last executing test programs: 2m53.736807038s ago: executing program 4 (id=2559): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0x8, 0xa9d}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000040)='GPL\x00', 0x14400, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x9]}, {0x9, 0x2, 0x2, 0x217fcd79}}, 0xc31b, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x4}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f00000000c0)="1942c112873d2386a1d1fd520f93f86a1eb16d965dbe66592fdd54930e0593f291459d27481a7fefd1b2a599a027dc9da5566aecc5185abe9da2034cb1a46541f0f2f8c0821e5f555205f17551036f47dff430453da8d4158e5e64b8fdb65d59b0067f727c3c6383175f6835", 0x6c, 0x3b00, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0x8, 0xa9d}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000040)='GPL\x00', 0x14400, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x9]}, {0x9, 0x2, 0x2, 0x217fcd79}}, 0xc31b, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x4}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendto$inet6(r1, &(0x7f00000000c0)="1942c112873d2386a1d1fd520f93f86a1eb16d965dbe66592fdd54930e0593f291459d27481a7fefd1b2a599a027dc9da5566aecc5185abe9da2034cb1a46541f0f2f8c0821e5f555205f17551036f47dff430453da8d4158e5e64b8fdb65d59b0067f727c3c6383175f6835", 0x6c, 0x3b00, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async) 2m53.467706353s ago: executing program 4 (id=2562): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4894) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x2}, 0x3a) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="210000000070584931f01116a8904d7a16e5511d025ce2547af31ef729dbb8e31b57a94c42860cb44f633b899275eab5690e6181d223d6fd4e4647cb6073a145041fae18b81b5bd91d638631acd29219cf4c28c3afe63e4c8d0fde2b54c3180220a909d16339677c2773460c79222eb83c4a764c1e0e36ac75d2e810e30ab19215be6726cf5613adb20e18271c738362f1f6253c48f9c55b0e2980058668eeb4406fe6cb111a4f813bd6be2327c97ca5cd15d71274abb90d0c6284cf"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', r5, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) bpf$MAP_CREATE(0x0, 0x0, 0x48) accept$packet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m52.50987387s ago: executing program 4 (id=2566): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x3, 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 2m52.173341138s ago: executing program 4 (id=2571): r0 = socket$inet(0xa, 0x801, 0x0) listen(r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r7, &(0x7f0000000c80)='n\b', 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) ioctl$sock_SIOCDELDLCI(r9, 0x8981, &(0x7f0000000240)={'pim6reg0\x00', 0x1ff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @empty}, &(0x7f0000000340)=0xc) r11 = socket(0x10, 0x80807, 0xb) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000004f00010000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="986a2f17825daf45f26298ab2c552da63bb24c28f5a57115357eb7695ea392278bec26db125fb9e70f63d631077f6b3007b9d0de39808f9f2c5e482a1af807ed759d314767ce6af035bd9b740554a1ebc3011ae956cca829f2a1c144e9c5dc9c24c660e9f2bb45d3811e7b778e649553652e849bee2fc5ce562ab3ae76e4238984"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@allocspi={0x198, 0x16, 0x8, 0x70bd2b, 0x255fdbfd, {{{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x81, 0x4e20, 0x3, 0xa, 0xb0, 0xa0, 0x2b, r10, r12}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d4, 0x82f127a1bcf333e5}, @in6=@empty, {0x1, 0xb6, 0x1, 0x8, 0x1, 0x3, 0x1, 0x401}, {0xfffffffffffffffc, 0x0, 0x68, 0x4}, {0x7, 0x3, 0x5}, 0x2, 0x3507, 0x2, 0x0, 0x2, 0xc4}, 0x7, 0x3}, [@algo_auth_trunc={0x9f, 0x14, {{'sha384-avx2\x00'}, 0x298, 0x60, "f087a4fd0b1519b4f0560bacf5759eba9ceafe34ed3f663931c77df0a9bf5aa477e448794b769eeaa613c94c9d87799df1b581ca0d2c09bcb3174aac5c8f22e55ad10c3594afbe6e97e697f98528ebb3ccc391"}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4004844}, 0x4004) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x21, 0x3, 0x5b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e8, 0xffffffff, 0xffffffff, 0x4e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x1}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x4}, {0x4, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x618) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r14, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, 0x200448d4, &(0x7f00000000c0)={0x11, 0xc, r15, 0x1, 0x84, 0x6, @local}, 0x14) 2m51.037896031s ago: executing program 4 (id=2578): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00', @ANYRES64, @ANYBLOB="010000000000000000003f"], 0x38}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b800000019000100fafffffffddbdf25e000000200000000000000000000000000000000000000000000000000000000000000fd0002007f0a00201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000140000000000000002100000010000008100000000000000ff0f00000000000073ffff000000000000000000000d001000000001000080000000200200000000000000ffffffffffffffff02000000000040000000000300"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000010000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000cf00"/32], &(0x7f0000000000)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) 2m50.583131884s ago: executing program 4 (id=2582): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m35.574074299s ago: executing program 32 (id=2582): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m26.298921218s ago: executing program 1 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a300000000009001c0073797a300000000014000480080001400000000408000240"], 0xdc}}, 0x0) 2m26.03507248s ago: executing program 1 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010003904003f375c93c4e10e1ca215bc51a4000000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="1198040051d801002800128008000100736974001c00028008000300ac1414aa06000f000200000006001000070000ccd5d169a1702d7b00"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000003c0)=0x4) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffe04, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYRES16=r4, @ANYBLOB="dfa8c5b5dd30ebd80924204442296d0c0b2afe84e89e3cc25fc4b729a84aa1a0fb9db9f41ef6403ded7ab59bd0f345765014eb60fd7f117692b29fb77807cf8e773d67c38020da9a0bcab39bd6842e5741b08af95925e5f0", @ANYRESDEC=r5, @ANYRESOCT=r1], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYRES64=r8], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r8, 0x6, 0x18, 0x0, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000940)={0x1, 0x0, 0x21a4, 0x10001, 0x2, 0x9}) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES16], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x2000}) r11 = socket(0x5, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) epoll_create1(0x0) pipe(&(0x7f0000000180)) 2m25.24038244s ago: executing program 1 (id=2744): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000c00800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000400d3238e"], 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) 2m24.531017125s ago: executing program 1 (id=2750): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x5c}, 0x1, 0x620b}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40, 0x10}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40400c4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x164, 0x30, 0x1, 0x0, 0x0, {}, [{0x150, 0x1, [@m_sample={0x14c, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xc196, 0xd42, 0xffffffffffffffff, 0xfffffffb, 0xf}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffa}]}, {0x100, 0x6, "50c8b98c0e27ecd07618919103795c627abd37f1824943de3b5247255a16b1b2ce8f4604a3887dd2c6d8d9fc3e58362fd0a47c990e630f6c1cc91c935e774823e1f996436e917c590aa5f825d015f3e48e5d0c6bdc1a3d4a20f189f75679796b2833478afe207875d4bac343d7c62d9450feb34edc6ecd2907787d274a5bcbc01429dda319fead0bf5cbc1912112c5d38907538648a1c6a38b1290e4978152e1663ed9dae86f70db96f1e4a70e5a105d9b88250da3f1ee52ea00bc375222753ea0689d2b7edc996f4f599af2ffa5036332f4229f7e3121fe0b000000000000000000b91a8fea57e07c566312ceacbd4d54f73ac4ca110b5ee683af83"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x164}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x0, 0x80ff}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 2m24.053485476s ago: executing program 1 (id=2754): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={0x0, 0x5, 0x4}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000640)={0x0, 0x7ff, 0x9}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000a40)={0x4, 0x5, {0xf, @usage=0x8000000000000005, r0, 0x203, 0xfff, 0x0, 0x0, 0x6, 0x438, @struct={0x1322, 0x8}, 0x2, 0x100, [0x1, 0x4, 0x1e, 0x1a2c, 0x2000006, 0x7]}, {0x800800295a, @usage=0x6, 0x0, 0x3, 0x3, 0x1ff, 0x6, 0x1, 0x590, @struct={0x8, 0x6}, 0xa4, 0x7, [0x8008000000000000, 0xc33, 0x2, 0x4, 0x7, 0x6]}, {0x5, @struct={0x1ff, 0x4ce}, r1, 0x1, 0x7, 0x3, 0x101, 0xffffffffffff4d70, 0x21, @usage=0x6, 0x0, 0x2, [0x8000000000000001, 0x7f06, 0x2, 0x9, 0xf]}, {0x7, 0x5, 0xa}}) (async) r2 = socket(0x2b, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x401c5820, &(0x7f0000000040)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0x1, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x30, 0x30]}}, 0x0, 0x29, 0x0, 0x4000003}, 0x28) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000000000000000000696467650000043ff167f2b0c6471821dede31552b00"], 0x40}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000e80)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x8e7c, 0x4e24, 0x15, 0xa, 0x20, 0xa0, 0x2f, r5, 0xee00}, {0x29a771c4, 0x5, 0xd, 0x7f, 0x0, 0x200, 0x1, 0xffffffffffff0000}, {0x2, 0x3ff, 0x96a, 0x10001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x2, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x3501, 0x5, 0x7ca72fc9439c7d2c, 0x9, 0x9, 0x6, 0x400}}, 0xe8) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x7f, 0x4) (async) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x4d33, 0x7, 0x5, 0x6000, r3, 0x12, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0xc}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2m23.47515457s ago: executing program 1 (id=2759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000002c0)={0x0, 0x5, 0x3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000006c0)={r2, 0x8, 0xea5, 0xedeefa1c006ecdd2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$tipc(0x1e, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000200), 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x6d55cda05866dcf}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x64}}, 0x0) 1m47.681679261s ago: executing program 33 (id=2759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000002c0)={0x0, 0x5, 0x3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000006c0)={r2, 0x8, 0xea5, 0xedeefa1c006ecdd2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$tipc(0x1e, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000200), 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x6d55cda05866dcf}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x64}}, 0x0) 9.187193013s ago: executing program 0 (id=3382): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x4, 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x6, 0x3, 0x6], 0x4}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket(0x8, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000180)={r2, 0x0, 0x101101, &(0x7f00000000c0)={@_ha_fsid={[0x1b, 0x9]}, {0x7, 0xaa2, 0x4, 0xfffffffffffffffd}}, 0x7, 0x0, &(0x7f0000000140)=0x7ff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="21080400", @ANYRES16=r0, @ANYBLOB="010000000000ffdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d300000360087006c325f64726f70730000000005008e0001000000"], 0x4c}}, 0x8000) 6.413512787s ago: executing program 3 (id=3396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000780)=""/211, 0xd3}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f00000008c0)=""/238, 0xee}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000001d00)=""/4110, 0x100e}, {&(0x7f0000001a00)=""/146, 0x92}, {&(0x7f0000001ac0)=""/87, 0x57}], 0x8}, 0x8}], 0x1, 0x100a0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x44000) 6.342150729s ago: executing program 0 (id=3398): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, 0x0, &(0x7f0000000040)) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r2}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.080995014s ago: executing program 6 (id=3399): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r2, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1a0, 0x1403, 0x1, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r2, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1a0, 0x1403, 0x1, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) 5.742236502s ago: executing program 0 (id=3400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r0}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 5.73877644s ago: executing program 2 (id=3401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x1405, 0x200, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x4040044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x50}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000048}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0xf4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x16a}}, 0x6, 0x1000, 0x96a, 0xfffffff7, 0x25, 0x140000, 0xff}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, 0x0, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f00000003c0)=0xc, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000680)={0xdc, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xbad}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0xffffffffffffff48, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB="000400", @ANYRES16=r12, @ANYBLOB="cf0401000000ffffffff1300000008000300", @ANYRES16=r4, @ANYRES8=r2], 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 5.535175998s ago: executing program 3 (id=3402): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) accept4(r0, &(0x7f0000000000)=@can, &(0x7f00000000c0)=0xef4122df, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="150000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 4.741787547s ago: executing program 6 (id=3404): socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r1 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'veth0\x00', {0xfffeffff}, 0xaac}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c020000000000000000d9330d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0xffffffff}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket(0x1, 0x80802, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r8, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000010000000000000000180000950000000000000018d5e49c6c555400a7626206"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8}, 0x94) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4, @empty}, 0x2, 0x4, 0xfffe}}, 0x26) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 4.27551126s ago: executing program 0 (id=3405): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xfffffc5c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}}, 0x0) 4.27489331s ago: executing program 2 (id=3406): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="1c0000001e00010302000000000000002d0000000000001000000000", 0x1c) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17c07}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 3.603193483s ago: executing program 5 (id=3407): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r9, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r4}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}]}, 0x40}}, 0x0) 3.602667717s ago: executing program 0 (id=3408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in6=@private1, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x4, 0x2, 0x48, 0x2, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000011000000000000000001"], 0xfdef) 3.244398552s ago: executing program 6 (id=3409): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="2100000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c0000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000001000000000040000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) r6 = getpid() sendmsg$unix(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x5, 0x0, 0x1d, r1}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1405, 0xe00, 0x70bd2d, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x4, 0x3, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040150}, 0xef994e1204f43063) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="d8ffffff1000010000000000000000000700000a28000000140a010100000000000000000a0000080c00064000000000000000030800034000000005140000001100010000000000000000000700000a11454c1d0711ac0caa04d18b63f22f71264e506b6672692945a5791bb56c369e5e4974041b74ebab8c683bbc6b5f6ced12097504adeef03b9617f54c"], 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x40) ioctl$TUNSETLINK(r1, 0x400454cd, 0x201) 2.93539744s ago: executing program 2 (id=3410): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x4, 0x20, 0x7}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x7, @private1, 0x8743}}, 0x10001, 0x0, 0xebfa, 0x6, 0x7}, &(0x7f00000002c0)=0x98) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x4, 0x5}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)={r2, 0xbd3, 0x1, [0x8]}, &(0x7f0000000380)=0xa) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000003c0)={{0x0, 0x1, 0x7, 0x6, 0x2, 0x7fffffffffffffff, 0xf, 0x3, 0x1, 0x5, 0x2, 0x10000, 0x2, 0x7fff, 0x2}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000440)={0x0, r6, "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", "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"}) r7 = socket$inet6_sctp(0xa, 0x7, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000001440)={r3, @in6={{0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00', 0xaaf}}, 0x5, 0x5, 0x7, 0x9, 0x6}, &(0x7f0000001500)=0x98) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000001540)={@dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, 0x0, "cd9a6c4855985c95283be728c91b2aadfa978b3e1b4da01db3587e71c6fed9f9", 0x4, 0xd, 0x8, 0x4}, 0x3c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2048200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x98, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3db}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400080000}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6062981d8317b392c8ad4d70241cdf85cbdeab6a78c796b271880629"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1a1}]}]}, 0x98}}, 0x1) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000001740)=@ccm_128={{0x303}, "ddb8f38701a3463c", "afcbfbc6f3291e0890587fdac9b54905", "7eb1c0f6", "9b857569cc2dfef7"}, 0x28) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001780)='memory.swap.current\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f00000017c0)={0x1, 'veth1_to_bridge\x00', {}, 0x95c7}) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000001800)={@multicast2, @dev={0xac, 0x14, 0x14, 0x11}, 0x0, "d94ac2f3cceb7fb02d1117b7fe0a9da943d917428b160e8f655ccf714d85df4f", 