last executing test programs: 2m43.07226622s ago: executing program 1 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, 0x0, 0x700) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000200)={0x0, 'syzkaller1\x00', {0xfffffffd}}) 2m42.719869576s ago: executing program 1 (id=856): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003052abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@llc_tr={0x11, {@llc={0x42, 0xbc, '6'}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x58, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "f102dcf29e"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$unix(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="7a9df878061312a30754fb42c52e9df733d403b6a3f7e2a68fc0ceccd12fbf335ce39f398b9ce4df63ad0cf089d235016ada630b455c43e0b684f2a7b7d914d3b15b11dfa6a1aa84b8e5c496d3ab4c3edbee77c39e61c5cf20b82c366bd3219a37e0570dac340533527820d2", 0x6c}, {&(0x7f0000000400)="d69d6fcedb586df570cd6fd5867eea7322dad8ce37829e749253ce89a3097beb6af2642991bae68c1b1f4c3b323c1109f5793604e373c9c6d0ea7d1b3343490cbc1990e88a200362ab65f0f6db9fb9964d4567c74f1b1d25e61bef9e91cb69daf531873c7406e67ad31285f8b92ad16e5af4a034871737257a794cb26ac6ca44465e5662a65416eb82db79e11896b3ae9610e66fb8dff7917ce811386e", 0x9d}, {&(0x7f00000004c0)="7a60957918ac1e94ee3df6d4068eaa1b6f7dcf8eb19f6437a756afc5c2651d56faeedc55a0fad62ecd27cfc9882e11820c3f32a9cc396abe829af17edd3859035fc0f62fadc68a994deb0f14f408a03c02c286e370fb05d596cb9f7bb6df87a61c308f522533a7d33ad063eaf81cca7aad90266037c38258ba8a5dc5ac7698668033b608e2cdf5ee9749e3dd0c742de82648637217bdb1b469c7e662be14d5c3ef4d2817ae898a86d65ec091b4a26896ad2ffc1f687a2876a148145818899ff106254d8cecbf6bc73a1b7199f6a94f237781", 0xd2}, {&(0x7f00000005c0)="76bd6d2ecaf6789df2e6d89673b9d0830d513bf6089a178553e2a435073b4393c9d2b36a714cfbc6f3247c40812e0a2badac9ba83230ebf624615b115e051f802430f0b8d2cddddf9b7437a54a4e99c00ac35eb6d47104946502d4fefac3d593cdc5c18df26420feb2cad1b47786ab098912502c17a4a61c5264c57efcb96f36c1d82ea1a1e751da23a69770d6c53d8667ddab64569a6b4de69ebb0200d0c8dec2178637e7dc5474cb52cbe487f431a69406620e3f7c057c858a6b18dc4596ae837879a77c0d79b1b8c16cc414c02611788281d521f31ccd913670fbcfa436", 0xdf}], 0x4, 0x0, 0x0, 0x48001}, 0x8080) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000240)=""/235, 0xeb}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003052abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) (async) syz_emit_ethernet(0x11, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@llc_tr={0x11, {@llc={0x42, 0xbc, '6'}}}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x58, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "f102dcf29e"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) (async) sendmsg$unix(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="7a9df878061312a30754fb42c52e9df733d403b6a3f7e2a68fc0ceccd12fbf335ce39f398b9ce4df63ad0cf089d235016ada630b455c43e0b684f2a7b7d914d3b15b11dfa6a1aa84b8e5c496d3ab4c3edbee77c39e61c5cf20b82c366bd3219a37e0570dac340533527820d2", 0x6c}, {&(0x7f0000000400)="d69d6fcedb586df570cd6fd5867eea7322dad8ce37829e749253ce89a3097beb6af2642991bae68c1b1f4c3b323c1109f5793604e373c9c6d0ea7d1b3343490cbc1990e88a200362ab65f0f6db9fb9964d4567c74f1b1d25e61bef9e91cb69daf531873c7406e67ad31285f8b92ad16e5af4a034871737257a794cb26ac6ca44465e5662a65416eb82db79e11896b3ae9610e66fb8dff7917ce811386e", 0x9d}, {&(0x7f00000004c0)="7a60957918ac1e94ee3df6d4068eaa1b6f7dcf8eb19f6437a756afc5c2651d56faeedc55a0fad62ecd27cfc9882e11820c3f32a9cc396abe829af17edd3859035fc0f62fadc68a994deb0f14f408a03c02c286e370fb05d596cb9f7bb6df87a61c308f522533a7d33ad063eaf81cca7aad90266037c38258ba8a5dc5ac7698668033b608e2cdf5ee9749e3dd0c742de82648637217bdb1b469c7e662be14d5c3ef4d2817ae898a86d65ec091b4a26896ad2ffc1f687a2876a148145818899ff106254d8cecbf6bc73a1b7199f6a94f237781", 0xd2}, {&(0x7f00000005c0)="76bd6d2ecaf6789df2e6d89673b9d0830d513bf6089a178553e2a435073b4393c9d2b36a714cfbc6f3247c40812e0a2badac9ba83230ebf624615b115e051f802430f0b8d2cddddf9b7437a54a4e99c00ac35eb6d47104946502d4fefac3d593cdc5c18df26420feb2cad1b47786ab098912502c17a4a61c5264c57efcb96f36c1d82ea1a1e751da23a69770d6c53d8667ddab64569a6b4de69ebb0200d0c8dec2178637e7dc5474cb52cbe487f431a69406620e3f7c057c858a6b18dc4596ae837879a77c0d79b1b8c16cc414c02611788281d521f31ccd913670fbcfa436", 0xdf}], 0x4, 0x0, 0x0, 0x48001}, 0x8080) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000240)=""/235, 0xeb}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2m42.331922401s ago: executing program 1 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) 2m41.269616715s ago: executing program 1 (id=871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x64, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d35af2e}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m41.016995034s ago: executing program 1 (id=874): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x40, 0x9, 0x7ff, {{0x2d, 0x4, 0x2, 0x1, 0xb4, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @local, {[@ssrr={0x89, 0xb, 0xaf, [@multicast2, @multicast2]}, @rr={0x7, 0x17, 0x7a, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @local]}, @cipso={0x86, 0x48, 0x3, [{0x2, 0xe, "b50885678b26af8e2322102a"}, {0x5, 0x6, "a629dc11"}, {0x7, 0x11, "a3f15e3fbc71ef737e0236aec38f08"}, {0x1, 0xb, "c494a1c38725d26f47"}, {0x2, 0xe, "9e74b0bcc64f8827fe9943cc"}, {0x5, 0x4, "f250"}]}, @timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9348}, {@multicast1, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x69e}, {@loopback, 0x6}, {@multicast1, 0x4e4}]}, @rr={0x7, 0x7, 0x60, [@multicast2]}]}}}}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000ffffff7f000000000000000018140000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800000000000026080000020000008500000007000000b70000000000000095000000000000003bbbebf4f7cba2721f0dd71e2a90e27cac478b534801b5f17a6b34aa137e20c6d8d81a61d0e7e9f0f69058e233d848e0ce0bd5d6c6179c987f90073183595006b0f7e306812dd9f4decc450e8ce33255b98f439e8689431ae3a36fdf5291ded5d26aae3e82efdba2eb089eb76448d511e93e434c1a0d016cc5ba6f04faa7948aec8d53fa"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000680), 0x8, 0x67, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=r4, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r11, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r9, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x10, 0x7, @l2={'ib', 0x3a, 'nicvf0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m40.702035898s ago: executing program 1 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x10}}, [0x9, 0x8, 0x600000000, 0x3, 0x1, 0x80000000, 0x200, 0xac, 0xc, 0xfffffffffffffffd, 0x0, 0x80000000, 0x100000000, 0xfffffffffffffff7, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2}, &(0x7f0000000280)=0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x8}]}}}]}, 0x6c}}, 0x4000080) 2m38.796492121s ago: executing program 0 (id=897): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @loopback}, 0xc) r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r0, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) (async) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2m38.608310283s ago: executing program 0 (id=901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f00000028c0)=ANY=[@ANYBLOB="71050103220102d904ffe62d7b308fe7daef9ab7d65a5330e82ff8a71a5ba4ca46da"], 0x109) sendto$inet6(r0, &(0x7f0000000340)="a6", 0x1, 0x200000c4, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp', 0x4) shutdown(r0, 0x1) 2m38.259424943s ago: executing program 0 (id=909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201330000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x10, 0x8, 0x8, 0x20002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x31c1, 0x3, 0x7}, 0x50) listen(r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ab90030c40800010000000000000000", @ANYRES32=r4, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRESOCT=r2], 0x60}, 0x1, 0x400000000000000}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 2m38.07682403s ago: executing program 0 (id=912): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r2, 0x309, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x53}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000300000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 2m37.848169671s ago: executing program 0 (id=916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='pids.events\x00', 0x26e1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x24}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0xdb1697df087d1efc) close(r2) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffcf7, 0x0, 0x40}, 0xc05cc72) r6 = socket(0x1e, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x34020c9e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) write$ppp(r7, &(0x7f0000000440)='\x00\x00', 0x2) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x1c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x62, 'syz1\x00'}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m37.43577889s ago: executing program 0 (id=920): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xff2e}, 0x1, 0x0, 0x0, 0x48084}, 0x4040041) 2m25.648233163s ago: executing program 32 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x10}}, [0x9, 0x8, 0x600000000, 0x3, 0x1, 0x80000000, 0x200, 0xac, 0xc, 0xfffffffffffffffd, 0x0, 0x80000000, 0x100000000, 0xfffffffffffffff7, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2}, &(0x7f0000000280)=0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x8}]}}}]}, 0x6c}}, 0x4000080) 2m22.316196627s ago: executing program 33 (id=920): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xff2e}, 0x1, 0x0, 0x0, 0x48084}, 0x4040041) 2m1.346802252s ago: executing program 2 (id=1324): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0xc8, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$inet6_int(r4, 0x29, 0xc8, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) 2m1.18480654s ago: executing program 2 (id=1326): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="14002c80080000008009"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x1, 0x10000040) socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2m1.058514707s ago: executing program 2 (id=1329): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000000306010200000000000000000000070097d561e14a497100"], 0x14}}, 0x8081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x2) bind$netlink(r9, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r9, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d", 0x2}], 0x1}}], 0x1, 0x40060) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0xffffffffffffff6c, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000003c0)={r10, 0x0, "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", "e865e95260f241b180bc75dae77688c97163c943d7763c932a234728eb34ba67061e2ab8a62e09c1935b84720c7235b1660d999944289e0a49e7530e086a70fd32b2da8eb8699fdbb3b154e99cee060b09d1a2dceee49720de7bc50d6966e17eece1a87e2d5bcd9c317e5e9c5c2ac7eb3eb4f85b6db778fa068df9f0ee42b9096b6e911dd2ed6f736ca4f49368f53b8cac61ea03968bb8699c907b0c3ba914fff7aeadcc44b4b1e4da210c46efccd05f5770ff2a7606a2eaec2e351f255e377b2aa1308e281b79c87b50b87fc2d317b25daf10941d2cf39cffcfb38ae7f23d1cfb4ec4c1ada0039b95b6f2337242c850a547e7cdf7845e1084629ea93984d82d4ca436eb69983354e68d6eec7ddeff6be9d33b9ae1aa03dff7df5e7794d0deee328b97818e98a092c450ef682aaae83b4796d45af79f2f2089c92c0853795afcc5d5a1be76d7adb93ccd9d636a50b1afde9007f2e7cc3f601a2e412cc2df76965a4880ff458050bcc724ea379d69b18bbc7d352e23abb86de1b7585e24829a65b4c34f652c7bd8edd557702d6b4fb75c2938f6cf23a53bad538812f43dfc9e82f3144aba5dc308bd29158495f41eb67939470c92459a685dd2b0675770f067c8c92f6e5883edf69b7576f129f6534fb9445ed404b86ca2fa840e537cf0c75b5b9fdde6b7b1aa4abc6ef89910c5bd77c5b65d597bc915e738ebd3a9e53a0d87035221037708f6b013d547c0fdedda69f8c35d2bba405a2185e6b5cb4b76b92a6fa4639abaa5918c6f7ad9bf48bcee6bb65100649a2ba6a54ed7a108b8c793519a3e838049ae77566fac804268a2fcb624babbc9ee0dc147d799dfbb6e4b90589a14c8e268e4297ec01c900828a34aa9e7fa248c577682147adf0e4dd56c58d1b8aae736dc5d2d6c4cc9662964d05a3300724d5d948ecb8621d428667998db4cea0f04c6ae39c381ef5fa872aee34407a85395f1399ef4e4e738ee22edfbd59ca35be2c63aed13379adb314dc48237dca67cc18bdb10fce7fd286e67df6bb05cba27d57ba7f227e00f9f79a2bb712b5408bd8ae07d436914e64dea05d5bad9bc6e74642a9d2f7bf9c259f71998b10b6ddf74524b797eabe19c420b66e55c24569399f4eb53d6ba229cd59e358e1f8e6c881eb5f8b7e6992e8c3e2e63a63af90b660515c2123a2e423a04cad57bfa8fe3f7e1255078ce0c87dad14b2a7ced7a2903c9f0a7338741162e6407cc384c4afc416d5062c412e80875a07b079df88139db7392a51af01615d9cbcf7677805594184e7f422d7c8d4df616f66e7dde2b56f8d6130cd36b3b84c3ef718cd1c94a8b2a7a17f6ad7b79239b1da0d4348e59db62f1d49537baefb1ab0b2226c057ad6159219110e9e6a6811851338f72461d9c9069cc27b757e8e9bd55999cd32e230d86f31da59f4d2dd43397b26de0b810ad471d08443e414b263efcd17ff9f37153f6b580f66f3898d8cc73c14f898918d3360fe2aacf667446571333355d39abde9af26ef8a3c079b5a7ab281b25567ae90b65056daa6231569c84d83e2964b2bec1c45e918c2722672d0daeaf0f8882923618e59c596e7e205c22924917575672ed60f4abe78da8c6fce4305243f277baa0a5070a08569f57834f5fc3c48b63388adcd72cd0c19564ed7ad3873d0ad1efd29bcfc8f0a4d2fcfa76595e107a944f10b4a0021995b3131ea2aae0d86121e4a0f25d7fdbd6f939402c26c8777f3741d5867d2c0bbace6991b958f7931928650b40576e6e1652f24a7f7b9860cc791d0fdec660b583de0abde6bb1234af7a0e1c8ab9ccdf63ce1c34db09615124bfb901dd0e41e23226335f2c1fbf7bce8f14afd87cbbe4836f33b4fdc185d2c165be50f79abebacb4e726fc67a12a10d966605706d15ebcaa08855214ee48d51aa83a7954683b0147717a38689aef80321213325eefbc10720e4c0252746601af5610788635e1a04501b62688877a53cade90ce24b4882a2b0459c9b1abf71d15effd9569dbff1a1842b96b1b306febd96ca3da09fea67ff03d069b7504e82cdeec8d1f7ec4797fc2badcd46a1d54b8ba49719015bd3895bace278266fe22c235d6351f0552292c3df6fdabb34c4c1f9b813b5672b981c21cfa7356030d078e8ad41b38b8285eafb64490840eef9768b2272f423ea9acbf108a1f92f728cdc7f3aa5883381674758866a3ad4b03eefabff21aad67245fcd2e4d13f8153e0162830e83641e965a18a048884e88d33ccef5df6281c1f5215a3b40cc708624e40c41a1c5923160d62189fd420088e2e9d9efef2a0afda85c5fc3bb514750682a1695617d6b31c5e335ae0ed578275b0d079ee2b70e93232c58f4aa82e959de6b1501a47db7adbef08fb5858f0c4b63f15ecbb6a65dfc4482122f721b06fefdc6bb07c588e9c312b11896631de176660d6046024e1b69445b6161d88d05f8fb92da2fe92f70dad43613122a8c7a879b2d5a4ddfe0859fa5d79311b62bf3a7ff850243243f08c94fc59b286bc2209e86edb49d87fdc83537229bdf85ebf619ffe740adb3326942504307f042644a30f4aeefe63da98e6b35d3e4192c796619d28bd27ecd5a827027dffca3c758b9879e6f93f8d3c298eaf587cf47d4f070080eeff460d6dd4ef7cd4d5f4ad72f2821b97fdbbd237a713eff5703135d3b02a69e0535c5700cfaef1bdb8eb2f9ae233348151317e05ef536f01e1a38d94eb1807487136373e230ba8edfd1401b96ea9a83ef347b620b84990c6b9a984ad793fa94490c06f6200ac62745c983a9ba8391de8df8cd1af7d7c97f332326d2756055ec77acc6667ad4414af4a07317ff059d734f5da8b0a7443552fe51176be44e167eb8333a3b655a618ebfffe5db21473407eb6e7ef6fe38f76fbfc5c83f07373576a3bc912a977c9caeb6f556bc5a46137eb8a19a1f4348267ae5fdc617c4cb3863c6e4b61b5caed0945201db06c83cb255e22763ba23dd4c01f9fcf7271d5bb68f1cfa68041c7ac139a53e03d8590f5faf67922b80290be8a48c6dd95a7a1650ff81737615b6b287a364df79b70a86068588b537e02d642f4ed8f9cbd6e1b35134ba9811ab446d9b8118be52c127c794bd337cf2d605a425ebe90b220c8c2d1f7e8020e631043ce57f3de597da4b5086d46e28fb21012da312771974e4e11aebcbf5236a3a8639adacb4d121fc5a9ccb62f4069f7d751e077da3f94af60158d3f88851022678550325d2b3e6a6783fb217dd73f9e099519ee3a0ef71f0d21034fab2f333f7d0b15bb8884628e6108dad32e6f9ceef4600b0f81018cde3b25331a648d88ac9901e1c5c8e082852925c5655be04b4a6a0ec54b82763c8070a602c3758354b92b2ed1d119d2268b957abe2a433ba7255dc41a1e3d574c3efde72ff46f015455df97b5c2bac8ca04d94ab1b0fdf67a12f9421e85b878e0bf32d1458926807828272ad9c0f4b8cb114906941c0d8a37bd4442f631340509353313fd674b19453c014fd71734b23e24134bde68f4a4d5450b2332c3c725142c2dce1fe8c1a33a8f82bf0397e913a031308245300ef0d13c93fbd39bbc6fdba70bddb114286578a71be3f9cd75ee404e1d09bdcb32d03b30dab01616eb07afece3a72d3fb13e47a29eb5f88d4ad34893c8463eec2f3800e2bdfaa309edbbf28ae46766a24efad6039b3975bb5a88330ccf94fd68103f189320dc5711abda5741c90a8db0e98f84029f1026b14b80d3ee94e3e7807a5c72c49dbba5cdcd765516ff08d228650d4d519d268f068e92c211e35e1e1a7e88a3498961ff6422972a47508cd0ee1e49582fdde64b63a6d6284d42fdf6a4ab9cbb1a66fbeaf960c32a3ce7056f86ecb30a7885f056908515438fc5290df3e06dd248cdc0d920dd1147e5c6785ad67f2c0531b0339d6911bfc084d58e37787314223c66c5b3f02685d00f4d669691d98f0a86836cb4e427a19bee248429844cf892d8025d41b85e280e0911ee01a6ce40344c74a9070af5458454a2eb14742141f157b479e720fee12197a47603fd3f66dba94657d56f5700dab734b11e95e2b7f2ad557bb04ffaee3793225dd385ed21628018700fb53ce944bec4c42c0a88292d8d98b8ff61bf42a0e00f983393afad9cf0d0b2762e523004b71edadb009801fc41b1a83610071b71fd37177983a707343c4a6b26c844a51c536c16f22cce6a93c23ea232cdd9e35799f345c16b280056e74938cc03cb864fc0b7a52fb3c193d9673da00e93e8d1534076f51e7cf435c3b1df838393e8a816212f782958ccfa3ffe73ceb956e1f17ef3561b175df8ec3d4a664085a8a9f1971916e283a31b114d4ec9799ee9e930d7ce0121eb759e92349428da75756a9c4c2155ef57f64ba4863f6fa76ccf2f0971b223c1d4d6175bd17416b811d1339f135119eaa711ee10a26fa519f391de32a8e595e5c546fb5b5f0d914e49263d3a3d559de028065629523d312f87fbbcebd52865f204dd49cfcbcc439046493408d668274e8563cbb09059ea73bc64e945bae91f857c29fb6e05977b266390993a274092347f8ac3c09a5519a27cd2a29be6e65ef9c6dcbb536c33d365547d4eadd1eb7cdbc63cc89bc4f3a2ef059a79219d4fc989ce94c00fe5768ecca69d26aae3379f95109d05987e4d12dee7a62b12f066ad006647a1252a1ce5bf31602d0a3ec1f14cbfc3fab406a4455039e56cd42e7e1e86686f572589d23f1f0a23fe2dbf9cf80e14cce370da015401fa5387b281139ab0c5d72350d636730d117d8ff08e46405a3948eb3a983739caa9375604af60b8b07b81a1f99626dc5afd1a337920cc6abf6a113e8d34616bd306a74e4c444e449e86f7478a75c6e638397c40414078137a66261e3a277f462bb0452b559f7adf2a4cc4c9a75ad6b1c0e31365c4fdef9a3d1b5fe1ee1c5a132b765e7fd0cd4a9d65ba6dab2640b3c62857b9bbe75aabab8a044f05e9e104ebd2c614c0ee8ee184af6e76e9648b94a6191d57ca7dd9bc2aa48a6696bc51961fc5ddadb897a81a4e1919b7a439d4c9b839a62c4b47665d7da02d35b135e768be188d0b4384a33206b2b8e8c3509b4fdc1253056bbb94e5244e392a03308dc7724eb2f2f4526e3692168b0901a622ba85d895e3fb9ed3b18bc30892d2624f49042c63f26e0de3e46258b832342984fe78be725229ee1ec6423b549692ef485f9f7a43e74b0a4822ed553408a373225c3be04971439b6e993d9b95d19ccdcae56d52086886b2f36339e8517e82f0ae3e3757fce4e53fa7b964863c3ad46c1600f0a451c1450daa92d45f8416bb40fcada95c52b398bd266b2ac66b1096fd6471e24d2313a4910fc09daf684e1fd0b62494321cfa1c9656b62f0912392779be7608627d069c8567f841a6ce85d59c54ccbd83"}) 2m0.656225957s ago: executing program 2 (id=1335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r4, 0x1, 0x31, 0x0, &(0x7f00000008c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) listen(r5, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES64=r4], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000200)=""/195, 0x41100, 0x1d, '\x00', 0x0, @fallback=0x8, r0}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfa, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0x7, 0xffffffff}}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000340)={@mcast1, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6, 0x2, 0x3, 0x400, 0xc3, 0x2160020, r11}) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r12, @ANYBLOB="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"], 0x184}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x70901, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x200}) 2m0.384734961s ago: executing program 2 (id=1339): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) socketpair(0x1f, 0x80000, 0xc, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f0764000000000c00028005001f"], 0x3c}}, 0x54) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000680)={0x81, 0x8, 0x7, 0x5, 0x4}) write$tun(r7, &(0x7f00000001c0)={@val={0x0, 0x22eb}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x38) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 1m59.989934825s ago: executing program 2 (id=1344): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x20000040) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff81004e230e227f004001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa00000000ffffffffffffffffe7ee000000000000000002000000008d2f99c3ea84211e2d", 0x61}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x200, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1m44.937298224s ago: executing program 34 (id=1344): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x20000040) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff81004e230e227f004001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa00000000ffffffffffffffffe7ee000000000000000002000000008d2f99c3ea84211e2d", 0x61}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x200, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 3.775560351s ago: executing program 5 (id=2212): r0 = getpid() r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) recvmsg(r1, &(0x7f0000003f00)={&(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000000600)=""/189, 0xbd}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/1, 0x1}, {&(0x7f0000000800)=""/108, 0x6c}, {&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/3, 0x3}, {&(0x7f0000002c80)=""/149, 0x95}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/62, 0x3e}], 0xa, &(0x7f0000003e40)=""/145, 0x91}, 0x20) r3 