last executing test programs: 3m58.823701557s ago: executing program 4 (id=7191): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async, rerun: 64) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac"], 0x18) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) sendfile(r0, r3, 0x0, 0x4010000) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0xb8, 0x9, 0x6, 0x4, 0x1, 0x3, 0xf8, 0x7, 0x9, 0x0, 0x80, 0x7f, 0x0, 0x9}, 0xe) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "0846d837932f2841", "c97e03515e9367e1ef03eb1d2488c3e7", "14a13ae6", "dd8e7e42c08cd567"}, 0x28) sendto$packet(r4, &(0x7f00000002c0)="1a16f6aafc584318ab5e7db4e024489de48c21b17473326172c0f4ce69c848a539fa7b085a66574edb2ff83d22a78cb506477ff6efecbd7092e05f578d60e5065b3b35948b8f51817e4eb1f0aad72e4d16669ca02e7ccdf065e1a73bf48d10e45a7694a8c4f3fe9e6a1c53f2bd57dcb062d59a87a3d3b66753621c012db3199af63eb843472657cfe36033a7d39c4d28c35cc803857313f835e40089ef1f0dda48eb74b4f875e4", 0xa7, 0xc804, &(0x7f0000000400)={0x11, 0x1b, r5, 0x1, 0x1, 0x6, @random="3bcfe6959a12"}, 0x14) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3m58.679116012s ago: executing program 4 (id=7193): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x10, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004001000240000001a00fdffffff0000", @ANYRES32=r2, @ANYBLOB="c06d00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000000000000500"/28], 0x50) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000080)=0x40, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3m58.527722794s ago: executing program 4 (id=7194): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf2507000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0xfffffdc8, &(0x7f0000000340)}, 0xc) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) 3m57.846253399s ago: executing program 4 (id=7198): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xca}, @common=@unspec=@RATEEST={0x22, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x1a) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf25030000001800018014000000050003000f000000"], 0x34}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x1, 0x20, 0x4, 0xf59, {{0x6, 0x4, 0x0, 0x1a, 0x18, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @empty, {[@end, @noop]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@local, @broadcast}, &(0x7f00000001c0)=0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0xfffffffb, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b1d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0xfdbf, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x48, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fcdbdf25020000001400018008000100", @ANYRES32=r5, @ANYBLOB="5586e178e48c08b100000000000000", @ANYRES32=r6, @ANYBLOB="0c0001807c00018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="140002006272696467655f736c6176655f3100001400020069703665727370616e3000000000000051ff030001000000140002006d616376746170300000000000000000080003000200000014000200697036746e6c30000000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xd, 0x3, 0x6}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @generic={0x3, 0x3, 'Q'}]}}}}}}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0020032500000004000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 3m57.690745799s ago: executing program 4 (id=7201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1ba243000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="185400000b0000ffffff0200ffffe700a36c041ba233cd0bbeee1217fd608a3629385777a1ef9eea61c125cebb6e030e15f127a5ccfe0123629ef95db94f6223f79bb5fc2da950d50046ff9b77294eb4bc78104294ca94d144f2009af5fe0cc126cdc29d388de1cc4e8523f7e7558d6de508383f537a6a4681563dc13e25b5866b88aefcbd4eb4450e4496ac296c57211aae858b2e2d8d0b94aecfed252534fb8f2ce6f25519e4aca038379d58761f1a2c64354af2629b31a1d4"], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, r5, 0xc}, 0x10) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 3m56.419138673s ago: executing program 4 (id=7213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000400000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r7, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000203050000000000250000000100000a09000000000000010d0000000800034000000003080005500000000b4d67bab0e7a908a7413e6d416eb0bc7c0f62fa96cd39fd2fe87f2c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4080) recvmsg(r8, &(0x7f0000000b40)={&(0x7f0000000340)=@ax25={{0x3, @netrom}, [@remote, @default, @default, @null, @remote, @default, @default, @null]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000c40)=""/214, 