0x7, 0xba, 0x7}, 0x3c) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001840)={'nicvf0\x00', {0x2, 0x4e24, @broadcast}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={r10, 0x58, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000019c0)={'vcan0\x00', 0x0}) getsockname$packet(r10, &(0x7f0000001a00)={0x11, 0x0, 0x0}, &(0x7f0000001a40)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001b40)={'erspan0\x00', &(0x7f0000001a80)={'sit0\x00', 0x0, 0x740, 0x10, 0x80000001, 0x7, {{0x21, 0x4, 0x1, 0x4, 0x84, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0xf, 0x9b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0x11, [@multicast1, @empty, @rand_addr=0x64010101, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x6, 0x4, "d928"}, {0x7, 0xf, "e54af0118790239019791498a6"}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xf9, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x19}, 0xb8a7}, {@rand_addr=0x64010102}, {@loopback, 0x4}, {@broadcast, 0xa}, {@empty, 0x1ff}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000001b80)=0x0, &(0x7f0000001bc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001c00)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000001dc0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)={0x120, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x1010}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000001e00), &(0x7f0000001e40)=0x4) 2.805984506s ago: executing program 5 (id=3411): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="80000000bbbbffffffffffff080000000000000000000088be001290786b8b836832cfd4d288a896639ec78c280783a41408000000004e5a9e6a6ef476f07b412f9965faa94b7ac002f686b9cff6f88c134ce9f82c554f6b84992fa2ac4cec23f400"/110], 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/19, 0x13, 0x0, &(0x7f0000000040)=""/106, 0x6a}}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) listen(r0, 0x78) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f00000006c0)="01", 0x1, 0x4004000, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000340)=0x10, 0xa0df9f784c3b68fa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000001c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000180)) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0) 2.693557759s ago: executing program 3 (id=3412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300022000014000480080001400000000408000240"], 0xdc}}, 0x0) 2.582475124s ago: executing program 0 (id=3413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005c00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="e9ab8ec232be59cbf1ffe367316ae1e7012d672f42579dc5e1279c6f6136", 0x1e}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}, @ip_retopts={{0x10}}], 0x40}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x3, 0x0, &(0x7f0000000080)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006121e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0xfdef) 2.422533757s ago: executing program 5 (id=3414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'sit0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0x7cdb, 0x6}) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280400000000066d78ac1e0101e00100004e220000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200079078000e"], 0x0) 1.828223907s ago: executing program 5 (id=3415): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0xfffc, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000440)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001680)=""/4086, 0xff6}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}, 0xffffffff}], 0x1, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x2, 0x0, 0x0, 0xfffffffd}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x1, 0x4) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000080)) 1.681534454s ago: executing program 2 (id=3416): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = accept4$phonet_pipe(r0, &(0x7f0000000180), &(0x7f0000000200)=0x10, 0x80000) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000240)=0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wg0\x00', 0x1000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r5 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e3, &(0x7f0000000000)={r5}) r6 = socket(0xa, 0x1, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, 0x0, 0x0) bind$can_j1939(r7, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', 0x0}) r8 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) sendmmsg$alg(r0, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000380)="ef41a04d759ce607a1601a7219052f13f1461bc4409721ec453df909e04af7313b7c181a44301c8fff23fc6b571d59d5741678f546a917d94f7cbe8f76fe38f31c777a2692ebcefd6da72955c322fe6a73b87612ef6782b975be1c962b41b505fa3de88e4ca1c030d02cb9f1ca8d6208fe026204c14a390db4c685a389abc2ec4927e5024b5969a656d23151de5c86e19df9e58c656153", 0x97}, {&(0x7f0000000780)="248a51fec5f37489d227d46f28dab15cc919c6212c1b34b1c78d625918e3534fe4556a311ab0681d052338eea0eedc74d04d6d002f9aef27348e35e9c0bd7217c961eb042cfa8239d841d94f7d59d50b7bac58f58d1d81405ad3ecc48e8585c19fb78ff6e2233343c1f4d53b7c0c7a4e3f5f93221cf27cfb6c15b31861e2068be684cf4aaba6f718dbd85e27572d159d644fdc60cd1fdd6f5874e0061e5b49034ca4cc60df73eaa3a1a14d2e7822d7fdb8ffe21442bc8d989ecb3cfdca0fb83b01788c9fec8ed8f6ce3c929b8b860d890b4343198d6b174a2d9b4ec7aa77fcce3f92340db515dc6048fcc9916d9f3c9e36", 0xf1}, {&(0x7f0000000880)="6c0f823147d222e2e3ee44c28f01c26b3b6d7a7206eaf1443d74167ca577c7b9b4cead8aeae2436288cff1e37c7c3e849fb770735025bfffe61c7b4859a8f1ee1d24eb7f3aad0b8b4b129fadb90131c9cfd76f981d4cb7215af7e3759eb24a3ef36009a74dfb28fbd65d996bbca0299cd336b1", 0x73}, {&(0x7f0000000900)="b1dcfdd6459c2ba0f3858d6db5403b086aacc0dd6dea84a9efe6c1838fb9be29cf914bf8d7d05ea45eccfd9a615ab0a9c744dc08cdb323ea2d6ab84a73508cc63f35c0d8ed0338bf40aa1bb03743a8a61079053c34b8e26855d2ac32fd2de5146823046c70d3ae1a7dbcb2ded5f3ba0fd4b487d1c40793ec8d", 0x79}], 0x4, &(0x7f00000009c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a00)="2b54558fa5e06bbd1bfb2dad5080668987fd58d9bdf0e051956e185323c1d6ae26f085f65274fdb233", 0x29}, {&(0x7f0000000a40)="b87dbeaf0c96193784039358fbaad44709a08d9eb9d2771170f90c9be301ebe354b4da664cd18185067532a2e4d0ff985eb8ab6cd0552583ae0aec0ae80700f0b0103167eadbcf216b51d587b9638583c156b808e7790af2d3c9bf51252af296d20d35f68bba6373f60a9a9c523e37f2a91e80b0abc448f312904ebd10a1324aa88bc67fd43a9b8af9449eb21449607be0bb883a8bcd23788bcebb469a8cbac8b522cd4ff4f8377ee18d85808b7318768b72c4282d6a42982cc9060bf756577d652862aaf6b1cb19362be19d6e29566f", 0xd0}, {&(0x7f0000000b40)="283741a44578eac6a0ade79d06f78f01cccdcdf6a2bd1d0243bad4fb10c2933cf32125c995d78700988c96e6a4f2104fafa5f42d1792ddfb0b3c3e7556ea45e9d6f9393267ff2f7b8f273a3c0854bfb669fe02cf40a3dd9849391a", 0x5b}, {&(0x7f0000000bc0)="c0c35c9893a3a468ea63776474d2c103992625ded73f17c7eb7f02868e7fc7a965dfdff2d4be1284f320c66a35dfc307610d287b379ecaf2b9e63b997fd3e384ef322175c5686fff421d394a0c4069bc78f5f049c910", 0x56}, {&(0x7f0000000c40)="883233ae537d889cebcf272135c485cfa1371ed1e98918b3f23ab71b46d55489a400e3c62cad4d439083903001a22aa16bf36a101c075c4cf554e1ec93122977c2dddc56fab54962c2c405a75a935e1234ae51921384da04a6ce78c408e47a39c3b3a4e6a6ddb1124038107673", 0x6d}, {&(0x7f0000000cc0)="5a37fc9d3c51e26ec53a21073a31b9dcf3716c3ab16361a5ee25a3600301cb1aaec012cf2a0392350ed1055eabfed356d9168961d1ec9637e9e2bd549174210e9bb44466c7a4b4bc494a59f16d6195483bf8e57cc7f682da484c1563cd918bc59db234995e38456814eb750b0b4216174c1c713e7de9649400c7fbf2480ec4fe54c93c856227975f557ff2f64b6ee431e4020a49a49e2167e5c6466f4dbf0a0177713a339f048dba04d5abf643a0165b565b9aa354abe0d1bcd9b3c20e1a9e14dbca2a", 0xc3}, {&(0x7f0000000dc0)="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", 0xff}], 0x7, &(0x7f0000000f40)=[@iv={0x28, 0x117, 0x2, 0x11, "518d00d3854f744afdb9e2eeeda5aee2a6"}], 0x28, 0x8084}, {0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f80)="f5132bab6882d28b2a3f2ce009b83466b7227934e31ae13b26a7329cf64ce371911d573663246c0cfc", 0x29}, {&(0x7f0000000fc0)="f265", 0x2}, {&(0x7f0000001000)="f60095aef7c71c7014b9fb78df3877c9debd9dc341c27902794f88558c30", 0x1e}, {&(0x7f0000001040)="615c08affcec197b04bcd60a1a8e1e5dac4c9b6ea40418dbbdd1142c23bb1313ed5b4df3c59159f7fe2bd172a9543f21dc074e03402f835ff5f72c4e4444477a1e46e2a91bad827e8c00446dd0", 0x4d}, {&(0x7f00000010c0)}], 0x5, &(0x7f0000001180)=[@op={0x18}, @op={0x18}, @iv={0x110, 0x117, 0x2, 0xfa, "87118cf4ab356e7532a415df80f731fd95408ec53dd38d828193a2276b1711d9483b37975ef240b17e580f01b6ac1fdee05493ff0e63ccf00cb5f52a596051fe274e8cfaac255141446c97a52d1448d51ecc09d26f112b2723e214b5b7e934f68b9ce69b21d719e444028c00fbd57d1379d4ce866e8c1bf8630b50b95bfd10a5f8216039826bc880d8ad40e6092b97e234bfc84ffa8d434d115a14a2c0de1a4214901cd2e266ba135be687f7be83dad511aa54babef02c7bba35587347ae4154dd0a8cf91d0005973ef2025c20774fb657d30562078d54018ef1d03512104efe09c7cf11bc57bc47afdacd9bc87e71f5313b2f4ae7920b70dcd3"}], 0x140, 0x40000}], 0x3, 0x804) getsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0x1ba, 0x410}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8d, 0x7fff, 0x1, 'snmp_trap\x00', 'syz1\x00', {0xfff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 1.551154865s ago: executing program 3 (id=3417): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) write(0xca, &(0x7f00000000c0)="0413cc50", 0x4) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0500e2", 0x1c, 0x2c, 0xff, @remote, @local, {[@routing={0x8, 0x0, 0x1, 0xe}], {{0x8000, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x6}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x40}}, 0x0) 1.453615596s ago: executing program 6 (id=3418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='vegas', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4840000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)={0x23c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6f}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7ff}, {0x8, 0x13, 0xb}, {0x5, 0x14, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x10}, {0x8, 0x13, 0x5a16}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x944}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xb6e}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x523e}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x3ff}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xa}, {0x5, 0x14, 0x1}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4044008}, 0x4404c014) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000005780)=""/4097, 0x1001}, {&(0x7f0000000580)=""/151, 0x97}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd31}, 0x100}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003580)=""/4072, 0xfe8}, {&(0x7f0000001040)=""/4105, 0x1009}, {&(0x7f0000000180)=""/166, 0xa6}], 0x3}, 0x7}], 0x7, 0x0, 0x0) 884.260914ms ago: executing program 6 (id=3419): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x0) 739.14445ms ago: executing program 2 (id=3420): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000200)={0x4, 0x12}) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffc}) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x180, 0x30, 0x10, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x80000001, 0x20000000, 0x6, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c) 669.14279ms ago: executing program 3 (id=3421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000010000005566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 520.52543ms ago: executing program 5 (id=3422): syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="91b882b09a5bbbbbbbcbbbbb0800450000380000000000019078ac1e0001ac141426030490781200183f25000fff00000000000100000a01010164019067b22f591dee1162a3010008000071ae9b1943"], 0x0) 362.137307ms ago: executing program 6 (id=3423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in6=@private1, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x4, 0x2, 0x48, 0x2, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000012000000000000000001"], 0xfdef) 227.038027ms ago: executing program 2 (id=3424): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="80000000bbbbffffffffffff080000000000000000000088be001290786b8b836832cfd4d288a896639ec78c280783a41408000000004e5a9e6a6ef476f07b412f9965faa94b7ac002f686b9cff6f88c134ce9f82c554f6b84992fa2ac4cec23f400"/110], 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/19, 0x13, 0x0, &(0x7f0000000040)=""/106, 0x6a}}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) listen(r0, 0x78) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f00000006c0)="01", 0x1, 0x4004000, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000340)=0x10, 0xa0df9f784c3b68fa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000001c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000180)) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0) 80.267258ms ago: executing program 3 (id=3425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000089}, 0x40858) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x71, 0x425, 0x5070bd28, 0x7e, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x41035}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x0) 0s ago: executing program 5 (id=3426): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3}, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x3, 0x2, 0x40800, r0, 0x7, '\x00', 0x0, r2, 0x3, 0x5, 0x2, 0x4}, 0x50) kernel console output (not intermixed with test programs): ] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.720749][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 277.932400][T12840] netlink: 'syz.3.1870': attribute type 1 has an invalid length. [ 277.932426][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'. [ 277.965203][T12840] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1870'. [ 278.098917][T12849] netlink: 'syz.2.1875': attribute type 4 has an invalid length. [ 278.098943][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1875'. [ 278.100702][T12851] ip_tables: iptables: counters copy to user failed while replacing table [ 278.294881][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1872'. [ 278.368465][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 278.429770][T12854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.697917][T12868] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 278.711477][T12868] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 279.092649][T12883] syzkaller1: entered promiscuous mode [ 279.092674][T12883] syzkaller1: entered allmulticast mode [ 279.215504][T12887] validate_nla: 2 callbacks suppressed [ 279.215525][T12887] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 279.373672][T12887] bond6: entered promiscuous mode [ 279.374200][T12887] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.526277][T12890] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.528398][T12890] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 279.528421][T12890] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 279.569484][T12890] bond6: (slave ip6gre1): making interface the new active one [ 279.569510][T12890] ip6gre1: entered promiscuous mode [ 279.636459][T12890] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 279.781404][T12901] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 279.789383][T12907] ip_tables: iptables: counters copy to user failed while replacing table [ 280.985830][T12928] __nla_validate_parse: 8 callbacks suppressed [ 280.985854][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 281.073639][T12932] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1902'. [ 281.100853][T12932] netlink: 'syz.4.1902': attribute type 1 has an invalid length. [ 281.140338][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 281.389865][T12941] ip_tables: iptables: counters copy to user failed while replacing table [ 281.745704][T12953] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1909'. [ 281.891372][T12953] netlink: 'syz.1.1909': attribute type 2 has an invalid length. [ 282.246479][T12982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1914'. [ 282.335829][T12979] bridge0: port 3(batadv1) entered blocking state [ 282.335982][T12979] bridge0: port 3(batadv1) entered disabled state [ 282.336152][T12979] batadv1: entered allmulticast mode [ 282.364618][T12979] batadv1: entered promiscuous mode [ 282.418167][T12991] Bluetooth: hci0: unsupported parameter 5135 [ 282.418192][T12991] Bluetooth: hci0: unsupported parameter 8192 [ 282.418206][T12991] Bluetooth: hci0: unsupported parameter 5135 [ 282.418220][T12991] Bluetooth: hci0: unsupported parameter 8192 [ 282.418670][T12991] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.490041][T12979] bridge0: port 4(batadv2) entered blocking state [ 282.490241][T12979] bridge0: port 4(batadv2) entered disabled state [ 282.491173][T12979] batadv2: entered allmulticast mode [ 282.512711][T12979] batadv2: entered promiscuous mode [ 282.514294][T12991] netlink: 'syz.1.1917': attribute type 2 has an invalid length. [ 282.581244][T12979] bridge0: port 5(batadv3) entered blocking state [ 282.601087][T12979] bridge0: port 5(batadv3) entered disabled state [ 282.601286][T12979] batadv3: entered allmulticast mode [ 282.658273][T12979] batadv3: entered promiscuous mode [ 282.768452][T12979] bridge0: port 6(batadv4) entered blocking state [ 282.768576][T12979] bridge0: port 6(batadv4) entered disabled state [ 282.768743][T12979] batadv4: entered allmulticast mode [ 282.825005][T12979] batadv4: entered promiscuous mode [ 283.003820][T13003] ip_tables: iptables: counters copy to user failed while replacing table [ 283.108035][T12979] bridge0: port 7(batadv5) entered blocking state [ 283.108166][T12979] bridge0: port 7(batadv5) entered disabled state [ 283.111310][T12979] batadv5: entered allmulticast mode [ 283.127465][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 283.153616][T12979] batadv5: entered promiscuous mode [ 283.304211][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1919'. [ 283.453159][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1918'. [ 283.502455][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 283.551336][T13015] ip_tables: iptables: counters copy to user failed while replacing table [ 283.617241][T13017] netlink: 'syz.3.1919': attribute type 7 has an invalid length. [ 283.617267][T13017] netlink: 'syz.3.1919': attribute type 5 has an invalid length. [ 283.617282][T13017] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1919'. [ 283.897793][T13020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.097983][T11013] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 284.098006][T11013] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 284.133462][ T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 284.133482][ T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 284.133818][ T13] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 284.133832][ T13] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 284.134141][ T13] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 284.134156][ T13] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 284.204570][T13023] geneve2: entered promiscuous mode [ 