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r9 = getpid() sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r6}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)="a5edb4b2cc84912e026051d8cf71b4e769b2d848bd616d5af053edd49bd691bf766a01c0d3fc741d23e0949344c77942db6e74900b7a84ecfb9a0fc20392fcaf3cb8d4d88f43184a90239ef22b7cc6f6e81cf80327fb96c2ba584a1ebf75f546006462f3afd700eb05b147fcf1ea5c5dfff06e5b8873c6e961534273c8a104a91bb7955005ec3ad9808480f51756e6970a4d1223399cb524ba2c06dce8b5b610d1e203685cb78d52a074bb6631279288190dda7468ebc324098e78c7cc5a178b314b9fbda0d0de67a275eb8ccc122833a078e30a0a6423b82b30debb72c606ea", 0xe0}, {&(0x7f0000000280)="891c38ce5aa754", 0x7}, {&(0x7f00000002c0)="fe7eedad12394eb510822dfff69321ca8f7419de02d1945543a1319d0be600a4f4310f1c1dafbaccd637ca70456a59397912924fce6eae98e59642a0651f83a87b0d686802ccd2e488d5e5f5ae5c8fd30891e2af71a367d7d466d5efeb35698c65b48c833ca74ada381d7dd5d8588260d85e953237ccddca1887a97101c997407237746c7cb831cf127f3c6604d1d4124e42571ca8453aab3ac59536039b5a19f09fe2c5da453a12b909355022aec10707970782e4d5e5992e79f1e9fb0c6f7fec0dfa99cd7201660abc", 0xca}, {&(0x7f00000003c0)="e65fe053a85ab660c32e2be48cccb5c1d3242db4f52e4f098ca260c1a898a6661037fe7d008c316ce19ec8b82cc1fa8d2f4dc9525076ba766956207b0b4ceb41ca6d6bf1f16c5cc43d", 0x49}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r7}}}], 0x20, 0x40000}, 0x800) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 3.568393157s ago: executing program 5 (id=2214): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000080)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}}, 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 3.425634334s ago: executing program 5 (id=2216): syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e000b7300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd29, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x96) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@loopback, @initdev, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x20}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x402080, &(0x7f0000000040)={@align=0x8, {0x5, 0x7, 0xf40, 0x8c0b}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x1}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfebe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ca}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 3.254146303s ago: executing program 5 (id=2218): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000c1400048e7f294e579fad2cbd7000fddbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24000041) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x48}}, 0x0) 2.8064727s ago: executing program 6 (id=2224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240440d2}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x20000004}) r4 = socket(0x9, 0x6, 0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r9, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x810) writev(r0, &(0x7f0000000180), 0x100000000000003c) 2.65976117s ago: executing program 5 (id=2226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x10001) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 2.543839465s ago: executing program 5 (id=2227): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.999596924s ago: executing program 4 (id=2231): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000080)=0xfff) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) close(0x4) 1.920539508s ago: executing program 6 (id=2232): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, r3, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0xe, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xfffffffffffffffc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f250000000000000000010000e00000018e00000100186371ae9b1c03"], 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, 0x0) sendmsg$inet(r11, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000050c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0x4, "dadd"}, {0x2, 0x11, "90261cf17d180c5deb1100b4cd8cc3"}]}]}}}], 0x30}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0xfffffffd, 0x503, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff80fe, 0x5}, 0x50) 1.615868785s ago: executing program 3 (id=2234): r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x409, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x24) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='sfq\x00', 0x4) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1.536590961s ago: executing program 6 (id=2235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000044db550000"], 0x50) poll(&(0x7f0000000040), 0x55, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e21, 0x7, @private2, 0x1}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, &(0x7f00000004c0)=0x100) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073c67a3100000000140004800800014000000005080002401886c30128000000000a050000000000004d938950435cd56225000000010000080900010073797a01000000000800024000000001140000001100010000000000000000000000000a"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.481271507s ago: executing program 4 (id=2236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000340)) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0x7, 0x3, 0x4177, 0x25dfdbfe, {0x2, 0x0, 0x5}}, 0x14}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r4, 0x411, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x40084) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) ioctl$TUNSETVNETLE(r8, 0x400454dc, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000dc92967509d4756237f7c5f57c773da9a33abd334aacb4b9dc73e03aaa4e637cb00000000000000000000000000000000000000000000000000000000000090219a6a640fb9a01aa4b6c673f9babdea2d96abe8bbb11d9081fc733f7223d218e4af4bd305f146a05dbd950d32c921d3b62b050928e9df55f622b309086087d54542eccd4d39bd37152547b88a17f420844364f49a91b6c2253f1eb5d11627354a366e", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r10) sendmsg$inet6(r10, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e21, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="2fff278bfd", 0x5}, {&(0x7f0000000200)="87da58ea80d9a2fd8efc200c4f3c50fff221ca3a697a13a8c2c84ea782760c5d98ed1552e3a900fb24b0cfb4afdcad68bd31701e27", 0x35}], 0x2}, 0x810) 1.265878935s ago: executing program 7 (id=2237): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x3253, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) 1.200446136s ago: executing program 6 (id=2238): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010000d04040000005c000000", @ANYRES32=0x0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x10}, 0x40}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000001cc0)={&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000440)=""/5, 0x5}, {&(0x7f00000014c0)=""/171, 0xab}, {&(0x7f0000001680)=""/204, 0xcc}, {&(0x7f0000001780)=""/222, 0xde}, {&(0x7f0000001880)=""/49, 0x31}, {&(0x7f00000018c0)=""/19, 0x13}, {&(0x7f0000001900)=""/43, 0x2b}, {&(0x7f0000001940)=""/188, 0xbc}, {&(0x7f0000001a00)=""/222, 0xde}], 0x9, &(0x7f0000001bc0)=""/195, 0xc3}, 0x40) listen(r3, 0xea) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6gre0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001600)={'vlan0\x00', &(0x7f0000001580)=@ethtool_perm_addr={0x20, 0x67, "1abafdf881c9af01c744134d69e6841a3a1f6187ae07f293038acfefa4dad21331493feae7a9ffb5f3c757968493b194afec44c9682a12f0c147eb9fa9907051da5ef33740107b45aa4120b8b7d47f9ed1cbd0c4e4fbf3173f2a39fb764ffe4feb7049159315eb"}}) 1.200024608s ago: executing program 3 (id=2239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x3, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6}, @NHA_OIF={0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x80000002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async) setsockopt(r0, 0x4, 0x40000009, &(0x7f0000000140)="43acf478492274", 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}, 0x1c) 1.125659624s ago: executing program 4 (id=2240): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x309c01, &(0x7f0000000080)={@_ha_fsid={[0x3, 0xe58]}, {0x4, 0xb8, 0xb, 0x100000000}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x6}) (rerun: 32) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@empty, @loopback, @mcast1, 0x7ff, 0x800, 0x4, 0x100, 0x13, 0x2a00009, r1}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 1.069048939s ago: executing program 7 (id=2241): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) socket$kcm(0x1e, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async, rerun: 32) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="f96a34e4e4ab637bb306e4991e6c211c714ea70e107f6ada"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x3}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) 984.459161ms ago: executing program 3 (id=2242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) r3 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3e, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="09383121ea3233ff481435f73a96ff8c3d289aae930c164446ab10e545ce7aabb0a71c0c6dc6b459cfee91d1932b0e84e5812c5e9b1931d6457fa3411a5ec3fbeee11a954930e809e04ce6", @ANYRES8=r6, @ANYRES16=r7], 0x20) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fd00000000000000000000000300000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r10, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r1, 0x0, 0x1, 0x8d6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x10000, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@fallback=r11, r2, 0x6, 0x31, r4, @void, @void, @void, @value=r13, r12}, 0x20) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x8}}, 0x1c}}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_macvtap\x00', 0x700}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x4}, @val={0x1, 0x3, 0xa1, 0x1, 0xc, 0x2}, @x25={0x1, 0x9, 0xfd, "ed4fae693a4944ef460cf486112b7becd2ba136b226203a07251d7755c384449473e4a43a1b6b0170931909d3c2a388a1cb558f6e19641e688b99a5ec019813b028273233d87158d"}}, 0x59) 914.648788ms ago: executing program 7 (id=2243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="b00000000206197900000000000000000000000005000100070000000900020073797a30000000001400078005001500fc08000008001240000000000d000300686173683a6e65740000000005000500020000000500040000000000050001000700000016000300686173683a6e65742c706f72742c6e6574"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 910.207921ms ago: executing program 4 (id=2244): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000140)={r1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000100)=""/26, &(0x7f0000000340)=0x1a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40014) 718.170322ms ago: executing program 7 (id=2245): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5e4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5b8, 0x2, [@TCA_BPF_ACT={0x5b4, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x124, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x1, 0x1, 0xac2}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x3ff, 0x0, 0xb, 0xd}, 0x8}}]}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x180, 0x6, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @multicast1, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}]}, {0x3d, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f4"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x2, 0x7ffe}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001900010000000000000000000a002000000000000000000008001e00", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="351ef01cbc61731ae197f3c59018108c0fb3"], 0x34}}, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5e4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5b8, 0x2, [@TCA_BPF_ACT={0x5b4, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x124, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x1, 0x1, 0xac2}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x3ff, 0x0, 0xb, 0xd}, 0x8}}]}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x180, 0x6, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @multicast1, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}]}, {0x3d, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f4"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) socket(0x10, 0x803, 0x0) (async) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x2, 0x7ffe}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001900010000000000000000000a002000000000000000000008001e00", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="351ef01cbc61731ae197f3c59018108c0fb3"], 0x34}}, 0x0) (async) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) (async) 716.542889ms ago: executing program 4 (id=2246): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 669.291056ms ago: executing program 3 (id=2247): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0xa6, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f0000000300)=@ll={0x11, 0x5, r1, 0x1, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="b44f7a7e8c68707724f2ee12aa906b7d1ec0386dff1c5448056ab4a854ca9187fc16cc6ae9135e0589d1b61a401ed7424475", 0x32}, {&(0x7f00000003c0)="34783b2745b1644450558445", 0xc}, {&(0x7f0000000400)="8b9e837141a86fb8128c3ac659bfd2d5e33c419734f80adfa08ab121d57b08b20f454b64b3ef5ef3ad73715aedbe596c85cf0b9414edc54fda888bc51366b0bb470dfe900214481aaf3efb7eb41a52dc86ef49de78140a73822a33e917bc1fdeca02e71c6297", 0x66}, {&(0x7f0000000480)="f31846f0775526c8eebde23332", 0xd}, {&(0x7f00000004c0)="52383e4358cabf990d7609c060eb6620c3aff8cef2d4b3cec458eccf0fdd9583e77a748c69d2201643b8bc56def2af3e0d97860ecf50804f888c3577b932c3fe349f44dc7873a9b3972c9e9b3ad75e6a29c23ccfef3aec9697eb2360b2e53108139d6430b68ed9fb56e13b312e047b973bdf8fd34a0b35046f29cdce543d748df9099b818b60c19387726f35e5b3469dcf844fa5b8fe288c607f16b11e36e206675db1ca6f3f26a7f2257381591eb297593e458417a0311ba96751aa173511b476da57bf18fbde66aac80624b034bc264aa2a16190181ef712a31ff041424021c7b1fd10bfbea0f33d", 0xe9}, {&(0x7f00000005c0)="73e918014058840ba22def484f6517ae05618e24c937224062a9c5013208d098bb75b45d22c0fd3b0542800833dfea2c69caeb9a0dab1bcee1", 0x39}], 0x6}, 0x4000) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000700)='\x00', 0xa00, &(0x7f0000000740)={@align=0xc000000000000000, {0x1, 0x2, 0x200, 0x6}}, 0x80, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x3ff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r2) r3 = socket(0xa, 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000840)={0x7, 0x7e8, 0x0, 0x2, 0xbc}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r3, &(0x7f0000000880)="7d28e13a5b50818a4579aff0226132762f8bb91fcce22a0812dee6ef4cd514790d7ccfe805acf6a4bc7b84e4c860fa54cd5b8d0bbde395a2dd35d4885743538aa3b2612eff13543d3493b418070df90f02962424e099cf2e940cc61dbd5e0a503ce9e7d364ebc18a8d06c4e1ff74847a2996", 0x72, 0x2000c881, &(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @empty}, 0x3, 0x3, 0x2, 0x3}}, 0x80) r5 = openat$cgroup_ro(r2, &(0x7f00000009c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0xe0, @private0, 0x1}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe01}], 0x58) ioctl$XFS_IOC_FSGEOMETRY_V4(r5, 0x8070587c, &(0x7f0000000a80)) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000b00), &(0x7f0000000b80)=0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001cc0)={r5, 0x20, &(0x7f0000001c80)={&(0x7f0000000bc0)=""/160, 0xa0, 0x0, &(0x7f0000000c80)=""/4096, 0x1000}}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001d00)={0x0, 0x9}, &(0x7f0000001d40)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000001d80)={r7, 0x57, "997c870d44f6db967a9527d8477ff13c41d7ac1f060e9a4912ebd7e341b289fa1ca03132bb5429761574158e0c76324e5cd9ed862f1b2d0149d56b48ec88ba84679eb4d5f9d499c04011d023b11aed40e32d4e3cddf79e"}, &(0x7f0000001e00)=0x5f) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000001e40)={'TPROXY\x00'}, &(0x7f0000001e80)=0x1e) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x60608}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x14, r8, 0x4, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc010044}, 0x20000080) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002000)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x65, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r9, 0xc038943b, &(0x7f00000020c0)={0x3, 0x18, '\x00', 0x0, &(0x7f0000002080)=[0x0, 0x0, 0x0]}) r10 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002100)={'netdevsim0\x00'}) socket(0x29, 0xa, 0x0) getuid() r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002180), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, r12, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20048081) 642.7543ms ago: executing program 7 (id=2248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001900)={&(0x7f0000000100)=@can={0x1d, r4}, 0x80, &(0x7f0000001640)=[{&(0x7f00000001c0)="3d670afdc852ac9ea120f24ed4d72dc4a97fcd3137765509409bfb8dd00176612512235a02268f15c96b1587b4a7146a65e0f5fb69edfb2a6ba16313f09ec2cb1ab4b07d9caf888549a80132dca61acc7bc86c2f63a99a2086af06a39049d30adb6c27e745e207ac9ddbee8fcddb46e114503adf22b92448ae2183a2b95311703be447b1b6db83bba971ee7153d30b4c7f", 0x91}, {&(0x7f0000000380)="e229bf9bbc8667a19d90b9464511a0dffc91304137dee1a7c365797ebe469d0ebfb93852cb2cc0f28cbaa886a7a2a7ff0a07da0f9e9ae58a4fd1942cca8e33dc9cf1aa71bffbe6ed36ba8b5195faca8418e249174a4d1c4614605a40cce96c7e", 0x60}, {&(0x7f0000000500)="86f3d4aa9434c72d4fe84d33d29a3fb41b25e95fa91630b0c1688dcd59282d3178e4626efef6a13680978166b95bace3cc6ccb8449961ed07522a9d8937ad0420090090ff637bab56566e304f443e02ffd7a0b6a917bd10e59a8982e1169e12e3e455953164da897e71d4cf528b1a77f168a903e102cb3a7dea34f6f5dc9d6c1a2ad97bfebe4ac59e3151267c7c88dcd9f063deeb1d45de88b93ea7bf09e0518c72ab609eff1ea5c1a42e945927d2a7b4ad30a6cac9e6694dc0c46002fcd196ac22558fc324bed2ff46c027eb59df3cd8c3dcaaa434d6abf6f969597f7cd31116df8ebe3676dbba67b2638deeadb36cec956aae4471a4fb2", 0xf8}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="87c144f4a6d51e10d091c85ec005dad27048443a1d0a79b76f022913", 0x1c}], 0x5, &(0x7f00000016c0)=[{0xd8, 0x29, 0x1, "2dba912755c3cc19dd84f4572f43a690dbd9b1dc2800579ccb173831c1e21186c764c33a4389a44df2c5054daaa8f533060293bc73e151a026e03d3c5702dbc50e49b3085bf3f5093b7f013d33bf93bc191b8c01d53e238383d2f617c006e10be49e9d0d813fee32e3db481ec950001a224f6469e7c4a2e869c2fce592e360d6c6fab083362cd3d16a46b87739171c984de802c3ae53dbc01460dc8c0e23e0a211bf43e038f122cd6e76548cad4355478818fa60b1439137879a3e68f92293afd70fc29571555b"}, {0xb0, 0x111, 0x81, "e94ea2e6da2d3639d2299be70dfdd849aa7a2521d22f46db7c4727bd17bb6ac848a4e4a3ef653faa0d293a5b3fe8956b5101af162ce441d178d21a84789ab7ed9a21dec7bfed6c875adc489e997bd5715b11e566fec111e9f934e8c952d772ae8cff97a111458d809f6ca994c5e1d100b6fdaf4e9d679aff17424afcf3d9a89c7023337bad835ce13d52cd35188b496385c7bc388447ab33cd01a61a"}, {0x98, 0x104, 0x6, "b5847d9e8e9e148e0b25e2b09cc71f9bd54982a09339cab06c99983b71254c21a671e860adab5063667b3b79d69e798404e0e04ff9eb2bef2e91930e426f20ada8efaf15ca88a08de5201b43eeb692372e5581244aa56fb62f1294b46e11c4d16eded1569633222cc93bebd39b98ad39188e12296fadf11efd056fd19f81a766ec3c5c3954ad55f0"}], 0x220}, 0x24000001) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) 483.199356ms ago: executing program 4 (id=2249): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000005c0)={{0x8, 0x1, 0x3, 0xffff, 0x1}, [{0xfffffffffffffffb, 0x8, 0xe5}, {0x3, 0x3, 0xd, 0xe}]}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x0, r6}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) sendmsg$inet(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfffc) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000700)={&(0x7f0000000040)=@llc={0x1a, 0x18, 0x9, 0x8, 0x8, 0xfc, @random="b1745b7c1421"}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="e6ae17943dbd29b15bffaf49ed0e5e3b6b3c98d3e51b7f8ae78a42a2a316205856b7e6c3e4ecbae3af5b1e8ca8b70d3e7431b46747dbee93b2f0db5fd775af3e3d77a51d70fa5087eb2590786d04bf3f023e7ea268230c300ad7daab6a98264ac096590e8e3da88ff792f6e86a127fc726aa37795ba475bc28b4", 0x7a}, {&(0x7f0000000240)="dd5d1526ed400afd45cbe0dd9d685e62623ab87ba5a93a1d989eaa162f9a84d5de1b02d72fbd883d674d022643ed310e4470fb9adf36de00d074eedcef1bc947def684522da8c02a7a5deddca2556b15b11f2d15e6ae692c512d6cc82fac2518664c12ead3f34e6045eb1dc772c9fee1c896e7110764c30e8bb65f5d224f28fa3cef4811d822d5ec59d148e282568645e43f67c8059227ee335ac9963724e9b69879ddf90b62d5435a726d1f996b82acbf2c6676d3c2782cf529755cf8e5fff71bea54023f21306888", 0xc9}, {&(0x7f0000000340)="3aa33ceaeb5dca84ad9698659a858388a3828a41a2458f948aa21acedf614839f094bc0f01dc7f690c11b5d5d499119aaceb18af95652c0fa4f873e5435a44a1ce3b5a0b17ba57c37a351d274602d59579a215d04adad26f50d117af308568aac36d8a3a16639c0c436bd9234721eb320f64bf37a29481c34b65ef0be4c1a07d4f7018500155d5e09ee2f32888aa4d44650d07ec8105295b8ddab8c7b8d814127e86b83610b87dcdf11c003471a47556b17f3b840b85ad1a97e759a41cc5525ee27451540d95582a34c4e53c739ffbda979c80e8365c3e2e9353722fea10669d513506caa130663368a541c57c10e0accfeb", 0xf2}, {&(0x7f0000000440)="541506c6dbfb0842eb46ad2239bb2555c98e9c6797bee1dd", 0x18}, {&(0x7f0000000480)="14465e611d6643799b41d4568e4be08238ec6f98a0deb0cc2c5d87364d6948d37b9337d3305a32374fcff6a28fb8496db83993cfbcd4da5ec30c404fd3d70d347c2d13d0bb56f8ce6997a61777cdeefa26f10f1a9089dd10edf2393bbb608f3f856fd722616024336552f916cbd7187d29f8cfd2b66abb2bfac5c09381a0ea5430a43af6ad167cc221a8e039f46887ebadc4706a263a81ce05c8f7506662ee43ad025c96521290ac", 