0xd6}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/97, 0x61}, {&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000840)=""/205, 0xcd}, {&(0x7f0000000940)=""/183, 0xb7}], 0x7, &(0x7f0000000b80)=""/155, 0x9b}, 0x2000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000002c0)=0x1a, 0x4) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000002900)=r11, 0x4) 3m41.331328763s ago: executing program 32 (id=7213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000400000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r7, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000203050000000000250000000100000a09000000000000010d0000000800034000000003080005500000000b4d67bab0e7a908a7413e6d416eb0bc7c0f62fa96cd39fd2fe87f2c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4080) recvmsg(r8, &(0x7f0000000b40)={&(0x7f0000000340)=@ax25={{0x3, @netrom}, [@remote, @default, @default, @null, @remote, @default, @default, @null]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000c40)=""/214, 0xd6}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/97, 0x61}, {&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000840)=""/205, 0xcd}, {&(0x7f0000000940)=""/183, 0xb7}], 0x7, &(0x7f0000000b80)=""/155, 0x9b}, 0x2000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000002c0)=0x1a, 0x4) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000002900)=r11, 0x4) 8.834979882s ago: executing program 3 (id=8945): socket$kcm(0x11, 0xa, 0x300) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xfe, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a400000002000000000000000000000d0a000000000000000100000604"], &(0x7f0000000f40)=""/4089, 0xbe, 0xff9, 0x8}, 0x28) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'team0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "b4ec7c17ac9c0c40d456c802a5c9dcbb88cfdc2c623a155709b945ea0930e2e3", "2d71c10fb66833598341ae12b5e47c3bcfa5c3979267686ea95bfd7f762ca744", "6333a0a264e481d76a2396c7c2ab16a605ee3d6ca0cb0db1a94eaf4bde00b996", "485f76ccefdafbd24e77aa92045f936c5c4b106988088c67779381dcfc11fbe5", "785566a5eb4ba6b0bbeb6df601027b1b21c73dfd6017b5bf506916ced75330df", "563de7a080f8bd85c3a687b8", 0x8, 0x5, 0x8, 0xa, 0x10}}) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1=0xe00005a8}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000000000000001"], 0x50}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080000}, 0x20000004) write$tun(r1, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@mpls_mc={0x8848, {[{0x92ac}, {0x4}, {}], @ipv6=@dccp_packet={0x6, 0x6, "764eb9", 0x3cd, 0x21, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x1d, 0x2, 0x1, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x73, 0x8, 0x4, 0x4, 0xcc, 0x10, 0x0, [@remote, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x3a, 0x3, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x10}]}, @dstopts={0x0, 0x8, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @remote}]}, @routing={0x16, 0xe, 0x2, 0x2, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @local, @remote, @private1]}, @dstopts={0x3c, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0x9, [0xf, 0x5c8, 0x2, 0xe33, 0x5, 0x1ff]}}, @enc_lim={0x4, 0x1, 0x6}]}, @routing={0xff, 0x10, 0x0, 0x5, 0x0, [@empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1, @local, @local]}, @hopopts={0x1d, 0x12, '\x00', [@jumbo, @generic={0x4, 0x5b, "08f729fbe6f8ae4760cc77defef2e464c7a5263c35dccdff842c4a71aa7095d5b3bc1212a0d6a5c189f23960f1dfd9fbdbf9d49b372cbc396c214d7b32593d34d0b446dfd2cabf5e29162759c9fbc4522cbfe90107b00bdf363d27"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x4, "b9757eba"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x800, [0x8, 0x5, 0x9]}}]}, @routing={0x2b, 0x12, 0x0, 0x8, 0x0, [@empty, @local, @mcast1, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, @empty, @empty, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}], {{0x4e21, 0x4e20, 0x4, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, "b81b86", 0x8, "79b4b8"}, "e816dc00ef3d1c4ea2c8e9fb076e8fb1db837c4929882ed1d90796e4bf9503621537c3233c6369e973ce67b9366ba81e3c103217675b039bbd311eb13105bddb7ad27094ac0c28cbfbea35b7c0930c569b99c55751677a1187d8d008e9334e023ef7254e6f"}}}}}}}}, 