last executing test programs: 2m49.328066917s ago: executing program 0 (id=1141): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8000}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x36}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x4e21, 0xfffd], [0x0, 0x4e22], 0x0, 0x80, 0x80}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x7, 0x200002, 0xfffffffc, 'pptp\x00', 'syz0\x00', {0xffffffffffffffff}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'veth0_to_bridge\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 2m49.25622443s ago: executing program 0 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @broadcast}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x700, 0x16) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="800202000a000200577f00", @ANYRESDEC=r0, @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001da4b00800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x36, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f27227", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0xc6, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff0000090001"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) r8 = socket(0x2d, 0x2, 0x0) bind$pptp(r8, &(0x7f0000000500)={0x18, 0x2, {0x2, @private=0xa010101}}, 0x1e) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2m47.134482209s ago: executing program 0 (id=1149): r0 = socket$inet6(0xa, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_IFALIASn={0x4}, @IFLA_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x28044852) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@local, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x1d}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x1}}, 0xe8) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 2m46.683808903s ago: executing program 0 (id=1155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x16, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$netlink(0x10, 0x3, 0x4) 2m46.41542971s ago: executing program 0 (id=1158): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000100000f030000000006000000fffeffffaafada000000000000000f0100000092002e00000000"], 0x0, 0x43, 0x0, 0x8, 0x1}, 0x28) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007b100800000000007b0af8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000001a40)={0xb0, 0x0, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdcdd939}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe26}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x54a}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000054}, 0xc0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000012000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a7"], 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x34, r6, 0x101, 0x78bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x81) (async) r9 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 2m45.843668035s ago: executing program 0 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket(0x10, 0x803, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x66}, 0x1, 0x0, 0x0, 0x4}, 0x4008004) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) unshare(0x62040200) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) (async, rerun: 64) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r8, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, r9, 0xcf78f0963a8022e3, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2m30.623381832s ago: executing program 32 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket(0x10, 0x803, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x66}, 0x1, 0x0, 0x0, 0x4}, 0x4008004) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) unshare(0x62040200) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) (async, rerun: 64) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r8, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, r9, 0xcf78f0963a8022e3, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 6.295977723s ago: executing program 4 (id=2323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200300000800008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/86, 0x56}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000002c0)=0x1, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c8005000100000000002c00018006000340000100000c00028004e601008800000014000180080001572b909a2a83"], 0x88}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000080)=0x9d, 0x4) r5 = socket(0x1e, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'rose0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3f01"], 0xdd12}], 0x1, 0x0, 0x0, 0x10}, 0x20048055) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x1, @private2, 0xd8a4}], 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r9, 0x0, {0x2, 0xfe, 0x4}, 0xfe}, 0x18) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="a80100000a0a010100000000000000000a0000073c001180090001006d657461000000002c00028008000140000000090800034000000012080001400000000d080001400000000808000240000000030cf705400000003e08000340000000802c011280640001800b0001006f626a72656600005400028008000540000000000900020073797a30000000000800054000000000080001400000000b08000140000000080800034000000016080003400000001808000140000000040900020073797a3000000000540001800b0001006e756d67656e000044000280080004400000000008000340000000000800034000000001080004400000000708000440000000030800044000000007080004400000000008000240f100000760000180080001006f7366005400028008000340000000010800034000000001080001400000000405000200f9000000080003189ad1b4c83f8a6edd935e82a380ca40000000010800074000000001080001400000000c050002000800000008000340000000010800014000000007100001800c0001006269747769736500080004400000000304000980080007400000003b08000a4000000003"], 0x1a8}}, 0x24044800) 6.087576084s ago: executing program 4 (id=2325): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) listen(0xffffffffffffffff, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @remote, 0xfff}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000480)="dfec227feb12378aae2463ce2c2a4d02bda99e00"/31, 0x1f}, {&(0x7f0000000b40)="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", 0x113}], 0x2}}, {{&(0x7f0000000400)={0xa, 0x67cd, 0x6, @private2, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000440)}, {&(0x7f0000000a40)="3d72c104797fb7256d9c3989ab9aabdc891b93485da4c65a1b0d10b9bd2c00cc71a1ba80dcd0982a97fc58cd12181a18a18dd10818f2f34abde60b034b69bacd35116ae981c9e856a255e174ea1d273ffb914400f42d0844ea028f7f4e1088359551eae868773e2425ec912bf2fd45ec2fe447e0dbdd9b25f8ecaef0d0f7faf92b8a72d51ac107bc2dde287a65c32e79e0cd6daf81ff180b5d968b02589a7534f17a9028f6b84a7873a12a1d8180169e5df84887cdfb17e53eb272e68d299884d45a7cd4f477a1e043e8eb50ea10", 0xce}, {&(0x7f0000000640)="074b0a0bdd1f45e44d404e4f39be171c2c4c1fba66848a8ff8e3037915ccdeaf492404e144d0a937ed170cc062cab1efdb5d2ed8184c7a55fb171ce8b8d42cd0fa1b5f2f5b6ec2043e18d01a39b678b2d71f287357fafee50bbceeb0395f23c749fea03672c87ec8f35737b4d4dc4f31d8b1960cbeb64c15446cf487e3b436648e586487b5fb3512b92789b7932e172f8c800b59dd08ac9bbcce3b7b1fbeddfd8637a936336f5ba95dd6675d65e63a86bf4b1461fb4aa7edb94676da59", 0xbd}, {&(0x7f0000000580)="379f8f5332daa031d6bbe9e2ac2ca9a7baa750f0ac694ba2b3c990463187c438ce17234fe5df87a9ed6c0754bce1ae7993c3b852dc54486fec", 0x39}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="780000000000000029000000390000005c0c011f0000000000000000000000000000ffffac1414aafe8000000000000000000000000000aafe80000000000000000000000000003f20010000000000000000000000000000ff010000000000000200000000000001fe8000000000000000000000000000aa24000000000000002900000032000000fc000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x238}}], 0x2, 0x0) close(0x3) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES64=r0, @ANYRES64=r4], 0x3c}}, 0x0) r6 = socket(0x8, 0x0, 0x8000) getsockopt$rose(r6, 0x104, 0xb81f83b7abff5eb4, 0x0, 0x0) 4.888468847s ago: executing program 2 (id=2330): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000810000000000000004000630162000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendto$packet(r2, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xa, 0xfffffff9, 0x60, @rand_addr=' \x01\x00', @loopback, 0x1, 0x7800, 0xffff, 0x3}}) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x992b}], 0x1, 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x9d, &(0x7f0000000300)=""/157, 0x40f00, 0x6d, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x4, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 4.465203033s ago: executing program 2 (id=2331): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) 4.097106084s ago: executing program 2 (id=2333): setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, "125d380f5e1d54cf308bc110dfe5d080ff28c56ccfd1503dc32c645072a1928f", 0x2, 0x9, 0x9, 0xffffffc0}, 0x3c) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x301142, 0x0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000140)=0x9) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$ax25(r2, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x80, 0xd, 0x9c, {{0x8, 0x4, 0x1, 0x2c, 0x20, 0x67, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @lsrr={0x83, 0xb, 0xe, [@local, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x790, 0x8, 0x5016, 0x4, {{0x1a, 0x4, 0x0, 0x3f, 0x68, 0x66, 0x0, 0x40, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x2f, [@remote]}, @cipso={0x86, 0x1f, 0x3, [{0x2, 0xd, "8cb8e2652761f11793f0bb"}, {0x7, 0x4, "a32a"}, {0x1, 0x4, "60ed"}, {0x6, 0x4, '\vJ'}]}, @end, @timestamp={0x44, 0x2c, 0xe7, 0x0, 0x7, [0x9, 0x400, 0x4, 0x9, 0x2, 0xfffffffa, 0x2, 0x80000000, 0xfffffc01, 0x9]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x4, 0xc, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x700, 0x80000001, 0x110}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x48010) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf0, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000041}, 0x10) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xc4, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4a3}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x58}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8b}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc800}, 0x20004004) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c00)=0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)=@newpolicy={0x13c, 0x13, 0x8, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast1, 0x4e22, 0x0, 0x4e23, 0x6, 0x2, 0x180, 0xa0, 0x67, 0x0, r12}, {0x1, 0x0, 0x8, 0x6, 0x7, 0x1, 0x6, 0xaaca}, {0x8001, 0x5, 0x7, 0x1}, 0x9, 0x6e6bbd, 0x0, 0x1, 0x1, 0x3}, [@encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e21, @in=@multicast2}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd28, 0x3}}, @lifetime_val={0x24, 0x9, {0x9, 0x0, 0x3, 0xd7e7}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6ea}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in=@rand_addr=0x64010101, 0x0, 0xa}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x840) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0xc4) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xd4, r13, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2b92, 0x31}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d2}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1af}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}]]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000815}, 0x41) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r14, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x90, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa8e39c474cca6339}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}]}, 0x90}}, 0x4040801) (async) r15 = syz_genetlink_get_family_id$fou(&(0x7f00000012c0), r14) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x4c, r15, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000090) 4.001912037s ago: executing program 2 (id=2334): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000180) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) write$cgroup_int(r6, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f0000000000)=0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 2.863383522s ago: executing program 1 (id=2338): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x1f, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0x43, &(0x7f0000000600)=""/67, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xe, 0xfff, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000680)=[{0x0, 0x2, 0x6, 0xc}, {0x1, 0x4, 0x4}], 0x10, 0xfffffff7}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x810, r0, 0x2300e000) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a05002c0012800e00010069703667726574617000000018000280140007000000000000000000fffffffffffffffe63f9eefd"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x0, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e21, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.604322562s ago: executing program 1 (id=2339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@dellink={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4a40}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x84000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000040)={0x2c, 0xc, r5, 0x1b}, 0x10) sendmsg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000002500)="acbad1ce", 0x4}], 0x2}, 0x4000) 2.200551759s ago: executing program 5 (id=2341): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40"], 0xdc}}, 0x4000000) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f0000000640)=0xc) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000680)={0x0, r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r7, r8, 0x0, 0x2, &(0x7f00000006c0)='-%'}, 0x30) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x24, r2, 0x1, 0x70bd29, 0x25dfcbfd, {{}, {@val={0x8, 0x1, 0x5}, @val={0x0, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c811}, 0x1) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) write$tun(r4, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x0, 0x3, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x43, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xec, 0x0, {0x8, 0x4, 0x2, 0xa, 0xf, 0x66, 0xe, 0x8, 0x67, 0x5, @multicast2, @multicast1, {[@generic={0x89, 0x9, "9a61b38954b8c7"}]}}, "d22b3e8cf7384e"}}}, 0x51) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$tcp_mem(r13, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) write$cgroup_subtree(r13, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x2000) openat$cgroup_int(r13, &(0x7f0000000000)='cpu.max.burst\x00', 0x2, 0x0) 2.161633164s ago: executing program 4 (id=2342): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6711f234db5aaa13f382ad796bd667c9e00000009873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) close(r1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x40, 0x4) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.115883205s ago: executing program 1 (id=2343): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x80000001, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3, 0x4100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.956637651s ago: executing program 4 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x464, 0x300, 0x70bd27, 0x25dfdbfc, "55e996a31f89506bf8a7d82711364108bbd9c17353bc8421d90953eb2827564f7aea80967cd98bcd88b6c946304d67a9b233959916353620d087a70f8f40cf71b1097464b8174dc798a18d984c4e843b7ccfe2bc61232d44ff6afc4cccd347d9a79ae8419584fce501600ad36db7bca8e6732ffe06fb358a3e89a407bbb71ad0edb8ee5ada7959a9834b8085d14201f235591c041a9b453df1d7b569845c2557787bc6a11235b8", ["", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x8010}, 0x8080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x3, 0x8b, 0x9, 0x7, 0x9, 0x7f, 0x4, 0x10, 0x4f, 0x0, 0x9, 0x5, 0x5}, 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@bridge_getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x21104}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}]}, 0x3c}}, 0x0) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000640)=ANY=[@ANYBLOB="24008000", @ANYRES16=r8, @ANYRESHEX=r5, @ANYRESHEX=r5], 0x24}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x1, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r11, 0x8b32, &(0x7f0000000040)) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='w\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000100000000000000007e00000000000300", @ANYRES32=r10, @ANYBLOB="1c00ae00f7f7ffff0000ec9cecac9c561c0fb5d94b744f14c73055edae6e17c6994a832f57d881"], 0x20}}, 0x4000054) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0xd}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'uXA\x91'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x2000c000) 1.848958402s ago: executing program 1 (id=2346): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x200, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$kcm(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x12, 0x0, 0x301, 0x0, 0x25dfdbee, {0x7}}, 0x14}}, 0x8850) r5 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000002240)=ANY=[], 0x6a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000100)="b9ff033168640372b89e14f00800fefc4c2c1b8a", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x50) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x78}, 0x1, 0x7}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x420, 0x98, 0x130, 0x130, 0x508, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5e, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg\x00', {}, {}, 0x5e, 0x0, 0x65}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) recvfrom$inet(r8, &(0x7f0000000180)=""/8, 0x8, 0x40000040, &(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.679414775s ago: executing program 5 (id=2347): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x428, 0x3f4, 0x200, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x13, [0x8, 0x10001, 0x62, 0x1, 0x2, 0x2, 0x3ff, 0x3d, 0x3, 0x7, 0xc, 0x0, 0x4, 0x0, 0x8, 0x8001, 0x3, 0x6, 0x6, 0x25cf96f9, 0x8, 0xfffffff8, 0x291, 0xa, 0x4, 0x7fffffff, 0x10, 0xa5, 0x1000, 0x7, 0x1, 0x8, 0x4, 0x0, 0x40, 0x9, 0xff, 0x6, 0x3, 0x10001, 0x6, 0x8d4a, 0xc, 0x10000, 0x4e0, 0x0, 0x8, 0x0, 0x1, 0xf5, 0x3, 0x1, 0x2d14, 0xf0, 0x7ae7a560, 0x3, 0xe5, 0x6, 0x4, 0xa7, 0x0, 0x1, 0x3, 0xfffffffc], [0xdaab, 0x5ed, 0x8000, 0x4, 0x7, 0x3, 0xffff59cf, 0x4, 0x8, 0xd, 0x368b, 0x5, 0x2, 0x7, 0x3, 0x1800000, 0x7fffffff, 0x9d18, 0xe, 0x401, 0x3, 0x6, 0x2, 0x7, 0xffffffff, 0x4, 0x2, 0x4, 0x400, 0xff, 0x4e60, 0x166, 0xae34, 0x2, 0x0, 0x10000, 0x2a7, 0xb2, 0x8, 0x2, 0x1, 0x2f, 0x7, 0xf, 0x87c, 0x40, 0x800, 0x8, 0x3ca6, 0x9, 0x5, 0x9f, 0x10, 0x40, 0x6, 0x7, 0x3ff, 0x2, 0x40, 0xfa, 0x3, 0x200, 0x9, 0x4], [0x3, 0x85, 0xffffffff, 0x5, 0x0, 0x3, 