock_acquire+0x683/0x2cf0 [ 789.152053][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 789.157579][ C1] ? preempt_schedule_common+0x82/0xd0 [ 789.163199][ C1] ? ref_tracker_alloc+0x341/0x4b0 [ 789.168509][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 789.174052][ C1] ? tun_get+0x1c/0x2f0 [ 789.178286][ C1] ? tun_get+0x1c/0x2f0 [ 789.182577][ C1] ? tun_get+0x1c/0x2f0 [ 789.186827][ C1] ? tun_get+0x1c/0x2f0 [ 789.191102][ C1] tun_chr_write_iter+0x113/0x200 [ 789.196202][ C1] vfs_write+0x612/0xba0 [ 789.200566][ C1] ? __pfx_vfs_write+0x10/0x10 [ 789.205416][ C1] ? __fget_files+0x2a/0x420 [ 789.210131][ C1] ksys_write+0x150/0x270 [ 789.214536][ C1] ? __pfx_ksys_write+0x10/0x10 [ 789.219518][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.225641][ C1] do_syscall_64+0x174/0x580 [ 789.230362][ C1] ? trace_irq_disable+0x3b/0x140 [ 789.235457][ C1] ? clear_bhb_loop+0x70/0xc0 [ 789.240335][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.246314][ C1] RIP: 0033:0x7efc27f9e0d9 [ 789.250996][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.270753][ C1] RSP: 002b:00007efc28e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 789.279339][ C1] RAX: ffffffffffffffda RBX: 00007efc28225fa0 RCX: 00007efc27f9e0d9 [ 789.287370][ C1] RDX: 000000000000fdef RSI: 00002000000006c0 RDI: 0000000000000003 [ 789.295540][ C1] RBP: 00007efc28035024 R08: 0000000000000000 R09: 0000000000000000 [ 789.303622][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.311794][ C1] R13: 00007efc28226038 R14: 00007efc28225fa0 R15: 00007ffc0afca3a8 [ 789.319895][ C1] [ 789.322993][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 789.330328][ C1] CPU: 1 UID: 0 PID: 24385 Comm: syz.3.4467 Not tainted syzkaller #0 PREEMPT(full) [ 789.339733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 789.349835][ C1] Call Trace: [ 789.353149][ C1] [ 789.356028][ C1] vpanic+0x56c/0xa60 [ 789.360059][ C1] ? __pfx__printk+0x10/0x10 [ 789.364691][ C1] ? __pfx_vpanic+0x10/0x10 [ 789.369233][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 789.374603][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 789.379896][ C1] panic+0xc5/0xd0 [ 789.383680][ C1] ? __pfx_panic+0x10/0x10 [ 789.388152][ C1] __warn+0x315/0x4c0 [ 789.392166][ C1] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 789.397843][ C1] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 789.403509][ C1] __report_bug+0x276/0x570 [ 789.408161][ C1] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 789.413841][ C1] ? __pfx___report_bug+0x10/0x10 [ 789.418919][ C1] ? __lock_acquire+0x683/0x2cf0 [ 789.423901][ C1] ? __lock_acquire+0x683/0x2cf0 [ 789.428880][ C1] ? do_xdp_generic+0x168/0x12d0 [ 789.433873][ C1] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 789.439544][ C1] report_bug+0x16a/0x220 [ 789.443920][ C1] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 789.449592][ C1] ? qdisc_pkt_len_segs_init+0x4b6/0xa30 [ 789.455270][ C1] handle_bug+0x9c/0x200 [ 789.460548][ C1] exc_invalid_op+0x1a/0x50 [ 789.465090][ C1] asm_exc_invalid_op+0x1a/0x20 [ 789.469985][ C1] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 789.476537][ C1] Code: 00 00 02 00 31 ff e8 6b aa 25 f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 1a a6 25 f8 45 89 e7 e9 2c ff ff ff e8 0d a6 25 f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 ba a7 25 f8 41 39 dc 0f [ 789.496181][ C1] RSP: 0018:ffffc90000a08660 EFLAGS: 00010246 [ 789.502752][ C1] RAX: ffffffff89a15b53 RBX: 0000000000000003 RCX: ffff888031d2dd00 [ 789.510763][ C1] RDX: 0000000000000100 RSI: 00000000fffffff6 RDI: 0000000000000000 [ 789.518768][ C1] RBP: ffff888026aba000 R08: ffffc90000a0889f R09: 0000000000000000 [ 789.526820][ C1] R10: ffffc90000a08830 R11: fffff52000141114 R12: 00000000fffffff6 [ 789.534845][ C1] R13: dffffc0000000000 R14: 1ffff11004d5741b R15: ffff88804901c4d8 [ 789.542955][ C1] ? qdisc_pkt_len_segs_init+0x4b3/0xa30 [ 789.548667][ C1] __netif_receive_skb_core+0x13aa/0x30b0 [ 789.554451][ C1] ? clockevents_program_event+0x491/0x630 [ 789.560351][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 789.566457][ C1] ? lock_acquire+0x106/0x350 [ 789.571206][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 789.577227][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 789.583762][ C1] ? __lock_acquire+0x683/0x2cf0 [ 789.588746][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 789.594945][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 789.601307][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 789.608016][ C1] ? dev_gro_receive+0x1097/0x2380 [ 789.613257][ C1] napi_complete_done+0x299/0x730 [ 789.618363][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 789.623955][ C1] ? gro_cell_poll+0x175/0x5d0 [ 789.628756][ C1] gro_cell_poll+0x5ab/0x5d0 [ 789.633402][ C1] ? gro_cell_poll+0x175/0x5d0 [ 789.638386][ C1] __napi_poll+0xaa/0x330 [ 789.642750][ C1] net_rx_action+0x61d/0xf50 [ 789.647385][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 789.652529][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 789.657775][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 789.663097][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 789.668424][ C1] ? sched_clock+0x3f/0x60 [ 789.672896][ C1] handle_softirqs+0x225/0x840 [ 789.677702][ C1] ? do_softirq+0x76/0xd0 [ 789.682072][ C1] ? tun_rx_batched+0x185/0x790 [ 789.686957][ C1] do_softirq+0x76/0xd0 [ 789.691148][ C1] [ 789.694098][ C1] [ 789.697128][ C1] __local_bh_enable_ip+0xf8/0x130 [ 789.702355][ C1] ? tun_rx_batched+0x185/0x790 [ 789.707250][ C1] tun_rx_batched+0x616/0x790 [ 789.711962][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 789.717202][ C1] ? tun_get_user+0x2717/0x4370 [ 789.722107][ C1] ? tun_get_user+0x2717/0x4370 [ 789.727034][ C1] ? tun_get_user+0x23cb/0x4370 [ 789.731936][ C1] ? tun_get_user+0x23cb/0x4370 [ 789.736832][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 789.742150][ C1] ? tun_get_user+0x2717/0x4370 [ 789.747044][ C1] ? tun_get_user+0x2717/0x4370 [ 789.752027][ C1] tun_get_user+0x2b44/0x4370 [ 789.756832][ C1] ? aa_file_perm+0x18b/0x15f0 [ 789.761619][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 789.766404][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 789.771458][ C1] ? __lock_acquire+0x683/0x2cf0 [ 789.776433][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 789.781840][ C1] ? preempt_schedule_common+0x82/0xd0 [ 789.787338][ C1] ? ref_tracker_alloc+0x341/0x4b0 [ 789.792485][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 789.797976][ C1] ? tun_get+0x1c/0x2f0 [ 789.802162][ C1] ? tun_get+0x1c/0x2f0 [ 789.806355][ C1] ? tun_get+0x1c/0x2f0 [ 789.810628][ C1] ? tun_get+0x1c/0x2f0 [ 789.814816][ C1] tun_chr_write_iter+0x113/0x200 [ 789.819893][ C1] vfs_write+0x612/0xba0 [ 789.824177][ C1] ? __pfx_vfs_write+0x10/0x10 [ 789.828981][ C1] ? __fget_files+0x2a/0x420 [ 789.833646][ C1] ksys_write+0x150/0x270 [ 789.838012][ C1] ? __pfx_ksys_write+0x10/0x10 [ 789.842899][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.849083][ C1] do_syscall_64+0x174/0x580 [ 789.853715][ C1] ? trace_irq_disable+0x3b/0x140 [ 789.858775][ C1] ? clear_bhb_loop+0x70/0xc0 [ 789.863491][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.869610][ C1] RIP: 0033:0x7efc27f9e0d9 [ 789.874072][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.893802][ C1] RSP: 002b:00007efc28e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 789.902251][ C1] RAX: ffffffffffffffda RBX: 00007efc28225fa0 RCX: 00007efc27f9e0d9 [ 789.910246][ C1] RDX: 000000000000fdef RSI: 00002000000006c0 RDI: 0000000000000003 [ 789.918243][ C1] RBP: 00007efc28035024 R08: 0000000000000000 R09: 0000000000000000 [ 789.926320][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.934308][ C1] R13: 00007efc28226038 R14: 00007efc28225fa0 R15: 00007ffc0afca3a8 [ 789.942318][ C1] [ 789.945648][ C1] Kernel Offset: disabled [ 789.950022][ C1] Rebooting in 86400 seconds..