0x421) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.223139639s ago: executing program 3 (id=8951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000003000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002", @ANYBLOB='@A'], 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000004f80)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5800000}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="91fe62ae01ef", 0x6}], 0x1}}], 0x2, 0x20040140) listen(r3, 0xf7f) (async, rerun: 32) r4 = accept(r3, 0xfffffffffffffffd, 0x0) (rerun: 32) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x4840}, 0x4040000) (async) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000000)=0x10001) 7.876849375s ago: executing program 3 (id=8956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bb61f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275040386e7d95f0669b740a5418d69d0", 0xffffffffffffd}, 0x60) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) 7.215643449s ago: executing program 3 (id=8963): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r1, &(0x7f0000000180)='}\\\x8a\x00', 0x288002, &(0x7f0000000240)={@align=0x4, {0x2, 0x6, 0x9}}, 0x151d, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x8, 0x34, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@generic={0x86, 0x5, "931cf0"}, @rr={0x7, 0x7, 0xb6, [@rand_addr=0x64010102]}, @rr={0x7, 0x7, 0xe9, [@empty]}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x1, 0xb, 0xa2a, 0x3, r1, 0x1, '\x00', r3, r2, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB='\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x5b8, 0x0, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x4e8, 0xffffffff, 0xffffffff, 0x4e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x238, 0x260, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x7, 0x7], 0x100, 0x20, 0x5, [@remote, @empty, @mcast2, @remote, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0x6}, @dev={0xfe, 0x80, '\x00', 0x2f}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @private2], 0x5}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x618) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f00000003c0)=@rc={0x1f, @none, 0x8}, 0x80, &(0x7f0000000780)=[{&(0x7f00000011c0)="b3dff2f5ca305b40a08fca01e19e1ccd188bebde2f3e513e7ce80f53cd4e2fbf4e4be662367058690c00ce2ca101a7c37f49abc7a8add3c44e8e58d7043a1f7b342d23d9abde04a56922cedc5faa6dd285bdb986d6fd1d360f525c00b745693d0eb478c5c47578afc96c007d34ed082f9dd9b33ae81adf0dacc83b7982a8de78215674856630aa57895935e18e8f17694aad1e6890cdba0d2fa6cfb8057d86a9e8189bb3", 0xa4}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}], 0x60}}, {{&(0x7f0000000840)=@caif=@util={0x25, "dd56a1b23e8d965b54e7b6401de4a102"}, 0x80, &(0x7f0000000500)=[{&(0x7f00000008c0)="68979b6ef253d6c022879cb89862ff2f0de7e759046238c4c1b48b18596131c7a706a014f509ddae81e51945612509fbca1e769920e4943e912015e1ec1be5d568e9e64e8839a97a9dc57e0b08b93926802af24fba289de09c61d8c45cebd767c27c5863a2261067680806475214dad33de6f3e1157221c3b88441bf1340be91451d87573d9fa884a56a1d735e3c9a4a89a7a902d3f7d4e76dd48a5baf72e1", 0x9f}, {&(0x7f0000000fc0)="01beaa5378bdfdb554d37f94d35237cee541955c49f3c69d7a77e4304da3662929a8fedce554213f0593df21b79ee6c3c29ddb967c148bca3be4a9d7d80ac3930b159269", 0x44}, {&(0x7f0000001040)="796e4e1a7a710feab253671f8c1ec6ca840a5977f1332720c6038ceb84c21dfa3f161f7b0990731af58814ca8570c745a781b7d0b184e59323275843f01448c7ce68d0a9e4297142dc8968c55b4340f091173eab69abb760084c0bde679d4a34fa337db5cb22dad3e9d9", 0x6a}], 0x3, &(0x7f0000001100)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}], 0x2, 0x4040800) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000006c0)={'ip6gretap0\x00'}) 7.091818286s ago: executing program 3 (id=8966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="52dae8d26f3deea90f81146b4b5f49ff50000000f906d051a92320e52206aa46f2e857594e8fa71aa952fe8c42e45be439de1e10c01a43856d7e36c480f9ac4bdef47aa1b181860d13", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b0007000000060011000900000008001300ae6e00000500140001000000"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x10000004) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000002c0)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x4008800) 7.040168793s ago: executing program 3 (id=8968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001900010000000000000000008020100000110005000000"], 0x6c}}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x7, 