0x4, 0x6601, 0x10000, 0x0, 0x5, 0x4, 0x542, 0x64e, 0x966, 0x20, 0x6, 0x5, 0x3, 0x2, 0xa0c4, 0x5, 0x1, 0x1000, 0x4, 0x80000001, 0x6, 0xb, 0x4, 0x440, 0x10, 0x5, 0x4, 0x40, 0x4, 0x9f, 0xe2b9, 0x7, 0x10001, 0xef, 0x51, 0x8001, 0x4, 0xfffff800, 0x7f, 0x7, 0x6, 0x2, 0x9, 0x9, 0x2b0b, 0x0, 0x6, 0x0, 0x3, 0x6, 0x8, 0x0, 0x4, 0x1bd, 0x8, 0x8, 0xcd93, 0x1ff], [0x32eeb059, 0x2, 0x74942fe4, 0x0, 0x0, 0x1600000, 0x80000001, 0x6, 0x1b, 0x1, 0x0, 0x40000000, 0xb9d0, 0x8e, 0x81, 0x10, 0x9, 0x3, 0xffffffff, 0x3, 0x46, 0x80000001, 0x5, 0x80, 0xa, 0x9, 0xe, 0x5, 0xfffffffd, 0x7fffffff, 0xb, 0xb9, 0xffffbeb4, 0x80000001, 0x3, 0x1, 0x1, 0x8, 0x3, 0x4, 0x3, 0x0, 0xb5, 0x4, 0x7f800000, 0x7, 0x7fff, 0x3, 0xf, 0x0, 0xfffff800, 0x9, 0x68, 0x5, 0x1f1, 0x2, 0xfffff514, 0x4, 0x9, 0x4, 0x80, 0x0, 0x400000, 0x7ff], 0x7, ['cgroup\x00']}, ["", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000001c0)={0x6, 0x4, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013070000000000000000ffffffff00000014000000861c5ba400aa1414bb000000000000000000000000000000e3ffffff000000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000001c030000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200040000000000000008001600010000004c0012"], 0x144}, 0x1, 0xe, 0x0, 0x4000}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.509148012s ago: executing program 3 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff7fc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000004c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ba8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4800}, 0x40008c1) (async) r6 = socket$inet(0x2, 0xa, 0x9) sendmsg(r6, &(0x7f0000000800)={&(0x7f0000000500)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)="b199f3a07833bc50326de6fcb3a47c787371c061a29b2e689e3a6a183b5eba2f205357f04f59e90ac5080fb9e5f4ed160587a76f1421fe7d54a9f1abbff4f547f5f854a583e62606b3661edab244b828977a5be7c269641f875ebccaeaa289367d6631adf4d1ac2c6f6f2270fac21da2afcb58a9178dcd06984c8f423bd941e9fb8c09f649f1b10ec1f4c6beb7a7f59a8f314938ec49ff0eba5bf767aefaea70abc801499c5ebf7aacb8d3ec22faf4fb46b798b8f80a62", 0xb7}, {&(0x7f0000000580)="4430e83e6fe5909dade379b2ec158796e12503dfe3a482c65bb0378d64b5832fab225cf9d29dd3969b39f4bae4b799eb7c3516c29bcb945cb13c65615fbd45e87b5f85d699", 0x45}], 0x2, &(0x7f0000000880)=[{0x38, 0x3, 0x1, "bd74c346b2c60d99ee8af6e813a4ccab978176d344ad481e9290e8074be818480c939cdc5d7b"}, {0x18, 0x11, 0x5, '('}, {0x10, 0x116, 0x4}], 0x60}, 0x101) 1.356996571s ago: executing program 3 (id=2349): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x1f, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0x43, &(0x7f0000000600)=""/67, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xe, 0xfff, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000680)=[{0x0, 0x2, 0x6, 0xc}, {0x1, 0x4, 0x4}], 0x10, 0xfffffff7}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x810, r0, 0x2300e000) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a05002c0012800e00010069703667726574617000000018000280140007000000000000000000fffffffffffffffe63f9eefd"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x0, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e21, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.192878542s ago: executing program 3 (id=2350): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) listen(r0, 0x0) 1.092134092s ago: executing program 4 (id=2351): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r6, 0x4, 0x2, 0x3, 0x5fb2, 0x15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8000, 0x8000, 0xef, 0x8}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000aced0f56a18ac50ee7dd417d44000000000000000000000a50000000060a0b160900007e00c000000200000824000480200001800a00010071756f7461000000100002800c00014000000000000000020900010073797ab000000000c1a5be936ec37c5a5585a0c0286d0900020073797a3200000000144f000000112cc644c97c42c77d821bb0d5c263a3baaac0a355c8f66b6fbc38926f44346f878a5d01bb69f2d4c4287454081dce96b87c5b5ec42f2fe0880b697db553ce95efb87296cf27565a6c56cd7a7b"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(0x3) 1.080132885s ago: executing program 2 (id=2352): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040884) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f0000008a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x0, 0x3}, {0x7, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000008b40)=""/8, 0x3f, 0x8, 0x1, 0x3}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (rerun: 32) close(r6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) (async, rerun: 32) r10 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) sendto$packet(r10, 0x0, 0x0, 0x20040040, &(0x7f00000001c0)={0x11, 0x6, r9, 0x1, 0xd9, 0x6, @random=' \x00'}, 0x14) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x11, r3, 0x0) (async, rerun: 64) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x0, {0x2, 0xff, 0x1}, {0x1, 0x1}, 0xfd, 0xfd}], 0x20) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x1, 0x803, 0x0) 1.028154021s ago: executing program 5 (id=2353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb735}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x9b159ee6f6ef7e41) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r1], 0x5c}, 0x1, 0xba01}, 0x0) close(0x4) 772.027727ms ago: executing program 3 (id=2354): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000047c0)=r3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000011040)=@newtaction={0x60, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0xffffffffffffffff, 0x3ff, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x48010) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 769.991232ms ago: executing program 2 (id=2355): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000050"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x6, 0x7ff, 0x80000001, 0x9a30, r8, 0x41, '\x00', r7, r2, 0x1, 0x4, 0x5, 0xa, @value=r9}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000300000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000ae6a1924981b"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 766.255952ms ago: executing program 1 (id=2356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x5d, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x812}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x64}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x5}, 'ZL'}}]}]}]}}]}, 0x64}}, 0x40000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r1, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) 745.727232ms ago: executing program 5 (id=2357): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000280)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x6e24, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x22, 0xe, 0x0, 0x4}, 0x9c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10040024}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='cachefiles_ondemand_fd_write\x00', r6}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x18, 0x76, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{0x4}]}, 0x18}}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000186000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006a0001002abd7000fd33804ce1c5c6"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="208f98b74c52c74a41734f0000002f00010000000000fcdbdf251000f2800c00180008ac0f0000000200"], 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r12, 0x80111500, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x34, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000001}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x24000000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 484.663334ms ago: executing program 3 (id=2358): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvmsg(r0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41f901020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0xab}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x22020600) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet(0x2b, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='sched_kthread_stop_ret\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0x6f, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) connect$phonet_pipe(r7, &(0x7f0000000240)={0x23, 0x2, 0x5, 0x2}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 129.087903ms ago: executing program 5 (id=2359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x4, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1d, 0x0, @rand_addr, @multicast2}}}}}}, 0x0) unshare(0x2040400) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd", 0x45}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x424ae6e9fc05fbe0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket(0x18, 0x5, 0x0) getpeername$netrom(r2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000092230000000081000000010018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 93.986893ms ago: executing program 1 (id=2360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="176b0db5d25446463f74d3740a70f6e0249ca79eab579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e39", 0x61}, {&(0x7f0000000700)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9b859dc1b8a2ecca66132bd68a90f03f10f1fb3b2d7c3ef20dc1074a4ab268b17ab3ea31489aead9ab69a3b779e83c259279904a6ef330e637c994178ffc1922e966353b6a48225198e98ae3e88940c", 0xbe}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4079, 0xfef}, {&(0x7f0000001840)=""/4078, 0xfee}, {&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/183, 0xb7}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/193, 0xc1}], 0x7}, 0x102) close(r4) socket$inet6(0xa, 0x800, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000500), 0x0, 0x40000e0, 0x0, 0x0) 50.613899ms ago: executing program 3 (id=2361): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x62040400) unshare(0x44000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0x1000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x22020600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) pwrite64(r3, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x2000c090) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0190880000000000007f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="b8a18c275218e0c9", 0x8, 0x80, &(0x7f00000002c0)={0x11, 0x1, 0x0, 0x1, 0x81, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000006726e36f000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0xa, 0x300) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private=0x45d1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, r8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x2, 0x0, 0x4}}, {{@in6=@private2}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 0x0, 0xb7, 0x2, 0xfffffffe, 0x1}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 30.290845ms ago: executing program 4 (id=2362): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x5, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x4, 0x3313, @empty, @multicast2}}}}, 0x3e) (fail_nth: 5) 0s ago: executing program 5 (id=2363): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x300}, 0x50) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xa1, @mcast1, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r0, 0x4c4}, {r1, 0x802c}, {r0, 0xa010}], 0x3, &(0x7f0000000280)={r2, r3+60000000}, &(0x7f00000002c0)={[0x9]}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r4}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r5}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x11}, 0x94) kernel console output (not intermixed with test programs): lter on device bond3 [ 244.464082][T10322] team0: Port device bond3 added [ 244.957555][T10357] IPVS: set_ctl: invalid protocol: 135 10.1.0.255:20001 [ 244.975529][T10351] IPVS: set_ctl: invalid protocol: 135 10.1.0.255:20001 [ 245.125340][ T7356] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.183763][ T7356] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.192395][ T7356] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.234107][ T7356] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.439324][T10372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.575662][T10352] ip6_vti0 speed is unknown, defaulting to 1000 [ 246.358856][T10352] wg1 speed is unknown, defaulting to 1000 [ 246.401926][T10352] lo speed is unknown, defaulting to 1000 [ 246.733366][T10427] sock: sock_timestamping_bind_phc: sock not bind to device [ 248.006085][T10449] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 248.249746][T10473] netlink: 'syz.4.1093': attribute type 30 has an invalid length. [ 248.380990][T10473] bond6: option arp_missed_max: invalid value (0) [ 248.388717][T10473] bond6: option arp_missed_max: allowed values 1 - 255 [ 248.409773][T10473] bond6 (unregistering): Released all slaves [ 248.459557][T10462] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.686872][T10479] tipc: Enabling of bearer rejected, failed to enable media [ 248.822060][T10487] __nla_validate_parse: 49 callbacks suppressed [ 248.822084][T10487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 248.845653][T10487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'. [ 248.850853][T10462] wg1 speed is unknown, defaulting to 1000 [ 248.856962][T10471] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.874430][T10462] lo speed is unknown, defaulting to 1000 [ 249.231471][T10499] vlan2: entered promiscuous mode [ 249.239924][T10499] bridge0: entered promiscuous mode [ 249.273664][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 249.393848][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1104'. [ 249.451882][T10471] wg1 speed is unknown, defaulting to 1000 [ 249.504398][T10471] lo speed is unknown, defaulting to 1000 [ 249.829178][T10519] FAULT_INJECTION: forcing a failure. [ 249.829178][T10519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.857112][T10519] CPU: 0 UID: 0 PID: 10519 Comm: syz.0.1107 Not tainted syzkaller #0 PREEMPT(full) [ 249.857145][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.857161][T10519] Call Trace: [ 249.857170][T10519] [ 249.857180][T10519] dump_stack_lvl+0x189/0x250 [ 249.857218][T10519] ? __pfx____ratelimit+0x10/0x10 [ 249.857245][T10519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.857276][T10519] ? __pfx__printk+0x10/0x10 [ 249.857300][T10519] ? __might_fault+0xb0/0x130 [ 249.857346][T10519] should_fail_ex+0x414/0x560 [ 249.857388][T10519] _copy_from_user+0x2d/0xb0 [ 249.857420][T10519] core_sys_select+0x4bc/0xa20 [ 249.857468][T10519] ? __pfx_core_sys_select+0x10/0x10 [ 249.857532][T10519] ? __pfx_set_user_sigmask+0x10/0x10 [ 249.857572][T10519] __se_sys_pselect6+0x27a/0x300 [ 249.857614][T10519] ? __pfx___se_sys_pselect6+0x10/0x10 [ 249.857648][T10519] ? __pfx_ksys_write+0x10/0x10 [ 249.857685][T10519] ? __x64_sys_pselect6+0x21/0xf0 [ 249.857722][T10519] do_syscall_64+0xfa/0xfa0 [ 249.857749][T10519] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.857776][T10519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.857798][T10519] ? clear_bhb_loop+0x60/0xb0 [ 249.857826][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.857847][T10519] RIP: 0033:0x7f430b18f749 [ 249.857868][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.857887][T10519] RSP: 002b:00007f430c000038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 249.857911][T10519] RAX: ffffffffffffffda RBX: 00007f430b3e6090 RCX: 00007f430b18f749 [ 249.857927][T10519] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 249.857941][T10519] RBP: 00007f430c000090 R08: 0000000000000000 R09: 0000000000000000 [ 249.857954][T10519] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 249.857967][T10519] R13: 00007f430b3e6128 R14: 00007f430b3e6090 R15: 00007ffcb28f7cd8 [ 249.858004][T10519] [ 250.388051][T10503] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.625204][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 250.654231][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 250.709376][T10503] wg1 speed is unknown, defaulting to 1000 [ 250.762827][T10503] lo speed is unknown, defaulting to 1000 [ 250.800775][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 250.810662][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 251.379727][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 251.433609][T10556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1115'. [ 251.488625][T10558] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1117'. [ 252.786974][T10578] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 253.202505][T10616] syzkaller0: entered promiscuous mode [ 253.208888][T10616] syzkaller0: entered allmulticast mode [ 253.280994][T10619] bond9: Removing last arp target with arp_interval on [ 253.429224][T10641] No such timeout policy "syz0" [ 253.879703][T10647] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20004 [ 254.025424][T10655] netlink: 'syz.1.1145': attribute type 10 has an invalid length. [ 254.110799][T10662] __nla_validate_parse: 11 callbacks suppressed [ 254.110833][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1146'. [ 254.131165][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 254.765401][T10652] delete_channel: no stack [ 255.491333][T10653] geneve2: entered promiscuous mode [ 255.500806][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.509364][T10655] team0: Port device bond0 added [ 255.559563][ T7561] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.583314][ T7561] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.688081][ T7561] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.778645][ T7561] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.934692][T10691] tipc: Resetting bearer [ 256.000716][T10691] tipc: Resetting bearer [ 256.069953][T10700] xt_hashlimit: invalid rate [ 256.329939][T10707] syzkaller0: entered promiscuous mode [ 256.349644][T10707] syzkaller0: entered allmulticast mode [ 256.832714][T10691] ip6_vti0 speed is unknown, defaulting to 1000 [ 259.420370][T10747] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1164'. [ 260.893098][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.152202][T10747] team0: Port device bond0 removed [ 262.183213][T10747] bond0 (unregistering): Released all slaves [ 262.393405][T10691] wg1 speed is unknown, defaulting to 1000 [ 262.431721][T10691] lo speed is unknown, defaulting to 1000 [ 262.460985][T10735] ip6_vti0 speed is unknown, defaulting to 1000 [ 263.303201][T10763] xt_hashlimit: invalid rate [ 263.787667][T10765] syzkaller0: entered promiscuous mode [ 263.793294][T10765] syzkaller0: entered allmulticast mode [ 263.890139][T10764] tipc: Enabled bearer , priority 0 [ 264.279354][T10764] tipc: Resetting bearer [ 264.593371][T10771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1168'. [ 