284.229726][T11002] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 58194 - 0 [ 284.229829][T11002] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 58194 - 0 [ 284.229868][T11002] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 58194 - 0 [ 284.229934][T11002] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 58194 - 0 [ 284.819750][ T2218] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 284.819774][ T2218] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 285.365647][T13069] ip_tables: iptables: counters copy to user failed while replacing table [ 285.628362][T13079] v: left promiscuous mode [ 286.085998][T13098] __nla_validate_parse: 2 callbacks suppressed [ 286.089998][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 286.136906][T13100] ip_tables: iptables: counters copy to user failed while replacing table [ 286.789133][T13131] ip_tables: iptables: counters copy to user failed while replacing table [ 287.226188][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 287.566035][T13145] team_slave_0 (unregistering): left promiscuous mode [ 287.566065][T13145] team_slave_0 (unregistering): left allmulticast mode [ 287.567603][T13145] team0: Port device team_slave_0 removed [ 288.296378][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 288.626331][T13198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 288.864577][T13205] ip_tables: iptables: counters copy to user failed while replacing table [ 288.960123][T13182] syzkaller0: entered promiscuous mode [ 288.960150][T13182] syzkaller0: entered allmulticast mode [ 289.010748][T13199] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1955'. [ 289.439094][T13213] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 289.439131][T13213] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 289.946908][T13226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 292.481305][T13249] ip_tables: iptables: counters copy to user failed while replacing table [ 292.696854][T13251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.802378][T13242] batadv0: entered promiscuous mode [ 292.802554][T13242] macsec1: entered promiscuous mode [ 292.806167][T13242] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 292.863739][T13242] batadv0: left promiscuous mode [ 293.095673][T13258] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.434275][T13286] netlink: 'syz.1.1978': attribute type 11 has an invalid length. [ 293.567064][T13286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.690023][ T2218] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 293.695822][T13303] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 293.765700][T13309] ip_tables: iptables: counters copy to user failed while replacing table [ 293.964406][T13313] syzkaller0: entered promiscuous mode [ 293.964433][T13313] syzkaller0: entered allmulticast mode [ 294.197546][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 294.557481][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1991'. [ 294.615830][T13345] syz.0.1991 (13345) used obsolete PPPIOCDETACH ioctl [ 294.616985][T13345] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 294.712405][T13345] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 294.769470][T13347] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 294.769513][T13347] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 295.061224][T13336] syzkaller1: entered promiscuous mode [ 295.061249][T13336] syzkaller1: entered allmulticast mode [ 295.194218][T13366] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1994'. [ 295.478605][T13371] ip_tables: iptables: counters copy to user failed while replacing table [ 295.758182][T13384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2001'. [ 296.709182][T13422] ip_tables: iptables: counters copy to user failed while replacing table [ 296.777197][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2014'. [ 296.848140][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 296.921273][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2016'. [ 296.921299][T13434] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2016'. [ 297.113757][T13439] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 297.114323][T13440] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 297.229493][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2017'. [ 297.229661][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2017'. [ 297.317751][T13444] openvswitch: netlink: EtherType 548 is less than min 600 [ 297.378293][T13439] bond8: entered promiscuous mode [ 297.378962][T13439] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.427250][T13451] IPVS: set_ctl: invalid protocol: 58 172.20.20.11:5 [ 297.442157][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.547268][T13451] IPVS: ip_vs_edit_dest(): server weight less than zero [ 297.956670][T13471] bridge0: port 3(team0) entered disabled state [ 297.957673][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.958348][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.968127][T13471] bridge0: entered promiscuous mode [ 297.968189][T13471] bridge0: entered allmulticast mode [ 298.202122][T13480] ip_tables: iptables: counters copy to user failed while replacing table [ 298.363492][T13484] xt_l2tp: v2 doesn't support IP mode [ 298.425663][T13486] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 299.216680][T13453] 8021q: VLANs not supported on lo [ 299.278666][T13503] batman_adv: batadv0: Adding interface: syzkaller0 [ 299.278687][T13503] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.278722][T13503] batman_adv: batadv0: Interface activated: syzkaller0 [ 299.331022][T13500] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 299.437855][T13500] batman_adv: batadv0: Removing interface: syzkaller0 [ 299.548271][T13519] __nla_validate_parse: 10 callbacks suppressed [ 299.548293][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 299.550695][T13515] netlink: 'syz.3.2037': attribute type 4 has an invalid length. [ 299.551135][T13515] netlink: 'syz.3.2037': attribute type 4 has an invalid length. [ 299.780474][T13518] veth1_macvtap: left promiscuous mode [ 299.780509][T13518] macsec0: entered promiscuous mode [ 299.927740][T13527] ip_tables: iptables: counters copy to user failed while replacing table [ 300.545074][T13561] tipc: Enabling of bearer rejected, failed to enable media [ 300.571548][T13560] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 300.641123][T13562] netlink: 'syz.3.2048': attribute type 1 has an invalid length. [ 300.797722][T13562] bond9: option mode: invalid value (9) [ 300.800738][T13562] bond9 (unregistering): Released all slaves [ 300.948097][T13563] veth7: entered allmulticast mode [ 301.127286][T13569] batman_adv: batadv0: Interface deactivated: dummy0 [ 301.388636][T13582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2056'. [ 301.630690][T13592] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 301.913202][T13599] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.180229][T13599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2059'. [ 302.469531][T13615] veth0: entered promiscuous mode [ 302.470048][T13615] veth0: left promiscuous mode [ 302.520327][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 302.520358][T13615] block nbd2: Unsupported socket: should be TCP or UNIX. [ 302.603930][T13628] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2069'. [ 302.611390][T13624] xt_bpf: check failed: parse error [ 303.545478][T13667] ip_tables: iptables: counters copy to user failed while replacing table [ 303.881212][T13676] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2079'. [ 303.896289][T13677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2079'. [ 305.011764][T13716] netlink: 'syz.0.2091': attribute type 1 has an invalid length. [ 305.011790][T13716] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2091'. [ 305.042251][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.075790][T13718] netlink: 'syz.4.2092': attribute type 1 has an invalid length. [ 305.214361][T13722] IPVS: rr: UDP [::1]:8080 - no destination available [ 305.266824][T13718] bond8: (slave geneve3): making interface the new active one [ 305.280871][T13718] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 305.285059][ T7510] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 305.285448][ T7510] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 305.285545][ T7510] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 305.285639][ T7510] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 305.558388][T13731] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2096'. [ 305.885392][T13741] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2100'. [ 305.919381][T13746] netlink: 'syz.2.2101': attribute type 1 has an invalid length. [ 305.919406][T13746] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2101'. [ 305.919648][T13741] syzkaller1: entered allmulticast mode [ 306.059999][T13741] netlink: 'syz.0.2100': attribute type 83 has an invalid length. [ 306.855000][T13778] netlink: 'syz.3.2111': attribute type 15 has an invalid length. [ 307.450861][T13800] netlink: 'syz.4.2114': attribute type 1 has an invalid length. [ 307.578466][T13805] ip6t_srh: unknown srh match flags 4000 [ 307.637654][T13806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.781968][T13814] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 307.930964][T13814] bond9: entered promiscuous mode [ 307.931154][T13814] bond9: entered allmulticast mode [ 307.949813][T13814] 8021q: adding VLAN 0 to HW filter on device bond9 [ 307.992970][T13819] erspan2: entered allmulticast mode [ 308.035968][T13819] bond9: (slave erspan2): making interface the new active one [ 308.035996][T13819] erspan2: entered promiscuous mode [ 308.079562][T13830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2120'. [ 308.079597][T13830] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 308.139591][T13819] bond9: (slave erspan2): Enslaving as an active interface with an up link [ 308.149322][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 308.175821][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 308.789403][T13852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2125'. [ 309.514402][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'. [ 309.514442][T13872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2131'. [ 309.604912][T13872] sit0: entered promiscuous mode [ 309.999653][T13895] ip_tables: iptables: counters copy to user failed while replacing table [ 310.344997][T13902] __nla_validate_parse: 2 callbacks suppressed [ 310.345020][T13902] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2140'. [ 310.635744][T13914] netlink: 'syz.3.2143': attribute type 1 has an invalid length. [ 310.875927][T13922] netlink: 'syz.4.2146': attribute type 1 has an invalid length. [ 311.845056][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 311.902232][T13962] syzkaller1: entered promiscuous mode [ 311.902259][T13962] syzkaller1: entered allmulticast mode [ 311.984709][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 312.110688][T13973] netlink: 'syz.3.2155': attribute type 12 has an invalid length. [ 312.314818][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 312.430812][T13987] gre2: entered promiscuous mode [ 312.430840][T13987] gre2: entered allmulticast mode [ 312.850564][T14002] netlink: 'syz.1.2167': attribute type 7 has an invalid length. [ 312.902903][T14007] netlink: 'syz.0.2169': attribute type 3 has an invalid length. [ 313.065286][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 313.198923][T14014] netlink: 'syz.3.2172': attribute type 21 has an invalid length. [ 313.198951][T14014] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2172'. [ 313.199010][T14014] netlink: 'syz.3.2172': attribute type 5 has an invalid length. [ 313.199025][T14014] netlink: 'syz.3.2172': attribute type 6 has an invalid length. [ 313.199039][T14014] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2172'. [ 313.216187][T14016] netlink: 'syz.3.2172': attribute type 21 has an invalid length. [ 313.216254][T14016] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2172'. [ 313.216406][T14016] netlink: 'syz.3.2172': attribute type 5 has an invalid length. [ 313.216447][T14016] netlink: 'syz.3.2172': attribute type 6 has an invalid length. [ 313.216482][T14016] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2172'. [ 313.275548][T14015] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2173'. [ 313.306826][T14015] gretap0: entered promiscuous mode [ 313.390005][T14021] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 313.483512][T14021] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.540774][T14023] bond10: (slave geneve4): making interface the new active one [ 313.569447][T14023] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 313.570232][T14015] 0{X: renamed from gretap0 [ 313.599070][T14015] 0{X: left promiscuous mode [ 313.599097][T14015] 0{X: entered allmulticast mode [ 313.633072][T14015] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 313.817581][T14029] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.623423][T14063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 315.418539][T14094] __nla_validate_parse: 5 callbacks suppressed [ 315.418563][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2190'. [ 315.418583][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2190'. [ 316.490723][T14133] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 316.704931][T14140] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.144497][T14149] openvswitch: netlink: IP tunnel dst address not specified [ 317.205206][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.205277][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.396338][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 317.563389][T14141] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2199'. [ 317.662646][T14158] Bluetooth: hci0: unsupported parameter 5135 [ 317.662677][T14158] Bluetooth: hci0: unsupported parameter 8192 [ 317.662690][T14158] Bluetooth: hci0: unsupported parameter 5135 [ 317.662703][T14158] Bluetooth: hci0: unsupported parameter 8192 [ 318.185693][T14173] validate_nla: 32 callbacks suppressed [ 318.185715][T14173] netlink: 'syz.3.2210': attribute type 1 has an invalid length. [ 318.185731][T14173] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2210'. [ 318.364462][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'. [ 318.677896][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 318.764536][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 318.830307][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 319.033274][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 319.038901][T14200] xt_hashlimit: size too large, truncated to 1048576 [ 319.371524][T14219] : renamed from vlan1 (while UP) [ 320.146564][T14252] macsec1: entered promiscuous mode [ 320.146589][T14252] bridge0: entered promiscuous mode [ 320.149890][T14252] macsec1: entered allmulticast mode [ 320.151143][T14252] bridge0: entered allmulticast mode [ 320.175626][T14252] bridge0: port 1(macsec1) entered blocking state [ 320.178948][T14252] bridge0: port 1(macsec1) entered disabled state [ 320.258478][T14252] bridge0: left allmulticast mode [ 320.356185][T10853] bridge0: left promiscuous mode [ 321.042226][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.046558][T14294] __nla_validate_parse: 5 callbacks suppressed [ 321.046581][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 321.046611][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2233'. [ 321.145866][T14298] openvswitch: netlink: Actions may not be safe on all matching packets [ 321.286467][T14311] netlink: 'syz.3.2238': attribute type 29 has an invalid length. [ 321.705678][T14320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2240'. [ 321.705716][T14320] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 321.856009][T14325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2242'. [ 321.967844][T14305] netlink: 'syz.2.2237': attribute type 21 has an invalid length. [ 321.967870][T14305] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2237'. [ 321.967955][T14305] netlink: 'syz.2.2237': attribute type 5 has an invalid length. [ 321.967969][T14305] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2237'. [ 322.377387][T14344] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2248'. [ 322.709356][T14355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2251'. [ 323.665641][T14386] veth1_to_bond: entered promiscuous mode [ 324.311060][T14382] veth1_to_bond: left promiscuous mode [ 324.393891][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2261'. [ 324.395964][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2261'. [ 324.876957][T14417] netlink: 'syz.1.2267': attribute type 11 has an invalid length. [ 325.291680][T14430] 8021q: adding VLAN 0 to HW filter on device bond11 [ 325.345842][T14433] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.892755][T14454] bond6: option lp_interval: invalid value (0) [ 325.892783][T14454] bond6: option lp_interval: allowed values 1 - 2147483647 [ 325.894688][T14454] bond6 (unregistering): Released all slaves [ 326.474521][T14464] syzkaller0: entered promiscuous mode [ 326.474551][T14464] syzkaller0: entered allmulticast mode [ 326.818608][T14483] __nla_validate_parse: 9 callbacks suppressed [ 326.818632][T14483] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2285'. [ 327.506689][T14502] xt_hashlimit: size too large, truncated to 1048576 [ 327.610755][T14507] xt_hashlimit: size too large, truncated to 1048576 [ 330.365965][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2285'. [ 330.388262][T14523] IPv6: sit2: Disabled Multicast RS [ 330.709115][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 330.949115][T14554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 330.992131][T14558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 331.108023][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 331.712558][T14568] netlink: 'syz.2.2306': attribute type 12 has an invalid length. [ 331.731635][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 331.758582][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 331.758776][T14576] netlink: 'syz.2.2306': attribute type 12 has an invalid length. [ 331.856063][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 331.987209][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'. [ 332.037445][T14582] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2307'. [ 332.188590][T14581] hsr0: entered allmulticast mode [ 332.188618][T14581] hsr_slave_0: entered allmulticast mode [ 332.246463][T14580] hsr_slave_0: left promiscuous mode [ 332.277957][T14580] hsr0 (unregistering): left allmulticast mode [ 332.338648][T14595] netlink: 680 bytes leftover after parsing attributes in process `syz.4.2311'. [ 332.596048][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2313'. [ 332.596086][T14602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2313'. [ 