0x6, 0x7, r5}, &(0x7f00000001c0)=0x10) 5.345483823s ago: executing program 5 (id=8978): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x3, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fedade2531000000200001801400020076657468305f746f5f6272696467650008000100", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x28000}, 0x24000894) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xc, [@ptr={0x8, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x10}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7fffffff}}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @const={0xa, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x5f, 0x0, 0x61, 0x2e, 0x0, 0x61, 0x5f, 0x0, 0x61]}}, &(0x7f0000000240)=""/76, 0x78, 0x4c, 0x0, 0x9, 0x10000}, 0x28) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="44010000160001000000000000000000ac14140d000000000000000000000000fc000000000000000000000000000001fffe000800"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000032"], 0x144}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.298264202s ago: executing program 5 (id=8980): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, r3, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) sendmsg$sock(r0, &(0x7f0000006e40)={&(0x7f0000005980)=@nfc_llcp={0x27, r3, 0x0, 0x1, 0x9, 0x8, "e44ce782c15198a3d2123655a6a392ea5713b9d1baaf1affda9266cc65b10c86ec112d0e0398dd4930f9ba13441d096ecb8d004e167d61b767f7500d6395d5", 0x14}, 0x80, 0x0}, 0x4004010) 5.12591853s ago: executing program 5 (id=8981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000004100), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000004140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="639c25bd7000fbdbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d30eb55000000003e512fabc4237c31397f62b3839439cfa6124e8299ee962398cf7021c30b39d6dd81768ceb72993aa41e2dd8693dd47a89794a32c44ef56d11804500"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.29865195s ago: executing program 5 (id=8985): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8}]}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100)="ce4900b2908d133e56becff3dee6f71ce757e1eeee993b663b7bb795c113529b914a40f5200cfebe746dc988b45059d54111fc90525bc000c66e8f3e06c492f3982dbd50818f07b547c2dd757c989c6539039a5ce6b2ccc9ceb92324cfac71b9422645e3a4754540489381c576698372e32bfe14b1b3988fe4ed1505059ae9a3a30d43a9e055d71b6a79", &(0x7f00000001c0)=@tcp=r3, 0x4}, 0x20) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f00000001c0)={@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4.116133208s ago: executing program 5 (id=8986): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'team_slave_0\x00', 0x65395006ae0dccd0}) close(0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/user\x00') unshare(0x6a040000) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket(0x27, 0x2, 0x7) 3.915383885s ago: executing program 1 (id=8989): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0x9) pselect6(0xffffffffffffffa0, &(0x7f0000000040)={0x0, 0xfffffffffffffffa, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x15, 0x8, 0x1ff, 0xc20, 0x7ff, 0x3fffff, 0x0, 0x92}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) unshare(0x8000400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r6, 0x0, 0x0, 0x4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYRES16=r2, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003a00004425bd7000fcdbdf250a000000a803e877cd63797e4266c0d0e6a992785338"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 2.889778606s ago: executing program 1 (id=8996): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001180)={0x224, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x43, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x10}, @broadcast, @device_a, @from_mac, {0x6, 0xc03}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @measure_req={0x0, 0x0, {0x4, [{0x26, 0x1e, {0xa5, 0x1, 0x7, "676ccbd60bccfbfc4a03dda17fa6b1d68581d4565708cce354551a"}}]}}}}, @NL80211_ATTR_FRAME={0x194, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0xb, 0x7f}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x10, 0x5b, @random=0xc7, @val={0x1, 0x1, [{0x86d444a5fb18d6ba}]}, @void, [{0xdd, 