264.710636][T10764] tipc: Disabling bearer [ 264.933339][T10735] wg1 speed is unknown, defaulting to 1000 [ 265.073411][T10735] lo speed is unknown, defaulting to 1000 [ 265.412013][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 268.590842][T10793] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 268.681196][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 269.000632][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 270.829700][T10813] xt_hashlimit: invalid rate [ 272.279891][T10819] netlink: 'syz.1.1179': attribute type 8 has an invalid length. [ 274.229562][T10831] tipc: Enabled bearer , priority 0 [ 274.878847][T10832] syzkaller0: entered promiscuous mode [ 275.057846][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.102320][T10832] syzkaller0: entered allmulticast mode [ 275.129160][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.158795][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.220298][T10829] tipc: Enabling of bearer rejected, already enabled [ 275.350297][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.363172][ T8917] tipc: Node number set to 4291612182 [ 275.441770][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.256488][T10830] tipc: Resetting bearer [ 276.294072][T10828] tipc: Resetting bearer [ 276.374237][T10828] tipc: Disabling bearer [ 276.557424][T10846] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1183'. [ 276.787370][T10853] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 277.110359][T10860] netlink: 996 bytes leftover after parsing attributes in process `syz.2.1188'. [ 277.135024][T10839] ip6_vti0 speed is unknown, defaulting to 1000 [ 277.440415][T10869] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 277.671506][T10869] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 277.679238][ T52] Bluetooth: hci5: command tx timeout [ 277.685989][ T7584] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.693831][T10839] wg1 speed is unknown, defaulting to 1000 [ 277.702802][ T7584] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.713991][T10869] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 277.732461][T10839] lo speed is unknown, defaulting to 1000 [ 277.732893][T10873] syzkaller1: entered promiscuous mode [ 277.746397][T10873] syzkaller1: entered allmulticast mode [ 277.753690][ T7584] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.793776][ T7584] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.922741][T10879] syz_tun: entered allmulticast mode [ 277.959085][T10879] syz_tun: left allmulticast mode [ 278.169805][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 278.195485][T10885] netlink: 'syz.2.1196': attribute type 15 has an invalid length. [ 278.405461][T10839] chnl_net:caif_netlink_parms(): no params data found [ 278.806289][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.824983][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.843280][T10839] bridge_slave_0: entered allmulticast mode [ 278.909846][T10839] bridge_slave_0: entered promiscuous mode [ 278.930389][T10839] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.951022][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.009097][T10839] bridge_slave_1: entered allmulticast mode [ 279.027840][T10839] bridge_slave_1: entered promiscuous mode [ 279.078881][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 279.180881][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 279.227267][T10933] netlink: 'syz.2.1207': attribute type 4 has an invalid length. [ 279.407680][T10839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.449034][T10839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.649401][T10944] bond0: option packets_per_slave: invalid value (1048582) [ 279.657007][T10944] bond0: option packets_per_slave: allowed values 0 - 65535 [ 279.667161][T10944] bond0 (unregistering): Released all slaves [ 279.667317][T10947] netlink: 'syz.2.1210': attribute type 4 has an invalid length. [ 279.715214][T10839] team0: Port device team_slave_0 added [ 279.747442][T10839] team0: Port device team_slave_1 added [ 279.755083][ T52] Bluetooth: hci5: command tx timeout [ 279.841235][T10839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.851642][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.879740][T10839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.896313][T10839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.914905][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.973594][T10839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.270595][T10839] hsr_slave_0: entered promiscuous mode [ 280.278059][T10839] hsr_slave_1: entered promiscuous mode [ 280.290834][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'. [ 280.295393][T10839] debugfs: 'hsr0' already exists in 'hsr' [ 280.306202][T10839] Cannot create hsr debugfs directory [ 280.350847][T10974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1216'. [ 280.370843][T10971] tap0: tun_chr_ioctl cmd 1074025692 [ 280.509459][T10971] veth10: entered allmulticast mode [ 280.757809][T10760] udevd[10760]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 280.809979][T10993] tipc: Enabling of bearer rejected, failed to enable media [ 280.810376][T10760] udevd[10760]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 281.318692][T11013] netlink: 'syz.1.1223': attribute type 13 has an invalid length. [ 281.437656][T10839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.493425][T10839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 281.518292][T10839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 281.539042][T10839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 281.807754][T10839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.834553][ T52] Bluetooth: hci5: command tx timeout [ 281.901112][T10839] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.955834][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.963204][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.980127][T11048] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1229'. [ 282.015446][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.023049][ T7582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.341752][T11037] ip6_vti0 speed is unknown, defaulting to 1000 [ 282.687795][T11072] netlink: 4868 bytes leftover after parsing attributes in process `syz.1.1235'. [ 282.708151][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 282.719179][T10839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.847035][T11077] tipc: Failed to remove unknown binding: 66,1,1/0:3220593382/3220593384 [ 282.858932][T11077] tipc: Failed to remove unknown binding: 66,1,1/0:3220593382/3220593384 [ 282.989872][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 283.020541][T11037] wg1 speed is unknown, defaulting to 1000 [ 283.028772][T11037] lo speed is unknown, defaulting to 1000 [ 283.054056][T11085] netlink: 'syz.1.1241': attribute type 1 has an invalid length. [ 283.081133][T11085] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 283.229473][T11092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.246145][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 283.257913][T11092] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.272394][T11092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.299986][T11097] bond0: Error: Cannot enslave bond to itself. [ 283.326561][T11097] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 283.408849][T11097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.463896][T11102] bond0: (slave gretap2): making interface the new active one [ 283.475495][T11102] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 283.632361][T10839] veth0_vlan: entered promiscuous mode [ 283.662449][T10839] veth1_vlan: entered promiscuous mode [ 283.778170][T10839] veth0_macvtap: entered promiscuous mode [ 283.837299][T10839] veth1_macvtap: entered promiscuous mode [ 283.921115][ T52] Bluetooth: hci5: command tx timeout [ 283.933232][T10839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.989214][T10839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.018374][ T7582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.036365][ T7582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.066617][ T7582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.109775][ T7582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.370363][ T7584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.389623][ T7584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.489416][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 284.530519][ T7584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.544175][ T7584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.931047][T11138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1252'. [ 285.043790][T11143] sctp: [Deprecated]: syz.5.1180 (pid 11143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.043790][T11143] Use struct sctp_sack_info instead [ 285.260257][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 285.270488][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 286.452960][T11168] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1258'. [ 287.269335][T11193] __nla_validate_parse: 2 callbacks suppressed [ 287.269355][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 287.311291][T11195] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1266'. [ 287.325882][T11198] netlink: 'syz.1.1266': attribute type 33 has an invalid length. [ 287.358646][T11198] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1266'. [ 287.372425][T11198] `: renamed from team0 [ 287.522476][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1269'. [ 287.542833][T11207] netlink: 'syz.5.1269': attribute type 1 has an invalid length. [ 287.655754][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1269'. [ 287.710781][T11210] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 287.773193][T11215] lo: Caught tx_queue_len zero misconfig [ 287.786382][T11215] netlink: 'syz.1.1271': attribute type 9 has an invalid length. [ 287.816053][T11215] syzkaller0: entered promiscuous mode [ 287.828378][T11215] syzkaller0: entered allmulticast mode [ 288.500097][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 288.766256][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 288.791530][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 288.876977][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'. [ 288.894591][T11252] bond1: entered promiscuous mode [ 288.899829][T11252] bond1: entered allmulticast mode [ 288.906110][T11252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.911796][T11257] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 288.914789][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 288.915010][T11241] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.258769][T11272] netlink: 'syz.1.1287': attribute type 2 has an invalid length. [ 289.307219][T11272] netlink: 'syz.1.1287': attribute type 2 has an invalid length. [ 289.334775][T11272] netlink: 'syz.1.1287': attribute type 2 has an invalid length. [ 289.346959][T11272] netlink: 'syz.1.1287': attribute type 2 has an invalid length. [ 289.363808][T11272] netlink: 'syz.1.1287': attribute type 2 has an invalid length. [ 289.704004][T11241] wg1 speed is unknown, defaulting to 1000 [ 289.713036][T11241] lo speed is unknown, defaulting to 1000 [ 289.741092][T11291] IPVS: set_ctl: invalid protocol: 59 172.20.20.41:20002 [ 289.986164][T11300] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 290.129164][T11307] nbd: must specify at least one socket [ 290.187199][T11300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.278086][T11303] bond2: (slave veth5): Enslaving as an active interface with a down link [ 290.291224][T11305] bond2: entered allmulticast mode [ 290.300124][T11281] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.368898][T11311] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 290.465467][T11318] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 290.550154][T11319] ipvlan3: entered promiscuous mode [ 290.571766][T11319] bridge0: port 4(ipvlan3) entered blocking state [ 290.600702][T11319] bridge0: port 4(ipvlan3) entered disabled state [ 290.623900][T11319] ipvlan3: entered allmulticast mode [ 290.630313][T11319] bridge0: entered allmulticast mode [ 290.639192][T11319] ipvlan3: left allmulticast mode [ 290.657868][T11319] bridge0: left allmulticast mode [ 290.836661][T11281] wg1 speed is unknown, defaulting to 1000 [ 290.867156][T11281] lo speed is unknown, defaulting to 1000 [ 290.981471][T11326] netlink: 'syz.2.1301': attribute type 8 has an invalid length. [ 291.272460][T11334] netlink: 'syz.2.1303': attribute type 4 has an invalid length. [ 291.327589][T11337] netlink: 'syz.2.1303': attribute type 4 has an invalid length. [ 291.589256][T11344] netlink: 'syz.3.1305': attribute type 12 has an invalid length. [ 292.099186][T11369] openvswitch: netlink: Missing valid actions attribute. [ 292.106978][T11369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.172299][T11368] Bluetooth: MGMT ver 1.23 [ 292.611481][T11386] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 292.968331][T11390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.070694][T11404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.119053][T11406] __nla_validate_parse: 39 callbacks suppressed [ 293.119076][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 293.138156][T11378] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.193763][T11404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 293.241620][T11404] bond3: entered promiscuous mode [ 293.263691][T11404] bond3: entered allmulticast mode [ 293.369441][T11412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.423851][T11412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 293.564164][T11378] wg1 speed is unknown, defaulting to 1000 [ 293.571815][T11378] lo speed is unknown, defaulting to 1000 [ 293.773782][T11429] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1329'. [ 293.832707][T11435] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1330'. [ 293.923001][T11437] IPVS: set_ctl: invalid protocol: 16 100.1.1.2:20000 [ 294.338472][T11457] vlan3: entered promiscuous mode [ 294.355782][T11457] geneve1: entered promiscuous mode [ 294.369306][T11457] vlan3: entered allmulticast mode [ 294.377656][T11457] geneve1: entered allmulticast mode [ 294.406228][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1335'. [ 294.800956][T11477] xt_CT: No such helper "snmp" [ 295.131414][T11490] gretap0: entered promiscuous mode [ 295.140950][T11490] vlan4: entered promiscuous mode [ 295.221139][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1343'. [ 295.564443][T11486] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.756809][T11517] xt_l2tp: missing protocol rule (udp|l2tpip) [ 295.775461][T11512] syz.3.1347: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 295.843640][T11512] CPU: 1 UID: 0 PID: 11512 Comm: syz.3.1347 Not tainted syzkaller #0 PREEMPT(full) [ 295.843681][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.843695][T11512] Call Trace: [ 295.843705][T11512] [ 295.843716][T11512] dump_stack_lvl+0x189/0x250 [ 295.843756][T11512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.843786][T11512] ? __pfx__printk+0x10/0x10 [ 295.843809][T11512] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.843840][T11512] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.843872][T11512] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 295.843907][T11512] warn_alloc+0x214/0x310 [ 295.843948][T11512] ? __pfx_warn_alloc+0x10/0x10 [ 295.843992][T11512] ? __get_vm_area_node+0x28f/0x300 [ 295.844024][T11512] ? xskq_create+0xbf/0x170 [ 295.844053][T11512] __vmalloc_node_range_noprof+0x690/0x12d0 [ 295.844120][T11512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.844157][T11512] ? __kasan_kmalloc+0x93/0xb0 [ 295.844184][T11512] vmalloc_user_noprof+0xad/0xf0 [ 295.844217][T11512] ? xskq_create+0xbf/0x170 [ 295.844241][T11512] xskq_create+0xbf/0x170 [ 295.844268][T11512] xsk_init_queue+0xb0/0x110 [ 295.844295][T11512] xsk_setsockopt+0x57b/0x8d0 [ 295.844320][T11512] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.844346][T11512] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.844380][T11512] ? aa_sock_opt_perm+0xff/0x1b0 [ 295.844416][T11512] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 295.844438][T11512] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.844462][T11512] do_sock_setsockopt+0x17c/0x1b0 [ 295.844495][T11512] __x64_sys_setsockopt+0x13f/0x1b0 [ 295.844528][T11512] do_syscall_64+0xfa/0xfa0 [ 295.844553][T11512] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.844580][T11512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.844601][T11512] ? clear_bhb_loop+0x60/0xb0 [ 295.844628][T11512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.844648][T11512] RIP: 0033:0x7f06f3b8f749 [ 295.844689][T11512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.844708][T11512] RSP: 002b:00007f06f1dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.844732][T11512] RAX: ffffffffffffffda RBX: 00007f06f3de6090 RCX: 00007f06f3b8f749 [ 295.844748][T11512] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 295.844761][T11512] RBP: 00007f06f3c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 295.844774][T11512] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 295.844788][T11512] R13: 00007f06f3de6128 R14: 00007f06f3de6090 R15: 00007ffcaeaf6528 [ 295.844826][T11512] [ 295.844835][T11512] Mem-Info: [ 296.120439][T11512] active_anon:12277 inactive_anon:0 isolated_anon:0 [ 296.120439][T11512] active_file:3335 inactive_file:39966 isolated_file:0 [ 296.120439][T11512] unevictable:768 dirty:159 writeback:0 [ 296.120439][T11512] slab_reclaimable:11931 slab_unreclaimable:159947 [ 296.120439][T11512] mapped:35680 shmem:5719 pagetables:1201 [ 296.120439][T11512] sec_pagetables:0 bounce:0 [ 296.120439][T11512] kernel_misc_reclaimable:0 [ 296.120439][T11512] free:1261257 free_pcp:11512 free_cma:0 [ 296.168308][T11512] Node 0 active_anon:50108kB inactive_anon:0kB active_file:13340kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143720kB dirty:632kB writeback:0kB shmem:22340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14348kB pagetables:4692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.216957][T11498] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1343'. [ 296.228950][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1343'. [ 296.283564][T11512] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.344801][T11512] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.415820][T11512] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 