0xa8}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x108}, 0x200cc050) 306.131886ms ago: executing program 7 (id=2250): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000022) recvmmsg(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000003c00)=""/4108, 0x100c}, {&(0x7f0000002a00)=""/15, 0xf}], 0x3}, 0xec}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000036003e996f0d00070a28000000120a887acb7a578a992e09000000000000000000020000000900020073797a3100000000080003400000000114000000140001000000000000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000010900010073797a31018007000100637400001c0002800500030001000000080002400000000d08000140000000090900020073797a3200000000140000001100010000000000000000000200000a47ca4a2e50db32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 251.728858ms ago: executing program 3 (id=2251): syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, '\x00'}}}}}, 0x0) (async) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, '\x00'}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 180.372391ms ago: executing program 6 (id=2252): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfc00000000000000}, 0x7, 0xd, 0x4, 0x0, 0x7, 0x800002}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xff\xff'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000080) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0xfab16000) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfc00000000000000}, 0x7, 0xd, 0x4, 0x0, 0x7, 0x800002}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xff\xff'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000080) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0xfab16000) (async) 40.268666ms ago: executing program 6 (id=2253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r4}) 0s ago: executing program 3 (id=2254): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r2, 0xff03, 0x0) kernel console output (not intermixed with test programs): 607628][ T7351] netlink: 'syz.1.460': attribute type 12 has an invalid length. [ 118.741695][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 118.751948][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 118.959554][ T7371] netlink: 'syz.1.464': attribute type 21 has an invalid length. [ 118.999710][ T7371] netlink: 156 bytes leftover after parsing attributes in process `syz.1.464'. [ 119.026146][ T7369] tipc: Enabling of bearer rejected, failed to enable media [ 119.568846][ T7391] vlan3: entered promiscuous mode [ 119.598110][ T7391] bridge0: entered promiscuous mode [ 119.901894][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 120.294340][ T7418] xt_hashlimit: size too large, truncated to 1048576 [ 121.326149][ T7467] macvlan0: entered promiscuous mode [ 121.401079][ T7455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.437269][ T7460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.496'. [ 121.737046][ T7475] x_tables: duplicate underflow at hook 2 [ 121.881590][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 122.103057][ T7488] vlan4: entered promiscuous mode [ 122.132313][ T7488] bridge0: entered promiscuous mode [ 122.172076][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 122.477662][ T7508] validate_nla: 1 callbacks suppressed [ 122.477694][ T7508] netlink: 'syz.3.507': attribute type 4 has an invalid length. [ 122.627769][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 122.682311][ T7519] veth0_macvtap: left promiscuous mode [ 122.776099][ T7526] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 122.973582][ T7528] netlink: 256 bytes leftover after parsing attributes in process `syz.2.513'. [ 123.025028][ T7528] netlink: 'syz.2.513': attribute type 9 has an invalid length. [ 123.509579][ T7553] batman_adv: batadv0: Adding interface: dummy0 [ 123.531838][ T7553] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.575380][ T7553] batman_adv: batadv0: Interface activated: dummy0 [ 123.659434][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 123.686935][ T7553] batadv0: mtu less than device minimum [ 123.701710][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 123.726188][ T7553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.740604][ T7553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.753724][ T7553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.766527][ T7553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.779611][ T7553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.793272][ T7553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.806900][ T7553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.820491][ T7553] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.067203][ T7573] tipc: Enabling of bearer rejected, failed to enable media [ 124.380262][ T7586] bridge_slave_1: left allmulticast mode [ 124.397271][ T7586] bridge_slave_1: left promiscuous mode [ 124.421215][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.471536][ T7586] bridge_slave_0: left promiscuous mode [ 124.525266][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.193710][ T7635] netlink: 'syz.0.542': attribute type 23 has an invalid length. [ 125.301777][ T7636] netlink: 'syz.4.541': attribute type 12 has an invalid length. [ 125.359434][ T7636] netlink: 'syz.4.541': attribute type 29 has an invalid length. [ 125.397209][ T7636] netlink: 148 bytes leftover after parsing attributes in process `syz.4.541'. [ 125.418465][ T7636] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 125.551157][ T7636] netlink: 11 bytes leftover after parsing attributes in process `syz.4.541'. [ 125.744251][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 125.779398][ T7647] macvlan2: entered promiscuous mode [ 125.793508][ T7647] macvlan2: entered allmulticast mode [ 126.406110][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 126.922474][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 126.955034][ T7705] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 127.278416][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 127.651727][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 127.793413][ T7736] netlink: 'syz.2.564': attribute type 7 has an invalid length. [ 127.986885][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 127.996481][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 128.017834][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 128.045103][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.568'. [ 128.110044][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.569'. [ 128.179299][ T14] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.189950][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 128.213902][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.221157][ T7752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.228723][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.234970][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.568'. [ 128.235895][ T7752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.281468][ T14] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.328616][ T14] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.178234][ T7797] x_tables: duplicate underflow at hook 1 [ 129.185468][ T7798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.583'. [ 129.249346][ C0] net_ratelimit: 11 callbacks suppressed [ 129.249365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.267449][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 129.875861][ T7825] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.008606][ T7827] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 130.075537][ T7831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.142549][ T7831] can: request_module (can-proto-0) failed. [ 130.272866][ T7827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.327606][ T7840] bond1: (slave veth5): Enslaving as an active interface with a down link [ 130.384124][ T7852] Cannot find set identified by id 65534 to match [ 130.523393][ T7857] netlink: 'syz.0.599': attribute type 49 has an invalid length. [ 130.540706][ T7841] vlan2: left promiscuous mode [ 130.547689][ T7841] bridge0: left promiscuous mode [ 130.560560][ T7841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.668507][ T7827] bond1: (slave veth7): Enslaving as an active interface with a down link [ 130.741120][ T1128] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 130.788396][ T1128] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 131.066912][ T7873] syzkaller0: entered promiscuous mode [ 131.084364][ T7873] syzkaller0: entered allmulticast mode [ 131.251190][ T399] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 131.679063][ T7904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.837267][ T7908] nbd: must specify a device to reconfigure [ 131.862871][ T7910] tipc: Started in network mode [ 131.888171][ T7910] tipc: Node identity da38c2328cd, cluster identity 4711 [ 131.906459][ T7910] tipc: Enabled bearer , priority 0 [ 131.914235][ T7910] syzkaller0: entered promiscuous mode [ 131.920328][ T7910] syzkaller0: entered allmulticast mode [ 131.968885][ T7910] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 132.038324][ T7915] ip6erspan0: entered promiscuous mode [ 132.080852][ T7910] tipc: Resetting bearer [ 132.135335][ T7909] tipc: Resetting bearer [ 132.197501][ T7909] tipc: Disabling bearer [ 132.458758][ T7926] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 132.471942][ T7926] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 132.504152][ T50] Bluetooth: hci4: link tx timeout [ 132.505593][ T7925] TC_ACT_REPEAT abuse ? [ 132.510210][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.659169][ T5637] IPVS: starting estimator thread 0... [ 132.785321][ T7943] IPVS: using max 40 ests per chain, 96000 per kthread [ 132.803722][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.816403][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160706][ T7967] __nla_validate_parse: 11 callbacks suppressed [ 133.160746][ T7967] netlink: 288 bytes leftover after parsing attributes in process `syz.3.629'. [ 133.243059][ T7961] syzkaller0: entered promiscuous mode [ 133.263502][ T7974] netlink: 44 bytes leftover after parsing attributes in process `syz.0.630'. [ 133.268301][ T7961] syzkaller0: entered allmulticast mode [ 133.443514][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 133.508304][ T7985] bond1: (slave ip6_vti0): Device is not bonding slave [ 133.516608][ T7985] bond1: option active_slave: invalid value (ip6_vti0) [ 133.529460][ T7985] bond1 (unregistering): Released all slaves [ 134.067930][ T7991] syzkaller0: entered promiscuous mode [ 134.086932][ T7991] syzkaller0: entered allmulticast mode [ 134.380894][ T8026] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 134.416431][ T8028] xt_l2tp: missing protocol rule (udp|l2tpip) [ 134.472568][ T8031] openvswitch: netlink: Message has 8 unknown bytes. [ 134.544938][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 134.547868][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 134.866761][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.151315][ T8026] netlink: 'syz.3.638': attribute type 4 has an invalid length. [ 136.667842][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.644'. [ 136.760675][ T8065] netlink: 'syz.3.648': attribute type 4 has an invalid length. [ 136.904044][ T8074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.650'. [ 137.032386][ T8081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.921665][ T8118] netlink: 'syz.2.663': attribute type 26 has an invalid length. [ 137.936764][ T8128] netlink: 'syz.2.663': attribute type 26 has an invalid length. [ 137.953740][ T8126] pim6reg1: entered promiscuous mode [ 137.964130][ T8126] pim6reg1: entered allmulticast mode [ 138.174941][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 138.454993][ T8134] macvtap0: entered promiscuous mode [ 138.483391][ T8134] vlan0: entered promiscuous mode [ 138.499735][ T8134] macvtap0: entered allmulticast mode [ 138.517464][ T8134] vlan0: entered allmulticast mode [ 138.537741][ T8134] veth0_vlan: entered allmulticast mode [ 138.612141][ T8154] veth1_macvtap: left promiscuous mode [ 138.633737][ T8154] macsec0: entered promiscuous mode [ 138.666517][ T8154] macsec0: entered allmulticast mode [ 138.710181][ T8156] veth1_macvtap: entered promiscuous mode [ 138.743117][ T8156] veth1_macvtap: entered allmulticast mode [ 138.767784][ T8156] macsec0: left promiscuous mode [ 138.780239][ T8156] macsec0: left allmulticast mode [ 138.790805][ T8156] veth1_macvtap: left allmulticast mode [ 139.179868][ T8178] batadv0: entered promiscuous mode [ 139.212315][ T8178] macsec1: entered promiscuous mode [ 139.226241][ T8178] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 139.252325][ T8178] batadv0: left promiscuous mode [ 139.683377][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 139.932879][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 140.268597][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 141.671058][ T8266] sock: sock_timestamping_bind_phc: sock not bind to device [ 141.705878][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.711'. [ 141.754836][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 142.033661][ T8276] Bluetooth: MGMT ver 1.23 [ 142.066917][ T8276] netlink: 1 bytes leftover after parsing attributes in process `syz.4.713'. [ 142.905932][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.719'. [ 142.929778][ T8298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.719'. [ 143.026353][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.397406][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.469528][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.527405][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.574249][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.606527][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.649841][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.699183][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.745537][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.788125][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.838360][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 144.945745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.309284][ T8426] x_tables: unsorted entry at hook 2 [ 145.470485][ T8428] netlink: 'syz.0.756': attribute type 2 has an invalid length. [ 146.676730][ T8480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.719761][ T8480] bond0: (slave bond1): Enslaving as an active interface with an up link [ 146.764178][ T8481] veth1_macvtap: left promiscuous mode [ 147.473458][ T8515] veth1_vlan: mtu less than device minimum [ 147.933000][ T8528] veth0_macvtap: left promiscuous mode [ 148.512428][ T8553] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 148.628377][ T8559] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.938604][ T8567] tipc: Failed to remove unknown binding: 66,1,1/0:1202254593/1202254595 [ 149.081664][ T8567] __nla_validate_parse: 36 callbacks suppressed [ 149.081682][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 149.098346][ T8577] netlink: 'syz.0.794': attribute type 6 has an invalid length. [ 149.131933][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 149.214547][ T8575] netlink: 176 bytes leftover after parsing attributes in process `syz.4.795'. [ 149.274612][ T8575] netlink: 'syz.4.795': attribute type 5 has an invalid length. [ 149.639757][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 149.646858][ T8594] syzkaller0: entered promiscuous mode [ 149.671811][ T8594] syzkaller0: entered allmulticast mode [ 149.679570][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 149.730386][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 149.755768][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 149.824243][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.372768][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 150.451766][ T8628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.808'. [ 150.846770][ T8651] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 150.982170][ T8658] netlink: 542 bytes leftover after parsing attributes in process `syz.1.816'. [ 151.270111][ T8660] bond2 (unregistering): Released all slaves [ 151.439467][ T8674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.467747][ T8671] syzkaller1: entered promiscuous mode [ 151.477964][ T8671] syzkaller1: entered allmulticast mode [ 151.866300][ T8698] xt_NFQUEUE: number of total queues is 0 [ 153.413199][ T8754] Bluetooth: MGMT ver 1.23 [ 154.110360][ T8781] erspan0: entered promiscuous mode [ 154.168185][ T8798] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 154.197161][ T8795] block nbd0: server does not support multiple connections per device. [ 154.247377][ T8795] block nbd0: shutting down sockets [ 154.354939][ T8810] __nla_validate_parse: 12 callbacks suppressed [ 154.354957][ T8810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.861'. [ 154.443359][ T8810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.861'. [ 154.534690][ T8810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.861'. [ 154.610452][ T8810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.861'. [ 154.646053][ T8812] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 154.671385][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.865'. [ 154.692894][ T8779] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 154.696923][ T8812] bond3 (unregistering): Released all slaves [ 154.840449][ T8810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.861'. [ 155.032413][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 155.068467][ T8810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.861'. [ 155.089266][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.125255][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.181318][ T8840] tipc: Started in network mode [ 155.215804][ T8840] tipc: Node identity 080211000001, cluster identity 4711 [ 155.255778][ T8840] tipc: Enabled bearer , priority 0 [ 155.371607][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 155.401484][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.870'. [ 155.905063][ T5628] Bluetooth: hci0: command 0x0c20 tx timeout [ 155.961176][ T8875] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 156.418946][ T8886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.457110][ T8886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.631481][ T8886] tipc: Resetting bearer [ 156.679341][ T5631] tipc: Node number set to 134418688 [ 156.697542][ T6918] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.718901][ T6918] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.728630][ T6918] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.741230][ T6918] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.104787][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 157.312739][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.319917][ T8924] bridge0: port 2(bridge_slave_1) entered listening state [ 157.327368][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.334559][ T8924] bridge0: port 1(bridge_slave_0) entered listening state [ 157.380641][ T8927] bond2: entered promiscuous mode [ 157.393611][ T8929] macvlan3: entered promiscuous mode [ 157.399888][ T8929] macvlan3: entered allmulticast mode [ 157.408115][ T8929] bond2: (slave macvlan3): Opening slave failed [ 157.440109][ T8906] 0XD: renamed from gretap0 [ 157.442436][ T8932] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.453829][ T8932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.461107][ T8932] IPv6: NLM_F_CREATE should be set when creating new route [ 157.470864][ T8906] 0XD: entered allmulticast mode [ 157.471936][ T8932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.484660][ T8932] IPv6: NLM_F_CREATE should be set when creating new route [ 158.093143][ T34] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 158.110687][ T8973] netlink: 'syz.2.902': attribute type 2 has an invalid length. [ 158.121055][ T8972] netlink: 'syz.4.905': attribute type 5 has an invalid length. [ 158.316487][ T8981] veth13: entered promiscuous mode [ 158.505061][ T8998] netlink: zone id is out of range [ 158.510341][ T8998] netlink: zone id is out of range [ 158.516697][ T8998] netlink: zone id is out of range [ 158.521936][ T8998] netlink: zone id is out of range [ 158.528146][ T8998] netlink: zone id is out of range [ 158.533357][ T8998] netlink: zone id is out of range [ 158.540683][ T8998] netlink: zone id is out of range [ 158.547023][ T8998] netlink: zone id is out of range [ 158.553436][ T8998] netlink: zone id is out of range [ 158.559059][ T8998] netlink: zone id is out of range [ 158.819814][ T9000] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 158.850825][ T9009] bond3: (slave syz_tun): Releasing backup interface [ 158.865064][ T9009] bridge_slave_0: left allmulticast mode [ 158.870795][ T9009] bridge_slave_0: left promiscuous mode [ 158.877454][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.888549][ T9009] bridge_slave_1: left allmulticast mode [ 158.895690][ T9009] bridge_slave_1: left promiscuous mode [ 158.901435][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.916574][ T9009] bond0: (slave bond_slave_0): Releasing backup interface [ 158.927643][ T9009] bond0: (slave bond_slave_1): Releasing backup interface [ 158.942033][ T9009] team0: Port device team_slave_0 removed [ 158.951989][ T9009] team0: Port device team_slave_1 removed [ 158.958629][ T9009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.967536][ T9009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.978503][ T9009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.986669][ T9009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.016779][ T9000] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 159.026922][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.216332][ T9082] xt_hashlimit: size too large, truncated to 1048576 [ 160.287086][ T9088] __nla_validate_parse: 19 callbacks suppressed [ 160.287098][ T9088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.940'. [ 160.483775][ T9091] bridge_slave_1: left allmulticast mode [ 160.489674][ T9091] bridge_slave_1: left promiscuous mode [ 160.496769][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.508948][ T9091] bond0: (slave bond_slave_0): Releasing backup interface [ 160.526868][ T9091] bond0: (slave bond_slave_1): Releasing backup interface [ 160.559389][ T9091] team0: Port device team_slave_0 removed [ 160.567867][ T9091] team0: Port device team_slave_1 removed [ 160.577061][ T9091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.586786][ T9091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.749958][ T9104] tipc: Started in network mode [ 160.769894][ T9104] tipc: Node identity , cluster identity 4711 [ 160.810357][ T9108] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 160.848939][ T9108] bond4: (slave gretap0): making interface the new active one [ 160.885200][ T9108] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 160.968334][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 160.978946][ T9114] netlink: 'syz.2.949': attribute type 18 has an invalid length. [ 160.987160][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 160.996932][ T9116] bridge1: entered promiscuous mode [ 161.002270][ T9116] bridge1: entered allmulticast mode [ 161.019137][ T6918] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.036174][ T6918] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.051438][ T6918] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.060379][ T6918] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.350696][ T9131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.393033][ T9131] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.426396][ T9131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.485845][ T9131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.496444][ T9131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.531826][ T9131] veth1_vlan: left promiscuous mode [ 161.556385][ T9131] veth0_vlan: left promiscuous mode [ 161.583810][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.589441][ T9131] veth0_vlan: entered promiscuous mode [ 161.625506][ T9131] veth1_vlan: entered promiscuous mode [ 161.635646][ T9131] veth1_macvtap: left promiscuous mode [ 161.642138][ T9131] veth0_macvtap: left promiscuous mode [ 161.649128][ T9131] veth0_macvtap: entered promiscuous mode [ 161.659703][ T9131] veth1_macvtap: entered promiscuous mode [ 161.670561][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.681719][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.689898][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.699016][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.753357][ T9131] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.843341][ T9140] veth0: entered promiscuous mode [ 161.850896][ T81] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.862590][ T81] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.871836][ T81] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.881130][ T81] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.891750][ T9138] veth0: left promiscuous mode [ 162.060585][ T5637] IPVS: starting estimator thread 0... [ 162.154559][ T9159] IPVS: using max 30 ests per chain, 72000 per kthread [ 162.203584][ T9166] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 162.210015][ T9166] syzkaller1: linktype set to 823 [ 162.397167][ T9177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.505788][ T9189] xt_ecn: cannot match TCP bits for non-tcp packets [ 162.549919][ T9195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.967'. [ 165.382958][ T9180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.689229][ T9218] pimreg: entered allmulticast mode [ 165.816180][ T9227] netlink: 'syz.2.977': attribute type 2 has an invalid length. [ 165.842481][ T9227] netlink: 'syz.2.977': attribute type 2 has an invalid length. [ 165.864191][ T9234] netlink: 277 bytes leftover after parsing attributes in process `syz.3.979'. [ 166.306100][ T9261] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 166.458074][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 166.530629][ T9273] macvtap1: entered promiscuous mode [ 166.536412][ T9273] vlan0: entered promiscuous mode [ 166.543210][ T9273] macvtap1: entered allmulticast mode [ 166.549115][ T9273] vlan0: entered allmulticast mode [ 166.557024][ T9273] veth0_vlan: entered allmulticast mode [ 166.908782][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'. [ 167.218100][ T9320] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1007'. [ 167.712367][ T5286] veth1_vlan: left promiscuous mode [ 167.989795][ T9357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'. [ 168.043397][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 168.140684][ T9362] bond2: entered promiscuous mode [ 168.150443][ T9362] bond2: entered allmulticast mode [ 168.440366][ T9379] ip6gre1: entered allmulticast mode [ 168.607634][ T9387] bridge0: port 1(batadv1) entered blocking state [ 168.614416][ T9387] bridge0: port 1(batadv1) entered disabled state [ 168.621538][ T9387] batadv1: entered allmulticast mode [ 168.629999][ T9387] batadv1: entered promiscuous mode [ 168.718893][ T9390] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 168.771749][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 169.104894][ T6918] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 169.114584][ T6918] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 169.303679][ T9401] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1026'. [ 169.319441][ T9401] net_ratelimit: 4 callbacks suppressed [ 169.319457][ T9401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.393455][ T9407] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 169.863133][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1036'. [ 169.877275][ T9428] geneve0: entered promiscuous mode [ 169.883750][ T9428] geneve0: left promiscuous mode [ 170.541298][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 170.709186][ T9446] netlink: 'syz.3.1042': attribute type 3 has an invalid length. [ 171.021495][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.038078][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.049920][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.059572][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.069436][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.552338][ T9495] __nla_validate_parse: 3 callbacks suppressed [ 171.552357][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1052'. [ 171.610334][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'. [ 171.911531][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 171.943925][ T9517] netlink: 'syz.3.1058': attribute type 6 has an invalid length. [ 171.988590][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 172.065500][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 172.089450][ T9517] netlink: 'syz.3.1058': attribute type 6 has an invalid length. [ 172.104675][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 172.111969][ T14] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.122561][ T14] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.132672][ T9524] netlink: 'syz.2.1061': attribute type 39 has an invalid length. [ 172.146349][ T14] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.155991][ T14] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.218782][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 172.222189][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.236205][ T9532] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.236859][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.250041][ T9460] bridge_slave_0: entered allmulticast mode [ 172.257268][ T9460] bridge_slave_0: entered promiscuous mode [ 172.269851][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.282021][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.290418][ T9460] bridge_slave_1: entered allmulticast mode [ 172.298422][ T9460] bridge_slave_1: entered promiscuous mode [ 172.356729][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.369922][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.431401][ T9535] netlink: 'syz.3.1063': attribute type 21 has an invalid length. [ 172.431441][ T9460] team0: Port device team_slave_0 added [ 172.488122][ T9535] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 172.511939][ T9535] bond3 (unregistering): Released all slaves [ 172.561611][ T9460] team0: Port device team_slave_1 added [ 172.662544][ T9548] hsr0: entered allmulticast mode [ 172.668012][ T9548] hsr_slave_0: entered allmulticast mode [ 172.673680][ T9548] hsr_slave_1: entered allmulticast mode [ 172.683592][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.691254][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.732373][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.750673][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.762504][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.792092][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.801146][ T9555] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 172.811722][ T9555] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1070'. [ 172.822336][ T9555] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 172.888431][ T9460] hsr_slave_0: entered promiscuous mode [ 172.897262][ T9460] hsr_slave_1: entered promiscuous mode [ 172.903858][ T9460] debugfs: 'hsr0' already exists in 'hsr' [ 172.911713][ T9460] Cannot create hsr debugfs directory [ 173.011072][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1071'. [ 173.107073][ T50] Bluetooth: hci5: command tx timeout [ 173.293618][ T9460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.315711][ T9460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.323721][ T9460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.340160][ T9460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.364660][ T9460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.388685][ T9460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.406203][ T9460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.428965][ T9460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.596373][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.605289][ T9594] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 173.637279][ T9460] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.670358][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.677618][ T6918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.703154][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.710369][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.511687][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.521211][ T9632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'. [ 174.548374][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.557659][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.571029][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.579740][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.743518][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.844263][ T9650] ip6t_srh: unknown srh invflags 4000 [ 175.185605][ T5628] Bluetooth: hci5: command tx timeout [ 175.468874][ T9460] veth0_vlan: entered promiscuous mode [ 175.509299][ T9460] veth1_vlan: entered promiscuous mode [ 175.659918][ T9693] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 175.691116][ T9693] geneve2: entered promiscuous mode [ 175.697337][ T9693] geneve2: entered allmulticast mode [ 175.759341][ T9460] veth0_macvtap: entered promiscuous mode [ 175.811670][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.819059][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.826966][ T9634] bridge_slave_0: entered allmulticast mode [ 175.834730][ T9634] bridge_slave_0: entered promiscuous mode [ 175.854062][ T9460] veth1_macvtap: entered promiscuous mode [ 175.862466][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.868735][ T9706] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 175.870467][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.887775][ T9634] bridge_slave_1: entered allmulticast mode [ 175.895821][ T9634] bridge_slave_1: entered promiscuous mode [ 175.918683][ T9706] netlink: 'syz.3.1096': attribute type 2 has an invalid length. [ 175.959270][ T9706] netlink: 'syz.3.1096': attribute type 2 has an invalid length. [ 175.963812][ T9634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.980454][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.023106][ T9634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.128656][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.221041][ T9634] team0: Port device team_slave_0 added [ 176.242555][ T9634] team0: Port device team_slave_1 added [ 176.263303][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.299273][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.372555][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.431138][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.474904][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.494958][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.527619][ T9634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.556550][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.575568][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.608749][ T9634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.609333][ T9742] __nla_validate_parse: 7 callbacks suppressed [ 176.609348][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 176.644678][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 176.664975][ T5628] Bluetooth: hci6: command tx timeout [ 176.708058][ T9748] x_tables: duplicate underflow at hook 2 [ 176.729681][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 176.781385][ T9634] hsr_slave_0: entered promiscuous mode [ 176.796109][ T9634] hsr_slave_1: entered promiscuous mode [ 176.804624][ T9634] debugfs: 'hsr0' already exists in 'hsr' [ 176.810785][ T9634] Cannot create hsr debugfs directory [ 177.036946][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.047849][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.111076][ T9765] netlink: 'syz.2.1115': attribute type 1 has an invalid length. [ 177.119611][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'. [ 177.196405][ T9765] vlan3: entered promiscuous mode [ 177.203844][ T9765] bridge0: entered promiscuous mode [ 177.215713][ T6914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.224058][ T6914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.275280][ T5628] Bluetooth: hci5: command tx timeout [ 177.499480][ T9779] block nbd0: not configured, cannot reconfigure [ 177.542885][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 177.563363][ T9784] FAULT_INJECTION: forcing a failure. [ 177.563363][ T9784] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.598065][ T9634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.604655][ T9784] CPU: 0 UID: 0 PID: 9784 Comm: syz.3.1119 Not tainted syzkaller #0 PREEMPT(full) [ 177.604681][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.604698][ T9784] Call Trace: [ 177.604706][ T9784] [ 177.604713][ T9784] dump_stack_lvl+0xe8/0x150 [ 177.604761][ T9784] should_fail_ex+0x40c/0x560 [ 177.604784][ T9784] _copy_from_user+0x2d/0xb0 [ 177.604810][ T9784] ___sys_sendmsg+0x1c6/0x360 [ 177.604842][ T9784] ? __lock_acquire+0x683/0x2cf0 [ 177.604870][ T9784] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.604927][ T9784] ? __fget_files+0x2a/0x420 [ 177.604950][ T9784] ? __fget_files+0x3a2/0x420 [ 177.604981][ T9784] __x64_sys_sendmsg+0x1b1/0x290 [ 177.605009][ T9784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.605052][ T9784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.605071][ T9784] do_syscall_64+0x174/0x580 [ 177.605093][ T9784] ? trace_irq_disable+0x3b/0x140 [ 177.605114][ T9784] ? clear_bhb_loop+0x40/0x90 [ 177.605136][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.605154][ T9784] RIP: 0033:0x7f50dfd9de59 [ 177.605176][ T9784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.605191][ T9784] RSP: 002b:00007f50ddff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.605213][ T9784] RAX: ffffffffffffffda RBX: 00007f50e0026090 RCX: 00007f50dfd9de59 [ 177.605226][ T9784] RDX: 0000000000000850 RSI: 0000200000000200 RDI: 0000000000000004 [ 177.605237][ T9784] RBP: 00007f50ddff6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.605249][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.605259][ T9784] R13: 00007f50e0026128 R14: 00007f50e0026090 R15: 00007ffd32f9cbc8 [ 177.605288][ T9784] [ 177.807953][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.821157][ T9634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.866635][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.891175][ T9634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.898593][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1122'. [ 177.922564][ T9794] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 177.937895][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.993879][ T9634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.016418][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.136923][ T9816] netlink: 'syz.5.1126': attribute type 83 has an invalid length. [ 178.277621][ T9818] netlink: 'syz.3.1128': attribute type 1 has an invalid length. [ 178.374938][ T9818] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.525932][ T9833] tipc: New replicast peer: 255.255.255.255 [ 178.532831][ T9833] tipc: Enabled bearer , priority 10 [ 178.645552][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.695580][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.705863][ T5628] Bluetooth: hci6: command tx timeout [ 178.734051][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.741252][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.773620][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.780850][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.957494][ T9851] openvswitch: netlink: IP tunnel dst address not specified [ 178.975541][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1137'. [ 178.996350][ T9851] netlink: 'syz.5.1137': attribute type 24 has an invalid length. [ 179.018645][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1137'. [ 179.047169][ T9851] netlink: 'syz.5.1137': attribute type 24 has an invalid length. [ 179.349820][ T5628] Bluetooth: hci5: command tx timeout [ 179.372350][ T9876] netlink: 'syz.3.1142': attribute type 64 has an invalid length. [ 179.432234][ T9876] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1142'. [ 179.702336][ T9881] bond4: entered promiscuous mode [ 179.998000][ T9916] ksmbd: Unknown IPC event: 1, ignore. [ 180.198801][ T9928] netlink: 'syz.3.1147': attribute type 30 has an invalid length. [ 180.202944][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1149'. [ 180.457982][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.690253][ T9948] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.751111][ T9948] vlan5: entered promiscuous mode [ 180.760669][ T9948] 0XD: entered promiscuous mode [ 180.786189][ T5628] Bluetooth: hci6: command tx timeout [ 180.816645][ T9950] syzkaller0: entered promiscuous mode [ 180.831459][ T9950] syzkaller0: entered allmulticast mode [ 181.494256][ T9634] veth0_vlan: entered promiscuous mode [ 181.560191][ T9634] veth1_vlan: entered promiscuous mode [ 181.662543][ T9634] veth0_macvtap: entered promiscuous mode [ 181.716448][ T9634] veth1_macvtap: entered promiscuous mode [ 181.797549][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.873441][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.941551][ T6918] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.993302][ T6918] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.017038][T10014] FAULT_INJECTION: forcing a failure. [ 182.017038][T10014] name failslab, interval 1, probability 0, space 0, times 1 [ 182.040080][T10014] CPU: 1 UID: 0 PID: 10014 Comm: syz.4.1167 Not tainted syzkaller #0 PREEMPT(full) [ 182.040106][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.040117][T10014] Call Trace: [ 182.040124][T10014] [ 182.040132][T10014] dump_stack_lvl+0xe8/0x150 [ 182.040174][T10014] should_fail_ex+0x40c/0x560 [ 182.040201][T10014] should_failslab+0xa8/0x100 [ 182.040229][T10014] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 182.040253][T10014] ? skb_clone+0x212/0x3a0 [ 182.040279][T10014] ? skb_clone+0x212/0x3a0 [ 182.040312][T10014] skb_clone+0x212/0x3a0 [ 182.040343][T10014] __netlink_deliver_tap+0x413/0x860 [ 182.040382][T10014] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.040411][T10014] netlink_deliver_tap+0x19c/0x1b0 [ 182.040444][T10014] netlink_unicast+0x77f/0x940 [ 182.040481][T10014] netlink_sendmsg+0x813/0xb40 [ 182.040518][T10014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.040550][T10014] ? aa_sock_msg_perm+0xf1/0x1b0 [ 182.040575][T10014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.040604][T10014] sock_sendmsg_nosec+0x13a/0x180 [ 182.040628][T10014] ____sys_sendmsg+0x54e/0x850 [ 182.040660][T10014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.040696][T10014] ? import_iovec+0x73/0xa0 [ 182.040726][T10014] ___sys_sendmsg+0x2a5/0x360 [ 182.040751][T10014] ? __lock_acquire+0x683/0x2cf0 [ 182.040779][T10014] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.040842][T10014] ? __fget_files+0x2a/0x420 [ 182.040865][T10014] ? __fget_files+0x3a2/0x420 [ 182.040899][T10014] __x64_sys_sendmsg+0x1b1/0x290 [ 182.040929][T10014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.040975][T10014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.040996][T10014] do_syscall_64+0x174/0x580 [ 182.041019][T10014] ? trace_irq_disable+0x3b/0x140 [ 182.041042][T10014] ? clear_bhb_loop+0x40/0x90 [ 182.041065][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.041084][T10014] RIP: 0033:0x7fcb7399de59 [ 182.041102][T10014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.041117][T10014] RSP: 002b:00007fcb74850028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.041136][T10014] RAX: ffffffffffffffda RBX: 00007fcb73c25fa0 RCX: 00007fcb7399de59 [ 182.041150][T10014] RDX: 0000000000000850 RSI: 0000200000000200 RDI: 0000000000000004 [ 182.041168][T10014] RBP: 00007fcb74850090 R08: 0000000000000000 R09: 0000000000000000 [ 182.041179][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.041190][T10014] R13: 00007fcb73c26038 R14: 00007fcb73c25fa0 R15: 00007ffeb0c9a818 [ 182.041221][T10014] [ 182.041391][ T6918] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.090383][T10017] __nla_validate_parse: 3 callbacks suppressed [ 182.090399][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 182.332810][ T6918] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.528820][ T6914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.559092][ T6914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.665403][ T6914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.690806][ T6914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.826445][T10047] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1177'. [ 182.865589][ T5628] Bluetooth: hci6: command tx timeout [ 182.985772][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1080'. [ 183.068617][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1080'. [ 183.091709][T10066] FAULT_INJECTION: forcing a failure. [ 183.091709][T10066] name failslab, interval 1, probability 0, space 0, times 0 [ 183.105677][T10066] CPU: 1 UID: 0 PID: 10066 Comm: syz.2.1179 Not tainted syzkaller #0 PREEMPT(full) [ 183.105702][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.105712][T10066] Call Trace: [ 183.105720][T10066] [ 183.105727][T10066] dump_stack_lvl+0xe8/0x150 [ 183.105759][T10066] should_fail_ex+0x40c/0x560 [ 183.105784][T10066] should_failslab+0xa8/0x100 [ 183.105811][T10066] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 183.105835][T10066] ? skb_clone+0x212/0x3a0 [ 183.105861][T10066] ? skb_clone+0x212/0x3a0 [ 183.105895][T10066] skb_clone+0x212/0x3a0 [ 183.105921][T10066] ? dev_queue_xmit_nit+0x25c/0xac0 [ 183.105949][T10066] dev_queue_xmit_nit+0x28d/0xac0 [ 183.105983][T10066] ? dev_queue_xmit_nit+0x2d/0xac0 [ 183.106016][T10066] dev_hard_start_xmit+0x1c1/0x830 [ 183.106066][T10066] __dev_queue_xmit+0x1435/0x37f0 [ 183.106083][T10066] ? do_syscall_64+0x174/0x580 [ 183.106106][T10066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.106138][T10066] ? __dev_queue_xmit+0x29b/0x37f0 [ 183.106167][T10066] ? __pfx___dev_queue_xmit+0x10/0x10 [ 183.106198][T10066] ? __copy_skb_header+0xa3/0x4a0 [ 183.106237][T10066] ? __skb_clone+0x449/0x6c0 [ 183.106270][T10066] ? skb_clone+0x246/0x3a0 [ 183.106301][T10066] __netlink_deliver_tap+0x5b4/0x860 [ 183.106339][T10066] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.106367][T10066] netlink_deliver_tap+0x19c/0x1b0 [ 183.106396][T10066] netlink_unicast+0x77f/0x940 [ 183.106431][T10066] netlink_sendmsg+0x813/0xb40 [ 183.106467][T10066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.106498][T10066] ? aa_sock_msg_perm+0xf1/0x1b0 [ 183.106521][T10066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.106547][T10066] sock_sendmsg_nosec+0x13a/0x180 [ 183.106571][T10066] ____sys_sendmsg+0x54e/0x850 [ 183.106604][T10066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.106641][T10066] ? import_iovec+0x73/0xa0 [ 183.106671][T10066] ___sys_sendmsg+0x2a5/0x360 [ 183.106696][T10066] ? __lock_acquire+0x683/0x2cf0 [ 183.106726][T10066] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.106791][T10066] ? __fget_files+0x2a/0x420 [ 183.106813][T10066] ? __fget_files+0x3a2/0x420 [ 183.106846][T10066] __x64_sys_sendmsg+0x1b1/0x290 [ 183.106876][T10066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.106921][T10066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.106942][T10066] do_syscall_64+0x174/0x580 [ 183.106971][T10066] ? trace_irq_disable+0x3b/0x140 [ 183.106995][T10066] ? clear_bhb_loop+0x40/0x90 [ 183.107018][T10066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.107037][T10066] RIP: 0033:0x7ff3bfb9de59 [ 183.107055][T10066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.107070][T10066] RSP: 002b:00007ff3c09d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.107090][T10066] RAX: ffffffffffffffda RBX: 00007ff3bfe25fa0 RCX: 00007ff3bfb9de59 [ 183.107103][T10066] RDX: 0000000000000850 RSI: 0000200000000200 RDI: 0000000000000004 [ 183.107115][T10066] RBP: 00007ff3c09d3090 R08: 0000000000000000 R09: 0000000000000000 [ 183.107126][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.107137][T10066] R13: 00007ff3bfe26038 R14: 00007ff3bfe25fa0 R15: 00007ffcb5db5aa8 [ 183.107168][T10066] [ 183.641331][T10068] tun0: tun_chr_ioctl cmd 1074025675 [ 183.667872][T10068] tun0: persist disabled [ 184.022301][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1189'. [ 184.307015][T10115] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1195'. [ 184.672924][T10139] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1203'. [ 184.695015][T10141] ip6gre0: Master is either lo or non-ether device [ 184.770538][T10152] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1206'. [ 184.824413][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 185.008393][T10164] syzkaller1: entered allmulticast mode [ 185.091853][T10168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1210'. [ 185.198754][T10168] veth1: entered promiscuous mode [ 185.417772][T10191] lo: entered allmulticast mode [ 185.448438][T10191] tunl0: entered allmulticast mode [ 185.473364][T10191] gre0: entered allmulticast mode [ 185.500117][T10194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.531864][T10191] : entered allmulticast mode [ 185.565478][T10191] erspan0: entered allmulticast mode [ 185.597787][T10191] ip_vti0: entered allmulticast mode [ 185.619445][T10191] ip6_vti0: entered allmulticast mode [ 185.638151][T10191] sit0: entered allmulticast mode [ 185.664185][T10191] ip6tnl0: entered allmulticast mode [ 185.684314][T10191] ip6gre0: entered allmulticast mode [ 185.720670][T10191] syz_tun: entered allmulticast mode [ 185.728071][T10203] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 185.789474][T10197] tipc: Enabling of bearer rejected, failed to enable media [ 185.958219][T10206] syzkaller1: entered promiscuous mode [ 185.972870][T10206] syzkaller1: entered allmulticast mode [ 186.220391][T10219] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 186.263248][T10223] netlink: 'syz.5.1226': attribute type 1 has an invalid length. [ 186.400037][T10223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.547708][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 186.612743][T10240] bond1: (slave veth3): Enslaving as an active interface with a down link [ 186.662305][T10242] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 186.673161][T10242] bond1: (slave batadv1): making interface the new active one [ 186.698901][T10242] batadv1: entered promiscuous mode [ 186.730214][T10242] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 186.822273][T10223] bond1: (slave veth5): Enslaving as an active interface with a down link [ 186.842540][T10259] gre4: entered promiscuous mode [ 186.847838][T10259] gre4: entered allmulticast mode [ 186.904992][T10255] can: request_module (can-proto-0) failed. [ 187.241896][T10278] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 187.788842][T10304] __nla_validate_parse: 3 callbacks suppressed [ 187.788859][T10304] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1246'. [ 187.827705][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 187.835995][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 188.108381][T10328] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 188.161342][T10332] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1252'. [ 188.257464][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1253'. [ 188.290526][T10334] tipc: Invalid UDP bearer configuration [ 188.290581][T10334] tipc: Enabling of bearer rejected, failed to enable media [ 188.345637][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 188.392662][T10342] netlink: 'syz.4.1253': attribute type 64 has an invalid length. [ 188.421745][T10342] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1253'. [ 188.663448][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 188.693236][T10357] tun0: tun_chr_ioctl cmd 1074025675 [ 188.703349][T10357] tun0: persist enabled [ 188.709849][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 188.862637][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 188.912898][T10381] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1269'. [ 188.925916][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 188.928276][T10379] syzkaller0: entered promiscuous mode [ 188.942782][T10379] syzkaller0: entered allmulticast mode [ 189.077560][T10386] veth0_to_bond: entered allmulticast mode [ 189.557744][T10384] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.581786][T10384] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.687103][T10421] veth0_to_bridge: entered promiscuous mode [ 189.698886][T10414] veth0_to_bridge: left promiscuous mode [ 189.746852][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.800079][T10384] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.822560][T10384] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.892834][T10414] : renamed from vlan1 (while UP) [ 190.000014][T10384] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.022159][T10384] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.365850][ T48] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.383578][ T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.412241][ T48] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.439668][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.479414][T10461] openvswitch: netlink: Missing key (keys=40, expected=100) [ 191.521549][T10384] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.565315][T10384] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.856497][T10384] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.867954][T10384] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.943390][T10515] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 192.041606][T10507] syzkaller0: entered promiscuous mode [ 192.047386][T10507] syzkaller0: entered allmulticast mode [ 192.077458][T10522] gtp0: entered allmulticast mode [ 192.085537][T10522] team0: Device gtp0 is of different type [ 193.843214][T10536] netlink: 'syz.2.1305': attribute type 21 has an invalid length. [ 193.862880][T10536] __nla_validate_parse: 5 callbacks suppressed [ 193.862894][T10536] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1305'. [ 193.889936][T10536] netlink: 'syz.2.1305': attribute type 4 has an invalid length. [ 193.898120][T10536] netlink: 'syz.2.1305': attribute type 5 has an invalid length. [ 193.908422][T10536] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1305'. [ 193.993089][T10544] FAULT_INJECTION: forcing a failure. [ 193.993089][T10544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.015855][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.2.1308 Not tainted syzkaller #0 PREEMPT(full) [ 194.015878][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.015888][T10544] Call Trace: [ 194.015896][T10544] [ 194.015904][T10544] dump_stack_lvl+0xe8/0x150 [ 194.015935][T10544] should_fail_ex+0x40c/0x560 [ 194.015961][T10544] _copy_from_user+0x2d/0xb0 [ 194.015985][T10544] __sys_sendto+0x2a9/0x5a0 [ 194.016004][T10544] ? ksys_write+0x1e6/0x270 [ 194.016029][T10544] ? __pfx___sys_sendto+0x10/0x10 [ 194.016046][T10544] ? __mutex_unlock_slowpath+0x731/0x900 [ 194.016087][T10544] ? __pfx_ksys_write+0x10/0x10 [ 194.016112][T10544] __x64_sys_sendto+0xde/0x100 [ 194.016131][T10544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.016147][T10544] do_syscall_64+0x174/0x580 [ 194.016166][T10544] ? trace_irq_disable+0x3b/0x140 [ 194.016184][T10544] ? clear_bhb_loop+0x40/0x90 [ 194.016202][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.016218][T10544] RIP: 0033:0x7ff3bfb9de59 [ 194.016232][T10544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.016244][T10544] RSP: 002b:00007ff3c09d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 194.016260][T10544] RAX: ffffffffffffffda RBX: 00007ff3bfe25fa0 RCX: 00007ff3bfb9de59 [ 194.016271][T10544] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000003 [ 194.016280][T10544] RBP: 00007ff3c09d3090 R08: 0000200000000200 R09: 0000000000000014 [ 194.016290][T10544] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 194.016299][T10544] R13: 00007ff3bfe26038 R14: 00007ff3bfe25fa0 R15: 00007ffcb5db5aa8 [ 194.016322][T10544] [ 194.233485][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240080][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.871386][T10575] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.888728][T10575] bond5 (unregistering): Released all slaves [ 195.124637][T10587] syzkaller0: entered promiscuous mode [ 195.150369][T10587] syzkaller0: entered allmulticast mode [ 195.422061][T10612] netlink: 'syz.5.1325': attribute type 29 has an invalid length. [ 195.445393][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1325'. [ 195.481804][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 195.511243][T10615] netlink: 'syz.5.1325': attribute type 29 has an invalid length. [ 195.520526][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1325'. [ 195.597341][T10621] C: renamed from lo (while UP) [ 195.626469][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.648453][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'. [ 195.658295][T10622] block nbd0: Unsupported socket: should be TCP or UNIX. [ 195.678298][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.750715][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.768549][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.784049][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.815854][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.864860][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.900780][T10635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1335'. [ 195.918272][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.965603][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 196.003738][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 196.178683][T10645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1338'. [ 196.199007][T10647] netlink: 'syz.2.1339': attribute type 83 has an invalid length. [ 196.214989][T10645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1338'. [ 196.315611][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 196.407257][T10651] sctp: [Deprecated]: syz.3.1340 (pid 10651) Use of int in max_burst socket option deprecated. [ 196.407257][T10651] Use struct sctp_assoc_value instead [ 196.472466][T10640] bridge1: entered promiscuous mode [ 196.484880][T10640] bridge1: entered allmulticast mode [ 196.514013][T10640] veth1_macvtap: left promiscuous mode [ 196.773292][T10668] FAULT_INJECTION: forcing a failure. [ 196.773292][T10668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.816293][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.3.1346 Not tainted syzkaller #0 PREEMPT(full) [ 196.816318][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.816328][T10668] Call Trace: [ 196.816338][T10668] [ 196.816345][T10668] dump_stack_lvl+0xe8/0x150 [ 196.816378][T10668] should_fail_ex+0x40c/0x560 [ 196.816404][T10668] _copy_from_iter+0x1d3/0x1660 [ 196.816426][T10668] ? skb_set_owner_w+0x263/0x3d0 [ 196.816465][T10668] ? __pfx__copy_from_iter+0x10/0x10 [ 196.816496][T10668] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 196.816528][T10668] skb_copy_datagram_from_iter+0xe6/0x720 [ 196.816559][T10668] ? dev_get_by_index+0x22/0x2d0 [ 196.816579][T10668] ? skb_put+0x112/0x210 [ 196.816606][T10668] packet_sendmsg+0x36ab/0x5040 [ 196.816625][T10668] ? aa_file_perm+0x18b/0x15f0 [ 196.816669][T10668] ? __lock_acquire+0x683/0x2cf0 [ 196.816704][T10668] ? __pfx_packet_sendmsg+0x10/0x10 [ 196.816730][T10668] ? __might_fault+0xaf/0x130 [ 196.816750][T10668] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.816780][T10668] ? aa_sock_msg_perm+0xf1/0x1b0 [ 196.816802][T10668] ? __pfx_packet_sendmsg+0x10/0x10 [ 196.816818][T10668] sock_sendmsg_nosec+0x13a/0x180 [ 196.816841][T10668] __sys_sendto+0x408/0x5a0 [ 196.816865][T10668] ? ksys_write+0x1e6/0x270 [ 196.816894][T10668] ? __pfx___sys_sendto+0x10/0x10 [ 196.816915][T10668] ? __mutex_unlock_slowpath+0x731/0x900 [ 196.816968][T10668] ? __pfx_ksys_write+0x10/0x10 [ 196.816998][T10668] __x64_sys_sendto+0xde/0x100 [ 196.817023][T10668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.817043][T10668] do_syscall_64+0x174/0x580 [ 196.817068][T10668] ? clear_bhb_loop+0x40/0x90 [ 196.817091][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.817109][T10668] RIP: 0033:0x7f50dfd9de59 [ 196.817126][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.817140][T10668] RSP: 002b:00007f50e0b9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 196.817160][T10668] RAX: ffffffffffffffda RBX: 00007f50e0025fa0 RCX: 00007f50dfd9de59 [ 196.817173][T10668] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000003 [ 196.817185][T10668] RBP: 00007f50e0b9b090 R08: 0000200000000200 R09: 0000000000000014 [ 196.817197][T10668] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 196.817207][T10668] R13: 00007f50e0026038 R14: 00007f50e0025fa0 R15: 00007ffd32f9cbc8 [ 196.817237][T10668] [ 197.084677][T10678] netlink: 'syz.4.1347': attribute type 1 has an invalid length. [ 197.179714][T10674] bond3 (unregistering): Released all slaves [ 197.279483][T10692] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 197.347550][T10692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.390325][T10687] vlan5: entered allmulticast mode [ 197.452740][T10687] veth0_to_bond: entered allmulticast mode [ 197.482333][T10687] bond5: (slave vlan5): Opening slave failed [ 197.644820][T10705] netlink: 'syz.5.1354': attribute type 1 has an invalid length. [ 197.753118][T10712] xt_TCPMSS: Only works on TCP SYN packets [ 197.827637][T10714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.852968][T10716] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 197.867542][ T5286] veth1_macvtap: entered promiscuous mode [ 198.019653][T10727] FAULT_INJECTION: forcing a failure. [ 198.019653][T10727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.086064][T10727] CPU: 1 UID: 0 PID: 10727 Comm: syz.3.1361 Not tainted syzkaller #0 PREEMPT(full) [ 198.086090][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.086100][T10727] Call Trace: [ 198.086108][T10727] [ 198.086116][T10727] dump_stack_lvl+0xe8/0x150 [ 198.086154][T10727] should_fail_ex+0x40c/0x560 [ 198.086181][T10727] _copy_from_user+0x2d/0xb0 [ 198.086209][T10727] kstrtouint_from_user+0xd6/0x180 [ 198.086243][T10727] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 198.086282][T10727] proc_fail_nth_write+0x8e/0x210 [ 198.086308][T10727] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.086358][T10727] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.086382][T10727] vfs_write+0x296/0xba0 [ 198.086418][T10727] ? __pfx_vfs_write+0x10/0x10 [ 198.086443][T10727] ? __fget_files+0x2a/0x420 [ 198.086471][T10727] ? __fget_files+0x3a2/0x420 [ 