0xed, "8c14bb9b75295a9c5894b4619b17b1fa181e5b72f04852ac300483eff4b958e4b0034ab46235ebfa2dfd28870fd14f1af30971c2a3f7020cd5f2b4a8c65a54691dcf8d2a332474283a588457a9e4080ced7be3a8960265814949d77581e59212eba19b06265d32055fda3dbf857bbac4d458f8c86657546945c82c95efdfe801e51563891fc99f763cbe370a4c35efb7a0151a7123c06147c390e96ba923add748709bb3c0d671e9ac80eeacdc15f559e68ea21f9996b3cb9049ed979b932dd60407cbd08d375e9b7f52253750ab05c14a8cf25f8d54637e30aecdc129649918775a58a66a77ada4724a1ac54c"}, {0xdd, 0x7a, "0dd6ef8a9ef7b7b1841e402054a6785f646052a00eed892e39bb7f2ad15a88f73bb5b3fbb010b96903ac59513467268fab1eb8f3ef8dace366752c8e73e696080a84e25659915b3ce7bbce42c865fb30f61c60f7ef2f499079ce398d465c128adeb76fd3a1a23f89be599a7680cab64cdc7c4090920b44086715"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0xfffc, 0x8000, 0xb52, 0xd2, 0x88c, 0x6, 0xc, 0x1000]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb9}]]}, 0x224}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r6 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f00000000c0), 0x8) sendmsg$inet_sctp(r9, &(0x7f0000001b40)={&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000740)="de", 0x1}], 0x1, 0x0, 0x0, 0x10000810}, 0x20040005) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 2.744718236s ago: executing program 0 (id=8998): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x30, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_TIMEOUT={0xfffffffffffffd4f, 0x7, 0x1, 0x0, 0x5}]}, 0x70}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780d2bbc6d9475b6787d27afb58638f452fad5917e6"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$NFT_BATCH(r4, &(0x7f0000001940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd1d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x898e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x8084}, 0x24008000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000001800000001000000000000000a0000009500"/40], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB="0180c200000000000000000086dd600000000008110000000000ee9462b30000000000000000ff02000000000000000000000000000100000e2200089078"], 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004cebd8d15dc12c02cbe854f7c00000000000000000000030000000e000000000000000005000000090000000000000700000000002e6100"], 0x0, 0x40, 0x0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x5, '\x00', 0x0, r9, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f0000000440), &(0x7f0000000040)=@udp=r5}, 0x20) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd2fc4f9fa2bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe096fb9801e4e31a6a64a6842745e2e8588d25290f230be8716eb824f"], 0x0) r10 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r10, &(0x7f00000006c0)={&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0), 0x0, 0x4008000}, 0x28008841) 2.239318023s ago: executing program 2 (id=9000): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x9, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="280100001700010028bd7000fddbdf25fc020000000000000000000000000001000004d43c000000fe80000000000000000000000000002be0000001000000000000000000000000ff0200000000000000000000000000014e2100004e2100070e0030202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000e00000020000000000000000000000004e2200034e2400000a00a0000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000000300000000000000050000000000000006c6000000000000f30b000000000000000000000000603d050000000000000004000000000000000000000000000080090000000000000000000100000000002c60ffffffffffff0c000000b96b6e0002010100000000000600000006000000d60a00002dbd7000fc5a"], 0x128}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028005000100"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 2.051123497s ago: executing program 0 (id=9001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x84, 0x1c, 0x1, 0x1, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x34, 0x10, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="0000023f3201"], 0x138) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000ffff24bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04003800128009000100766c616e000000002800028006000100040000001c1c04800c00010000000080670000000c0001fe00000000c731328c00000000", @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x8000002) 1.872981869s ago: executing program 0 (id=9002): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004080}, 0x81) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40802}, 