296.475356][T11512] Node 0 DMA32 free:1136592kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54708kB inactive_anon:0kB active_file:13340kB inactive_file:159664kB unevictable:1536kB writepending:632kB zspages:0kB present:3129332kB managed:2565012kB mlocked:0kB bounce:0kB free_pcp:22976kB local_pcp:12592kB free_cma:0kB [ 296.517524][T11512] lowmem_reserve[]: 0 0 0 0 0 [ 296.573756][T11512] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.645851][T11512] lowmem_reserve[]: 0 0 0 0 0 [ 296.664955][T11512] Node 1 Normal free:3892876kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18080kB local_pcp:10656kB free_cma:0kB [ 296.744934][T11512] lowmem_reserve[]: 0 0 0 0 0 [ 296.750818][T11512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.793209][T11486] wg1 speed is unknown, defaulting to 1000 [ 296.803615][T11512] Node 0 DMA32: 3*4kB (ME) 18*8kB (UM) 5*16kB (UM) 732*32kB (UM) 176*64kB (U) 101*128kB (UM) 51*256kB (UME) 22*512kB (UME) 15*1024kB (UME) 8*2048kB (UME) 252*4096kB (UM) = 1136108kB [ 296.832134][T11486] lo speed is unknown, defaulting to 1000 [ 296.843711][T11512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.883726][T11512] Node 1 Normal: 189*4kB (UME) 67*8kB (UME) 54*16kB (UME) 143*32kB (UME) 47*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3892876kB [ 296.922621][T11512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.963548][T11512] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 296.972904][T11512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.038939][T11512] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 297.074763][T11512] 44676 total pagecache pages [ 297.079517][T11512] 0 pages in swap cache [ 297.099323][T11512] Free swap = 124996kB [ 297.190359][T11530] ip6_vti0 speed is unknown, defaulting to 1000 [ 297.244988][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1353'. [ 297.264221][T11512] Total swap = 124996kB [ 297.274207][T11512] 2097051 pages RAM [ 297.278067][T11512] 0 pages HighMem/MovableOnly [ 297.304886][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 297.315994][T11512] 424156 pages reserved [ 297.320196][T11512] 0 pages cma reserved [ 297.782355][T11558] IPVS: persistence engine module ip_vs_pe_ not found [ 297.818575][T11561] validate_nla: 1 callbacks suppressed [ 297.818596][T11561] netlink: 'syz.5.1356': attribute type 2 has an invalid length. [ 297.863697][T11561] netlink: 'syz.5.1356': attribute type 8 has an invalid length. [ 298.100756][T11530] wg1 speed is unknown, defaulting to 1000 [ 298.111732][T11542] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.122742][T11530] lo speed is unknown, defaulting to 1000 [ 298.441546][T11572] syz_tun: entered allmulticast mode [ 298.455066][T11572] __nla_validate_parse: 2 callbacks suppressed [ 298.455085][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1359'. [ 298.472744][T11571] syz_tun: left allmulticast mode [ 298.598351][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 298.694194][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1361'. [ 298.729008][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1361'. [ 298.945776][T11591] tipc: Started in network mode [ 298.972000][T11591] tipc: Node identity 120a760ec849, cluster identity 4711 [ 298.989947][T11591] tipc: Enabled bearer , priority 0 [ 299.005224][T11542] wg1 speed is unknown, defaulting to 1000 [ 299.012079][T11594] netlink: 'syz.5.1365': attribute type 1 has an invalid length. [ 299.020496][T11591] syzkaller0: entered promiscuous mode [ 299.057478][T11591] syzkaller0: entered allmulticast mode [ 299.121325][T11598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1366'. [ 299.153968][T11542] lo speed is unknown, defaulting to 1000 [ 299.154012][T11591] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1363'. [ 299.231964][T11596] tipc: Resetting bearer [ 299.303862][T11590] tipc: Resetting bearer [ 299.389547][T11590] tipc: Disabling bearer [ 299.416353][T11604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1368'. [ 299.431575][T11603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1368'. [ 299.674142][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 299.951717][T11619] netlink: 'syz.3.1373': attribute type 4 has an invalid length. [ 299.959933][T11619] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1373'. [ 300.480856][T11633] syzkaller0: entered promiscuous mode [ 300.500381][T11633] syzkaller0: entered allmulticast mode [ 300.908030][T11647] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 300.920165][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1379'. [ 301.324963][T11668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.482486][T11682] veth0: entered promiscuous mode [ 301.559902][T11683] veth0: left promiscuous mode [ 301.649557][T11696] xt_TCPMSS: Only works on TCP SYN packets [ 301.753103][T11699] netlink: 'syz.1.1395': attribute type 14 has an invalid length. [ 301.770996][T11699] netlink: 'syz.1.1395': attribute type 13 has an invalid length. [ 301.894678][T11679] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.952054][T11704] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 302.118499][T11708] sctp: [Deprecated]: syz.3.1398 (pid 11708) Use of int in max_burst socket option. [ 302.118499][T11708] Use struct sctp_assoc_value instead [ 302.190486][T11679] wg1 speed is unknown, defaulting to 1000 [ 302.199469][T11679] lo speed is unknown, defaulting to 1000 [ 303.465398][T11753] tipc: Enabled bearer , priority 0 [ 303.550994][T11751] syzkaller0: entered promiscuous mode [ 303.557044][T11751] syzkaller0: entered allmulticast mode [ 303.563413][T11751] tipc: Resetting bearer [ 303.570804][T11755] __nla_validate_parse: 10 callbacks suppressed [ 303.570824][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1412'. [ 303.599146][T11755] netem: change failed [ 303.608826][T11750] tipc: Resetting bearer [ 304.943146][T11750] tipc: Disabling bearer [ 304.958613][T11720] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.101642][T11762] ip6gre1: entered promiscuous mode [ 305.118552][T11762] ip6gre1: entered allmulticast mode [ 305.308965][T11720] wg1 speed is unknown, defaulting to 1000 [ 305.317084][T11720] lo speed is unknown, defaulting to 1000 [ 305.358459][T11775] netlink: 'syz.4.1418': attribute type 12 has an invalid length. [ 305.660590][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1421'. [ 305.897640][T11789] syzkaller0: entered promiscuous mode [ 305.910735][T11789] syzkaller0: entered allmulticast mode [ 306.200500][T11797] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1424'. [ 306.288036][T11802] tipc: Enabling of bearer rejected, media not registered [ 306.402708][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 306.420113][T11810] netlink: 'syz.1.1429': attribute type 10 has an invalid length. [ 306.677740][T11827] netlink: 'syz.5.1435': attribute type 4 has an invalid length. [ 306.693398][T11827] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1435'. [ 306.726716][T11830] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 306.948680][T11840] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1437'. [ 307.041774][T11850] sctp: [Deprecated]: syz.5.1441 (pid 11850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.041774][T11850] Use struct sctp_sack_info instead [ 307.069922][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1438'. [ 307.099124][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 307.115320][T11849] sctp: [Deprecated]: syz.5.1441 (pid 11849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.115320][T11849] Use struct sctp_sack_info instead [ 307.143143][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1442'. [ 307.152356][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1442'. [ 307.306175][T11865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.982187][T11910] vlan4: entered promiscuous mode [ 308.659543][T11909] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.725754][T11918] __nla_validate_parse: 5 callbacks suppressed [ 308.725777][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 308.842961][T11935] x_tables: duplicate underflow at hook 1 [ 308.969559][T11937] tipc: Enabled bearer , priority 0 [ 308.978259][T11939] syzkaller0: entered promiscuous mode [ 308.995015][T11939] syzkaller0: entered allmulticast mode [ 309.015642][T11937] syzkaller0: entered allmulticast mode [ 309.033258][T11943] pim6reg: entered allmulticast mode [ 309.249527][ T30] audit: type=1800 audit(1764569480.323:3): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1467" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1491 res=0 errno=0 [ 309.366886][T11937] tipc: Resetting bearer [ 309.372835][T11943] pim6reg: left allmulticast mode [ 309.412137][T11909] wg1 speed is unknown, defaulting to 1000 [ 309.431490][T11933] tipc: Disabling bearer [ 309.443667][T11909] lo speed is unknown, defaulting to 1000 [ 309.607996][T11958] xt_TPROXY: Can be used only with -p tcp or -p udp [ 309.642171][T11962] netlink: 'syz.2.1471': attribute type 1 has an invalid length. [ 309.650145][T11962] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1471'. [ 309.660330][T11962] NCSI netlink: No device for ifindex 0 [ 310.104920][T11980] : renamed from bond_slave_0 (while UP) [ 310.890679][T11985] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.961577][ T7564] wlan1: Trigger new scan to find an IBSS to join [ 311.164884][T11985] wg1 speed is unknown, defaulting to 1000 [ 311.170481][T12008] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1483'. [ 311.173082][T11985] lo speed is unknown, defaulting to 1000 [ 311.206792][T12009] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 312.231182][T12050] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 312.264161][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 312.735524][T12065] veth0_macvtap: left promiscuous mode [ 312.742177][T12065] macvtap0: entered allmulticast mode [ 312.953252][T12053] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.009630][T12077] x_tables: duplicate underflow at hook 3 [ 313.178734][T12085] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1504'. [ 313.222499][T12084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1504'. [ 313.237277][T12090] tipc: Enabling of bearer rejected, already enabled [ 313.333693][T12093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1505'. [ 313.356289][T12093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1505'. [ 313.393877][T12093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1505'. [ 313.425340][T12093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1505'. [ 313.478224][T12053] wg1 speed is unknown, defaulting to 1000 [ 313.535444][T12053] lo speed is unknown, defaulting to 1000 [ 313.793618][T12118] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 313.795504][T12120] __nla_validate_parse: 29 callbacks suppressed [ 313.795527][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 313.860149][T12120] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 313.913661][ T7564] wlan1: Trigger new scan to find an IBSS to join [ 313.935955][T12126] syzkaller0: entered promiscuous mode [ 313.941491][T12126] syzkaller0: entered allmulticast mode [ 313.992160][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1511'. [ 314.227672][T12135] macvtap1: entered promiscuous mode [ 314.257111][T12135] macvtap1: entered allmulticast mode [ 314.328151][T12135] : entered promiscuous mode [ 314.333470][T12135] bond_slave_1: entered promiscuous mode [ 314.342007][T12135] bond0: entered allmulticast mode [ 314.347546][T12144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1515'. [ 314.357376][T12135] : entered allmulticast mode [ 314.362451][T12135] bond_slave_1: entered allmulticast mode [ 314.368362][T12135] bond0: entered promiscuous mode [ 314.375491][T12135] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 314.382803][T12135] team0: Device macvtap1 failed to register rx_handler [ 314.392731][T12135] bond0: left allmulticast mode [ 314.398464][T12135] : left allmulticast mode [ 314.403147][T12135] bond_slave_1: left allmulticast mode [ 314.410244][T12135] bond0: left promiscuous mode [ 314.416309][T12135] : left promiscuous mode [ 314.421995][T12135] bond_slave_1: left promiscuous mode [ 314.556544][T12152] batadv1: entered promiscuous mode [ 314.648221][T12153] batadv1: entered promiscuous mode [ 314.705458][T12159] pim6reg1: entered promiscuous mode [ 314.719971][T12159] pim6reg1: entered allmulticast mode [ 314.945627][T12159] delete_channel: no stack [ 314.946144][T12164] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1519'. [ 314.961091][T12164] netlink: 'syz.2.1519': attribute type 9 has an invalid length. [ 314.969553][T12164] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1519'. [ 314.984401][T12164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1519'. [ 315.068494][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1520'. [ 315.086477][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1520'. [ 315.333250][T12143] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.465588][T12180] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1523'. [ 315.558109][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 315.608634][T12182] netlink: zone id is out of range [ 315.615019][T12182] netlink: zone id is out of range [ 315.622516][T12182] netlink: zone id is out of range [ 315.628377][T12182] netlink: zone id is out of range [ 315.633710][T12182] netlink: zone id is out of range [ 315.663579][T12182] netlink: zone id is out of range [ 315.678246][T12182] netlink: zone id is out of range [ 315.695367][T12182] netlink: zone id is out of range [ 315.721066][T12182] netlink: zone id is out of range [ 315.726380][T12182] netlink: zone id is out of range [ 315.815718][T12193] netlink: 'syz.2.1527': attribute type 2 has an invalid length. [ 315.877933][T12193] : entered promiscuous mode [ 315.911343][T12143] wg1 speed is unknown, defaulting to 1000 [ 315.992547][T12143] lo speed is unknown, defaulting to 1000 [ 316.152361][T12167] ip6_vti0 speed is unknown, defaulting to 1000 [ 316.933910][T12228] nbd: socks must be embedded in a SOCK_ITEM attr [ 316.941798][T12228] block nbd1: shutting down sockets [ 316.954501][ T7561] wlan1: Trigger new scan to find an IBSS to join [ 316.968355][T12231] netlink: 'syz.1.1538': attribute type 21 has an invalid length. [ 316.983878][T12231] netlink: 'syz.1.1538': attribute type 4 has an invalid length. [ 316.997158][T12231] netlink: 'syz.1.1538': attribute type 3 has an invalid length. [ 317.014582][T12231] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 317.094252][T12167] wg1 speed is unknown, defaulting to 1000 [ 317.126025][T12167] lo speed is unknown, defaulting to 1000 [ 317.132967][T12168] ip6_vti0 speed is unknown, defaulting to 1000 [ 317.499561][T12251] bridge1: left allmulticast mode [ 317.554182][T12251] gretap1: left promiscuous mode [ 317.747576][T12264] ieee802154 phy0 wpan0: encryption failed: -90 [ 317.885985][T12168] wg1 speed is unknown, defaulting to 1000 [ 317.896442][ T7575] wlan1: Creating new IBSS network, BSSID 72:7c:b2:9b:5e:ed [ 317.919591][T12269] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 317.941360][T12168] lo speed is unknown, defaulting to 1000 [ 318.068511][T12276] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 318.098948][T12269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.305630][T12273] bond4: (slave gretap2): making interface the new active one [ 318.315925][T12273] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 318.482531][T12276] 8021q: adding VLAN 0 to HW filter on device bond10 [ 318.619033][T12277] bond10: (slave veth11): Enslaving as an active interface with a down link [ 318.789695][T12279] bond10 (unregistering): (slave veth11): Releasing active interface [ 318.802293][T12279] bond10 (unregistering): Released all slaves [ 318.861131][T12285] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.877018][T12285] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.927602][T12287] syzkaller1: entered promiscuous mode [ 318.933229][T12287] syzkaller1: entered allmulticast mode [ 318.967494][T12285] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.991104][T12297] __nla_validate_parse: 91 callbacks suppressed [ 318.991125][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 319.001768][T12285] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.070055][T12285] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.081471][T12285] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.166032][T12285] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.185096][T12285] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.406930][ T7582] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.443554][ T7582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.569155][ T7561] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.595250][ T7561] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.664539][ T7575] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.693207][ T7575] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.787522][ T7575] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.807499][ T7575] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.938501][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 319.952594][T12325] tipc: Enabled bearer , priority 0 [ 319.981316][T12325] syzkaller0: entered promiscuous mode [ 319.990556][T12325] syzkaller0: entered allmulticast mode [ 320.040553][T12324] tipc: Resetting bearer [ 320.061200][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'. [ 320.131800][T12324] tipc: Disabling bearer [ 320.211392][ T7561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.235287][ T7561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.377728][T12354] netlink: 'syz.2.1570': attribute type 9 has an invalid length. [ 320.423092][T12354] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1570'. [ 320.727718][ T7575] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.742134][ T7575] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.759178][T12347] syzkaller1: entered promiscuous mode [ 320.767407][T12347] syzkaller1: entered allmulticast mode [ 320.817962][ T7575] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.826803][ T7575] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.835697][ T7575] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.844156][ T7575] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.321066][ T1302] net_ratelimit: 7 callbacks suppressed [ 322.321088][ T1302] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 