333.060465][T14618] netlink: 'syz.2.2314': attribute type 11 has an invalid length. [ 333.563923][T14634] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2324'. [ 333.784341][T14640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.805687][T14640] Cannot find add_set index 2 as target [ 334.561090][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 334.637464][T14664] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2332'. [ 335.052192][T14677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2336'. [ 336.065551][T14720] ip_tables: iptables: counters copy to user failed while replacing table [ 336.298267][T14722] tipc: Enabled bearer , priority 0 [ 336.718563][T14740] xt_check_table_hooks: 55 callbacks suppressed [ 336.718587][T14740] x_tables: duplicate underflow at hook 1 [ 336.778100][T14740] ip6t_hbh: Not strict - not implemented [ 338.362533][T14785] syzkaller0: entered promiscuous mode [ 338.362559][T14785] syzkaller0: entered allmulticast mode [ 338.389728][T14789] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 338.487796][T14789] bond7: entered promiscuous mode [ 338.489841][T14789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 338.618429][T14789] bond7: (slave bridge3): making interface the new active one [ 338.618471][T14789] bridge3: entered promiscuous mode [ 338.638101][T14789] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 338.709315][T14796] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 338.865515][T14804] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 339.096514][T14806] netlink: 'syz.2.2365': attribute type 4 has an invalid length. [ 339.096539][T14806] __nla_validate_parse: 3 callbacks suppressed [ 339.096552][T14806] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2365'. [ 339.534702][T14820] netlink: 'syz.0.2369': attribute type 2 has an invalid length. [ 339.534726][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 339.539611][T14824] ip_tables: iptables: counters copy to user failed while replacing table [ 339.751001][T14822] netlink: 'syz.4.2370': attribute type 9 has an invalid length. [ 339.751028][T14822] netlink: 'syz.4.2370': attribute type 4 has an invalid length. [ 339.902412][T14836] netlink: zone id is out of range [ 339.902434][T14836] netlink: del zone limit has 4 unknown bytes [ 340.490906][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2380'. [ 340.675019][T14853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2381'. [ 340.677653][T14861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2384'. [ 340.952583][T14865] netlink: 'syz.2.2386': attribute type 39 has an invalid length. [ 340.975247][T14858] bond8: entered allmulticast mode [ 340.979649][T14858] 8021q: adding VLAN 0 to HW filter on device bond8 [ 341.022231][T14867] netlink: 'syz.2.2386': attribute type 39 has an invalid length. [ 341.054742][T14874] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 341.132240][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2388'. [ 341.132267][T14876] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2388'. [ 341.267360][T14866] can: request_module (can-proto-0) failed. [ 341.419145][T14876] veth7: entered promiscuous mode [ 341.588003][T14896] sctp: [Deprecated]: syz.0.2392 (pid 14896) Use of int in maxseg socket option. [ 341.588003][T14896] Use struct sctp_assoc_value instead [ 341.728515][T14903] netlink: 'syz.3.2393': attribute type 34 has an invalid length. [ 341.728540][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'. [ 342.521634][T14927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2397'. [ 342.584994][T14921] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.286727][T14958] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2406'. [ 343.431816][T14965] xt_hashlimit: size too large, truncated to 1048576 [ 343.504816][T14967] ip_tables: iptables: counters copy to user failed while replacing table [ 343.670369][T14967] bond10: option all_slaves_active: invalid value (179) [ 343.689477][T14967] bond10 (unregistering): Released all slaves [ 344.056000][T14986] ip_tables: iptables: counters copy to user failed while replacing table [ 344.276484][T14991] x_tables: duplicate entry at hook 1 [ 344.529259][T15003] ip_tables: iptables: counters copy to user failed while replacing table [ 344.631449][T15006] __nla_validate_parse: 2 callbacks suppressed [ 344.631558][T15006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2422'. [ 344.678998][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 344.700596][T15006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2422'. [ 344.834843][T15018] netlink: 'syz.2.2424': attribute type 64 has an invalid length. [ 344.834895][T15018] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2424'. [ 345.365282][T15037] team0: left allmulticast mode [ 345.365310][T15037] team_slave_1: left allmulticast mode [ 345.399964][T15037] team0: left promiscuous mode [ 345.399990][T15037] team_slave_1: left promiscuous mode [ 345.400723][T15037] bridge0: port 3(team0) entered disabled state [ 345.491163][T15037] bridge_slave_0: left allmulticast mode [ 345.491202][T15037] bridge_slave_0: left promiscuous mode [ 345.491485][T15037] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.629678][T15037] bridge_slave_1: left promiscuous mode [ 345.631350][T15037] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.782606][T15037] .`: (slave bond_slave_1): Releasing backup interface [ 345.786380][T15037] bond_slave_1: left allmulticast mode [ 345.895585][T15037] team0: Port device team_slave_1 removed [ 345.900167][T15037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.900192][T15037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.941317][T15037] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.376655][T15063] ip_tables: iptables: counters copy to user failed while replacing table [ 346.598961][T15071] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2436'. [ 346.626943][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2432'. [ 347.158538][T15096] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2442'. [ 347.181591][T15096] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2442'. [ 347.181619][T15096] nbd: illegal input index -8454144 [ 347.835904][T15114] ip_tables: iptables: counters copy to user failed while replacing table [ 348.116177][T15116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2448'. [ 348.710494][T15143] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 349.416710][T15172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2463'. [ 349.420686][T15171] batman_adv: batadv0: Adding interface: veth0 [ 349.420704][T15171] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.469840][T15171] batman_adv: batadv0: Interface activated: veth0 [ 349.689973][T15182] __nla_validate_parse: 4 callbacks suppressed [ 349.689997][T15182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2468'. [ 350.126076][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'. [ 350.471005][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 350.491099][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 350.747994][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 350.748796][T15225] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2480'. [ 350.770312][T15223] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2481'. [ 350.900116][T15231] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.006625][T15240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 351.423146][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 351.423254][T15251] netlink: 'syz.2.2488': attribute type 10 has an invalid length. [ 351.423274][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2488'. [ 351.465536][T15251] Cannot find set identified by id 65534 to match [ 351.648791][T15260] bond0: left promiscuous mode [ 351.835970][T15260] team0: Port device xfrm0 removed [ 351.858406][T15260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 351.880700][ T988] wg0 speed is unknown, defaulting to 1000 [ 352.285483][T15276] ipvlan0: entered promiscuous mode [ 352.285808][T15276] ipvlan0: entered allmulticast mode [ 352.285825][T15276] veth0_vlan: entered allmulticast mode [ 352.823694][T15300] ip_tables: iptables: counters copy to user failed while replacing table [ 353.190483][T15303] syzkaller0: entered promiscuous mode [ 353.190508][T15303] syzkaller0: entered allmulticast mode [ 353.321416][T15317] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 353.682501][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 353.889005][T15335] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 354.889285][T15371] __nla_validate_parse: 4 callbacks suppressed [ 354.889309][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 355.728710][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2532'. [ 355.879273][T15420] xt_l2tp: missing protocol rule (udp|l2tpip) [ 355.881266][T15421] xt_l2tp: missing protocol rule (udp|l2tpip) [ 355.926078][T15405] ip_tables: iptables: counters copy to user failed while replacing table [ 356.052908][T15427] sock: sock_set_timeout: `syz.3.2540' (pid 15427) tries to set negative timeout [ 356.526472][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 356.655482][T15451] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 357.080931][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 357.080991][T15466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2546'. [ 357.081200][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 357.081229][T15466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2546'. [ 357.081428][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 357.081456][T15466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2546'. [ 357.147334][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 357.382921][T15470] bond9: option resend_igmp: invalid value (32767) [ 357.382952][T15470] bond9: option resend_igmp: allowed values 0 - 255 [ 357.520030][T15470] bond9 (unregistering): Released all slaves [ 357.647108][T15468] tunl0: entered promiscuous mode [ 357.647135][T15468] tunl0: entered allmulticast mode [ 358.070428][T15498] macvlan0: entered promiscuous mode [ 359.613164][T15553] netlink: 'syz.0.2563': attribute type 11 has an invalid length. [ 359.613190][T15553] netlink: 'syz.0.2563': attribute type 4 has an invalid length. [ 359.855681][T15564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.508585][T15589] __nla_validate_parse: 34 callbacks suppressed [ 360.508608][T15589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2574'. [ 360.511173][T15589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2574'. [ 360.656349][T15589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2574'. [ 360.725026][T15564] veth0_to_bond: entered allmulticast mode [ 360.838918][T15599] tipc: Started in network mode [ 360.838954][T15599] tipc: Node identity ac14142f, cluster identity 4711 [ 360.880192][T15599] tipc: Enabled bearer , priority 10 [ 360.889359][T15599] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 361.992073][ T988] tipc: Node number set to 2886997039 [ 362.440702][T15649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2587'. [ 362.744823][T15654] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2588'. [ 362.828667][T15656] dvmrp1: left allmulticast mode [ 362.828788][T15656] dvmrp8: left allmulticast mode [ 362.891826][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 363.165936][T15667] syzkaller1: entered promiscuous mode [ 363.165963][T15667] syzkaller1: entered allmulticast mode [ 363.170251][T15667] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 363.335003][T15672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2595'. [ 363.701339][T15685] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.701633][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.707456][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.727106][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.739717][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.740779][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.741756][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.745681][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.759973][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.794345][T15685] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 363.832349][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 363.907729][T15714] syzkaller1: entered promiscuous mode [ 363.907780][T15714] syzkaller1: entered allmulticast mode [ 364.334448][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'. [ 364.456493][T15728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2601'. [ 365.026559][T15744] validate_nla: 24 callbacks suppressed [ 365.026582][T15744] netlink: 'syz.0.2606': attribute type 49 has an invalid length. [ 365.027010][T15745] netlink: 'syz.0.2606': attribute type 49 has an invalid length. [ 365.183827][T15744] ip6gretap0: entered promiscuous mode [ 365.183881][T15744] ip6gretap0: entered allmulticast mode [ 365.796152][T15775] __nla_validate_parse: 6 callbacks suppressed [ 365.796174][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2611'. [ 366.031279][T15784] netlink: 'syz.2.2615': attribute type 17 has an invalid length. [ 366.031304][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2615'. [ 366.031334][T15784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2615'. [ 366.771137][T15814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2621'. [ 366.805922][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 366.881342][T15827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2623'. [ 367.268916][T15821] bond11: entered promiscuous mode [ 367.268943][T15821] bond11: entered allmulticast mode [ 367.899384][T15850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2626'. [ 368.504936][T15880] ip_tables: iptables: counters copy to user failed while replacing table [ 368.543001][T15880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2634'. [ 368.684829][T15888] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 368.928533][T15897] netlink: 'syz.3.2642': attribute type 1 has an invalid length. [ 369.139435][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 369.139462][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2640'. [ 369.227967][T15898] bond12: (slave gretap1): making interface the new active one [ 369.260093][T15898] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 369.432245][T15912] netlink: 'syz.2.2644': attribute type 83 has an invalid length. [ 369.721503][T15923] netlink: 'syz.3.2647': attribute type 4 has an invalid length. [ 369.776842][T15924] netlink: 'syz.3.2647': attribute type 4 has an invalid length. [ 370.104128][T15934] IPv6: NLM_F_REPLACE set, but no existing node found! [ 370.107776][T15921] netlink: 'syz.3.2647': attribute type 29 has an invalid length. [ 370.307735][T15941] ip_tables: iptables: counters copy to user failed while replacing table [ 370.627381][T15952] netlink: 'syz.0.2652': attribute type 13 has an invalid length. [ 370.627646][T15952] netlink: 'syz.0.2652': attribute type 13 has an invalid length. [ 371.043284][T15967] __nla_validate_parse: 3 callbacks suppressed [ 371.043306][T15967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2658'. [ 371.169152][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2660'. [ 372.007324][T15988] ip_tables: iptables: counters copy to user failed while replacing table [ 372.033216][T15988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2662'. [ 372.373562][T15975] infiniband syz1: set active [ 372.373588][T15975] infiniband syz1: added team_slave_0 [ 372.516830][T15975] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 372.516901][T15975] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 372.516946][T15975] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 372.699481][T16001] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 372.729161][T15975] RDS/IB: syz1: added [ 372.743109][T16001] bond13 (unregistering): Released all slaves [ 372.754010][T15975] smc: adding ib device syz1 with port count 1 [ 372.754314][T15975] smc: ib device syz1 port 1 has no pnetid [ 373.984496][T16035] netlink: 'syz.3.2673': attribute type 21 has an invalid length. [ 374.040190][T16035] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2673'. [ 374.094970][T16037] ip_tables: iptables: counters copy to user failed while replacing table [ 374.096306][T16037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2675'. [ 374.375447][T16042] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 376.121722][T16078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2686'. [ 376.136402][T16078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2686'. [ 376.451042][T16083] ip_tables: iptables: counters copy to user failed while replacing table [ 376.459281][T16083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2688'. [ 376.951763][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.960779][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.961695][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.981269][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.990152][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.705756][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 377.705826][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 377.886028][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2699'. [ 377.940197][T16123] netlink: 'syz.3.2699': attribute type 10 has an invalid length. [ 379.042569][ T5625] Bluetooth: hci5: command tx timeout [ 379.124762][T16095] wg0 speed is unknown, defaulting to 1000 [ 379.319237][T16165] x_tables: duplicate underflow at hook 1 [ 379.541457][T16167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2708'. [ 380.628878][T16191] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.2712'. [ 381.124715][ T5625] Bluetooth: hci5: command tx timeout [ 381.302237][T16201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.414574][T16217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.613374][T16207] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2717'. [ 381.910346][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 381.967559][T16229] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2718'. [ 381.997746][T16207] batman_adv: batadv0: Removing interface: dummy0 [ 382.901513][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 382.971364][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 383.119465][T16095] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.119966][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.136438][T16095] bridge_slave_0: entered allmulticast mode [ 383.152978][T16095] bridge_slave_0: entered promiscuous mode [ 383.174571][T16095] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.177026][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.177366][T16095] bridge_slave_1: entered allmulticast mode [ 383.202870][ T5625] Bluetooth: hci5: command tx timeout [ 383.219352][T16095] bridge_slave_1: entered promiscuous mode [ 383.500925][T16095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.525969][T16095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.666474][T16291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.666494][T16291] IPv6: NLM_F_CREATE should be set when creating new route [ 383.681224][T16291] netlink: 'syz.1.2726': attribute type 83 has an invalid length. [ 383.771463][T16095] team0: Port device team_slave_0 added [ 383.803430][T16095] team0: Port device team_slave_1 added [ 383.944652][T16304] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 384.009918][T16095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.009938][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.009975][T16095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.068739][T16095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.068760][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.068790][T16095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.414684][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2731'. [ 384.414710][T16312] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2731'. [ 384.524879][T16095] hsr_slave_0: entered promiscuous mode [ 384.538261][T16095] hsr_slave_1: entered promiscuous mode [ 384.952462][ T7509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.952487][ T7509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.139098][T16333] netlink: 'syz.3.2734': attribute type 1 has an invalid length. [ 385.282654][ T5625] Bluetooth: hci5: command tx timeout [ 385.366014][T16335] bond13: (slave veth0_to_bond): making interface the new active one [ 385.390461][T16335] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 385.455712][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'. [ 385.510133][T16337] sctp: [Deprecated]: syz.0.2735 (pid 16337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.510133][T16337] Use struct sctp_sack_info instead [ 385.564289][T16335] 8021q: adding VLAN 0 to HW filter on device bond13 [ 385.607283][T16339] can: request_module (can-proto-3) failed. [ 385.950297][T16350] ip_tables: iptables: counters copy to user failed while replacing table [ 386.115847][T16357] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 386.131402][T16354] netlink: 'syz.0.2737': attribute type 9 has an invalid length. [ 386.271475][T16365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2740'. [ 386.303891][T16354] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2737'. [ 386.367209][T16359] netlink: NAT attribute has 8 unknown bytes [ 386.367248][T16359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.371484][T16357] ipt_REJECT: TCP_RESET invalid for non-tcp [ 386.653320][T16372] netlink: 'syz.3.2741': attribute type 1 has an invalid length. [ 386.871285][T16372] 8021q: adding VLAN 0 to HW filter on device bond14 [ 387.018309][T16095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.039037][T16383] ip_tables: iptables: counters copy to user failed while replacing table [ 387.049302][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.061395][T16387] __nla_validate_parse: 1 callbacks suppressed [ 387.061415][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2743'. [ 387.080518][T16095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.170118][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.208862][T16095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 387.265412][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.281148][T16095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 387.331818][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.409777][T16386] IPVS: Scheduler module ip_vs_sip not found [ 387.600209][T16403] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2748'. [ 387.669586][T16403] 0{X: entered promiscuous mode [ 387.669614][T16403] 0{X: left allmulticast mode [ 387.742700][T16407] ip_tables: iptables: counters copy to user failed while replacing table [ 387.790897][T16408] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2750'. [ 388.009599][T16095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.096408][T16095] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.169594][T11003] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.169711][T11003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.240075][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.240190][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.334044][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2754'. [ 388.366530][T16427] netlink: 'syz.3.2755': attribute type 83 has an invalid length. [ 388.463462][T16433] syzkaller0: left promiscuous mode [ 388.463489][T16433] syzkaller0: left allmulticast mode [ 388.995823][T16440] 8021q: adding VLAN 0 to HW filter on device bond15 [ 389.001744][T16444] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2759'. [ 389.576230][T16480] ip6gre3: entered allmulticast mode [ 389.578993][ T7509] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 389.913104][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'. [ 389.913140][T16489] netlink: 'syz.3.2769': attribute type 5 has an invalid length. [ 389.913156][T16489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2769'. [ 389.974582][T16489] geneve3: entered promiscuous mode [ 389.974796][T16489] geneve3: entered allmulticast mode [ 390.037198][T11003] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 390.037265][T11003] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 390.037303][T11003] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 390.037350][T11003] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 390.269865][T16095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.799040][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2774'. [ 391.199752][T16095] veth0_vlan: entered promiscuous mode [ 391.235542][T16095] veth1_vlan: entered promiscuous mode [ 391.331327][T16095] veth0_macvtap: entered promiscuous mode [ 391.345941][T16095] veth1_macvtap: entered promiscuous mode [ 391.393253][T16095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.550164][T16095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.642898][ T92] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.644373][ T239] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.644443][ T239] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.644483][ T239] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.783769][T16540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2780'. [ 391.868280][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 392.226162][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.226187][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.445644][ T7509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.445668][ T7509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.569544][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 392.860347][T16571] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 392.869678][T16571] 0: reclassify loop, rule prio 0, protocol 800 [ 392.877161][T16571] x_tables: duplicate underflow at hook 1 [ 393.202658][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 393.421457][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 393.460313][T16589] netlink: 'syz.3.2793': attribute type 10 has an invalid length. [ 393.707365][T16594] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 393.707392][T16594] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 394.407524][T16622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2804'. [ 394.844600][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 395.170107][T16640] netlink: 'syz.0.2812': attribute type 10 has an invalid length. [ 395.170136][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2812'. [ 396.234201][T16671] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2822'. [ 396.358992][T16675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 396.360687][T16675] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 396.376683][T16675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 396.387396][T16675] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 396.388445][T16675] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 396.936264][T16693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2827'. [ 397.002601][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2827'. [ 397.023490][ T7510] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.150664][T16693] veth3: entered allmulticast mode [ 397.244585][T16698] veth5: entered allmulticast mode [ 397.252558][ T92] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.254198][ T7510] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.254296][ T7510] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.624732][T16673] wg0 speed is unknown, defaulting to 1000 [ 398.482348][T16675] Bluetooth: hci6: command tx timeout [ 398.559919][T16673] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.560110][T16673] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.560557][T16673] bridge_slave_0: entered allmulticast mode [ 398.578207][T16673] bridge_slave_0: entered promiscuous mode [ 398.591382][T16673] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.591665][T16673] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.591826][T16673] bridge_slave_1: entered allmulticast mode [ 398.604503][T16673] bridge_slave_1: entered promiscuous mode [ 398.675278][T16673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.679281][T16673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.737431][T16673] team0: Port device team_slave_0 added [ 398.741409][T16673] team0: Port device team_slave_1 added [ 398.787560][T16673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.787582][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.787610][T16673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.790273][T16673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.790290][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.790319][T16673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.921201][T16673] hsr_slave_0: entered promiscuous mode [ 398.927913][T16673] hsr_slave_1: entered promiscuous mode [ 398.928820][T16673] debugfs: 'hsr0' already exists in 'hsr' [ 398.928870][T16673] Cannot create hsr debugfs directory [ 399.248154][T16673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.248196][T16673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.248227][T16673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 399.248257][T16673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 399.396342][T16673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.396384][T16673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.396414][T16673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 399.396444][T16673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 399.531345][T16673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.531388][T16673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.531428][T16673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 399.531458][T16673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 399.639893][T16673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.639936][T16673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.639967][T16673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 399.639997][T16673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 399.908030][T16673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 399.923238][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.926569][T16673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 399.931381][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.957130][T16673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 399.961318][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.980487][T16673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 399.996134][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.144639][T16673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.207583][T16673] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.237581][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.237711][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.277654][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.277772][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.562601][T16675] Bluetooth: hci6: command tx timeout [ 401.030137][T16673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.042693][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 401.184868][T16673] veth0_vlan: entered promiscuous mode [ 401.219596][T16673] veth1_vlan: entered promiscuous mode [ 401.309795][T16673] veth0_macvtap: entered promiscuous mode [ 401.333056][T16673] veth1_macvtap: entered promiscuous mode [ 401.370631][T16673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.391794][T16673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.472455][ T7510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.526757][ T7510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.530469][ T7510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.646258][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.646285][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.672948][ T1282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.775883][ T7510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.775911][ T7510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.642962][T16675] Bluetooth: hci6: command tx timeout [ 404.723870][T16675] Bluetooth: hci6: command tx timeout [ 416.403328][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 419.602225][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.585967][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2836'. [ 424.586134][T16756] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 424.621168][T16756] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2836'. [ 424.941636][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.956550][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.957767][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.086612][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.091365][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.296359][T16781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.317414][T16781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2842'. [ 425.609924][T16788] netlink: 'syz.5.2844': attribute type 2 has an invalid length. [ 425.711107][T16790] netlink: 'syz.0.2845': attribute type 6 has an invalid length. [ 426.131055][T16799] gre1: entered promiscuous mode [ 426.532268][T16806] syzkaller0: entered promiscuous mode [ 426.532297][T16806] syzkaller0: entered allmulticast mode [ 426.556763][T16814] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2851'. [ 426.850743][T16821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2853'. [ 426.850785][T16821] netlink: 'syz.2.2853': attribute type 7 has an invalid length. [ 426.850800][T16821] netlink: 'syz.2.2853': attribute type 8 has an invalid length. [ 426.850814][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 426.921651][T16822] netlink: 'syz.2.2853': attribute type 1 has an invalid length. [ 427.208495][ T5625] Bluetooth: hci2: command tx timeout [ 427.326859][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2854'. [ 427.326990][T16827] netlink: 'syz.0.2854': attribute type 1 has an invalid length. [ 427.327007][T16827] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2854'. [ 429.293027][ T5625] Bluetooth: hci2: command tx timeout [ 430.500918][T16819] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2852'. [ 430.500950][T16819] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2852'. [ 430.579666][T16822] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 430.835146][T16770] wg0 speed is unknown, defaulting to 1000 [ 431.367271][ T5625] Bluetooth: hci2: command tx timeout [ 431.694228][T16847] syzkaller1: entered promiscuous mode [ 431.694256][T16847] syzkaller1: entered allmulticast mode [ 431.721763][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2861'. [ 432.319666][T16865] ip_tables: iptables: counters copy to user failed while replacing table [ 432.850444][T16870] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2865'. [ 433.007375][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 433.180044][T16887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 433.263723][T16880] team0: Port device team_slave_0 removed [ 433.443293][ T5625] Bluetooth: hci2: command tx timeout [ 433.836334][ T92] IPVS: starting estimator thread 0... [ 433.861298][T16911] IPVS: fo: FWM 3 0x00000003 - no destination available [ 433.881475][T16912] IPVS: fo: FWM 3 0x00000003 - no destination available [ 433.945025][T16913] IPVS: using max 24 ests per chain, 57600 per kthread [ 434.448983][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 434.558941][T16770] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.560025][T16770] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.560218][T16770] bridge_slave_0: entered allmulticast mode [ 434.598767][T16770] bridge_slave_0: entered promiscuous mode [ 434.660781][T16770] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.661076][T16770] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.661276][T16770] bridge_slave_1: entered allmulticast mode [ 434.685433][T16770] bridge_slave_1: entered promiscuous mode [ 434.825875][T16770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.847805][T16770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.077322][T16770] team0: Port device team_slave_0 added [ 435.078214][T16926] syzkaller1: entered promiscuous mode [ 435.078425][T16926] syzkaller1: entered allmulticast mode [ 435.115397][T16770] team0: Port device team_slave_1 added [ 435.240807][T16952] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2879'. [ 435.258243][T16952] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2879'. [ 435.266055][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 435.674275][T16770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.674298][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.674328][T16770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.756747][T16770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.756767][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.756798][T16770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.958785][T16966] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 435.958785][T16966] Please contact the netfilter-devel mailing list or update your nftables rules. [ 436.268851][T16971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2885'. [ 436.269984][T16972] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 436.535373][T16770] hsr_slave_0: entered promiscuous mode [ 436.537512][T16770] hsr_slave_1: entered promiscuous mode [ 436.539589][T16961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2882'. [ 436.539695][T16770] debugfs: 'hsr0' already exists in 'hsr' [ 436.539716][T16770] Cannot create hsr debugfs directory [ 436.547898][T16974] 8021q: adding VLAN 