0x44054) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xa7f61d2c332e8647}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdd}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x24008840) socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) write$cgroup_pid(r8, &(0x7f0000000740)=r10, 0x12) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r9) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x18, r11, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000900), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r12, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r13, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) socketpair(0x1a, 0x800, 0x6, &(0x7f0000000a00)) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r14, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x85) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), r14) sendmsg$NLBL_MGMT_C_LISTALL(r14, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r15, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)) 1.683653984s ago: executing program 1 (id=9003): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)="00538c", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b94327d", 0x5}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006912b4000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r1, 0x8ec6, 0x10}, 0xc) 1.679039363s ago: executing program 0 (id=9004): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff2, 0x9}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@gettaction={0xd8, 0x32, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x69, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8b9}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x500000}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7571}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c00010062"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="7800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000080f3e3a8c3d00040014004c001a80040007a91c000a8005000800010000000500080002000000050008000b000000280002802408018008001b000200000008000e000000000008000200400000000800d50002000000"], 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000), 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14e40000c6b15a839662b7b4b4c08687d0f0647873134b0f083d2c8ed24215c1e419deb5491dab2f3708d9d7b77da50c51a7950eb2a546a7b6d3956a15b0", @ANYRES16=r9, @ANYBLOB="97ff2dbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) syz_genetlink_get_family_id$gtp(0x0, r7) (async) syz_genetlink_get_family_id$gtp(0x0, r7) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 1.603275581s ago: executing program 1 (id=9005): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x10000, @private0, 0x7}, @in6={0xa, 0x0, 0x0, @local, 0x7fc}], 0x38) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x6, 0xfa, 0x0, 0x8, 0x9, 0x8, 0x58, 0x0, 0x17, 0x5}, 0xe) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000112, 0x0) 1.138626344s ago: executing program 2 (id=9006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x80006, 0x81) getsockopt$bt_hci(r1, 0x84, 0x82, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FITRIM(r2, 0xc0185879, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={0x0, r3, 0x4000, r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000002a193d6b180001800800bfec7f91008c976f83c2390b01006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000013fffff211000100"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x202, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4a, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000002) r5 = socket(0x2, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6tnl0\x00', r4, 0x4, 0x6, 0xf, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x48, 0x9, 0x8}}) sendmmsg$inet(r5, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="4a63d56b72a2086de5742bf2bca9310314f4bf61", 0x14}, {&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="ee2ae36e1e0c82e1ce2876f3afc41eb771c394fc89de013dea286c97cf848bedf98764caf980e2eeaad16ecab17c472399", 0x31}, {&(0x7f00000005c0)="339a2f74dc38df13b8da3f5b6095759b34d279e1154fdfce971d337f6c981d72d8c8ce3dac1f55b9cd07162193e1569a51846d0a22e400042b7899b1f12a388c42dec798c7d0480a22e9cef5519cc56dca49a00209984b96d7be0c6809612a4d0afbacc972bf3447ae9fe54122df8599ca6b3075c7f5c7cb37c94479bcde7a2e2d972ca0c9f1c3d4ddf725711178a396aeeef2857a87f4a9b71a700069f7c137bd67a0ca9b418bc5289a7821c07ec50403b53cc1e4306d809da5665669d968ef0145767c27bd5be643107823d1a8d1857fb3471d1143578988ea50c37451ce13f9f95bcd797e936346ecef", 0xeb}], 