322.336377][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.605916][ T7575] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.615224][ T7575] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.810429][T12410] x_tables: duplicate underflow at hook 1 [ 322.908348][T12378] ip6_vti0 speed is unknown, defaulting to 1000 [ 322.918067][T12420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1577'. [ 322.946029][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1580'. [ 323.346402][T12436] bond0: Unable to set down delay as MII monitoring is disabled [ 323.498798][T12397] ip6_vti0 speed is unknown, defaulting to 1000 [ 323.507845][T12378] wg1 speed is unknown, defaulting to 1000 [ 323.524422][T12378] lo speed is unknown, defaulting to 1000 [ 324.169312][T12397] wg1 speed is unknown, defaulting to 1000 [ 324.184888][T12397] lo speed is unknown, defaulting to 1000 [ 324.275904][T12474] tipc: Cannot configure node identity twice [ 324.354608][ T13] nci: nci_rx_work: unknown MT 0x7 [ 324.512816][T12460] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.619559][T12479] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 325.055580][T12469] ip6_vti0 speed is unknown, defaulting to 1000 [ 325.461202][T12469] wg1 speed is unknown, defaulting to 1000 [ 325.494831][T12469] lo speed is unknown, defaulting to 1000 [ 325.658504][T12460] wg1 speed is unknown, defaulting to 1000 [ 325.782482][T12460] lo speed is unknown, defaulting to 1000 [ 326.187820][T12515] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 326.230121][T12509] tipc: Enabling of bearer rejected, failed to enable media [ 326.241054][T12517] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 326.276217][T12514] bond3: option lacp_rate: invalid value (255) [ 326.285568][T12514] bond3 (unregistering): Released all slaves [ 326.516440][T12521] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20001 [ 326.675199][T12523] ip6tnl4: entered allmulticast mode [ 326.810558][T12526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1604'. [ 327.553381][T12546] netlink: 'syz.2.1606': attribute type 1 has an invalid length. [ 327.583792][T12546] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1606'. [ 327.636564][T12546] NCSI netlink: No device for ifindex 0 [ 327.724662][T12541] netlink: 'syz.2.1606': attribute type 2 has an invalid length. [ 328.176476][T12563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1611'. [ 328.214024][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1611'. [ 328.228357][ T5910] IPVS: starting estimator thread 0... [ 328.245647][T12563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1611'. [ 328.247067][T12572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.271825][T12563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1611'. [ 328.342316][T12553] ip6_vti0 speed is unknown, defaulting to 1000 [ 328.364550][T12575] IPVS: using max 29 ests per chain, 69600 per kthread [ 328.410075][T12579] netlink: 'syz.2.1614': attribute type 8 has an invalid length. [ 328.450343][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'. [ 328.481363][T12579] bond0: entered promiscuous mode [ 328.486995][T12579] bond_slave_0: entered promiscuous mode [ 328.497423][T12579] bond_slave_1: entered promiscuous mode [ 328.531531][T12579] geneve0: entered promiscuous mode [ 328.539025][T12579] team_slave_0: entered promiscuous mode [ 328.555360][T12579] team_slave_0: left promiscuous mode [ 328.564521][T12579] bond0: left promiscuous mode [ 328.584143][T12579] bond_slave_0: left promiscuous mode [ 328.589914][T12579] bond_slave_1: left promiscuous mode [ 328.615180][T12579] geneve0: left promiscuous mode [ 328.797637][T12590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1617'. [ 328.811753][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1617'. [ 328.821230][T12553] wg1 speed is unknown, defaulting to 1000 [ 328.821305][T12590] macvlan0: entered allmulticast mode [ 328.821326][T12590] veth1_vlan: entered allmulticast mode [ 328.842210][T12553] lo speed is unknown, defaulting to 1000 [ 329.145597][T12607] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1622'. [ 329.341564][T12608] tipc: Enabling of bearer rejected, failed to enable media [ 329.399180][T12622] xt_TCPMSS: Only works on TCP SYN packets [ 329.639530][T12614] syzkaller1: entered promiscuous mode [ 329.645505][T12614] syzkaller1: entered allmulticast mode [ 329.668612][T12627] xfrm1: entered allmulticast mode [ 329.939527][T12644] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 329.950204][T12651] tipc: Started in network mode [ 329.974152][T12651] tipc: Node identity 4, cluster identity 4711 [ 329.991236][T12651] tipc: Node number set to 4 [ 330.595197][T12610] ip6_vti0 speed is unknown, defaulting to 1000 [ 330.724945][T12675] sock: sock_timestamping_bind_phc: sock not bind to device [ 330.735682][T12675] tunl0: Caught tx_queue_len zero misconfig [ 330.979852][T12685] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 331.054241][T12685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.088566][T12690] syzkaller0: entered promiscuous mode [ 331.094562][T12690] syzkaller0: entered allmulticast mode [ 331.142728][T12688] bond3: (slave dummy0): making interface the new active one [ 331.160475][T12688] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 331.246762][T12610] wg1 speed is unknown, defaulting to 1000 [ 331.246958][T12641] ip6_vti0 speed is unknown, defaulting to 1000 [ 331.261493][T12610] lo speed is unknown, defaulting to 1000 [ 331.660610][T12680] ip6_vti0 speed is unknown, defaulting to 1000 [ 331.865294][T12703] __nla_validate_parse: 7 callbacks suppressed [ 331.865315][T12703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1647'. [ 331.869007][T12680] wg1 speed is unknown, defaulting to 1000 [ 331.890486][T12680] lo speed is unknown, defaulting to 1000 [ 331.910223][T12641] wg1 speed is unknown, defaulting to 1000 [ 331.940707][T12641] lo speed is unknown, defaulting to 1000 [ 332.667956][T12717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1651'. [ 332.697313][T12717] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1651'. [ 332.731263][T12698] ip6_vti0 speed is unknown, defaulting to 1000 [ 333.524042][T12698] wg1 speed is unknown, defaulting to 1000 [ 333.587561][T12698] lo speed is unknown, defaulting to 1000 [ 334.726522][T12758] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 334.740348][T12759] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 334.760472][T12759] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 334.761641][T12758] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1661'. [ 335.309675][T12784] netlink: 'syz.4.1666': attribute type 13 has an invalid length. [ 335.322441][T12784] netlink: 'syz.4.1666': attribute type 17 has an invalid length. [ 335.375034][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1666'. [ 335.394064][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1666'. [ 335.487020][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1666'. [ 335.505121][T12791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1667'. [ 335.516293][T12791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1667'. [ 335.543538][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1666'. [ 335.705960][T12795] openvswitch: netlink: Missing valid actions attribute. [ 335.713083][T12795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.951561][T12808] team1: entered promiscuous mode [ 335.977092][T12814] netlink: 'syz.5.1673': attribute type 33 has an invalid length. [ 335.985727][T12808] team1: entered allmulticast mode [ 336.005738][T12808] 8021q: adding VLAN 0 to HW filter on device team1 [ 336.103125][T12818] bridge0: left promiscuous mode [ 336.117817][T12818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.127599][T12818] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.139283][T12818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.208604][T12817] gtp0: entered promiscuous mode [ 336.214749][T12817] gtp0: entered allmulticast mode [ 336.222596][ T8917] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.231118][ T8917] syz2: Port: 1 Link ACTIVE [ 336.246332][ T5819] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.810695][ T7356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.827462][ T7356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.841375][T12866] syz_tun: entered allmulticast mode [ 336.911017][T12863] syzkaller1: entered promiscuous mode [ 336.925076][T12863] syzkaller1: entered allmulticast mode [ 337.028929][T12861] syz_tun: left allmulticast mode [ 337.274019][T12892] netlink: 'syz.3.1693': attribute type 8 has an invalid length. [ 337.292113][T12892] __nla_validate_parse: 23 callbacks suppressed [ 337.292137][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 337.475105][T12904] syzkaller0: entered promiscuous mode [ 337.494835][T12904] syzkaller0: entered allmulticast mode [ 337.789894][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 337.825480][T12905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1697'. [ 337.901467][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 337.932045][T12929] netlink: 'syz.4.1701': attribute type 9 has an invalid length. [ 337.967240][T12929] netlink: 'syz.4.1701': attribute type 11 has an invalid length. [ 337.989266][T12929] netlink: 'syz.4.1701': attribute type 12 has an invalid length. [ 338.018311][T12929] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1701'. [ 338.049151][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'. [ 338.075223][T12934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1704'. [ 338.148655][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.173159][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.208096][T12942] syzkaller1: entered promiscuous mode [ 338.214069][T12942] syzkaller1: entered allmulticast mode [ 338.298523][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 338.321078][T12946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1706'. [ 338.336512][T12947] netlink: 'syz.2.1707': attribute type 8 has an invalid length. [ 338.509620][T12951] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1708'. [ 338.789108][T12944] ip6_vti0 speed is unknown, defaulting to 1000 [ 339.028079][T12944] wg1 speed is unknown, defaulting to 1000 [ 339.028087][T12947] ip6_vti0 speed is unknown, defaulting to 1000 [ 339.042552][T12944] lo speed is unknown, defaulting to 1000 [ 339.387835][T12964] syzkaller0: entered promiscuous mode [ 339.407121][T12964] syzkaller0: entered allmulticast mode [ 339.796062][ T30] audit: type=1800 audit(1764569510.873:4): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1715" name="memory.events" dev="tmpfs" ino=446 res=0 errno=0 [ 341.105181][T12947] wg1 speed is unknown, defaulting to 1000 [ 341.142840][T12968] hsr_slave_1 (unregistering): left promiscuous mode [ 341.608968][T12989] wg1: left promiscuous mode [ 341.615331][T12989] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 341.622589][T12989] macsec1: left promiscuous mode [ 341.629098][T12989] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 341.637246][T12989] veth3: left promiscuous mode [ 341.642369][T12989] geneve2: left promiscuous mode [ 341.647600][T12989] bond1: left promiscuous mode [ 341.652494][T12989] bond3: left promiscuous mode [ 341.668774][T12989] team1: left promiscuous mode [ 341.677609][ T5910] ip6_vti0 speed is unknown, defaulting to 1000 [ 341.686635][T12947] lo speed is unknown, defaulting to 1000 [ 341.696754][ T5910] syz2: Port: 1 Link DOWN [ 341.762586][T13008] syzkaller1: entered promiscuous mode [ 341.769630][T13008] syzkaller1: entered allmulticast mode [ 341.796791][ T8910] ip6_vti0 speed is unknown, defaulting to 1000 [ 342.010126][T13024] netlink: 'syz.5.1723': attribute type 33 has an invalid length. [ 342.741817][T13054] __nla_validate_parse: 3 callbacks suppressed [ 342.741840][T13054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1727'. [ 343.008457][T13066] netlink: 'syz.5.1732': attribute type 8 has an invalid length. [ 343.097051][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1732'. [ 343.108664][T13049] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.115935][ T7564] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 343.140259][T13071] syzkaller1: entered promiscuous mode [ 343.146697][T13071] syzkaller1: entered allmulticast mode [ 343.304102][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 343.325747][T13049] wg1 speed is unknown, defaulting to 1000 [ 343.345537][T13049] lo speed is unknown, defaulting to 1000 [ 343.528241][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 343.541920][T13079] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.879781][ T7561] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 344.123081][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1741'. [ 344.132825][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1741'. [ 344.605071][ T7564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.613887][ T7564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.635968][T13108] syzkaller1: entered promiscuous mode [ 344.641514][T13108] syzkaller1: entered allmulticast mode [ 344.718332][T13077] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.930031][T13064] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.981016][T13077] wg1 speed is unknown, defaulting to 1000 [ 345.038808][T13077] lo speed is unknown, defaulting to 1000 [ 345.220449][T13123] xt_hashlimit: size too large, truncated to 1048576 [ 345.233876][T13122] xt_hashlimit: size too large, truncated to 1048576 [ 345.614518][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1750'. [ 345.618265][T13066] ip6_vti0 speed is unknown, defaulting to 1000 [ 345.880042][T13098] ip6_vti0 speed is unknown, defaulting to 1000 [ 345.887688][T13066] wg1 speed is unknown, defaulting to 1000 [ 345.965517][T13066] lo speed is unknown, defaulting to 1000 [ 346.066748][T13064] wg1 speed is unknown, defaulting to 1000 [ 346.232629][T13064] lo speed is unknown, defaulting to 1000 [ 346.611447][T13154] syzkaller1: entered promiscuous mode [ 346.617711][T13154] syzkaller1: entered allmulticast mode [ 346.679558][T13098] wg1 speed is unknown, defaulting to 1000 [ 346.706308][T13098] lo speed is unknown, defaulting to 1000 [ 347.067100][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 347.101561][T13162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.192797][T13158] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 347.235015][T13158] bond5: (slave macvlan0): Enslaving as a backup interface with an up link [ 347.324125][ T7561] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 347.424065][ T7356] bond5: (slave macvlan0): link status up again after 0 ms [ 347.431630][ T7356] bond5: (slave macvlan0): failed to get link speed/duplex [ 347.489682][T13177] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1763'. [ 347.505177][ T7356] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 347.563730][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 347.677122][ T7356] bond5: (slave macvlan0): failed to get link speed/duplex [ 347.804582][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 347.877763][T13192] tap0: tun_chr_ioctl cmd 1074025673 [ 347.883267][T13193] tap0: tun_chr_ioctl cmd 1074025673 [ 347.956566][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 348.123753][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 348.133010][T13201] tipc: Enabling of bearer rejected, failed to enable media [ 348.163642][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 348.464586][T13215] : entered promiscuous mode [ 348.549321][T13217] netlink: 'syz.4.1773': attribute type 21 has an invalid length. [ 348.563972][T13217] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1773'. [ 348.675030][ T7564] net_ratelimit: 3 callbacks suppressed [ 348.675053][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 348.853630][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 348.964060][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 349.084599][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 349.095679][T13222] netlink: 'syz.4.1775': attribute type 39 has an invalid length. [ 349.157556][T13225] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1775'. [ 349.245137][T13227] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 349.262763][T13199] ip6_vti0 speed is unknown, defaulting to 1000 [ 349.293671][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 349.411203][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 349.524031][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 349.631004][T13250] netlink: zone id is out of range [ 349.636711][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 350.485692][ T7564] tipc: Subscription rejected, illegal request [ 350.611097][T13281] vlan0: entered promiscuous mode [ 350.618956][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1791'. [ 350.632454][T13281] vlan0: entered allmulticast mode [ 350.642283][T13281] bond0: entered allmulticast mode [ 350.647759][T13281] team0: entered allmulticast mode [ 350.655584][T13199] wg1 speed is unknown, defaulting to 1000 [ 350.655628][T13197] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.664040][T13199] lo speed is unknown, defaulting to 1000 [ 350.871059][T13295] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 350.886280][T13293] macsec1: entered promiscuous mode [ 350.891849][T13293] bridge0: entered promiscuous mode [ 350.899537][T13293] bridge0: port 1(macsec1) entered blocking state [ 350.906312][T13293] bridge0: port 1(macsec1) entered disabled state [ 350.914240][T13293] macsec1: entered allmulticast mode [ 350.919695][T13293] bridge0: entered allmulticast mode [ 350.930492][T13293] macsec1: left allmulticast mode [ 350.935921][T13293] bridge0: left allmulticast mode [ 350.942878][T13293] bridge0: left promiscuous mode [ 350.989503][T13291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1792'. [ 351.080994][T13296] bond10: (slave gretap3): making interface the new active one [ 351.104499][T13296] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 351.219185][T13197] wg1 speed is unknown, defaulting to 1000 [ 351.234744][T13301] macvtap1: entered promiscuous mode [ 351.240414][T13301] macvtap1: entered allmulticast mode [ 351.247254][T13301] dummy0: entered allmulticast mode [ 351.252717][T13301] dummy0: entered promiscuous mode [ 351.264390][T13301] team0: Device macvtap1 failed to register rx_handler [ 351.272415][T13301] dummy0: left allmulticast mode [ 351.277945][T13301] dummy0: left promiscuous mode [ 351.309426][T13197] lo speed is unknown, defaulting to 1000 [ 