198.086493][T10727] ? __fget_files+0x2a/0x420 [ 198.086526][T10727] ksys_write+0x150/0x270 [ 198.086555][T10727] ? __pfx_ksys_write+0x10/0x10 [ 198.086590][T10727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.086611][T10727] do_syscall_64+0x174/0x580 [ 198.086635][T10727] ? trace_irq_disable+0x3b/0x140 [ 198.086658][T10727] ? clear_bhb_loop+0x40/0x90 [ 198.086681][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.086700][T10727] RIP: 0033:0x7f50dfd5e68e [ 198.086717][T10727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.086732][T10727] RSP: 002b:00007f50ddff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.086751][T10727] RAX: ffffffffffffffda RBX: 00007f50ddff66c0 RCX: 00007f50dfd5e68e [ 198.086764][T10727] RDX: 0000000000000001 RSI: 00007f50ddff60a0 RDI: 0000000000000005 [ 198.086774][T10727] RBP: 00007f50ddff6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.086785][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.086795][T10727] R13: 00007f50e0026128 R14: 00007f50e0026090 R15: 00007ffd32f9cbc8 [ 198.086824][T10727] [ 198.362783][T10707] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 198.382164][T10707] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 198.425142][ T14] batadv1: left promiscuous mode [ 199.105187][T10775] syzkaller0: entered promiscuous mode [ 199.110696][T10775] syzkaller0: entered allmulticast mode [ 199.533224][T10808] __nla_validate_parse: 6 callbacks suppressed [ 199.533241][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 199.713350][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1386'. [ 199.789402][T10828] netlink: 'syz.4.1387': attribute type 9 has an invalid length. [ 199.819316][T10831] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1389'. [ 199.830374][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.838173][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.850818][T10830] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1389'. [ 199.867899][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.875118][T10830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.883182][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.890388][T10830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.906967][T10830] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1389'. [ 199.918123][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.925364][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.408562][T10868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.537530][T10875] tipc: Started in network mode [ 200.542451][T10875] tipc: Node identity ac14140f, cluster identity 4711 [ 200.554955][T10875] tipc: New replicast peer: 172.20.20.66 [ 200.563903][T10875] tipc: Enabled bearer , priority 10 [ 200.571178][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1401'. [ 200.595931][T10875] tipc: Enabled bearer , priority 0 [ 200.627605][T10876] tipc: Enabling of bearer rejected, already enabled [ 200.703521][T10885] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1404'. [ 200.722067][T10885] net_ratelimit: 56 callbacks suppressed [ 200.722083][T10885] openvswitch: netlink: Flow key attr not present in new flow. [ 200.747771][T10875] syzkaller0: entered promiscuous mode [ 200.753807][T10875] syzkaller0: entered allmulticast mode [ 200.760751][T10875] tipc: Resetting bearer [ 200.777732][T10874] tipc: Resetting bearer [ 201.436992][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 201.437064][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 201.443060][ T5643] Bluetooth: hci0: command 0x0c20 tx timeout [ 201.449296][ T4940] Bluetooth: hci3: command 0x0406 tx timeout [ 202.485739][T10874] tipc: Disabling bearer [ 202.525162][T10889] syzkaller0: entered promiscuous mode [ 202.530664][T10889] syzkaller0: entered allmulticast mode [ 204.182506][ T5865] tipc: Node number set to 2886997007 [ 204.389484][T10931] syzkaller0: entered promiscuous mode [ 204.410335][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 204.415368][T10931] syzkaller0: entered allmulticast mode [ 204.425274][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 204.691899][T10955] netlink: 'syz.5.1420': attribute type 1 has an invalid length. [ 204.706161][T10957] Cannot find del_set index 0 as target [ 204.761941][T10955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.781112][T10961] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 204.794590][T10961] bond3: entered allmulticast mode [ 204.808232][T10955] Bluetooth: MGMT ver 1.23 [ 204.943511][T10959] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 204.985466][T10959] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 205.004754][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 205.361812][T10995] netlink: 'syz.4.1426': attribute type 23 has an invalid length. [ 205.431148][T10987] xt_CT: No such helper "snmp" [ 205.546167][T11005] netlink: 660 bytes leftover after parsing attributes in process `syz.4.1431'. [ 205.638882][T11009] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1433'. [ 205.650237][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1433'. [ 205.913271][T11032] netlink: 'syz.3.1439': attribute type 7 has an invalid length. [ 206.055928][T11040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.742101][T11034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.750354][T11034] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 206.786980][T11034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.795725][T11034] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 206.864717][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 206.871369][ T5644] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 206.881876][T11034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.903971][T11034] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 206.942582][T11034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.950405][T11034] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 206.965893][T11034] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.978216][T11034] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 207.056283][T11034] tipc: Resetting bearer [ 207.130508][T11034] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 207.137076][T11034] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 207.158942][T11034] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 207.165758][T11034] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 208.629540][T11009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.640131][T11025] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1433'. [ 208.847557][T11132] netlink: 'syz.4.1444': attribute type 83 has an invalid length. [ 208.860637][T11134] batadv_slave_1: entered promiscuous mode [ 208.875164][T11133] batadv_slave_1: left promiscuous mode [ 208.988387][T11141] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1447'. [ 209.320077][T11160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.677105][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.700145][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.712339][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.721531][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.737946][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.754824][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.764409][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.779926][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.804801][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.815944][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 209.839454][T11174] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 210.253871][T11194] bond4: entered allmulticast mode [ 210.260200][T11194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.272470][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1464'. [ 210.292256][T11204] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.311163][T11204] macvlan2: entered allmulticast mode [ 210.327318][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 210.348362][T11204] bond0: entered allmulticast mode [ 210.375073][T11204] bond_slave_0: entered allmulticast mode [ 210.388356][T11204] bond_slave_1: entered allmulticast mode [ 210.401697][T11204] bond_slave_0: entered promiscuous mode [ 210.408665][T11204] bond_slave_1: entered promiscuous mode [ 210.417922][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1468'. [ 210.418477][T11204] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 210.480598][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1468'. [ 210.494308][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1468'. [ 210.864891][ C0] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 210.888988][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'. [ 211.197631][T11240] 8021q: VLANs not supported on lo [ 211.231562][T11242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1477'. [ 211.454189][ T30] audit: type=1107 audit(1783359697.553:2): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 211.683974][T11270] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1487'. [ 211.730721][T11272] vcan1: entered promiscuous mode [ 211.745331][T11272] vcan1: entered allmulticast mode [ 211.784168][ T5628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.798288][ T5628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.806532][ T5628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.815372][ T5628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.828626][ T5628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.901933][T11281] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 211.916968][ T5644] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.919080][T11281] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 211.938684][ T5644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.946782][ T5644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.956771][ T5644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.965781][ T5644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.006039][T11281] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 212.028505][T11287] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1492'. [ 212.253183][T11300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1495'. [ 212.840680][T11330] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 212.900227][T11330] bond3 (unregistering): Released all slaves [ 213.689374][T11371] gretap1: entered promiscuous mode [ 213.701320][T11371] batman_adv: batadv0: Adding interface: gretap1 [ 213.708842][T11371] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.737117][T11371] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 214.065018][ T5644] Bluetooth: hci7: command tx timeout [ 214.723747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.023479][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.051401][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.068012][T11275] bridge_slave_0: entered allmulticast mode [ 215.082501][T11420] nbd: must specify an index to disconnect [ 215.102028][T11275] bridge_slave_0: entered promiscuous mode [ 215.121169][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.130178][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.142261][T11275] bridge_slave_1: entered allmulticast mode [ 215.155743][T11275] bridge_slave_1: entered promiscuous mode [ 215.308728][T11275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.328366][T11275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.397053][T11275] team0: Port device team_slave_0 added [ 215.409924][T11275] team0: Port device team_slave_1 added [ 215.445901][T11275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.452897][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.479757][T11275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.492316][T11275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.499416][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.525672][T11275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.582155][T11275] hsr_slave_0: entered promiscuous mode [ 215.590160][T11275] hsr_slave_1: entered promiscuous mode [ 215.596547][T11275] debugfs: 'hsr0' already exists in 'hsr' [ 215.602283][T11275] Cannot create hsr debugfs directory [ 215.814902][T11275] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.827435][T11275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.835516][T11275] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.846123][T11275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.857232][T11275] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 215.868288][T11275] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.877930][T11275] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 215.891181][T11275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.994244][T11275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.021125][T11275] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.036832][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.044329][ T6914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.064280][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.071788][ T6914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.144961][ T5644] Bluetooth: hci7: command tx timeout [ 216.533048][T11275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.805748][T11275] veth0_vlan: entered promiscuous mode [ 216.819675][T11275] veth1_vlan: entered promiscuous mode [ 216.858220][T11275] veth0_macvtap: entered promiscuous mode [ 216.873277][T11275] veth1_macvtap: entered promiscuous mode [ 216.899074][T11275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.918027][T11275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.937146][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.946808][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.960394][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.970085][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.068400][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.094792][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.145016][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.153338][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.909293][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.916973][ C0] bridge0: topology change detected, propagating [ 217.924224][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.932132][ C0] bridge0: topology change detected, propagating [ 218.224779][ T5644] Bluetooth: hci7: command tx timeout [ 220.305291][ T5644] Bluetooth: hci7: command tx timeout [ 234.566148][T11467] __nla_validate_parse: 7 callbacks suppressed [ 234.566166][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 234.770024][T11478] mac80211_hwsim hwsim11 : renamed from wlan1 [ 235.199823][T11500] validate_nla: 27 callbacks suppressed [ 235.199841][T11500] netlink: 'syz.3.1536': attribute type 10 has an invalid length. [ 235.281871][T11504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.430554][T11511] SET target dimension over the limit! [ 235.508307][T11514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1538'. [ 235.548145][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1539'. [ 235.584825][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'. [ 235.605817][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1541'. [ 235.637847][T11522] macsec0: entered promiscuous mode [ 235.647218][T11522] bridge0: entered promiscuous mode [ 235.655542][T11522] macsec0: entered allmulticast mode [ 235.662418][T11522] bridge0: entered allmulticast mode [ 235.706167][T11522] bridge0: port 3(macsec0) entered blocking state [ 235.751261][T11522] bridge0: port 3(macsec0) entered disabled state [ 235.813936][T11522] bridge0: left allmulticast mode [ 235.879413][ T190] bridge0: left promiscuous mode [ 236.145194][T11553] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1549'. [ 236.317768][T11558] xt_hashlimit: size too large, truncated to 1048576 [ 236.546886][T11563] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 236.589914][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 236.940904][T11577] tipc: Enabling of bearer rejected, media not registered [ 237.072203][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1559'. [ 237.100610][T11585] ipt_REJECT: ECHOREPLY no longer supported. [ 237.569966][T11606] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1566'. [ 238.821223][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1585'. [ 239.257784][T11696] netlink: 'syz.6.1594': attribute type 1 has an invalid length. [ 239.699885][T11706] sctp: [Deprecated]: syz.7.1596 (pid 11706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.699885][T11706] Use struct sctp_sack_info instead [ 239.840991][T11716] __nla_validate_parse: 3 callbacks suppressed [ 239.841010][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 240.178869][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'. [ 240.225048][T11727] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1601'. [ 240.248577][T11727] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1601'. [ 240.248856][T11730] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1603'. [ 240.280663][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 240.326340][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1600'. [ 241.271202][T11779] C: entered allmulticast mode [ 241.298615][T11779] C: left allmulticast mode [ 241.327564][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1614'. [ 241.538345][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1617'. [ 241.561111][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1617'. [ 241.616937][T11801] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 241.659731][T11801] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 241.777212][T11803] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 241.820402][T11801] netlink: 'syz.3.1618': attribute type 12 has an invalid length. [ 243.197739][T11829] syzkaller0: entered promiscuous mode [ 243.214778][T11829] syzkaller0: entered allmulticast mode [ 243.851902][T11866] tipc: MTU too low for tipc bearer [ 244.027194][T11874] netlink: 'syz.4.1629': attribute type 29 has an invalid length. [ 244.355229][T11886] netlink: 'syz.7.1635': attribute type 2 has an invalid length. [ 244.377779][T11886] netlink: 'syz.7.1635': attribute type 2 has an invalid length. [ 244.471413][T11886] netlink: 'syz.7.1635': attribute type 39 has an invalid length. [ 244.513848][T11886] hsr_slave_0: left promiscuous mode [ 244.545541][T11886] hsr_slave_1: left promiscuous mode [ 244.742669][T11892] veth1_macvtap: left promiscuous mode [ 244.837327][T11900] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 244.861158][T11900] netlink: 'syz.3.1638': attribute type 3 has an invalid length. [ 244.886350][T11900] netlink: 'syz.3.1638': attribute type 7 has an invalid length. [ 244.905895][T11900] netlink: 'syz.3.1638': attribute type 8 has an invalid length. [ 244.924815][T11900] __nla_validate_parse: 6 callbacks suppressed [ 244.924831][T11900] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1638'. [ 244.966842][T11900] NCSI netlink: No device for ifindex 131092 [ 244.974292][T11903] macvlan0: entered promiscuous mode [ 245.098425][T11899] tipc: Enabling of bearer rejected, media not registered [ 246.261676][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1654'. [ 246.292371][T11950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1652'. [ 246.392595][T11962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1655'. [ 246.433812][T11962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1655'. [ 246.604681][T11966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1656'. [ 246.728846][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1657'. [ 246.961722][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1662'. [ 247.031101][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1662'. [ 247.924958][T12030] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 248.206326][T12051] validate_nla: 5 callbacks suppressed [ 248.206382][T12051] netlink: 'syz.5.1679': attribute type 2 has an invalid length. [ 248.227635][T12046] batadv0: entered promiscuous mode [ 248.232999][T12046] macsec1: entered promiscuous mode [ 248.248756][T12046] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 248.267805][T12046] batadv0: left promiscuous mode [ 248.323924][T12050] veth0: entered promiscuous mode [ 248.361449][T12051] : entered promiscuous mode [ 248.410951][T12050] veth0: left promiscuous mode [ 248.804062][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.094399][T12109] x_tables: unsorted underflow at hook 2 [ 249.101593][T12106] veth0_to_bridge: entered promiscuous mode [ 249.209845][T12106] veth0_to_bridge: left promiscuous mode [ 249.597130][T12123] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 250.066195][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1702'. [ 250.239507][T12152] xt_ipcomp: unknown flags 1D [ 250.273052][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1707'. [ 250.282951][T12161] netlink: 'syz.7.1707': attribute type 1 has an invalid length. [ 250.291625][T12161] netlink: 'syz.7.1707': attribute type 1 has