0x4, &(0x7f00000007c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xa0}}, {{&(0x7f0000000880)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000940)="7a07a2c071ff769e25e316c02aea62040f1ee0f52a305895befdbee7e1ab3fb5a8865f8012e6359bd7d9889165dca2f09388fe3f3961f18bb1202632a90113914cc23fd720acb5068dd57c292e5d6a4aae426c1dc76d2c216f1c2445daa9bffb68e0ccf899ad1320f599d3410534117f026db6f2279e7ec05d770642dfd3e16f0f2817909059b0f6998609e3766a1f70134adfab55ea33bd635c6a72acb428ad11d24bd35b1df3", 0xa7}, {&(0x7f0000000a00)="edf37f6c09abaa3ba8dac90e8ee70d4ad7d2ebbbbeda24ab9d03eb1e71d03d2b614ce33740075d31f2e9afcfbef67b230464117d87dc570fc6c0877c3c7aacdec439a5aef2f7dc1db6fa8816fe3cf1123538064a8caf9d9cfb575ba974213fa4306e4e432a386e12ce73087c22606c1b34b38597b5aca511287841c10817a2270620112eb63a6171f81fb55994d48119fc6716ffa60d200950f3060599bad02bdc04acd73faabeec8b30", 0xaa}, {&(0x7f0000000ac0)="ad2bffe7f4cdc40b593c33bcf4117124469270851b061166279b337c0e845fd6ad99175952060a37c7bbc351e75fa73b2327b3e1e0abced526e58b4fd4eb769cc06ebd58b1b5fcead3b8315b2202df731d0e27d0bc40c0ad2209de4cc967bf64e053e709651555a06fc1d2e041d2b2d300ac1304d6e50ce79cfd51a2195788f1e43370693872456b16c6", 0x8a}], 0x3, &(0x7f0000000bc0)=[@ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0xf, 0x9a, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1e}]}, @rr={0x7, 0x1b, 0xa6, [@rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @local, @multicast2, @empty]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x48}}, {{&(0x7f0000000c40)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000c80)="44515767c746c70fadfbb38ff4b9fbae8722a9bf2ea9facb50ba028b495033ed434de58af1be6021e824637081a17d2995eae7860e1f469815254e22902f00e239336caa6600bb1503d6d7e6777adf597a26280f9927d4a2dc78c408df51733077b255e3aac67bf7c414e13372077e8a6b3c53e0a392b67f60a5901004b922b145dd3599fe985f1c4ba4d6500df88bfad9e4d049a0c31d012b5e68433b47d3a5a6f10e85e1bb3bb0f640d2056e8981dda74b0ea3b3bcc3ce194009915a381c320e09a0c8948d6bccf224d641525a18e645347d55f02d3819b3fa362e6b4e272598ac10", 0xe3}], 0x1, &(0x7f0000000dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xed6}}, @ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x20, 0x2, [{0x5, 0x12, "f545a994dc6e2ba0956aa82c81a80a4a"}, {0x1, 0x8, "a61a69e8898e"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x78}}], 0x5, 0x488c4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000000c0)={0x8, {{0xa, 0x4e22, 0x17, @private0, 0x8}}}, 0x88) 849.340525ms ago: executing program 2 (id=9007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'team0\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x0, 0xd8a, 0x0, 0x2, 0xc, 0x2, 0x3, 0x80000001}}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000280)={0x40, 0x7f, 0x8, 0x9}, 0x8) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) 841.496596ms ago: executing program 5 (id=9008): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.throttle.io_serviced\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x7, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000780), &(0x7f0000000200)=0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040), 0x10) listen(r9, 0x0) socket(0x28, 0x5, 0x0) accept$phonet_pipe(r9, &(0x7f0000000000), &(0x7f00000000c0)=0x10) 608.223989ms ago: executing program 1 (id=9009): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x57e1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 546.04439ms ago: executing program 2 (id=9010): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x194, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x24, 0x6, "290ce618b46819a0ed97474dccf084feeedca11d94f9b982904a650b90713d99"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x103, 0x6, "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"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0x1f4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={&(0x7f0000000300)="fbcdd87f087a05455b53fad4bbd29e2531016d746df368ba32e12e0fbf98c7e02a5519da4b1f76c4078f4eb38ff63cf95bd0cb941623c531778d6d2143ef2fbdcac746d20dabd06194c1d8f80265d5aefcff3a", &(0x7f0000000480)=""/71, &(0x7f00000005c0)="56a01479c0b7b5986a1a38a59e45d8037b25877b7d23774291b4e458a16ddb09f26e2323e2e7a1612a335198b4f9cb0244e639765f8500c5bff221166d122458bd9ffc3d3c3944078532e690c040c3021f1965cada4af2d7ac578646132643cadab7ae1808a65c4b826465073ef827620d58787f96c3", &(0x7f0000000640)="43f629cb49d475", 0x2, r1, 0x4}, 