351.700790][T13315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1799'. [ 352.951046][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 353.005615][T13358] netlink: 'syz.3.1813': attribute type 23 has an invalid length. [ 353.323664][T13359] netlink: 'syz.3.1813': attribute type 23 has an invalid length. [ 353.925866][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880560e5000: rx timeout, send abort [ 353.936323][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880560e5000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 353.990443][ T13] net_ratelimit: 72 callbacks suppressed [ 353.990467][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 354.097812][T13362] ip6_vti0 speed is unknown, defaulting to 1000 [ 354.192232][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 354.324695][T13376] .70·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 354.350767][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1817'. [ 354.424310][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 354.533753][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 354.643631][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 354.820955][T13391] syzkaller0: entered promiscuous mode [ 354.841040][T13391] syzkaller0: entered allmulticast mode [ 354.861458][T13362] wg1 speed is unknown, defaulting to 1000 [ 355.021340][T13401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1824'. [ 355.116541][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 356.402899][T13362] lo speed is unknown, defaulting to 1000 [ 356.402976][T13375] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.494062][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 356.646188][T13413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1828'. [ 356.659510][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 356.773582][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 356.883584][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 356.934618][T13382] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.013591][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 357.099557][T13429] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 357.156283][T13382] wg1 speed is unknown, defaulting to 1000 [ 357.175696][T13382] lo speed is unknown, defaulting to 1000 [ 357.182344][T13375] wg1 speed is unknown, defaulting to 1000 [ 357.222637][T13375] lo speed is unknown, defaulting to 1000 [ 357.748443][T13437] netlink: 'syz.5.1834': attribute type 13 has an invalid length. [ 357.756857][T13438] bond1: option arp_validate: invalid value (18446744073491447809) [ 357.769396][T13438] bond1 (unregistering): Released all slaves [ 357.968864][T13437] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.976759][T13437] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.167585][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.197142][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.258466][T13437] veth1_vlan: left allmulticast mode [ 358.368572][T13413] ip6_vti0 speed is unknown, defaulting to 1000 [ 358.369262][ T7564] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.393753][ T7564] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.419359][ T7564] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.429345][ T7564] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.640522][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 358.672340][T13413] wg1 speed is unknown, defaulting to 1000 [ 358.680593][T13413] lo speed is unknown, defaulting to 1000 [ 359.004466][ T7575] net_ratelimit: 5 callbacks suppressed [ 359.004487][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 359.174476][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 359.295203][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 359.455964][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 359.588045][T13456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1840'. [ 359.623773][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 359.705769][T13456] bridge4: entered promiscuous mode [ 359.711053][T13456] bridge4: entered allmulticast mode [ 359.762429][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 359.846123][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 359.873648][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 359.991673][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'. [ 360.003776][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 360.025579][ T7564] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 360.103372][T13477] syzkaller1: entered promiscuous mode [ 360.109447][T13477] syzkaller1: entered allmulticast mode [ 360.121736][T13479] syzkaller0: entered promiscuous mode [ 360.127508][T13479] syzkaller0: entered allmulticast mode [ 360.157286][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 360.276681][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 360.508132][T13500] tipc: Enabled bearer , priority 0 [ 360.530833][T13500] syzkaller0: entered promiscuous mode [ 360.545844][T13500] syzkaller0: entered allmulticast mode [ 360.630528][T13502] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.1852'. [ 360.712337][T13499] tipc: Resetting bearer [ 360.775150][T13499] tipc: Disabling bearer [ 360.798252][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 360.864677][T13518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.875524][T13518] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.959812][ T5962] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.985198][ T5962] syz2: Port: 1 Link ACTIVE [ 360.992294][ T5962] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.135610][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1858'. [ 361.174273][T13535] tipc: Can't bind to reserved service type 0 [ 361.349807][T13531] syzkaller1: entered promiscuous mode [ 361.356837][T13531] syzkaller1: entered allmulticast mode [ 361.783770][T13555] tipc: Enabled bearer , priority 0 [ 361.861802][T13553] tipc: Disabling bearer [ 361.878971][T13525] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.438487][T13585] netlink: 'syz.2.1872': attribute type 2 has an invalid length. [ 362.468354][T13525] wg1 speed is unknown, defaulting to 1000 [ 362.477442][T13525] lo speed is unknown, defaulting to 1000 [ 362.617087][T13586] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 362.827402][T13585] ip6_vti0 speed is unknown, defaulting to 1000 [ 363.030076][T13602] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1876'. [ 363.099589][T13585] wg1 speed is unknown, defaulting to 1000 [ 363.102021][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.116222][T13585] lo speed is unknown, defaulting to 1000 [ 363.121300][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.180631][T13604] syzkaller1: entered promiscuous mode [ 363.193969][T13604] syzkaller1: entered allmulticast mode [ 363.566736][T13613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1879'. [ 363.708728][T13610] ip6tnl4: left allmulticast mode [ 363.775490][T13610] bridge4: left promiscuous mode [ 363.780757][T13610] bridge4: left allmulticast mode [ 364.074275][ T13] net_ratelimit: 19 callbacks suppressed [ 364.074299][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 364.260486][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 365.058310][T13642] netlink: 552 bytes leftover after parsing attributes in process `syz.3.1886'. [ 366.428977][T13652] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 366.445109][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 366.456901][T13652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1889'. [ 366.472721][T13652] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 366.480940][T13652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1889'. [ 366.573806][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 366.703943][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 366.710460][T13666] netlink: 'syz.4.1894': attribute type 1 has an invalid length. [ 366.781831][T13664] siw: device registration error -23 [ 366.814026][T13671] netlink: 'syz.1.1895': attribute type 15 has an invalid length. [ 366.847147][T13672] bond6: (slave gretap2): making interface the new active one [ 366.870805][T13672] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 366.884348][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 367.038649][T13677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.053668][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 367.163596][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 367.314656][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 367.446328][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 367.486243][T13711] syzkaller1: entered promiscuous mode [ 367.496169][T13711] syzkaller1: entered allmulticast mode [ 367.675187][T13713] syzkaller0: entered promiscuous mode [ 367.680729][T13713] syzkaller0: entered allmulticast mode [ 367.755065][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 367.769798][T13721] xt_nat: multiple ranges no longer supported [ 367.968123][T13734] Cannot find set identified by id 1 to match [ 369.597556][T13737] pim6reg: entered allmulticast mode [ 369.603664][ T7575] net_ratelimit: 1 callbacks suppressed [ 369.603683][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 369.734058][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 369.844107][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 369.887349][T13767] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 369.899273][T13767] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1921'. [ 369.909675][T13767] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 369.919773][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1920'. [ 369.949116][T13767] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1921'. [ 369.986264][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 370.133684][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 370.175981][T13742] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.243575][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 370.322389][T13781] netlink: 'syz.5.1927': attribute type 12 has an invalid length. [ 370.353657][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 370.465295][T13789] batadv1: entered promiscuous mode [ 370.513680][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 370.627843][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 370.764324][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 370.848693][T13742] wg1 speed is unknown, defaulting to 1000 [ 370.880026][T13742] lo speed is unknown, defaulting to 1000 [ 371.100154][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'. [ 371.625465][T13822] ip6gre1: left promiscuous mode [ 371.892425][T13837] netlink: 'syz.1.1939': attribute type 7 has an invalid length. [ 371.900865][T13837] netlink: 'syz.1.1939': attribute type 8 has an invalid length. [ 372.063102][T13833] syzkaller0: entered promiscuous mode [ 372.073981][T13833] syzkaller0: entered allmulticast mode [ 372.085629][T13832] tipc: Enabled bearer , priority 0 [ 372.106978][T13831] tipc: Resetting bearer [ 372.207662][T13831] tipc: Disabling bearer [ 372.541443][T13849] netlink: 'syz.1.1943': attribute type 5 has an invalid length. [ 372.574594][T13845] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 372.616558][T13845] bond2 (unregistering): Released all slaves [ 372.834980][T13828] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.062989][T13872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1948'. [ 373.076685][T13872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1948'. [ 373.086303][T13872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1948'. [ 373.095657][T13872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1948'. [ 373.323935][T13886] gtp1: entered promiscuous mode [ 373.329071][T13886] gtp1: entered allmulticast mode [ 373.694341][T13828] wg1 speed is unknown, defaulting to 1000 [ 373.694579][T13830] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.709567][T13828] lo speed is unknown, defaulting to 1000 [ 374.141034][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 374.191950][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1958'. [ 374.216339][T13923] netlink: 'syz.5.1959': attribute type 2 has an invalid length. [ 374.224931][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'. [ 374.225014][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 374.318303][T13830] wg1 speed is unknown, defaulting to 1000 [ 374.327967][T13913] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1959'. [ 374.345054][T13830] lo speed is unknown, defaulting to 1000 [ 374.533578][T13929] tipc: Enabled bearer , priority 0 [ 374.765163][T13928] tipc: Disabling bearer [ 374.827253][ T7561] net_ratelimit: 22 callbacks suppressed [ 374.827275][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 374.994227][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 375.104164][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 375.111917][T13954] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 375.238423][T13954] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 375.294602][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 375.443659][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 375.563775][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 375.649510][T13977] netlink: 'syz.5.1975': attribute type 2 has an invalid length. [ 375.686322][T13977] : entered promiscuous mode [ 375.696117][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 375.823872][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 375.995687][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 376.123530][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 376.147194][T13971] ip6_vti0 speed is unknown, defaulting to 1000 [ 376.327420][T13997] netlink: 'syz.5.1981': attribute type 32 has an invalid length. [ 376.696545][T13971] wg1 speed is unknown, defaulting to 1000 [ 376.721361][T13971] lo speed is unknown, defaulting to 1000 [ 376.748526][T13983] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 377.047083][T14024] vlan5: entered promiscuous mode [ 377.087940][T14024] bond0: entered promiscuous mode [ 377.093267][T14027] netlink: 'syz.2.1988': attribute type 3 has an invalid length. [ 377.097885][T14024] bond_slave_0: entered promiscuous mode [ 377.138842][T14027] netlink: 'syz.2.1988': attribute type 2 has an invalid length. [ 377.142572][T14024] bond_slave_1: entered promiscuous mode [ 377.224631][T14029] macvlan0: entered promiscuous mode [ 377.230262][T14029] netlink: 'syz.1.1990': attribute type 1 has an invalid length. [ 377.238251][T14029] netlink: 'syz.1.1990': attribute type 2 has an invalid length. [ 377.253147][T14029] __nla_validate_parse: 8 callbacks suppressed [ 377.253170][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 377.269017][T14024] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1988'. [ 377.283118][T14024] netlink: 'syz.2.1988': attribute type 9 has an invalid length. [ 377.301427][T14024] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1988'. [ 377.347155][T14029] syzkaller0: entered promiscuous mode [ 377.352689][T14029] syzkaller0: entered allmulticast mode [ 377.362824][T14024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1988'. [ 377.596833][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1993'. [ 377.655017][T14044] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1993'. [ 377.940559][T14048] bridge5: entered allmulticast mode [ 377.987653][T14051] syzkaller1: entered promiscuous mode [ 377.993339][T14051] syzkaller1: entered allmulticast mode [ 378.043945][T14055] syzkaller1: entered promiscuous mode [ 378.049489][T14055] syzkaller1: entered allmulticast mode [ 378.069467][T14053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1995'. [ 378.080745][T14056] syz_tun: entered allmulticast mode [ 378.115493][T14060] geneve0: entered allmulticast mode [ 378.238509][T14049] syz_tun: left allmulticast mode [ 378.379618][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2003'. [ 378.481999][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2006'. [ 378.630499][T14094] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2009'. [ 378.939667][ T7575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.961058][ T7575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.002162][T14113] syzkaller1: entered promiscuous mode [ 379.008927][T14113] syzkaller1: entered allmulticast mode [ 379.033685][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 379.303056][T14130] netlink: 'syz.3.2021': attribute type 18 has an invalid length. [ 379.552778][T14155] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 379.599345][T14155] team0: Device bond0 is already an upper device of the team interface [ 379.681861][T14161] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 379.853696][ T7582] net_ratelimit: 25 callbacks suppressed [ 379.853721][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 379.894320][T14169] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 379.918627][T14142] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.034637][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 380.154342][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 380.177182][T14142] wg1 speed is unknown, defaulting to 1000 [ 380.185365][T14142] lo speed is unknown, defaulting to 1000 [ 380.383708][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 380.565474][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 380.674093][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 380.684740][T14171] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.784094][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 380.902654][T14190] syzkaller1: entered promiscuous mode [ 380.910049][T14190] syzkaller1: entered allmulticast mode [ 381.001108][T14188] .70·: left allmulticast mode [ 381.015304][T14188] hsr_slave_0: left allmulticast mode [ 381.024848][T14188] hsr_slave_1: left allmulticast mode [ 381.042799][T14188] geneve0: left allmulticast mode [ 381.055591][T14188] team1: left promiscuous mode [ 381.073844][T14188] team1: left allmulticast mode [ 381.079197][T14188] team2: left promiscuous mode [ 381.098899][T14188] team2: left allmulticast mode [ 381.109295][T14188] batadv0: left allmulticast mode [ 381.120512][T14188] vlan3: left promiscuous mode [ 381.129280][T14188] bond0: left promiscuous mode [ 381.139415][T14188] bond_slave_0: left promiscuous mode [ 381.149787][T14188] bond_slave_1: left promiscuous mode [ 381.163931][T14188] veth5: left promiscuous mode [ 381.175883][T14188] gtp1: left promiscuous mode [ 381.180858][T14188] gtp1: left allmulticast mode [ 