0 to HW filter on device bond9 [ 437.084454][T16988] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 437.428488][T16994] sctp: [Deprecated]: syz.2.2891 (pid 16994) Use of int in maxseg socket option. [ 437.428488][T16994] Use struct sctp_assoc_value instead [ 437.473370][T16992] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20003 [ 437.895659][T16770] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 437.947230][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.952671][T16770] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 437.972892][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.974186][T16770] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.011498][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.030580][T16770] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 438.049765][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.118981][T17003] syzkaller1: entered promiscuous mode [ 438.119310][T17003] syzkaller1: entered allmulticast mode [ 438.729873][T17023] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2894'. [ 439.199731][T16770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.330757][T16770] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.407024][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.407142][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.502367][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.502485][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.672397][T17062] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2902'. [ 439.719766][T17050] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2902'. [ 439.757986][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 439.758027][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 440.375160][T17081] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 441.043029][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.044080][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.045060][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.109159][T17100] wireguard: wg2: Could not create IPv4 socket [ 441.272544][T17101] __nla_validate_parse: 52 callbacks suppressed [ 441.272568][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.276663][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.277537][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.278520][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.279571][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.357003][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.358026][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.359025][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.360026][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 441.393534][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 442.466558][T16770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.892663][T17136] nbd: illegal input index -8454144 [ 443.660500][T17151] netlink: Failed to add %pB helper -22 [ 443.660563][T17151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.706665][T16770] veth0_vlan: entered promiscuous mode [ 443.831623][T16770] veth1_vlan: entered promiscuous mode [ 443.896517][T16770] veth0_macvtap: entered promiscuous mode [ 443.912842][T16770] veth1_macvtap: entered promiscuous mode [ 443.943211][T16770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.950136][T16770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.282089][T11012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.282144][T11012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.367089][ T7510] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.372214][ T92] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.426586][T17180] netlink: 'syz.5.2925': attribute type 4 has an invalid length. [ 444.650713][T17184] netlink: 'syz.3.2927': attribute type 12 has an invalid length. [ 444.703806][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.703831][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.789737][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.789762][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.940711][T17192] bond1: Invalid ad_actor_system MAC address. [ 444.940736][T17192] bond1: option ad_actor_system: invalid value (1) [ 444.994690][T17192] bond1 (unregistering): Released all slaves [ 445.268680][T17194] bond1: Invalid ad_actor_system MAC address. [ 445.268705][T17194] bond1: option ad_actor_system: invalid value (1) [ 445.292053][T17194] bond1 (unregistering): Released all slaves [ 446.482327][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 446.828415][T17226] Bluetooth: hci0: unsupported parameter 5135 [ 446.828442][T17226] Bluetooth: hci0: unsupported parameter 8192 [ 446.828457][T17226] Bluetooth: hci0: unsupported parameter 5135 [ 446.828471][T17226] Bluetooth: hci0: unsupported parameter 8192 [ 446.879238][T17225] netlink: 'syz.3.2938': attribute type 6 has an invalid length. [ 447.209315][T16675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 447.222330][T16675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 447.224885][T16675] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 447.230455][T16675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 447.242970][T16675] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 447.599770][ T5622] tipc: Resetting bearer [ 447.928373][T17244] netlink: 'syz.3.2941': attribute type 178 has an invalid length. [ 447.957786][ T5622] tipc: Disabling bearer [ 448.014839][ T92] IPVS: starting estimator thread 0... [ 448.107008][T17246] IPVS: using max 24 ests per chain, 57600 per kthread [ 448.232274][T17244] netlink: 'syz.3.2941': attribute type 33 has an invalid length. [ 448.369733][T17244] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 448.448554][T17244] bond1 (unregistering): Released all slaves [ 448.775097][T17254] syzkaller0: entered promiscuous mode [ 448.775123][T17254] syzkaller0: entered allmulticast mode [ 448.810273][T17254] netlink: 'syz.5.2942': attribute type 2 has an invalid length. [ 449.269668][T17267] __nla_validate_parse: 8 callbacks suppressed [ 449.269701][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'. [ 449.372009][ T5625] Bluetooth: hci7: command tx timeout [ 449.917033][T17228] wg0 speed is unknown, defaulting to 1000 [ 450.274597][T17287] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 450.280568][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 450.280806][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 450.281051][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 450.281274][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 450.281527][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 450.281743][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 450.385695][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 450.386805][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 450.387068][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 451.443112][ T5625] Bluetooth: hci7: command tx timeout [ 452.580965][T17323] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 452.891425][T17330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.017907][T17228] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.019913][T17228] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.020110][T17228] bridge_slave_0: entered allmulticast mode [ 453.067849][T17228] bridge_slave_0: entered promiscuous mode [ 453.098391][T17228] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.098963][T17228] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.099137][T17228] bridge_slave_1: entered allmulticast mode [ 453.140624][T17228] bridge_slave_1: entered promiscuous mode [ 453.348103][T17228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.386103][T17228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.470640][T17228] team0: Port device team_slave_0 added [ 453.481678][T17228] team0: Port device team_slave_1 added [ 453.588376][T16675] Bluetooth: hci7: command tx timeout [ 453.590450][T17228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.590467][T17228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.590497][T17228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.646687][T17228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.646707][T17228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.646736][T17228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.756774][T17228] hsr_slave_0: entered promiscuous mode [ 453.757974][T17228] hsr_slave_1: entered promiscuous mode [ 453.758730][T17228] debugfs: 'hsr0' already exists in 'hsr' [ 453.758751][T17228] Cannot create hsr debugfs directory [ 453.847914][T17354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 453.994488][T17357] netlink: 'syz.0.2967': attribute type 2 has an invalid length. [ 454.425266][T17373] veth1_to_bond: entered allmulticast mode [ 454.832157][T17373] veth1_to_bond: left allmulticast mode [ 454.863528][T17366] syzkaller1: entered promiscuous mode [ 454.863554][T17366] syzkaller1: entered allmulticast mode [ 455.263490][T17388] __nla_validate_parse: 14 callbacks suppressed [ 455.263516][T17388] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2971'. [ 455.575854][T17228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.575894][T17228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.608061][ T5625] Bluetooth: hci7: command tx timeout [ 455.905193][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 456.269120][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2973'. [ 456.301788][T17228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.308587][T17228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.338013][T17408] netlink: 'syz.6.2973': attribute type 16 has an invalid length. [ 456.338037][T17408] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2973'. [ 456.681461][T17228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.681502][T17228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.128680][T17419] ip_tables: iptables: counters copy to user failed while replacing table [ 457.149794][T17228] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.149863][T17228] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.829919][T17433] netlink: 'syz.3.2980': attribute type 83 has an invalid length. [ 457.914292][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2980'. [ 458.067991][T17448] netlink: 'syz.3.2980': attribute type 83 has an invalid length. [ 458.073537][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2981'. [ 458.073605][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2981'. [ 458.129624][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2980'. [ 458.221092][T17439] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 458.316022][T17453] syzkaller1: entered promiscuous mode [ 458.316049][T17453] syzkaller1: entered allmulticast mode [ 458.597320][T17228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.729760][T17228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.746909][T17228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.782766][T17228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.789338][T17228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.828908][T17228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.831308][T17228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.877114][T17228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.015572][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'. [ 459.242266][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'. [ 459.604690][T17228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.768588][T17228] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.905895][T17493] netlink: 'syz.5.2993': attribute type 1 has an invalid length. [ 459.912341][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.912453][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.118585][T17504] sctp: [Deprecated]: syz.6.2996 (pid 17504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.118585][T17504] Use struct sctp_sack_info instead [ 460.201489][T17493] bond1: entered promiscuous mode [ 460.227636][T17493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.408466][T17499] ipvlan2: entered allmulticast mode [ 460.408490][T17499] bond1: entered allmulticast mode [ 460.408693][T17499] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.408714][T17499] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 460.408731][T17499] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 460.465005][T17499] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 460.581483][ T2218] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.581593][ T2218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.094418][ T31] audit: type=1107 audit(1790767272.471:2): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Vo:ŦjrΗR?#!e>ՙPH2i}iN]$3{Pcw@EG2JCdR}ao8= q;?$c|5bT {7ꅨf֫Cjv+ݞy}LN`%?}[Z&-N5_-B@[U&@ae|VztcIkO)l+lQ^=O*"_hyKY 7K&+6vleuc^<ò>9!u`|$PRosQ= i]Btg Z\63 ϤA%ڟK9D2ku6^r1' [ 461.272068][T17527] __nla_validate_parse: 1 callbacks suppressed [ 461.272091][T17527] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2999'. [ 461.492580][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3003'. [ 461.815469][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3003'. [ 463.243084][T17228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.525927][T17604] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.583875][T17228] veth0_vlan: entered promiscuous mode [ 463.695384][T17228] veth1_vlan: entered promiscuous mode [ 463.796799][T17228] veth0_macvtap: entered promiscuous mode [ 463.872848][T17228] veth1_macvtap: entered promiscuous mode [ 464.035710][T17228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.088048][T17228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.156753][T17624] ip_tables: iptables: counters copy to user failed while replacing table [ 464.157667][T17624] FAULT_INJECTION: forcing a failure. [ 464.157667][T17624] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 464.157718][T17624] CPU: 0 UID: 0 PID: 17624 Comm: syz.3.3015 Not tainted syzkaller #0 PREEMPT(full) [ 464.157744][T17624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.157767][T17624] Call Trace: [ 464.157788][T17624] [ 464.157799][T17624] dump_stack_lvl+0xe8/0x150 [ 464.157842][T17624] should_fail_ex+0x410/0x560 [ 464.157876][T17624] _copy_to_user+0x31/0xb0 [ 464.157910][T17624] simple_read_from_buffer+0xe1/0x170 [ 464.157952][T17624] proc_fail_nth_read+0x1bb/0x230 [ 464.157975][T17624] ? common_file_perm+0x20e/0x2b0 [ 464.158009][T17624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.158038][T17624] ? rw_verify_area+0x24a/0x4c0 [ 464.158072][T17624] ? tun_chr_write_iter+0x18a/0x200 [ 464.158100][T17624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.158124][T17624] vfs_read+0x213/0xa80 [ 464.158166][T17624] ? __pfx___mutex_lock+0x10/0x10 [ 464.158201][T17624] ? __pfx_vfs_read+0x10/0x10 [ 464.158239][T17624] ? __fget_files+0x2a/0x420 [ 464.158276][T17624] ? __fget_files+0x3a2/0x420 [ 464.158307][T17624] ? __fget_files+0x2a/0x420 [ 464.158350][T17624] ksys_read+0x150/0x270 [ 464.158388][T17624] ? __pfx_ksys_read+0x10/0x10 [ 464.158437][T17624] do_syscall_64+0x166/0x520 [ 464.158467][T17624] ? trace_irq_disable+0x3b/0x140 [ 464.158492][T17624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.158516][T17624] ? clear_bhb_loop+0x70/0xc0 [ 464.158546][T17624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.158571][T17624] RIP: 0033:0x7fd8f255e98e [ 464.158593][T17624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 464.158613][T17624] RSP: 002b:00007fd8f33d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.158639][T17624] RAX: ffffffffffffffda RBX: 00007fd8f33da6c0 RCX: 00007fd8f255e98e [ 464.158657][T17624] RDX: 000000000000000f RSI: 00007fd8f33da0a0 RDI: 0000000000000004 [ 464.158673][T17624] RBP: 00007fd8f33da090 R08: 0000000000000000 R09: 0000000000000000 [ 464.158688][T17624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.158701][T17624] R13: 00007fd8f2826038 R14: 00007fd8f2825fa0 R15: 00007fff0e9c86e8 [ 464.158739][T17624] [ 464.601694][T17612] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 464.773155][ T7509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.773593][ T7509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.774036][ T7509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.918562][T17629] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3014'. [ 464.918588][T17629] tipc: Invalid UDP bearer configuration [ 464.918634][T17629] tipc: Enabling of bearer rejected, failed to enable media [ 464.933594][T11003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.489086][T11012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.489112][T11012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.716579][T17653] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 465.717249][T17653] team0: Device ipvlan3 is already an upper device of the team interface [ 465.764432][T17657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.764453][T17657] IPv6: NLM_F_CREATE should be set when creating new route [ 465.793307][T17657] x_tables: duplicate entry at hook 2 [ 465.801279][T17657] ip_tables: iptables: counters copy to user failed while replacing table [ 465.865743][T17660] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3022'. [ 466.140887][T17668] ip_tables: iptables: counters copy to user failed while replacing table [ 466.312731][T17658] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3022'. [ 466.455421][T17666] syzkaller1: entered promiscuous mode [ 466.455447][T17666] syzkaller1: entered allmulticast mode [ 466.567868][T17685] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 466.745405][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.745432][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.519592][T17710] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3030'. [ 468.438691][T16675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 468.451419][T16675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 468.461606][T16675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 468.475122][T16675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.477890][T17733] ip_tables: iptables: counters copy to user failed while replacing table [ 468.478227][T16675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 468.686481][T17738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3034'. [ 468.979692][T17747] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 469.000986][T17745] No such timeout policy "syz0" [ 469.463151][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3038'. [ 469.990711][T17772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3043'. [ 469.990738][T17772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 470.203627][T17782] ip_tables: iptables: counters copy to user failed while replacing table [ 470.206382][ T5625] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 470.562321][ T5625] Bluetooth: hci4: command tx timeout [ 