an invalid length. [ 250.299635][T12161] netlink: 'syz.7.1707': attribute type 2 has an invalid length. [ 250.312092][T12161] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1707'. [ 250.384307][T12150] bond1 (unregistering): Released all slaves [ 250.507902][T12167] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 250.545068][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 250.577589][T12168] netlink: 'syz.3.1708': attribute type 2 has an invalid length. [ 250.674715][T12168] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1708'. [ 250.739467][T12181] xt_l2tp: invalid flags combination: 0 [ 250.762266][T12167] bond7: entered promiscuous mode [ 250.774426][T12167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.859071][T12176] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.883350][T12176] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 250.940465][T12176] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 250.993464][T12176] bond7: (slave ip6gre1): making interface the new active one [ 251.004146][T12176] ip6gre1: entered promiscuous mode [ 251.028552][T12176] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 251.066651][T12197] netlink: zone id is out of range [ 251.100645][T12197] netlink: zone id is out of range [ 251.122274][T12197] netlink: zone id is out of range [ 251.133484][T12197] netlink: zone id is out of range [ 251.140452][T12197] netlink: zone id is out of range [ 251.147283][T12197] netlink: zone id is out of range [ 251.153174][T12197] netlink: zone id is out of range [ 251.160522][T12197] netlink: zone id is out of range [ 251.414242][T12208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.431832][T12194] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 251.475210][T12194] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1713'. [ 251.687909][T12216] netlink: 'syz.5.1719': attribute type 83 has an invalid length. [ 251.918368][T12223] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 251.956835][T12226] netlink: 'syz.7.1722': attribute type 11 has an invalid length. [ 252.000066][T12228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 252.032105][T12230] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1723'. [ 252.387911][T12250] bridge0: port 3(macvlan0) entered blocking state [ 252.415784][T12250] bridge0: port 3(macvlan0) entered disabled state [ 252.469020][T12250] macvlan0: entered allmulticast mode [ 252.496112][T12250] veth1_vlan: entered allmulticast mode [ 252.555858][T12250] macvlan0: entered promiscuous mode [ 252.578242][T12250] bridge0: port 3(macvlan0) entered blocking state [ 252.586112][T12250] bridge0: port 3(macvlan0) entered forwarding state [ 252.887944][T12268] ip6t_rpfilter: unknown options [ 252.902748][T12269] ip6t_rpfilter: unknown options [ 253.025567][T12274] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 253.119147][T12285] netlink: 'syz.3.1734': attribute type 39 has an invalid length. [ 253.165785][T12285] hsr_slave_0: left promiscuous mode [ 253.197563][T12285] hsr_slave_1: left promiscuous mode [ 253.438706][T12297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1742'. [ 253.659127][T12303] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1743'. [ 253.761985][T12315] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1744'. [ 254.976954][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1765'. [ 255.363411][T12388] veth1_to_bond: entered allmulticast mode [ 255.504393][T12388] veth1_to_bond: left allmulticast mode [ 255.667204][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.676817][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.979184][T12420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1777'. [ 256.930683][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1792'. [ 256.992352][T12477] netlink: 324 bytes leftover after parsing attributes in process `syz.6.1792'. [ 257.079141][T12472] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 257.104735][ T810] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 257.301984][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1794'. [ 257.378640][T12492] tipc: Failed to remove unknown binding: 66,0,0/0:1433150613/1433150615 [ 257.392323][T12492] tipc: Failed to remove unknown binding: 66,0,0/0:1433150613/1433150614 [ 257.403302][T12492] tipc: Failed to remove unknown binding: 66,0,0/0:1433150613/1433150615 [ 257.432305][T12492] tipc: Failed to remove unknown binding: 66,0,0/0:1433150613/1433150614 [ 257.599420][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1799'. [ 257.741488][ T810] IPVS: starting estimator thread 0... [ 257.855754][T12514] IPVS: using max 31 ests per chain, 74400 per kthread [ 257.859343][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1801'. [ 257.937989][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 258.188596][T12533] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1805'. [ 258.224296][T12533] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1805'. [ 258.286103][T12541] ipt_REJECT: ECHOREPLY no longer supported. [ 258.320714][T12546] batadv_slave_0: entered promiscuous mode [ 258.325125][T12541] netlink: 'syz.6.1806': attribute type 1 has an invalid length. [ 258.424411][T12541] bond1: entered promiscuous mode [ 258.430326][T12541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.438251][T12546] batadv_slave_0: left promiscuous mode [ 258.621036][T12537] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1806'. [ 258.937452][T12568] syzkaller1: entered promiscuous mode [ 258.951179][T12568] syzkaller1: entered allmulticast mode [ 259.101945][T12570] netlink: 'syz.5.1816': attribute type 2 has an invalid length. [ 259.135084][T12570] netlink: 'syz.5.1816': attribute type 2 has an invalid length. [ 259.429064][T12583] netlink: 'syz.5.1819': attribute type 1 has an invalid length. [ 259.445082][T12583] netlink: 'syz.5.1819': attribute type 11 has an invalid length. [ 259.872905][ T14] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.895621][ T14] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.807566][T12646] syzkaller0: entered promiscuous mode [ 260.824348][T12646] syzkaller0: entered allmulticast mode [ 260.841621][T12646] net_ratelimit: 2 callbacks suppressed [ 260.841638][T12646] TC_ACT_REPEAT abuse ? [ 261.309142][T12662] __nla_validate_parse: 3 callbacks suppressed [ 261.309175][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'. [ 261.590304][T12680] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 261.659601][T12683] netlink: 'syz.5.1848': attribute type 15 has an invalid length. [ 261.675462][T12683] netlink: 'syz.5.1848': attribute type 3 has an invalid length. [ 261.972953][T12696] syzkaller1: entered promiscuous mode [ 261.999490][T12696] syzkaller1: entered allmulticast mode [ 262.021858][T12702] netlink: 'syz.3.1854': attribute type 13 has an invalid length. [ 262.337255][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1858'. [ 262.811175][T12736] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1866'. [ 262.908742][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 263.305779][T12760] xt_hashlimit: overflow, rate too high: 0 [ 263.481170][T12771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1874'. [ 263.629322][T12775] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1875'. [ 263.660930][T12775] xt_policy: neither incoming nor outgoing policy selected [ 263.695379][T12776] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1875'. [ 263.720505][T12776] xt_policy: neither incoming nor outgoing policy selected [ 263.926501][T12788] sctp: [Deprecated]: syz.6.1879 (pid 12788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.926501][T12788] Use struct sctp_sack_info instead [ 264.940439][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1893'. [ 265.642539][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1901'. [ 265.646935][T12878] vlan2: entered allmulticast mode [ 265.656783][T12886] netlink: 'syz.6.1901': attribute type 3 has an invalid length. [ 265.670767][T12886] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1901'. [ 265.701172][T12883] ip6gre1: entered promiscuous mode [ 265.723065][T12883] ip6gre1: entered allmulticast mode [ 266.588909][T12926] ip6t_srh: unknown srh invflags 4000 [ 266.622075][T12932] __nla_validate_parse: 1 callbacks suppressed [ 266.622093][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1914'. [ 266.765281][T12941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.796639][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.826487][T12941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.841105][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.857042][T12941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.893504][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.945242][T12941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.955813][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.966762][T12952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.988717][T12941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1915'. [ 266.999767][T12945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.297593][T13003] netlink: 'syz.5.1929': attribute type 1 has an invalid length. [ 268.315548][T13003] netlink: 'syz.5.1929': attribute type 4 has an invalid length. [ 268.416928][T13013] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 268.648915][T13019] netlink: 'syz.7.1935': attribute type 2 has an invalid length. [ 268.688743][T13019] netlink: 'syz.7.1935': attribute type 2 has an invalid length. [ 269.076087][T13042] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 269.227757][T13046] netlink: 'syz.7.1946': attribute type 1 has an invalid length. [ 269.253018][T13046] netlink: 'syz.7.1946': attribute type 11 has an invalid length. [ 269.605108][T13051] bond_slave_0: left promiscuous mode [ 269.614127][T13051] bond_slave_1: left promiscuous mode [ 269.651542][T13066] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 269.683775][T13051] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 269.877700][T13066] bond8: entered promiscuous mode [ 269.885743][T13066] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.769631][ T34] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 270.917370][T13101] syz.3.1957 (13101) used obsolete PPPIOCDETACH ioctl [ 289.729657][T13120] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.833111][ T5644] Bluetooth: hci7: link tx timeout [ 289.847982][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.880070][T13133] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20001 [ 289.881545][ T5644] Bluetooth: hci7: link tx timeout [ 289.892955][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.900978][ T5644] Bluetooth: hci7: link tx timeout [ 289.910124][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.918327][ T5644] Bluetooth: hci7: link tx timeout [ 289.924398][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.932743][ T5644] Bluetooth: hci7: link tx timeout [ 289.938004][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.946052][ T5644] Bluetooth: hci7: link tx timeout [ 289.951174][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.959372][ T5644] Bluetooth: hci7: link tx timeout [ 289.965051][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.974058][ T5644] Bluetooth: hci7: link tx timeout [ 289.979771][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.987581][ T5644] Bluetooth: hci7: link tx timeout [ 289.992763][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.000660][ T5644] Bluetooth: hci7: link tx timeout [ 290.006145][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.013817][ T5644] Bluetooth: hci7: link tx timeout [ 290.019058][ T5644] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.379282][T13149] __nla_validate_parse: 130 callbacks suppressed [ 290.379309][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'. [ 290.748011][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1978'. [ 291.492612][T13198] netlink: 'syz.7.1990': attribute type 9 has an invalid length. [ 291.682075][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1995'. [ 291.891631][T13210] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1997'. [ 291.905410][ T5644] Bluetooth: hci7: command 0x0406 tx timeout [ 292.029772][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2000'. [ 292.207722][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2003'. [ 292.362156][T13222] wlan1 speed is unknown, defaulting to 1000 [ 292.370872][T13229] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2002'. [ 292.410440][T13233] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.419769][T13222] wlan1 speed is unknown, defaulting to 1000 [ 292.442320][T13233] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.467487][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2004'. [ 292.483766][T13222] wlan1 speed is unknown, defaulting to 1000 [ 292.511974][T13222] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 292.577706][T13222] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 292.635460][T13222] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 292.696593][T13222] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 292.746246][T13222] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 292.865547][T13222] wlan1 speed is unknown, defaulting to 1000 [ 292.898204][T13222] wlan1 speed is unknown, defaulting to 1000 [ 292.931128][T13222] wlan1 speed is unknown, defaulting to 1000 [ 292.941033][T13248] netlink: 'syz.5.2008': attribute type 1 has an invalid length. [ 292.957015][T13222] wlan1 speed is unknown, defaulting to 1000 [ 292.957938][T13250] netlink: 'syz.3.2009': attribute type 9 has an invalid length. [ 292.968186][T13222] wlan1 speed is unknown, defaulting to 1000 [ 293.014052][T13248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.056279][T13222] wlan1 speed is unknown, defaulting to 1000 [ 293.092471][T13252] bond5: (slave veth7): Enslaving as an active interface with a down link [ 293.116243][T13248] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2008'. [ 293.131703][T13222] wlan1 speed is unknown, defaulting to 1000 [ 293.152353][T13222] wlan1 speed is unknown, defaulting to 1000 [ 293.337980][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2011'. [ 293.383676][T13259] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 293.489016][T13259] 8021q: adding VLAN 0 to HW filter on device bond9 [ 293.545257][T13259] macvlan4: entered promiscuous mode [ 293.575234][T13259] macvlan4: entered allmulticast mode [ 293.583888][T13259] bond9: entered promiscuous mode [ 293.594142][T13259] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 293.630551][T13272] netlink: 'syz.3.2012': attribute type 8 has an invalid length. [ 293.636486][T13259] bond9: left promiscuous mode [ 293.846473][T13279] syzkaller0: entered promiscuous mode [ 293.890829][T13279] syzkaller0: entered allmulticast mode [ 294.034925][T13286] xt_ecn: cannot match TCP bits for non-tcp packets [ 294.180761][T13300] pim6reg527: entered allmulticast mode [ 294.570270][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.660140][T13318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.670336][T13313] netlink: 'syz.3.2028': attribute type 1 has an invalid length. [ 294.757121][T13313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 294.944274][T13333] bond3: entered promiscuous mode [ 294.984141][T13333] macvlan3: entered promiscuous mode [ 294.999740][T13333] macvlan3: entered allmulticast mode [ 295.010186][T13333] bond3: (slave macvlan3): Opening slave failed [ 295.123096][T13343] bond11: entered promiscuous mode [ 295.865816][T13385] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 296.021045][T13387] __nla_validate_parse: 14 callbacks suppressed [ 296.021062][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2049'. [ 296.021401][T13393] netlink: 'syz.3.2048': attribute type 7 has an invalid length. [ 296.050542][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2049'. [ 296.066114][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2048'. [ 296.085913][T13387] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2049'. [ 296.086330][T13395] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 296.096609][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 296.117853][T13387] veth1_to_bridge: entered allmulticast mode [ 296.125141][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2049'. [ 296.141772][T13387] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2049'. [ 296.177209][T13404] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2051'. [ 296.200739][T13394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2047'. [ 296.222354][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2051'. [ 296.229141][T13394] macvlan0: entered promiscuous mode [ 296.252072][T13404] netlink: 'syz.5.2051': attribute type 3 has an invalid length. [ 296.281384][T13394] macvlan0: entered allmulticast mode [ 296.284615][T13404] netlink: 'syz.5.2051': attribute type 2 has an invalid length. [ 296.290752][T13394] veth1_vlan: entered allmulticast mode [ 296.320752][T13400] syzkaller0: entered promiscuous mode [ 296.334812][T13400] syzkaller0: entered allmulticast mode [ 296.469513][T13416] netlink: 'syz.6.2054': attribute type 1 has an invalid length. [ 296.861290][T13431] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 297.089507][T13448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.126277][T13429] syzkaller0: entered promiscuous mode [ 297.150322][T13429] syzkaller0: entered allmulticast mode [ 297.996222][T13488] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 300.319650][T13504] netlink: 'syz.5.2076': attribute type 4 has an invalid length. [ 300.628009][T13522] netlink: 'syz.3.2084': attribute type 63 has an invalid length. [ 301.318992][T13542] __nla_validate_parse: 10 callbacks suppressed [ 301.319010][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2089'. [ 301.474034][T13552] IPv6: addrconf: prefix option has invalid lifetime [ 301.648501][T13557] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 301.692574][T13560] Dead loop on virtual device ip6_vti0 (net 115), fix it urgently! [ 301.747218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.811015][T13557] bond5: entered promiscuous mode [ 301.828838][T13557] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.874179][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 302.002601][T13557] tc action pedit 'at' offset 6 out of bounds [ 302.012758][T13575] openvswitch: netlink: Multiple metadata blocks provided [ 302.028222][T13574] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 302.081518][T13557] bond5: (slave bridge3): making interface the new active one [ 302.089242][T13557] bridge3: entered promiscuous mode [ 302.101727][T13557] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 302.133315][T13581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2102'. [ 302.571607][T13592] erspan0: entered promiscuous mode [ 302.803397][T13614] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.837564][T13603] syzkaller0: entered promiscuous mode [ 302.854139][T13616] x_tables: duplicate underflow at hook 1 [ 302.862030][T13603] syzkaller0: entered allmulticast mode [ 303.194777][T13630] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 303.449903][T13641] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2120'. [ 303.460116][T13641] netlink: 'syz.3.2120': attribute type 9 has an invalid length. [ 305.888630][T13662] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2127'. [ 305.926796][T13667] netlink: 'syz.3.2128': attribute type 6 has an invalid length. [ 306.066089][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2130'. [ 306.558585][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2136'. [ 306.597240][T13705] netlink: 776 bytes leftover after parsing attributes in process `syz.6.2137'. [ 306.656988][T13707] bridge0: port 3(gretap0) entered blocking state [ 306.711748][T13707] bridge0: port 3(gretap0) entered disabled state [ 306.747384][T13707] gretap0: entered allmulticast mode [ 306.763466][T13707] gretap0: entered promiscuous mode [ 306.769560][T13707] bridge0: port 3(gretap0) entered blocking state [ 306.776154][T13707] bridge0: port 3(gretap0) entered forwarding state [ 306.986132][T13726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2142'. [ 307.117694][T13713] xt_CT: No such helper "snmp_trap" [ 307.137602][T13733] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2143'. [ 307.156212][T13710] bond12: Unable to set up delay as MII monitoring is disabled [ 307.262497][T13710] bond12 (unregistering): Released all slaves [ 307.760899][T13763] netlink: 'syz.5.2150': attribute type 7 has an invalid length. [ 307.770177][T13760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2149'. [ 307.783526][T13763] netlink: 'syz.5.2150': attribute type 7 has an invalid length. [ 308.004895][T13776] syzkaller1: entered promiscuous mode [ 308.038723][T13776] syzkaller1: entered allmulticast mode [ 308.142760][T13771] geneve2: entered promiscuous mode [ 308.219119][T13787] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2156'. [ 308.229812][T13790] openvswitch: netlink: IP tunnel dst address not specified [ 308.405344][T13794] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2158'. [ 308.518303][T13803] openvswitch: netlink: Missing key (keys=40, expected=100) [ 308.601752][T13808] tc_dump_action: action bad kind [ 308.868008][T13817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.876136][T13817] IPv6: NLM_F_CREATE should be set when creating new route [ 308.884249][T13817] IPv6: NLM_F_CREATE should be set when creating new route [ 308.994192][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2167'. [ 309.101663][T13825] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 309.484301][T13849] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.538624][T13850] netlink: 'syz.6.2176': attribute type 1 has an invalid length. [ 309.549312][T13849] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2177'. [ 309.557731][T13850] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2176'. [ 309.599446][T13850] netlink: 'syz.6.2176': attribute type 1 has an invalid length. [ 309.806719][T13858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.854355][T13861] netlink: 'syz.3.2180': attribute type 21 has an invalid length. [ 309.887571][T13861] netlink: 'syz.3.2180': attribute type 6 has an invalid length. [ 310.084353][T13876] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 310.978909][T13910] netlink: 'syz.7.2190': attribute type 1 has an invalid length. [ 311.025123][T13910] netlink: 'syz.7.2190': attribute type 11 has an invalid length. [ 311.102197][T13918] syzkaller0: entered promiscuous mode [ 311.171311][T13918] syzkaller0: entered allmulticast mode [ 311.246688][T13928] netlink: 'syz.5.2194': attribute type 1 has an invalid length. [ 311.454039][T13929] bond6: Unable to set up delay as MII monitoring is disabled [ 311.569806][T13929] bond6 (unregistering): Released all slaves [ 311.781274][T13928] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 312.135358][T13969] __nla_validate_parse: 5 callbacks suppressed [ 312.135377][T13969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2204'. [ 312.330045][T13973] macvtap0: entered allmulticast mode [ 312.357885][T13973] veth0_macvtap: entered allmulticast mode [ 312.941369][T14000] netlink: 'syz.7.2213': attribute type 1 has an invalid length. [ 313.268556][T14011] netlink: 'syz.3.2217': attribute type 30 has an invalid length. [ 313.329459][T14011] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 313.359140][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2218'. [ 313.473798][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2218'. [ 313.531629][T14018] bridge0: port 3(batadv2) entered blocking state [ 313.539598][T14018] bridge0: port 3(batadv2) entered disabled state [ 313.573792][T14018] batadv2: entered allmulticast mode [ 313.593158][T14018] batadv2: entered promiscuous mode [ 313.627768][T14031] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 313.668698][ T399] nci: nci_rsp_packet: unknown rsp opcode 0xd00 [ 313.925056][T14042] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 314.025259][ T14] batman_adv: batadv2: IGMP Querier appeared [ 314.031321][ T14] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 314.074559][T14046] vxcan1 speed is unknown, defaulting to 1000 [ 314.126755][T14046] vxcan1 speed is unknown, defaulting to 1000 [ 314.133695][T14046] vxcan1 speed is unknown, defaulting to 1000 [ 314.337114][T14023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.657880][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2232'. [ 315.067330][T14046] infiniband syz2: set down [ 315.097571][T14046] infiniband syz2: added vxcan1 [ 315.113512][T14046] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 315.119158][T14082] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2235'. [ 315.141599][T14046] infiniband syz2: Couldn't open port 1 [ 315.147967][T14075] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2233'. [ 315.157595][ T29] vxcan1 speed is unknown, defaulting to 1000 [ 315.166113][T14046] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 315.214838][T14046] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 315.264387][T14046] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 315.388710][T14046] RDS/IB: syz2: added [ 315.416858][T14046] smc: adding ib device syz2 with port count 1 [ 315.440716][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2238'. [ 315.444868][T14046] smc: ib device syz2 port 1 has no pnetid [ 315.492942][T14098] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2240'. [ 315.538172][ T5843] vxcan1 speed is unknown, defaulting to 1000 [ 315.540921][T14094] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 315.577124][T14046] vxcan1 speed is unknown, defaulting to 1000 [ 315.664104][T14108] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2243'. [ 315.702049][T14109] IPVS: length: 26 != 24 [ 316.398527][T14132] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 316.472884][ T31] INFO: task syz.0.920:9022 blocked for more than 143 seconds. [ 316.501139][ T31] Not tainted syzkaller #0 [ 316.511259][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.535093][ T31] task:syz.0.920 state:D stack:26624 pid:9022 tgid:9021 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 316.566142][ T31] Call Trace: [ 316.574693][ T31] [ 316.579208][ T31] __schedule+0x17d9/0x56c0 [ 316.594008][ T31] ? __lock_acquire+0x683/0x2cf0 [ 316.599263][ T31] ? __lock_acquire+0x683/0x2cf0 [ 316.620296][ T31] ? __pfx___schedule+0x10/0x10 [ 316.634366][ T31] ? schedule+0x90/0x2b0 [ 316.641697][ T31] schedule+0x164/0x2b0 [ 316.649777][ T31] schedule_preempt_disabled+0x13/0x30 [ 316.656456][ T31] __mutex_lock+0x7bf/0x1550 [ 316.661293][ T31] ? __mutex_lock+0x5d4/0x1550 [ 316.667309][ T31] ? nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 316.674360][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 316.686033][ T31] ? net_generic+0x1e/0x240 [ 316.692728][ T31] ? net_generic+0x1e/0x240 [ 316.697992][ T31] nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 316.706190][ T31] ? rcu_is_watching+0x15/0xb0 [ 316.711482][ T31] ? trace_kmalloc+0x2a/0xf0 [ 316.727642][ T31] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 316.743391][T14046] vxcan1 speed is unknown, defaulting to 1000 [ 316.750575][ T31] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 316.763303][ T31] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 316.770436][ T31] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 316.778098][ T31] ? netlink_dump+0x1e7/0xee0 [ 316.782975][ T31] ? netlink_dump+0x1e7/0xee0 [ 316.789782][ T31] genl_dumpit+0x10b/0x1b0 [ 316.794392][ T31] netlink_dump+0x711/0xee0 [ 316.799433][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 316.804715][ T31] ? genl_start+0x497/0x6d0 [ 316.809314][ T31] __netlink_dump_start+0x589/0x7b0 [ 316.814827][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 316.820647][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 316.828408][ T31] ? __pfx_genl_start+0x10/0x10 [ 316.833359][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 316.840102][ T31] ? __pfx_genl_done+0x10/0x10 [ 316.847174][ T31] ? bpf_lsm_capable+0x9/0x20 [ 316.852031][ T31] ? security_capable+0x7e/0x2c0 [ 316.859262][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 316.865735][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.870891][ T31] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 316.877969][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 316.883478][ T31] netlink_rcv_skb+0x226/0x4a0 [ 316.889800][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.895195][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.900713][ T31] ? down_read+0x2be/0x330 [ 316.905594][ T31] genl_rcv+0x28/0x40 [ 316.909691][ T31] netlink_unicast+0x7bb/0x940 [ 316.915219][ T31] netlink_sendmsg+0x813/0xb40 [ 316.920141][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.925942][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.931007][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.937667][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 316.942833][ T31] ____sys_sendmsg+0x54e/0x850 [ 316.952866][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.960693][ T31] ? import_iovec+0x73/0xa0 [ 316.968229][ T31] ___sys_sendmsg+0x2a5/0x360 [ 316.973044][ T31] ? __lock_acquire+0x683/0x2cf0 [ 316.978767][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.984096][ T31] ? futex_wake+0x51b/0x5f0 [ 316.989190][ T31] ? __fget_files+0x2a/0x420 [ 316.993901][ T31] ? __fget_files+0x3a2/0x420 [ 316.999858][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 317.005430][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.011128][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.017632][ T31] do_syscall_64+0x174/0x580 [ 317.022423][ T31] ? trace_irq_disable+0x3b/0x140 [ 317.028034][ T31] ? clear_bhb_loop+0x40/0x90 [ 317.032965][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.039560][ T31] RIP: 0033:0x7fd805b9de59 [ 317.044169][ T31] RSP: 002b:00007fd806b52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.053861][ T31] RAX: ffffffffffffffda RBX: 00007fd805e25fa0 RCX: 00007fd805b9de59 [ 317.063831][ T31] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 0000000000000008 [ 317.077153][ T31] RBP: 00007fd805c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 317.085498][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.093663][ T31] R13: 00007fd805e26038 R14: 00007fd805e25fa0 R15: 00007ffcfb07c8d8 [ 317.102414][ T31] [ 317.110813][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.118121][ T31] [ 317.118121][ T31] Showing all locks held in the system: [ 317.127181][ T31] 1 lock held by khungtaskd/31: [ 317.132202][ T31] #0: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 317.142618][ T31] 1 lock held by syslogd/4973: [ 317.161032][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 317.183044][ T31] 2 locks held by getty/5383: [ 317.194253][ T31] #0: ffff8880328500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 317.211151][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 317.222061][ T31] 2 locks held by syz.1.878/8873: [ 317.227470][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 317.236006][ T31] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 317.250719][ T31] 3 locks held by syz.0.920/9022: [ 317.256056][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 317.262776][T14046] vxcan1 speed is unknown, defaulting to 1000 [ 317.264403][ T31] #1: ffff8880295d76e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 317.293785][ T31] #2: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 317.314642][ T31] 3 locks held by syz-executor/9460: [ 317.320124][ T31] 2 locks held by syz.2.1344/10663: [ 317.334844][ T31] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 317.344559][ T31] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 317.358615][ T31] 7 locks held by syz.5.2227/14046: [ 317.364821][ T31] [ 317.367628][ T31] ============================================= [ 317.367628][ T31] [ 317.386374][ T31] NMI backtrace for cpu 0 [ 317.386394][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 317.386414][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.386424][ T31] Call Trace: [ 317.386432][ T31] [ 317.386439][ T31] dump_stack_lvl+0xe8/0x150 [ 317.386471][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 317.386492][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.386520][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 317.386543][ T31] sys_info+0x135/0x170 [ 317.386568][ T31] watchdog+0xfd7/0x1030 [ 317.386596][ T31] ? watchdog+0x1c7/0x1030 [ 317.386621][ T31] kthread+0x388/0x470 [ 317.386642][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.386658][ T31] ? __pfx_kthread+0x10/0x10 [ 317.386678][ T31] ret_from_fork+0x514/0xb70 [ 317.386701][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 317.386721][ T31] ? __switch_to+0xc89/0x1420 [ 317.386741][ T31] ? __pfx_kthread+0x10/0x10 [ 317.386762][ T31] ret_from_fork_asm+0x1a/0x30 [ 317.386788][ T31] [ 317.386859][ T31] Sending NMI from CPU 0 to CPUs 1: [ 317.514426][ C1] NMI backtrace for cpu 1 [ 317.514442][ C1] CPU: 1 UID: 0 PID: 14046 Comm: syz.5.2227 Not tainted syzkaller #0 PREEMPT(full) [ 317.514464][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.514474][ C1] RIP: 0010:lock_acquire+0x5a/0x350 [ 317.514503][ C1] Code: 0c 3d ca 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 0f 3d ca 11 83 f8 08 0f 83 83 01 00 00 89 c0 48 0f a3 05 b8 48 b5 0e 73 0d f1 29 09 00 84 c0 0f 84 ca 01 00 00 83 3d b2 7b b5 0e 00 0f 84 [ 317.514518][ C1] RSP: 0018:ffffc900058560f0 EFLAGS: 00000297 [ 317.514533][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 317.514543][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb59c20 [ 317.514554][ C1] RBP: ffffffff81d6c2d6 R08: 0000000000000000 R09: 0000000000000000 [ 317.514565][ C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002 [ 317.514575][ C1] R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000000 [ 317.514586][ C1] FS: 00007f050d1916c0(0000) GS:ffff88812505a000(0000) knlGS:0000000000000000 [ 317.514601][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.514613][ C1] CR2: 00007fb8c2ded2f8 CR3: 000000004c44c000 CR4: 00000000003526f0 [ 317.514628][ C1] Call Trace: [ 317.514634][ C1] [ 317.514648][ C1] is_bpf_text_address+0x47/0x2b0 [ 317.514672][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 317.514694][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 317.514718][ C1] kernel_text_address+0xa5/0xe0 [ 317.514744][ C1] __kernel_text_address+0xd/0x30 [ 317.514768][ C1] unwind_get_return_address+0x4d/0x90 [ 317.514786][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.514806][ C1] arch_stack_walk+0xfb/0x150 [ 317.514829][ C1] stack_trace_save+0xa9/0x100 [ 317.514848][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 317.514865][ C1] ? stack_trace_save+0xa9/0x100 [ 317.514887][ C1] ? stack_depot_save_flags+0x33/0x800 [ 317.514907][ C1] kasan_save_track+0x3e/0x80 [ 317.514927][ C1] ? kasan_save_track+0x3e/0x80 [ 317.514946][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 317.514965][ C1] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 317.514986][ C1] ? kstrdup+0x42/0x100 [ 317.515006][ C1] ? __kernfs_new_node+0xa9/0x980 [ 317.515034][ C1] ? kernfs_new_node+0xea/0x140 [ 317.515054][ C1] ? __kernfs_create_file+0x4b/0x2e0 [ 317.515069][ C1] ? sysfs_add_file_mode_ns+0x237/0x300 [ 317.515086][ C1] ? internal_create_group+0x679/0x1180 [ 317.515107][ C1] ? sysfs_create_groups+0x59/0x120 [ 317.515127][ C1] ? ib_setup_port_attrs+0x1774/0x2420 [ 317.515147][ C1] ? add_one_compat_dev+0x446/0x650 [ 317.515163][ C1] ? enable_device_and_get+0x2b3/0x3e0 [ 317.515185][ C1] ? ib_register_device+0x10af/0x1380 [ 317.515208][ C1] ? rxe_register_device+0x1e3/0x350 [ 317.515231][ C1] ? rxe_net_add+0x81/0x110 [ 317.515251][ C1] ? rxe_newlink+0xf4/0x1c0 [ 317.515269][ C1] ? nldev_newlink+0x5bc/0x650 [ 317.515289][ C1] ? rdma_nl_rcv+0x6ef/0xa40 [ 317.515309][ C1] ? netlink_unicast+0x7bb/0x940 [ 317.515330][ C1] ? netlink_sendmsg+0x813/0xb40 [ 317.515353][ C1] ? sock_sendmsg_nosec+0x13a/0x180 [ 317.515370][ C1] ? ____sys_sendmsg+0x54e/0x850 [ 317.515392][ C1] ? ___sys_sendmsg+0x2a5/0x360 [ 317.515414][ C1] ? __x64_sys_sendmsg+0x1b1/0x290 [ 317.515436][ C1] ? do_syscall_64+0x174/0x580 [ 317.515457][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.515492][ C1] __kasan_kmalloc+0x93/0xb0 [ 317.515514][ C1] __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 317.515534][ C1] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 317.515555][ C1] ? __kernfs_new_node+0xa9/0x980 [ 317.515576][ C1] ? __kernfs_new_node+0xa9/0x980 [ 317.515602][ C1] kstrdup+0x42/0x100 [ 317.515624][ C1] __kernfs_new_node+0xa9/0x980 [ 317.515651][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 317.515674][ C1] ? kernfs_root+0x1c/0x230 [ 317.515698][ C1] ? kernfs_root+0x1c/0x230 [ 317.515718][ C1] ? kernfs_root+0x1c/0x230 [ 317.515738][ C1] ? kernfs_root+0x1c/0x230 [ 317.515761][ C1] kernfs_new_node+0xea/0x140 [ 317.515785][ C1] __kernfs_create_file+0x4b/0x2e0 [ 317.515803][ C1] sysfs_add_file_mode_ns+0x237/0x300 [ 317.515825][ C1] internal_create_group+0x679/0x1180 [ 317.515852][ C1] ? kobject_add+0x163/0x240 [ 317.515878][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 317.515902][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 317.515923][ C1] sysfs_create_groups+0x59/0x120 [ 317.515946][ C1] ib_setup_port_attrs+0x1774/0x2420 [ 317.515965][ C1] ? __lock_acquire+0x683/0x2cf0 [ 317.516001][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 317.516020][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 317.516047][ C1] ? klist_add_tail+0x119/0x200 [ 317.516070][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.516088][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.516115][ C1] ? kobject_put+0x50f/0x550 [ 317.516138][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 317.516158][ C1] ? device_add+0x6f6/0xb80 [ 317.516185][ C1] add_one_compat_dev+0x446/0x650 [ 317.516205][ C1] enable_device_and_get+0x2b3/0x3e0 [ 317.516229][ C1] ? __pfx_enable_device_and_get+0x10/0x10 [ 317.516257][ C1] ? device_add+0x6f6/0xb80 [ 317.516282][ C1] ib_register_device+0x10af/0x1380 [ 317.516311][ C1] ? __pfx_ib_register_device+0x10/0x10 [ 317.516339][ C1] ? xa_load+0x60/0x210 [ 317.516361][ C1] ? xa_load+0x60/0x210 [ 317.516382][ C1] ? xa_load+0x60/0x210 [ 317.516404][ C1] ? xa_load+0x1db/0x210 [ 317.516430][ C1] ? ib_device_set_netdev+0x5c9/0x6d0 [ 317.516450][ C1] rxe_register_device+0x1e3/0x350 [ 317.516475][ C1] rxe_net_add+0x81/0x110 [ 317.516499][ C1] rxe_newlink+0xf4/0x1c0 [ 317.516518][ C1] nldev_newlink+0x5bc/0x650 [ 317.516541][ C1] ? __pfx_nldev_newlink+0x10/0x10 [ 317.516626][ C1] ? bpf_lsm_capable+0x9/0x20 [ 317.516645][ C1] ? security_capable+0x7e/0x2c0 [ 317.516673][ C1] ? __pfx_nldev_newlink+0x10/0x10 [ 317.516693][ C1] rdma_nl_rcv+0x6ef/0xa40 [ 317.516722][ C1] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 317.516756][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.516780][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.516807][ C1] netlink_unicast+0x7bb/0x940 [ 317.516833][ C1] netlink_sendmsg+0x813/0xb40 [ 317.516866][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.516896][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 317.516916][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.516943][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 317.516964][ C1] ____sys_sendmsg+0x54e/0x850 [ 317.516993][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.517056][ C1] ? import_iovec+0x73/0xa0 [ 317.517083][ C1] ___sys_sendmsg+0x2a5/0x360 [ 317.517106][ C1] ? __lock_acquire+0x683/0x2cf0 [ 317.517131][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.517177][ C1] ? __fget_files+0x2a/0x420 [ 317.517198][ C1] ? __fget_files+0x3a2/0x420 [ 317.517225][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 317.517251][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.517287][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.517305][ C1] do_syscall_64+0x174/0x580 [ 317.517327][ C1] ? clear_bhb_loop+0x40/0x90 [ 317.517347][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.517365][ C1] RIP: 0033:0x7f050c39de59 [ 317.517380][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.517394][ C1] RSP: 002b:00007f050d191028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.517412][ C1] RAX: ffffffffffffffda RBX: 00007f050c625fa0 RCX: 00007f050c39de59 [ 317.517424][ C1] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 317.517436][ C1] RBP: 00007f050c433e6f R08: 0000000000000000 R09: 0000000000000000 [ 317.517447][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.517457][ C1] R13: 00007f050c626038 R14: 00007f050c625fa0 R15: 00007fff88fb9ed8 [ 317.517480][ C1] [ 317.518575][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 317.518591][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 317.518611][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.518622][ T31] Call Trace: [ 317.518631][ T31] [ 317.518639][ T31] vpanic+0x56c/0xa60 [ 317.518670][ T31] ? __pfx___schedule+0x10/0x10 [ 317.518692][ T31] ? __pfx_vpanic+0x10/0x10 [ 317.518729][ T31] panic+0xc5/0xd0 [ 317.518754][ T31] ? __pfx_panic+0x10/0x10 [ 317.518779][ T31] ? preempt_schedule_common+0x82/0xd0 [ 317.518802][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 317.518825][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 317.518849][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 317.518873][ T31] watchdog+0x1030/0x1030 [ 317.518902][ T31] ? watchdog+0x1c7/0x1030 [ 317.518930][ T31] kthread+0x388/0x470 [ 317.518956][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.518976][ T31] ? __pfx_kthread+0x10/0x10 [ 317.519002][ T31] ret_from_fork+0x514/0xb70 [ 317.519031][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 317.519057][ T31] ? __switch_to+0xc89/0x1420 [ 317.519081][ T31] ? __pfx_kthread+0x10/0x10 [ 317.519108][ T31] ret_from_fork_asm+0x1a/0x30 [ 317.519142][ T31] [ 318.405909][ T31] Kernel Offset: disabled [ 318.410232][ T31] Rebooting in 86400 seconds..