381.194087][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 381.314700][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 381.457080][T14171] wg1 speed is unknown, defaulting to 1000 [ 381.479512][T14171] lo speed is unknown, defaulting to 1000 [ 381.520608][T14198] siw: device registration error -23 [ 382.490541][T14243] __nla_validate_parse: 99 callbacks suppressed [ 382.490570][T14243] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2049'. [ 382.515886][T14243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2049'. [ 382.991223][T14254] syzkaller0: entered promiscuous mode [ 382.997717][T14254] syzkaller0: entered allmulticast mode [ 383.760682][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.690449][T14280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.791156][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 384.933602][ T7582] net_ratelimit: 13 callbacks suppressed [ 384.933626][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.073695][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.193730][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.294430][T14312] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 385.313656][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.343343][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'. [ 385.445742][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.525576][T14317] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2057'. [ 385.553904][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.663860][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.726781][T14299] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.773853][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.883908][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 385.939664][T14332] syzkaller0: entered promiscuous mode [ 385.953546][T14332] syzkaller0: entered allmulticast mode [ 385.995804][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 386.385640][T14345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2074'. [ 386.466046][T14299] wg1 speed is unknown, defaulting to 1000 [ 386.476958][T14299] lo speed is unknown, defaulting to 1000 [ 386.876542][T14364] netlink: 'syz.1.2078': attribute type 9 has an invalid length. [ 387.454466][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'. [ 387.583984][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 387.910920][T14365] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.051368][T14396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2087'. [ 388.092477][T14398] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2088'. [ 388.171361][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2089'. [ 388.211457][T14401] --map-set only usable from mangle table [ 388.339631][T14365] wg1 speed is unknown, defaulting to 1000 [ 388.348876][T14365] lo speed is unknown, defaulting to 1000 [ 388.408504][T14414] SET target dimension over the limit! [ 388.494979][T14416] netlink: 'syz.2.2092': attribute type 39 has an invalid length. [ 388.879818][T14428] netlink: 'syz.4.2095': attribute type 1 has an invalid length. [ 388.951117][T14431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2095'. [ 388.960706][T14428] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.975101][T14430] tipc: Enabling of bearer rejected, failed to enable media [ 389.036326][T14428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2095'. [ 389.055733][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 389.379954][ T44] IPVS: starting estimator thread 0... [ 389.423308][T14436] 8021q: VLANs not supported on sit0 [ 389.451466][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2102'. [ 389.461293][T14453] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2102'. [ 389.475193][T14450] IPVS: using max 25 ests per chain, 60000 per kthread [ 389.490725][T14453] geneve2: entered promiscuous mode [ 389.496726][T14453] geneve2: entered allmulticast mode [ 389.507618][ T7561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.520686][ T7561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.538509][ T7561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.551013][ T7561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.560852][T14455] netlink: 'syz.3.2101': attribute type 11 has an invalid length. [ 389.616030][T14460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2101'. [ 389.893263][T14479] netlink: 'syz.1.2107': attribute type 8 has an invalid length. [ 390.133796][ T7561] net_ratelimit: 26 callbacks suppressed [ 390.133819][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 390.293712][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 390.341776][T14477] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.431432][T14498] sctp: [Deprecated]: syz.3.2111 (pid 14498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.431432][T14498] Use struct sctp_sack_info instead [ 390.448660][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 390.513947][T14463] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 390.563775][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 390.673590][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 390.714577][T14512] xt_hashlimit: size too large, truncated to 1048576 [ 390.783969][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 390.799731][T14519] netlink: 'syz.2.2117': attribute type 4 has an invalid length. [ 391.053556][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 391.163531][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 391.177969][T14477] wg1 speed is unknown, defaulting to 1000 [ 391.187637][T14479] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.197193][T14477] lo speed is unknown, defaulting to 1000 [ 391.464264][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 391.783611][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 391.813295][T14479] wg1 speed is unknown, defaulting to 1000 [ 391.982574][T14549] ip6_vti0 speed is unknown, defaulting to 1000 [ 392.130892][T14479] lo speed is unknown, defaulting to 1000 [ 392.131299][T14549] wg1 speed is unknown, defaulting to 1000 [ 392.179948][T14549] lo speed is unknown, defaulting to 1000 [ 392.892350][T14585] __nla_validate_parse: 5 callbacks suppressed [ 392.892370][T14585] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2136'. [ 393.244596][T14596] raw_sendmsg: syz.5.2138 forgot to set AF_INET. Fix it! [ 393.350056][T14598] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2139'. [ 393.937694][T14610] team0: Port device dummy0 removed [ 394.100146][T14569] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.227967][T14620] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2143'. [ 394.489923][T14622] netlink: 'syz.4.2145': attribute type 10 has an invalid length. [ 394.508782][T14622] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2145'. [ 394.531532][T14622] team0: entered promiscuous mode [ 394.558431][T14622] team_slave_0: entered promiscuous mode [ 394.579803][T14622] team_slave_1: entered promiscuous mode [ 394.600699][T14622] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.630313][T14569] wg1 speed is unknown, defaulting to 1000 [ 394.632142][T14632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2148'. [ 394.647286][T14569] lo speed is unknown, defaulting to 1000 [ 395.001401][T14641] netlink: 'syz.4.2150': attribute type 1 has an invalid length. [ 395.158206][T14645] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2152'. [ 395.233981][ T7582] net_ratelimit: 20 callbacks suppressed [ 395.234004][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 395.383650][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 395.401756][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 395.494848][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 395.580344][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2155'. [ 395.605920][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 395.723913][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 395.834540][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 395.937646][T14662] ipt_REJECT: ECHOREPLY no longer supported. [ 395.974148][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 395.986244][T14661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2158'. [ 396.314275][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 396.423572][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 396.544897][T14691] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 396.573549][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 396.815963][T14704] x_tables: duplicate underflow at hook 1 [ 396.901189][T14710] tipc: Enabling of bearer rejected, already enabled [ 396.923863][T14709] tipc: Enabling of bearer rejected, already enabled [ 396.938790][T14710] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 397.330380][T14722] IPVS: length: 184 != 8 [ 397.461249][T14727] syzkaller0: entered promiscuous mode [ 397.475491][T14727] syzkaller0: entered allmulticast mode [ 397.806333][T14724] ip6_vti0 speed is unknown, defaulting to 1000 [ 398.184614][T14780] netlink: 'syz.4.2190': attribute type 1 has an invalid length. [ 398.204852][T14780] __nla_validate_parse: 4 callbacks suppressed [ 398.204874][T14780] netlink: 9188 bytes leftover after parsing attributes in process `syz.4.2190'. [ 398.229381][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2190'. [ 398.246608][T14784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2188'. [ 398.270314][T14784] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 398.286570][T14724] wg1 speed is unknown, defaulting to 1000 [ 398.295942][T14724] lo speed is unknown, defaulting to 1000 [ 398.454326][T14790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2191'. [ 398.485335][T14790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.493175][T14790] IPv6: NLM_F_CREATE should be set when creating new route [ 398.500518][T14790] IPv6: NLM_F_CREATE should be set when creating new route [ 398.627179][T14801] netlink: 'syz.4.2194': attribute type 2 has an invalid length. [ 398.696721][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 398.717461][T14808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2196'. [ 398.738193][T14808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2196'. [ 398.764545][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 398.783694][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 398.801060][T14810] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 399.020820][T14820] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2197'. [ 399.405099][T14831] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 399.640532][T14844] tls_set_device_offload: netdev not found [ 399.747222][T14848] bond12: option arp_interval: invalid value (18446744073709551615) [ 399.756309][T14848] bond12: option arp_interval: allowed values 0 - 2147483647 [ 399.840543][T14848] bond12 (unregistering): Released all slaves [ 399.867142][T14847] vti0: entered promiscuous mode [ 400.264419][ T13] net_ratelimit: 23 callbacks suppressed [ 400.264440][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 400.493577][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 400.624077][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 400.733525][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 400.890882][T14886] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.897362][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 400.901315][T14907] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 401.003642][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 401.055366][T14926] netlink: 'syz.4.2220': attribute type 33 has an invalid length. [ 401.220663][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 401.354322][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 401.387055][T14934] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.394743][T14934] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.579775][T14886] wg1 speed is unknown, defaulting to 1000 [ 401.592576][T14886] lo speed is unknown, defaulting to 1000 [ 401.926227][T14940] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.061003][T14958] bond8: option ad_select: invalid value (34) [ 402.072320][T14958] bond8 (unregistering): Released all slaves [ 402.666337][T14962] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.680180][T14940] wg1 speed is unknown, defaulting to 1000 [ 402.761852][T14940] lo speed is unknown, defaulting to 1000 [ 402.763951][T14977] tipc: Enabled bearer , priority 0 [ 402.798857][T14977] syzkaller0: entered promiscuous mode [ 402.811529][T14977] syzkaller0: entered allmulticast mode [ 402.997092][T14976] tipc: Resetting bearer [ 403.021358][T14976] tipc: Disabling bearer [ 403.215112][T14983] veth0_vlan: entered allmulticast mode [ 403.221861][T14984] ªªªªªª: renamed from vlan0 [ 403.300817][T14962] wg1 speed is unknown, defaulting to 1000 [ 403.309712][T14978] ip6_vti0 speed is unknown, defaulting to 1000 [ 403.345462][T14988] __nla_validate_parse: 8 callbacks suppressed [ 403.345484][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2236'. [ 403.368146][T14962] lo speed is unknown, defaulting to 1000 [ 403.440902][T14988] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.829762][T15006] macvlan0: left allmulticast mode [ 403.842290][T15006] macvtap0: left allmulticast mode [ 403.862535][T15006] ip6gre1: left allmulticast mode [ 403.870241][T15006] xfrm1: left allmulticast mode [ 403.899968][T15006] geneve2: left promiscuous mode [ 403.908414][T15006] geneve2: left allmulticast mode [ 403.939631][ T7575] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.978355][T14978] wg1 speed is unknown, defaulting to 1000 [ 404.062610][ T7575] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.072648][ T7575] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.085773][T14978] lo speed is unknown, defaulting to 1000 [ 404.091656][ T7575] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.271692][T15012] batadv0: entered promiscuous mode [ 404.300061][T15012] tipc: Resetting bearer [ 404.314239][T15012] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 404.338959][T15012] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 404.763794][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'. [ 404.872235][T15018] syzkaller0: entered promiscuous mode [ 404.887475][T15018] syzkaller0: entered allmulticast mode [ 405.334282][T15032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2250'. [ 405.344147][T15034] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2251'. [ 405.361132][T15036] Cannot find del_set index 2 as target [ 405.452122][T15032] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 405.502781][T15032] macvlan1: entered promiscuous mode [ 405.509945][T15032] macvlan1: entered allmulticast mode [ 405.516422][T15032] bond6: entered promiscuous mode [ 405.521686][T15032] bridge8: entered promiscuous mode [ 405.528137][T15032] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 405.539181][T15032] bond6: left promiscuous mode [ 405.544162][T15032] bridge8: left promiscuous mode [ 405.575322][T15043] netlink: 'syz.2.2248': attribute type 4 has an invalid length. [ 405.583636][ T7564] net_ratelimit: 3338 callbacks suppressed [ 405.583656][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 405.597105][T15042] netlink: 'syz.2.2248': attribute type 4 has an invalid length. [ 405.637722][T15046] syzkaller0: entered promiscuous mode [ 405.644079][T15046] syzkaller0: entered allmulticast mode [ 405.783666][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 405.861106][T15058] veth0_to_team: Caught tx_queue_len zero misconfig [ 405.918022][ T13] bond5: (slave macvlan0): failed to get link speed/duplex [ 406.827659][T15097] netlink: 'syz.2.2260': attribute type 3 has an invalid length. [ 406.844253][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2260'. [ 409.360749][T15069] veth9: entered promiscuous mode [ 409.414004][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 409.426454][T15083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.533808][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 409.663898][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 409.783583][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 409.784011][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 409.853695][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2271'. [ 409.904391][T15125] netlink: 'syz.5.2271': attribute type 14 has an invalid length. [ 409.924140][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 409.988045][T15134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.033688][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 410.132439][T15107] ip6_vti0 speed is unknown, defaulting to 1000 [ 410.276986][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2274'. [ 410.354289][T15144] netlink: 'syz.4.2274': attribute type 10 has an invalid length. [ 410.367347][T15144] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 410.576906][T15120] ip6_vti0 speed is unknown, defaulting to 1000 [ 410.577676][T15107] wg1 speed is unknown, defaulting to 1000 [ 410.591469][T15107] lo speed is unknown, defaulting to 1000 [ 410.620785][T15151] net_ratelimit: 4 callbacks suppressed [ 410.620807][T15151] openvswitch: netlink: Flow key attr not present in new flow. [ 410.733607][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 410.808133][T15155] netlink: 'syz.5.2278': attribute type 2 has an invalid length. [ 411.016426][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 411.153600][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 411.263607][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 411.271611][T15176] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2282'. [ 411.383669][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 411.438635][T15155] ip6_vti0 speed is unknown, defaulting to 1000 [ 411.493586][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 411.597460][T15120] wg1 speed is unknown, defaulting to 1000 [ 411.603644][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 411.627057][T15155] wg1 speed is unknown, defaulting to 1000 [ 411.635097][T15120] lo speed is unknown, defaulting to 1000 [ 411.693168][T15155] lo speed is unknown, defaulting to 1000 [ 412.025757][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 412.143661][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 412.290491][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 412.360829][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2286'. [ 412.733070][T15194] bond8: (slave ip6gretap3): Enslaving as an active interface with an up link [ 412.780852][T15206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2290'. [ 