470.595110][T17793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 470.654451][T17791] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 470.688752][T17791] bond1: (slave lo): Enslaving as an active interface with an up link [ 470.710897][T17791] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 470.775725][T17734] wg0 speed is unknown, defaulting to 1000 [ 470.873563][T17800] netlink: 'syz.2.3049': attribute type 64 has an invalid length. [ 470.873589][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3049'. [ 470.951238][T17803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3049'. [ 471.068504][T17806] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3051'. [ 471.307595][T17813] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 472.380935][T17831] openvswitch: netlink: Missing key (keys=40, expected=100) [ 472.643803][ T5625] Bluetooth: hci4: command tx timeout [ 472.859401][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3058'. [ 472.861345][T17734] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.861623][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.879656][T17734] bridge_slave_0: entered allmulticast mode [ 472.899479][T17734] bridge_slave_0: entered promiscuous mode [ 472.915355][T17734] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.915471][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.915620][T17734] bridge_slave_1: entered allmulticast mode [ 472.918111][T17734] bridge_slave_1: entered promiscuous mode [ 473.077080][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.095062][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.176206][T17734] team0: Port device team_slave_0 added [ 473.196895][T17734] team0: Port device team_slave_1 added [ 473.275962][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.275986][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.276013][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.279196][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.279211][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.279243][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.463864][T17734] hsr_slave_0: entered promiscuous mode [ 473.465230][T17734] hsr_slave_1: entered promiscuous mode [ 473.466239][T17734] debugfs: 'hsr0' already exists in 'hsr' [ 473.466262][T17734] Cannot create hsr debugfs directory [ 474.658957][T17820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.683519][T17734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 474.731472][ T5625] Bluetooth: hci4: command tx timeout [ 474.768956][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.780457][T17734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.857059][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.860897][T17734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.919725][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.920898][T17734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.952054][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.237774][T17875] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3063'. [ 475.375262][T17734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.396157][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 475.609289][T17885] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 475.792615][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.852723][ T2224] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.852866][ T2224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.977340][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.977482][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.015477][T17893] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3066'. [ 476.017463][T17893] Bluetooth: hci0: unsupported parameter 5135 [ 476.017485][T17893] Bluetooth: hci0: unsupported parameter 8192 [ 476.017499][T17893] Bluetooth: hci0: unsupported parameter 5135 [ 476.017513][T17893] Bluetooth: hci0: unsupported parameter 8192 [ 476.120228][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3068'. [ 476.120260][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3068'. [ 476.299890][T17903] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3071'. [ 476.802372][ T5625] Bluetooth: hci4: command tx timeout [ 476.843916][T17918] netlink: 'syz.6.3073': attribute type 1 has an invalid length. [ 476.961665][T17925] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 477.726617][T17948] netlink: 'syz.3.3078': attribute type 29 has an invalid length. [ 477.750289][T17948] netlink: 'syz.3.3078': attribute type 29 has an invalid length. [ 478.338158][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 478.338424][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 478.338665][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 478.338902][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 478.339121][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 478.339322][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 478.339521][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 478.339759][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 478.418085][T17965] netlink: 'syz.6.3083': attribute type 23 has an invalid length. [ 479.029304][T17972] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 479.143036][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3088'. [ 479.469353][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.827003][T17999] netlink: 'syz.5.3090': attribute type 8 has an invalid length. [ 479.827028][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3090'. [ 479.881337][T17995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.915352][T17999] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.917320][T17999] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.038587][T18006] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 480.151173][T17734] veth0_vlan: entered promiscuous mode [ 480.171077][T17734] veth1_vlan: entered promiscuous mode [ 480.297927][T17734] veth0_macvtap: entered promiscuous mode [ 480.341281][T17734] veth1_macvtap: entered promiscuous mode [ 480.400922][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.498511][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.572909][ T1282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.573902][ T1282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.573943][ T1282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.573981][ T1282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.190093][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3097'. [ 481.461700][T18011] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 481.598669][T18011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.585014][T18038] x_tables: duplicate underflow at hook 2 [ 482.792849][T18043] syzkaller0: entered promiscuous mode [ 482.792876][T18043] syzkaller0: entered allmulticast mode [ 482.930649][T18051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3103'. [ 482.930679][T18051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3103'. [ 483.257921][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.257946][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.599218][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.599244][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.834636][T18074] net_ratelimit: 252 callbacks suppressed [ 483.834660][T18074] openvswitch: netlink: Unknown key attributes 1 [ 484.120447][T18097] x_tables: duplicate underflow at hook 1 [ 484.214958][T18108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3031'. [ 484.235998][T18109] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3031'. [ 485.074064][T18123] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3112'. [ 485.117735][T18123] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.118081][T18123] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.340121][T18136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3113'. [ 486.207658][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3122'. [ 486.207684][T18160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3122'. [ 486.208930][T18160] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3122'. [ 486.661631][T18171] bond2: option lp_interval: invalid value (0) [ 486.661667][T18171] bond2: option lp_interval: allowed values 1 - 2147483647 [ 486.678555][T18171] bond2 (unregistering): Released all slaves [ 486.709117][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'. [ 486.950717][T18185] syzkaller0: entered promiscuous mode [ 486.950934][T18185] syzkaller0: entered allmulticast mode [ 487.025992][T18196] xt_SECMARK: invalid mode: 9 [ 487.109053][T18200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3130'. [ 487.109079][T18200] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3130'. [ 488.865052][T11007] IPVS: starting estimator thread 0... [ 488.952094][T18251] IPVS: using max 23 ests per chain, 55200 per kthread [ 489.164351][T18262] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 489.290377][T18252] __nla_validate_parse: 8 callbacks suppressed [ 489.290399][T18252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3146'. [ 489.575536][T18275] netlink: 'syz.0.3153': attribute type 12 has an invalid length. [ 489.637296][T18267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3148'. [ 489.886544][T18282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3148'. [ 489.916239][T18282] ip_tables: iptables: counters copy to user failed while replacing table [ 490.440863][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3158'. [ 490.789495][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 490.864182][T18312] netlink: 'syz.0.3161': attribute type 22 has an invalid length. [ 490.864208][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 490.942312][T18312] netlink: 'syz.0.3161': attribute type 22 has an invalid length. [ 490.942336][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 490.964310][T11003] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.973913][T11003] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.973959][T11003] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.973997][T11003] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.547824][T18323] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3164'. [ 491.756721][T18329] ip_tables: iptables: counters copy to user failed while replacing table [ 492.796565][T11013] IPVS: starting estimator thread 0... [ 492.884304][T18358] IPVS: using max 23 ests per chain, 55200 per kthread [ 493.186439][T18363] x_tables: duplicate underflow at hook 1 [ 493.295912][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3181'. [ 493.624177][T18379] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 493.650638][T18381] netlink: 'syz.6.3184': attribute type 12 has an invalid length. [ 494.019806][T18379] netlink: 'syz.0.3183': attribute type 1 has an invalid length. [ 494.019832][T18379] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.3183'. [ 494.240257][T18391] ip_tables: iptables: counters copy to user failed while replacing table [ 494.418336][T18395] geneve1: mtu less than device minimum [ 494.465762][T18398] tipc: Started in network mode [ 494.465826][T18398] tipc: Node identity ac14142f, cluster identity 4711 [ 494.466443][T18398] tipc: Enabled bearer , priority 10 [ 494.467386][T18400] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3189'. [ 494.761198][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3190'. [ 494.775620][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3190'. [ 495.173129][T18420] xt_ecn: cannot match TCP bits for non-tcp packets [ 495.176924][ T92] IPVS: starting estimator thread 0... [ 495.200608][T18420] xt_ecn: cannot match TCP bits for non-tcp packets [ 495.266033][T18421] IPVS: using max 29 ests per chain, 69600 per kthread [ 495.273223][T18419] netlink: 'syz.2.3192': attribute type 1 has an invalid length. [ 495.325113][T18428] netlink: 'syz.6.3195': attribute type 7 has an invalid length. [ 495.327003][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3195'. [ 495.582406][T18104] tipc: Node number set to 2886997039 [ 496.254502][T18454] batadv_slave_0: entered promiscuous mode [ 496.765207][T18453] batadv_slave_0: left promiscuous mode [ 497.891658][T18488] ip_tables: iptables: counters copy to user failed while replacing table [ 498.280889][T18494] netlink: 'syz.2.3213': attribute type 1 has an invalid length. [ 498.903611][T18506] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3216'. [ 498.903648][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3216'. [ 498.903665][T18506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3216'. [ 498.970770][T18509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3217'. [ 498.970811][T18509] netlink: 'syz.2.3217': attribute type 7 has an invalid length. [ 498.970828][T18509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3217'. [ 499.020864][T18511] netlink: 524 bytes leftover after parsing attributes in process `syz.3.3216'. [ 499.091410][T18505] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 499.108969][T18505] bond3 (unregistering): Released all slaves [ 499.605868][T18522] ip_tables: iptables: counters copy to user failed while replacing table [ 500.120844][T18538] Cannot find add_set index 4 as target [ 500.121467][T18541] Cannot find add_set index 4 as target [ 500.402521][T18557] xt_policy: neither incoming nor outgoing policy selected [ 501.895291][T18591] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3240'. [ 501.896196][T18591] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.896500][T18591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.896862][T18591] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.896988][T18591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.385354][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3242'. [ 502.978999][T18603] hsr_slave_1 (unregistering): left promiscuous mode [ 503.313334][T18620] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3245'. [ 503.602216][T16675] Bluetooth: hci5: command 0x0406 tx timeout [ 503.712857][T18644] netlink: 'syz.6.3250': attribute type 3 has an invalid length. [ 503.712883][T18644] netlink: 'syz.6.3250': attribute type 1 has an invalid length. [ 503.712899][T18644] netlink: 212 bytes leftover after parsing attributes in process `syz.6.3250'. [ 503.712917][T18644] NCSI netlink: No device for ifindex 813332851 [ 503.979711][T18648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3251'. [ 503.979775][T18648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3251'. [ 504.368530][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3252'. [ 504.478665][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3253'. [ 504.478695][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3253'. [ 504.825145][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3257'. [ 506.642894][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 506.957142][T18738] __nla_validate_parse: 3 callbacks suppressed [ 506.957168][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 507.012978][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 507.102237][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 507.413251][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3278'. [ 507.510962][T18748] tipc: Failed to remove unknown binding: 66,0,0/0:2291722890/2291722891 [ 507.530814][T18748] tipc: Failed to remove unknown binding: 66,0,0/0:2291722890/2291722891 [ 508.345906][T18772] ip_tables: iptables: counters copy to user failed while replacing table [ 508.491645][T18776] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 509.003965][T18786] ip6t_rt: address list match requested but addrnr is 0 [ 509.315097][T18790] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3296'. [ 509.353338][T18790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.429158][T18797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.505549][T18798] syzkaller0: entered promiscuous mode [ 509.505575][T18798] syzkaller0: entered allmulticast mode [ 509.915620][T18812] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3300'. [ 509.941248][T18812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.998277][T18821] ip_tables: iptables: counters copy to user failed while replacing table [ 510.126967][T18828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 510.389130][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3304'. [ 510.389371][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3304'. [ 510.389567][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3304'. [ 510.389759][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3304'. [ 510.390300][T18825] netlink: 'syz.6.3304': attribute type 11 has an invalid length. [ 511.092188][T18840] openvswitch: netlink: IP tunnel dst address not specified [ 511.092226][T18840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.072926][T18877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 512.127142][T18883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.953082][T18909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 513.875404][T18929] __nla_validate_parse: 31 callbacks suppressed [ 513.875427][T18929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 514.129725][T18933] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3329'. [ 514.155140][T18935] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3329'. [ 514.353708][T18938] FAULT_INJECTION: forcing a failure. [ 514.353708][T18938] name failslab, interval 1, probability 0, space 0, times 0 [ 514.353747][T18938] CPU: 0 UID: 0 PID: 18938 Comm: syz.0.3330 Not tainted syzkaller #0 PREEMPT(full) [ 514.353774][T18938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.353791][T18938] Call Trace: [ 514.353801][T18938] [ 514.353811][T18938] dump_stack_lvl+0xe8/0x150 [ 514.353850][T18938] should_fail_ex+0x410/0x560 [ 514.353961][T18938] ? __alloc_skb+0x1db/0x7a0 [ 514.354066][T18938] should_failslab+0xa8/0x100 [ 514.354096][T18938] ? __alloc_skb+0x1db/0x7a0 [ 514.354122][T18938] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 514.354157][T18938] ? __alloc_skb+0x18d/0x7a0 [ 514.354186][T18938] ? __alloc_skb+0x1db/0x7a0 [ 514.354221][T18938] __alloc_skb+0x1db/0x7a0 [ 514.354254][T18938] netlink_ack+0x136/0xb30 [ 514.354340][T18938] ? __kmalloc_cache_noprof+0x14d/0x600 [ 514.354363][T18938] ? nfnetlink_rcv+0x1021/0x28c0 [ 514.354448][T18938] nfnetlink_rcv+0x260c/0x28c0 [ 514.354519][T18938] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 514.354569][T18938] ? ref_tracker_free+0x689/0x830 [ 514.354648][T18938] ? skb_clone+0x246/0x3a0 [ 514.354685][T18938] ? __netlink_deliver_tap+0x811/0x860 [ 514.354716][T18938] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.354738][T18938] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.354764][T18938] netlink_unicast+0x7bd/0x940 [ 514.354801][T18938] netlink_sendmsg+0x813/0xb40 [ 514.354834][T18938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.354867][T18938] ? apparmor_socket_sendmsg+0x98/0x360 [ 514.354922][T18938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.354942][T18938] sock_sendmsg_nosec+0x13a/0x180 [ 514.354971][T18938] ____sys_sendmsg+0x54e/0x850 [ 514.355033][T18938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.355084][T18938] ? import_iovec+0x73/0xa0 [ 514.355140][T18938] ___sys_sendmsg+0x2a5/0x360 [ 514.355170][T18938] ? __lock_acquire+0x747/0x2de0 [ 514.355197][T18938] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.355266][T18938] ? __fget_files+0x2a/0x420 [ 514.355297][T18938] ? __fget_files+0x3a2/0x420 [ 514.355339][T18938] __x64_sys_sendmsg+0x1b1/0x290 [ 514.355370][T18938] ? sched_clock+0x41/0x60 [ 514.355404][T18938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.355461][T18938] do_syscall_64+0x166/0x520 [ 514.355528][T18938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.355552][T18938] ? clear_bhb_loop+0x70/0xc0 [ 514.355580][T18938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.355604][T18938] RIP: 0033:0x7fb21259e159 [ 514.355627][T18938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.355647][T18938] RSP: 002b:00007fb2133e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.355673][T18938] RAX: ffffffffffffffda RBX: 00007fb212825fa0 RCX: 00007fb21259e159 [ 514.355691][T18938] RDX: 0000000000000040 RSI: 0000200000001940 RDI: 0000000000000003 [ 514.355706][T18938] RBP: 00007fb2133e8090 R08: 0000000000000000 R09: 0000000000000000 [ 514.355721][T18938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.355734][T18938] R13: 00007fb212826038 R14: 00007fb212825fa0 R15: 00007ffda009ecf8 [ 514.355772][T18938] [ 515.101292][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3331'. [ 515.138094][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3332'. [ 515.138136][T18948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3332'. [ 515.138151][T18948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3332'. [ 515.142601][T18948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3332'. [ 515.240483][T18941] bridge0: port 3(batadv1) entered blocking state [ 515.245594][T18941] bridge0: port 3(batadv1) entered disabled state [ 515.245867][T18941] batadv1: entered allmulticast mode [ 515.268026][T18941] batadv1: entered promiscuous mode [ 515.303959][T18950] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.774319][ T49] batman_adv: batadv1: IGMP Querier appeared [ 515.774339][ T49] batman_adv: batadv1: MLD Querier appeared [ 515.891644][T18956] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.893877][T18955] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.129206][T18962] rdma_rxe: rxe_newlink: failed to add lo [ 516.138818][T18963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3337'. [ 516.781592][T18978] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3344'. [ 517.298625][T18985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 518.040321][T19000] bridge0: port 4(syzkaller0) entered blocking state [ 518.041844][T19000] bridge0: port 4(syzkaller0) entered disabled state [ 518.042158][T19000] syzkaller0: entered allmulticast mode [ 518.070988][T19000] syzkaller0: entered promiscuous mode [ 518.084815][T19000] bridge0: port 4(syzkaller0) entered blocking state [ 518.084936][T19000] bridge0: port 4(syzkaller0) entered forwarding state [ 518.262302][T19014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.583429][T18997] bridge0: port 4(syzkaller0) entered disabled state [ 518.656225][T18997] syzkaller0 (unregistering): left allmulticast mode [ 518.656256][T18997] syzkaller0 (unregistering): left promiscuous mode [ 518.656331][T18997] bridge0: port 4(syzkaller0) entered disabled state [ 518.970933][T16675] Bluetooth: hci6: command 0x0406 tx timeout [ 519.067410][T19018] __nla_validate_parse: 1 callbacks suppressed [ 519.067432][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'. [ 519.091573][T19017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3354'. [ 519.115231][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'. [ 519.851527][T19041] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 519.872750][T19042] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 519.945767][T19045] ip_tables: iptables: counters copy to user failed while replacing table [ 520.086096][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3360'. [ 520.145974][T19050] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3360'. [ 520.299624][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3360'. [ 520.299653][T19050] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3360'. [ 520.863215][T19072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3366'. [ 520.863259][T19072] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3366'. [ 520.863275][T19072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3366'. [ 520.953367][T19071] ip_tables: iptables: counters copy to user failed while replacing table [ 521.399938][T19083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.254414][T19096] netlink: 'syz.2.3375': attribute type 1 has an invalid length. [ 522.585879][T19096] bond1: entered promiscuous mode [ 522.597479][T19096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.262915][T19122] Cannot find del_set index 4 as target [ 523.387732][T19129] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 523.422949][T19126] ip_tables: iptables: counters copy to user failed while replacing table [ 523.978261][T19141] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 525.373610][T19222] __nla_validate_parse: 2 callbacks suppressed [ 525.373635][T19222] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3393'. [ 525.456218][T19226] ipt_ECN: cannot use operation on non-tcp rule [ 526.097223][T19230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.487748][T19242] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 526.655560][T19246] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3399'. [ 526.741094][T19250] netlink: 'syz.0.3400': attribute type 2 has an invalid length. [ 526.814169][T19249] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 526.914384][T19259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3402'. [ 527.111217][T19263] netlink: 'syz.5.3403': attribute type 1 has an invalid length. [ 527.558175][T19250] : entered promiscuous mode [ 527.991331][T19265] erspan1: entered allmulticast mode [ 528.287155][T19271] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 528.664451][T19271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.798214][T19277] bond2: (slave erspan1): making interface the new active one [ 528.816554][T19277] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 529.059525][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3409'. [ 529.059553][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3409'. [ 529.446604][T19293] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 530.187585][T19311] ip_tables: iptables: counters copy to user failed while replacing table [ 530.729436][ T5625] Bluetooth: hci6: Malformed Event: 0x13 [ 531.810961][T19335] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 532.180369][T19345] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.254119][ T32] INFO: task syz.1.2759:16441 blocked for more than 143 seconds. [ 532.254150][ T32] Not tainted syzkaller #0 [ 532.254163][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.254175][ T32] task:syz.1.2759 state:D stack:27104 pid:16441 tgid:16439 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 532.254245][ T32] Call Trace: [ 532.254254][ T32] [ 532.254270][ T32] __schedule+0x17db/0x58f0 [ 532.254432][ T32] ? __pfx___schedule+0x10/0x10 [ 532.254471][ T32] ? schedule+0x90/0x2b0 [ 532.254504][ T32] schedule+0x164/0x2b0 [ 532.254560][ T32] schedule_preempt_disabled+0x13/0x30 [ 532.254598][ T32] __mutex_lock+0x7c1/0x1550 [ 532.254636][ T32] ? __mutex_lock+0x5d4/0x1550 [ 532.254673][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 532.254764][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 532.254831][ T32] ? net_generic+0x1e/0x240 [ 532.254858][ T32] ? net_generic+0x1e/0x240 [ 532.254893][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 532.254924][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 532.254952][ T32] ? __asan_memset+0x22/0x50 [ 532.254983][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 532.255014][ T32] ? do_syscall_64+0x166/0x520 [ 532.255044][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.255072][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 532.255119][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 532.255170][ T32] ? rcu_is_watching+0x16/0xb0 [ 532.255200][ T32] ? trace_kmalloc+0x2a/0xf0 [ 532.255226][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 532.255253][ T32] ? __nla_parse+0x40/0x60 [ 532.255289][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 532.255321][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 532.255361][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 532.255401][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.255474][ T32] ? bpf_lsm_capable+0x9/0x20 [ 532.255497][ T32] ? security_capable+0x7e/0x2c0 [ 532.255565][ T32] genl_rcv_msg+0x614/0x7a0 [ 532.255603][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.255632][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 532.255682][ T32] netlink_rcv_skb+0x226/0x4a0 [ 532.255721][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.255753][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.255833][ T32] ? down_read+0x2be/0x330 [ 532.255872][ T32] genl_rcv+0x28/0x40 [ 532.255900][ T32] netlink_unicast+0x7bd/0x940 [ 532.255948][ T32] netlink_sendmsg+0x813/0xb40 [ 532.255990][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.256025][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 532.256056][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.256078][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 532.256109][ T32] ____sys_sendmsg+0x54e/0x850 [ 532.256149][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.256194][ T32] ? import_iovec+0x73/0xa0 [ 532.256230][ T32] ___sys_sendmsg+0x2a5/0x360 [ 532.256262][ T32] ? __lock_acquire+0x747/0x2de0 [ 532.256292][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.256330][ T32] ? futex_wait+0x2a2/0x390 [ 532.256400][ T32] ? __fget_files+0x2a/0x420 [ 532.256432][ T32] ? __fget_files+0x3a2/0x420 [ 532.256473][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 532.256510][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.256570][ T32] do_syscall_64+0x166/0x520 [ 532.256600][ T32] ? trace_irq_disable+0x3b/0x140 [ 532.256624][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.256649][ T32] ? clear_bhb_loop+0x70/0xc0 [ 532.256679][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.256703][ T32] RIP: 0033:0x7f5d0999e159 [ 532.256725][ T32] RSP: 002b:00007f5d07bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.256751][ T32] RAX: ffffffffffffffda RBX: 00007f5d09c25fa0 RCX: 00007f5d0999e159 [ 532.256769][ T32] RDX: 00000000000484d0 RSI: 0000200000000000 RDI: 0000000000000005 [ 532.256809][ T32] RBP: 00007f5d09a3506b R08: 0000000000000000 R09: 0000000000000000 [ 532.256825][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.256839][ T32] R13: 00007f5d09c26038 R14: 00007f5d09c25fa0 R15: 00007ffeb6edb468 [ 532.256877][ T32] [ 532.256974][ T32] [ 532.256974][ T32] Showing all locks held in the system: [ 532.256988][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 532.257005][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 532.257087][ T32] locks held by getty/5374: 2, on CPU#0: [ 532.257103][ T32] #0: ffff8880366d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 532.257232][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 532.257312][ T32] locks held by syz.4.2582/15623: 2, on CPU#0: [ 532.257330][ T32] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 532.257389][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 532.257456][ T32] locks held by syz-executor/16095: 4, last CPU#0: [ 532.257474][ T32] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 532.257537][ T32] #1: ffff888076d5a9f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 532.257606][ T32] #2: ffff88807e5da9f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 532.257679][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 532.257746][ T32] locks held by syz.1.2759/16441: 2, on CPU#0: [ 532.257762][ T32] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 532.257847][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 532.257919][ T32] locks held by kworker/0:49/18104: 3, last CPU#0: [ 532.257936][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 532.258009][ T32] #1: ffffc90006ad7c40 (cleanup_vm_area){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 532.258073][ T32] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 532.258139][ T32] locks held by kworker/u8:69/19219: 3, on CPU#0: [ 532.258155][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 532.258220][ T32] #1: ffffc900101d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 532.258285][ T32] #2: ffffffff90254b80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 532.258369][ T32] locks held by syz.0.3413/19307: 2, last CPU#0: [ 532.258386][ T32] #0: ffff8880528b83b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 532.258453][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 532.258518][ T32] locks held by syz.6.3423/19340: 2, on CPU#0: [ 532.258535][ T32] #0: ffffffff90254b80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 532.258620][ T32] #1: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 532.258686][ T32] locks held by syz.2.3424/19345: 1, last CPU#0: [ 532.258703][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: tun_get_user+0x27b0/0x44d0 [ 532.258763][ T32] [ 532.258769][ T32] ============================================= [ 532.258769][ T32] [ 532.258809][ T32] NMI backtrace for cpu 0 [ 532.258825][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 532.258850][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.258863][ T32] Call Trace: [ 532.258873][ T32] [ 532.258883][ T32] dump_stack_lvl+0xe8/0x150 [ 532.258918][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 532.258998][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 532.259038][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 532.259067][ T32] sys_info+0x135/0x170 [ 532.259101][ T32] watchdog+0xfd7/0x1030 [ 532.259133][ T32] ? watchdog+0x1c7/0x1030 [ 532.259165][ T32] kthread+0x38b/0x480 [ 532.259189][ T32] ? __pfx_watchdog+0x10/0x10 [ 532.259210][ T32] ? __pfx_kthread+0x10/0x10 [ 532.259235][ T32] ret_from_fork+0x514/0xb70 [ 532.259261][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 532.259283][ T32] ? __switch_to+0xc89/0x1420 [ 532.259319][ T32] ? __pfx_kthread+0x10/0x10 [ 532.259344][ T32] ret_from_fork_asm+0x1a/0x30 [ 532.259398][ T32] [ 532.259407][ T32] Sending NMI from CPU 0 to CPUs 1: [ 532.259482][ C1] NMI backtrace for cpu 1 [ 532.259497][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 532.259519][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.259530][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 532.259557][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 66 06 a7 03 66 0f 1f 44 00 [ 532.259574][ C1] RSP: 0018:ffffc900001e7ab0 EFLAGS: 00000046 [ 532.259590][ C1] RAX: 0000000000023bc3 RBX: ffff8880b8723c80 RCX: 0000000000000838 [ 532.259604][ C1] RDX: 0000000000000000 RSI: 0000000000023bc3 RDI: 0000000000000838 [ 532.259616][ C1] RBP: ffffc900001e7b70 R08: 0000000000000100 R09: 0000000000000001 [ 532.259629][ C1] R10: 0000000000000003 R11: ffffffff81754510 R12: 0000000000023bc3 [ 532.259641][ C1] R13: dffffc0000000000 R14: 0000000010005df3 R15: 0000000000000020 [ 532.259655][ C1] FS: 0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 532.259670][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.259683][ C1] CR2: 00007fd8f33d9ff8 CR3: 00000000783ae000 CR4: 00000000003526f0 [ 532.259701][ C1] Call Trace: [ 532.259708][ C1] [ 532.259714][ C1] lapic_next_event+0x11/0x20 [ 532.259734][ C1] clockevents_program_event+0x385/0x630 [ 532.259763][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 532.259793][ C1] ? tick_program_event+0x8f/0x120 [ 532.259817][ C1] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 532.259847][ C1] irqentry_exit+0x8d3/0x910 [ 532.259870][ C1] ? trace_irq_disable+0x3b/0x140 [ 532.259893][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.259914][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 532.259980][ C1] Code: f7 e8 4d a1 ba f5 f7 c3 00 02 00 00 74 05 e8 f0 eb e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 ae ab f5 65 48 8b 05 ec 20 ac 07 48 85 c0 74 18 5b 41 5e c3 [ 532.259996][ C1] RSP: 0018:ffffc900001e7cc8 EFLAGS: 00000206 [ 532.260012][ C1] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000101 [ 532.260025][ C1] RDX: 0000000000000000 RSI: ffffffff8e415aa5 RDI: 0000000000000001 [ 532.260037][ C1] RBP: 0000000000000005 R08: ffffffff907a607f R09: 1ffffffff20f4c0f [ 532.260051][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c10 R12: 0000000000000009 [ 532.260064][ C1] R13: 0000000000000008 R14: ffff8880b8728280 R15: 0000000000000100 [ 532.260088][ C1] handle_softirqs+0x226/0x860 [ 532.260115][ C1] ? run_ksoftirqd+0x36/0x60 [ 532.260147][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 532.260173][ C1] run_ksoftirqd+0x36/0x60 [ 532.260199][ C1] smpboot_thread_fn+0x565/0xa70 [ 532.260228][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 532.260260][ C1] kthread+0x38b/0x480 [ 532.260277][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 532.260304][ C1] ? __pfx_kthread+0x10/0x10 [ 532.260323][ C1] ret_from_fork+0x514/0xb70 [ 532.260342][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 532.260359][ C1] ? __switch_to+0xc89/0x1420 [ 532.260386][ C1] ? __pfx_kthread+0x10/0x10 [ 532.260404][ C1] ret_from_fork_asm+0x1a/0x30 [ 532.260442][ C1] [ 532.261449][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 533.378361][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 533.387500][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.397572][ T32] Call Trace: [ 533.400873][ T32] [ 533.403824][ T32] vpanic+0x56d/0xa60 [ 533.407839][ T32] ? __pfx_vpanic+0x10/0x10 [ 533.412375][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 533.417947][ T32] panic+0xc5/0xd0 [ 533.421691][ T32] ? __pfx_panic+0x10/0x10 [ 533.426140][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 533.431193][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 533.437375][ T32] watchdog+0x1030/0x1030 [ 533.441734][ T32] ? watchdog+0x1c7/0x1030 [ 533.446172][ T32] kthread+0x38b/0x480 [ 533.450267][ T32] ? __pfx_watchdog+0x10/0x10 [ 533.454962][ T32] ? __pfx_kthread+0x10/0x10 [ 533.459678][ T32] ret_from_fork+0x514/0xb70 [ 533.464289][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 533.469429][ T32] ? __switch_to+0xc89/0x1420 [ 533.474156][ T32] ? __pfx_kthread+0x10/0x10 [ 533.478869][ T32] ret_from_fork_asm+0x1a/0x30 [ 533.483671][ T32] [ 533.487310][ T32] Kernel Offset: disabled [ 533.491653][ T32] Rebooting in 86400 seconds..