412.790270][T15206] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2290'. [ 412.827585][T15185] bond8 (unregistering): (slave ip6gretap3): Releasing backup interface [ 412.854629][T15185] bond8 (unregistering): Released all slaves [ 413.082975][T15211] syzkaller1: entered promiscuous mode [ 413.094507][T15211] syzkaller1: entered allmulticast mode [ 413.327624][T15219] syz.4.2294 (15219) used obsolete PPPIOCDETACH ioctl [ 413.626936][T15235] nft_compat: unsupported protocol 5 [ 414.251264][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 414.374844][T15269] netlink: 'syz.1.2304': attribute type 1 has an invalid length. [ 414.580737][T15275] syzkaller1: entered promiscuous mode [ 414.586539][T15275] syzkaller1: entered allmulticast mode [ 414.653172][T15260] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.838575][T15282] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2307'. [ 414.850345][T15281] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2307'. [ 414.963361][T15260] wg1 speed is unknown, defaulting to 1000 [ 414.991435][T15260] lo speed is unknown, defaulting to 1000 [ 415.088207][T15289] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2310'. [ 415.297928][T15278] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.318417][T15297] gretap1: entered promiscuous mode [ 415.339663][T15297] gretap1: entered allmulticast mode [ 415.612015][T15315] tipc: Enabling of bearer rejected, failed to enable media [ 415.623606][ T7582] net_ratelimit: 21 callbacks suppressed [ 415.623628][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 415.718563][T15313] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2316'. [ 415.732612][T15313] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2316'. [ 415.751252][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2316'. [ 415.754377][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 415.808535][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2319'. [ 415.818280][T15324] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2319'. [ 415.827564][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2319'. [ 415.850877][T15324] syzkaller1: entered promiscuous mode [ 415.856684][T15324] syzkaller1: entered allmulticast mode [ 415.904156][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 415.918170][T15277] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.927150][T15278] wg1 speed is unknown, defaulting to 1000 [ 415.948528][T15278] lo speed is unknown, defaulting to 1000 [ 416.013800][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 416.383669][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 416.488848][T15337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2323'. [ 416.669757][T15342] bond0: (slave team0): Releasing backup interface [ 416.686510][T15342] team0: left promiscuous mode [ 416.701793][T15342] team0: left allmulticast mode [ 416.728522][T15342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 416.782657][T15277] wg1 speed is unknown, defaulting to 1000 [ 416.788865][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 416.801166][T15342] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 416.820815][T15277] lo speed is unknown, defaulting to 1000 [ 416.822284][T15316] ip6_vti0 speed is unknown, defaulting to 1000 [ 417.209386][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 417.333518][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 417.453598][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 417.608998][T15345] ip6_vti0 speed is unknown, defaulting to 1000 [ 418.100287][T15345] wg1 speed is unknown, defaulting to 1000 [ 418.121318][T15316] wg1 speed is unknown, defaulting to 1000 [ 418.121318][T15345] lo speed is unknown, defaulting to 1000 [ 418.193725][T15316] lo speed is unknown, defaulting to 1000 [ 419.714070][T15395] nbd: couldn't find device at index 536870912 [ 420.384818][ T7575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.411405][ T7575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.432162][T15404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.435383][T15407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.531566][T15407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.558107][T15380] ip6_vti0 speed is unknown, defaulting to 1000 [ 420.683921][ T7561] net_ratelimit: 20 callbacks suppressed [ 420.683943][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 420.738763][T15411] syzkaller1: entered promiscuous mode [ 420.753240][T15411] syzkaller1: entered allmulticast mode [ 420.790897][T15417] vti0: entered promiscuous mode [ 420.925149][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 421.054625][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 421.147258][T15434] __nla_validate_parse: 5 callbacks suppressed [ 421.147280][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2347'. [ 421.173035][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 421.323940][T15434] bond4: entered promiscuous mode [ 421.329890][T15434] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.339394][ T7561] bond5: (slave macvlan0): failed to get link speed/duplex [ 421.437883][T15438] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.445940][T15438] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 421.458080][T15438] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 421.475332][T15380] wg1 speed is unknown, defaulting to 1000 [ 421.483995][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 421.513962][T15380] lo speed is unknown, defaulting to 1000 [ 421.624259][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 421.677337][T15453] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2350'. [ 421.766022][T15459] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 421.779985][T15461] netlink: 'syz.4.2351': attribute type 1 has an invalid length. [ 421.788075][T15461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.798734][T15461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'. [ 421.975158][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 422.068100][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 422.083607][ T7575] bond5: (slave macvlan0): failed to get link speed/duplex [ 422.154889][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'. [ 422.272854][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 422.294102][T15475] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2355'. [ 422.434331][T15475] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2355'. [ 422.835394][T15490] syzkaller1: entered promiscuous mode [ 422.844204][T15490] syzkaller1: entered allmulticast mode [ 422.863204][T15490] FAULT_INJECTION: forcing a failure. [ 422.863204][T15490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.907451][T15490] CPU: 0 UID: 0 PID: 15490 Comm: syz.4.2362 Not tainted syzkaller #0 PREEMPT(full) [ 422.907490][T15490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.907512][T15490] Call Trace: [ 422.907522][T15490] [ 422.907531][T15490] dump_stack_lvl+0x189/0x250 [ 422.907569][T15490] ? __pfx____ratelimit+0x10/0x10 [ 422.907594][T15490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.907625][T15490] ? __pfx__printk+0x10/0x10 [ 422.907648][T15490] ? __might_fault+0xb0/0x130 [ 422.907692][T15490] should_fail_ex+0x414/0x560 [ 422.907732][T15490] _copy_from_iter+0x1de/0x1790 [ 422.907760][T15490] ? skb_set_owner_w+0x26c/0x3e0 [ 422.907793][T15490] ? sock_alloc_send_pskb+0x86b/0x980 [ 422.907829][T15490] ? __pfx__copy_from_iter+0x10/0x10 [ 422.907866][T15490] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 422.907901][T15490] skb_copy_datagram_from_iter+0xf5/0x720 [ 422.907937][T15490] ? skb_put+0x11b/0x210 [ 422.907967][T15490] tun_get_user+0x1691/0x3e90 [ 422.908020][T15490] ? aa_file_perm+0x44d/0x1550 [ 422.908042][T15490] ? __pfx_tun_get_user+0x10/0x10 [ 422.908069][T15490] ? _parse_integer_limit+0x1ae/0x1f0 [ 422.908100][T15490] ? __lock_acquire+0xab9/0xd20 [ 422.908130][T15490] ? ref_tracker_alloc+0x318/0x460 [ 422.908149][T15490] ? __lock_acquire+0xab9/0xd20 [ 422.908172][T15490] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 422.908200][T15490] ? tun_get+0x1c/0x2f0 [ 422.908235][T15490] ? tun_get+0x1c/0x2f0 [ 422.908261][T15490] ? tun_get+0x1c/0x2f0 [ 422.908294][T15490] tun_chr_write_iter+0x113/0x200 [ 422.908326][T15490] vfs_write+0x5c9/0xb30 [ 422.908363][T15490] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 422.908392][T15490] ? __pfx_vfs_write+0x10/0x10 [ 422.908435][T15490] ? __fget_files+0x2a/0x420 [ 422.908468][T15490] ksys_write+0x145/0x250 [ 422.908510][T15490] ? __pfx_ksys_write+0x10/0x10 [ 422.908545][T15490] ? do_syscall_64+0xbe/0xfa0 [ 422.908576][T15490] do_syscall_64+0xfa/0xfa0 [ 422.908602][T15490] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.908628][T15490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.908650][T15490] ? clear_bhb_loop+0x60/0xb0 [ 422.908676][T15490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.908702][T15490] RIP: 0033:0x7fb288b8f749 [ 422.908723][T15490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.908742][T15490] RSP: 002b:00007fb289ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.908765][T15490] RAX: ffffffffffffffda RBX: 00007fb288de5fa0 RCX: 00007fb288b8f749 [ 422.908781][T15490] RDX: 000000000000003e RSI: 00002000000003c0 RDI: 0000000000000007 [ 422.908795][T15490] RBP: 00007fb289ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.908809][T15490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.908821][T15490] R13: 00007fb288de6038 R14: 00007fb288de5fa0 R15: 00007fff883dd588 [ 422.908859][T15490] [ 423.642682][T15488] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.227660][T15488] wg1 speed is unknown, defaulting to 1000 [ 424.227693][T15496] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.245483][T15488] lo speed is unknown, defaulting to 1000 [ 424.425100][ T7575] bond0: (slave netdevsim0): Releasing backup interface [ 424.559611][T15496] wg1 speed is unknown, defaulting to 1000 [ 424.588134][T15494] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.931805][ T7575] bond6 (unregistering): (slave gretap2): Releasing active interface [ 425.435378][ T7575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.446718][ T7575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.456145][ T7575] bond0 (unregistering): Released all slaves [ 425.553332][ T7575] bond1 (unregistering): Released all slaves [ 425.648145][ T7575] bond2 (unregistering): Released all slaves [ 425.746176][ T7575] bond3 (unregistering): (slave veth5): Releasing active interface [ 425.755188][ T7575] bond3 (unregistering): Released all slaves [ 425.850568][ T7575] bond4 (unregistering): Released all slaves [ 425.942889][ T7575] bond5 (unregistering): Released all slaves [ 425.957503][ T7575] bond6 (unregistering): Released all slaves [ 426.055966][ T7575] bond7 (unregistering): Released all slaves [ 426.069823][T15496] lo speed is unknown, defaulting to 1000 [ 426.069867][T15494] wg1 speed is unknown, defaulting to 1000 [ 426.100592][T15494] lo speed is unknown, defaulting to 1000 [ 426.231042][ T7575] : left promiscuous mode [ 426.289598][ T7575] : left promiscuous mode [ 426.353595][ T7564] net_ratelimit: 10 callbacks suppressed [ 426.353620][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 426.421569][ T7575] tipc: Left network mode [ 426.473753][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 426.584009][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 426.697155][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 426.813989][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 426.923581][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 427.034116][ T7564] bond5: (slave macvlan0): failed to get link speed/duplex [ 427.163650][ T60] bond5: (slave macvlan0): failed to get link speed/duplex [ 427.273934][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 427.383582][ T7582] bond5: (slave macvlan0): failed to get link speed/duplex [ 427.539090][ T7575] hsr_slave_0: left promiscuous mode [ 427.554868][ T7575] hsr_slave_1: left promiscuous mode [ 428.117072][ T7575] team_slave_1 (unregistering): left promiscuous mode [ 428.126487][ T7575] team0 (unregistering): Port device team_slave_1 removed [ 428.165183][ T7575] team_slave_0 (unregistering): left promiscuous mode [ 428.173201][ T7575] team0 (unregistering): Port device team_slave_0 removed [ 429.982593][ T7575] IPVS: stop unused estimator thread 0... [ 430.010246][ T7575] ------------[ cut here ]------------ [ 430.015959][ T7575] WARNING: CPU: 1 PID: 7575 at fs/proc/proc_sysctl.c:1558 retire_sysctl_set+0x48/0x60 [ 430.025671][ T7575] Modules linked in: [ 430.029921][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 430.039702][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.049856][ T7575] Workqueue: netns cleanup_net [ 430.054682][ T7575] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 430.060256][ T7575] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 5b c6 ff 48 83 3b 00 75 0c e8 15 98 60 ff 5b e9 ff e8 eb 08 cc e8 09 98 60 ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 430.080180][ T7575] RSP: 0018:ffffc9001aa9f8b0 EFLAGS: 00010293 [ 430.086376][ T7575] RAX: ffffffff825f6ba7 RBX: ffff88807f78cd98 RCX: ffff88807f810000 [ 430.094477][ T7575] RDX: 0000000000000000 RSI: ffffffff8d8fb724 RDI: ffff88807f78cd38 [ 430.102517][ T7575] RBP: ffffc9001aa9f990 R08: ffffffff8f7d1e77 R09: 1ffffffff1efa3ce [ 430.110574][ T7575] R10: dffffc0000000000 R11: ffffffff8b05a040 R12: ffffffff8f5d2940 [ 430.118647][ T7575] R13: 1ffff92003553f3c R14: ffffffff8f5d2920 R15: ffff88807f78cb28 [ 430.126735][ T7575] FS: 0000000000000000(0000) GS:ffff888126231000(0000) knlGS:0000000000000000 [ 430.135823][ T7575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.142442][ T7575] CR2: 0000555a1164b000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 430.150531][ T7575] Call Trace: [ 430.153978][ T7575] [ 430.156966][ T7575] ops_undo_list+0x49a/0x990 [ 430.161666][ T7575] ? __pfx_ops_undo_list+0x10/0x10 [ 430.166840][ T7575] ? do_raw_spin_unlock+0x122/0x240 [ 430.172102][ T7575] cleanup_net+0x4d8/0x820 [ 430.176679][ T7575] ? __pfx_cleanup_net+0x10/0x10 [ 430.181636][ T7575] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.186946][ T7575] ? process_scheduled_works+0x9ef/0x17b0 [ 430.192688][ T7575] ? process_scheduled_works+0x9ef/0x17b0 [ 430.198477][ T7575] process_scheduled_works+0xae1/0x17b0 [ 430.204276][ T7575] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.210291][ T7575] worker_thread+0x8a0/0xda0 [ 430.214970][ T7575] kthread+0x711/0x8a0 [ 430.219062][ T7575] ? __pfx_worker_thread+0x10/0x10 [ 430.224282][ T7575] ? __pfx_kthread+0x10/0x10 [ 430.228889][ T7575] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.234319][ T7575] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.239539][ T7575] ? __pfx_kthread+0x10/0x10 [ 430.244244][ T7575] ret_from_fork+0x4bc/0x870 [ 430.248894][ T7575] ? __pfx_ret_from_fork+0x10/0x10 [ 430.254150][ T7575] ? __switch_to_asm+0x39/0x70 [ 430.258947][ T7575] ? __switch_to_asm+0x33/0x70 [ 430.263805][ T7575] ? __pfx_kthread+0x10/0x10 [ 430.268444][ T7575] ret_from_fork_asm+0x1a/0x30 [ 430.273241][ T7575] [ 430.276360][ T7575] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 430.283817][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 430.293368][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.303452][ T7575] Workqueue: netns cleanup_net [ 430.308240][ T7575] Call Trace: [ 430.311523][ T7575] [ 430.314477][ T7575] dump_stack_lvl+0x99/0x250 [ 430.319097][ T7575] ? __asan_memcpy+0x40/0x70 [ 430.323706][ T7575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.328928][ T7575] ? __pfx__printk+0x10/0x10 [ 430.333547][ T7575] vpanic+0x237/0x6d0 [ 430.337568][ T7575] ? __pfx_vpanic+0x10/0x10 [ 430.342110][ T7575] panic+0xb9/0xc0 [ 430.345848][ T7575] ? __pfx_panic+0x10/0x10 [ 430.350321][ T7575] __warn+0x31b/0x4b0 [ 430.354409][ T7575] ? retire_sysctl_set+0x48/0x60 [ 430.359379][ T7575] ? retire_sysctl_set+0x48/0x60 [ 430.364335][ T7575] report_bug+0x2be/0x4f0 [ 430.368692][ T7575] ? retire_sysctl_set+0x48/0x60 [ 430.373658][ T7575] ? retire_sysctl_set+0x48/0x60 [ 430.378619][ T7575] ? retire_sysctl_set+0x4a/0x60 [ 430.383581][ T7575] handle_bug+0x84/0x160 [ 430.387864][ T7575] exc_invalid_op+0x1a/0x50 [ 430.392388][ T7575] asm_exc_invalid_op+0x1a/0x20 [ 430.397254][ T7575] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 430.402824][ T7575] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 5b c6 ff 48 83 3b 00 75 0c e8 15 98 60 ff 5b e9 ff e8 eb 08 cc e8 09 98 60 ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 430.422458][ T7575] RSP: 0018:ffffc9001aa9f8b0 EFLAGS: 00010293 [ 430.428574][ T7575] RAX: ffffffff825f6ba7 RBX: ffff88807f78cd98 RCX: ffff88807f810000 [ 430.436562][ T7575] RDX: 0000000000000000 RSI: ffffffff8d8fb724 RDI: ffff88807f78cd38 [ 430.444550][ T7575] RBP: ffffc9001aa9f990 R08: ffffffff8f7d1e77 R09: 1ffffffff1efa3ce [ 430.452540][ T7575] R10: dffffc0000000000 R11: ffffffff8b05a040 R12: ffffffff8f5d2940 [ 430.460622][ T7575] R13: 1ffff92003553f3c R14: ffffffff8f5d2920 R15: ffff88807f78cb28 [ 430.468623][ T7575] ? __pfx_sysctl_net_exit+0x10/0x10 [ 430.473934][ T7575] ? retire_sysctl_set+0x47/0x60 [ 430.478909][ T7575] ops_undo_list+0x49a/0x990 [ 430.483531][ T7575] ? __pfx_ops_undo_list+0x10/0x10 [ 430.488675][ T7575] ? do_raw_spin_unlock+0x122/0x240 [ 430.493929][ T7575] cleanup_net+0x4d8/0x820 [ 430.498378][ T7575] ? __pfx_cleanup_net+0x10/0x10 [ 430.503345][ T7575] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.508566][ T7575] ? process_scheduled_works+0x9ef/0x17b0 [ 430.514302][ T7575] ? process_scheduled_works+0x9ef/0x17b0 [ 430.520044][ T7575] process_scheduled_works+0xae1/0x17b0 [ 430.525819][ T7575] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.531838][ T7575] worker_thread+0x8a0/0xda0 [ 430.536478][ T7575] kthread+0x711/0x8a0 [ 430.540572][ T7575] ? __pfx_worker_thread+0x10/0x10 [ 430.545700][ T7575] ? __pfx_kthread+0x10/0x10 [ 430.550336][ T7575] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.555575][ T7575] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.560803][ T7575] ? __pfx_kthread+0x10/0x10 [ 430.565421][ T7575] ret_from_fork+0x4bc/0x870 [ 430.570036][ T7575] ? __pfx_ret_from_fork+0x10/0x10 [ 430.575318][ T7575] ? __switch_to_asm+0x39/0x70 [ 430.580107][ T7575] ? __switch_to_asm+0x33/0x70 [ 430.584892][ T7575] ? __pfx_kthread+0x10/0x10 [ 430.589539][ T7575] ret_from_fork_asm+0x1a/0x30 [ 430.594343][ T7575] [ 430.598020][ T7575] Kernel Offset: disabled [ 430.602444][ T7575] Rebooting in 86400 seconds..