0x38) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC=r3], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="148000003000010000000000000000000500000a1400000011000100ffffffff000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = accept$phonet_pipe(r3, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000200)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e65766500002000028008001100"], 0x64}}, 0x20000000) 411.959049ms ago: executing program 2 (id=9011): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x81}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@multicast1, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff000000000000000010000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 279.236027ms ago: executing program 0 (id=9012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="300000001a000100000000000000000081008000008000010900000014000280"], 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac000000210001000000000001000000000000000000e31f0000000000000000fe8000000000000000000000000000bb0000000086bf97369db4624000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ac1414aa0000000000000000000000003c040000053500000a0002000a0010000000000000000000"], 0xac}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x20000001}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000e0ff0f003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c304050000000000200012800e0001006970366772657461700000000c00028008000c0001010000"], 0x40}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040), 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000380)="40ec", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000003780)="8d", 0x1}], 0x1, &(0x7f0000004b00)=ANY=[], 0xf0}}], 0x2, 0x4000000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4aee0000", @ANYRES16=0x0, @ANYBLOB="03002cbd70000e00000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 103.98829ms ago: executing program 1 (id=9013): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0xd0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0xd0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0x3a}, 0x20) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x4d5, 0x7f) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000540)=""/238, 0xee}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/114, 0x72}, {&(0x7f0000002640)=""/92, 0x5c}, {&(0x7f00000026c0)=""/201, 0xc9}, {&(0x7f00000027c0)=""/69, 0x45}], 0x6, &(0x7f00000028c0)=""/78, 0x4e}, 0x6}, {{&(0x7f0000002940)=@qipcrtr, 0x80, &(0x7f0000002d40)=[{&(0x7f00000029c0)=""/171, 0xab}, {&(0x7f0000002a80)=""/69, 0x45}, {&(0x7f0000002b00)=""/117, 0x75}, {&(0x7f0000002b80)=""/60, 0x3c}, {&(0x7f0000002bc0)=""/193, 0xc1}, {&(0x7f0000002cc0)=""/12, 0xc}, {&(0x7f0000002d00)=""/1, 0x1}], 0x7, &(0x7f0000002dc0)=""/226, 0xe2}, 0x18}, {{&(0x7f0000002ec0)=@nfc_llcp, 0x80, &(0x7f0000004300)=[{&(0x7f0000002f40)=""/212, 0xd4}, {&(0x7f0000003040)=""/108, 0x6c}, {&(0x7f00000030c0)}, {&(0x7f0000003100)=""/28, 0x1c}, {&(0x7f0000003140)=""/55, 0x37}, {&(0x7f0000003180)=""/175, 0xaf}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/10, 0xa}, {&(0x7f0000004280)=""/97, 0x61}], 0x9, &(0x7f00000043c0)=""/252, 0xfc}, 0x5}, {{&(0x7f00000044c0)=@hci, 0x80, &(0x7f0000004700)=[{&(0x7f0000004540)=""/227, 0xe3}, {&(0x7f0000004640)=""/187, 0xbb}], 0x2, &(0x7f0000004740)=""/241, 0xf1}, 0xd}, {{&(0x7f0000004840)=@pppol2tp, 0x80, &(0x7f0000005900)=[{&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)}], 0x2, &(0x7f0000005940)=""/124, 0x7c}, 0x401}, {{&(0x7f00000059c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005a40)=""/83, 0x53}, {&(0x7f0000005ac0)=""/190, 0xbe}, {&(0x7f0000005b80)=""/61, 0x3d}, {&(0x7f0000005bc0)=""/99, 0x63}, {&(0x7f0000005c40)=""/36, 0x24}], 0x5}, 0x9}, {{&(0x7f0000005d00)=@isdn, 0x80, &(0x7f0000007040)=[{&(0x7f0000005d80)=""/64, 0x40}, {&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/98, 0x62}, {&(0x7f0000006e40)=""/238, 0xee}, {&(0x7f0000006f40)=""/178, 0xb2}, {&(0x7f0000007000)=""/14, 0xe}], 0x6}, 0x8}, {{&(0x7f00000070c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000007540)=[{&(0x7f0000007140)=""/246, 0xf6}, {&(0x7f0000007240)=""/112, 0x70}, {&(0x7f00000072c0)=""/88, 0x58}, {&(0x7f0000007340)=""/186, 0xba}, {&(0x7f0000007400)=""/150, 0x96}, {&(0x7f00000074c0)=""/100, 0x64}], 0x6, &(0x7f00000075c0)=""/57, 0x39}, 0x9d1}], 0x8, 0x10200, &(0x7f0000007800)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0x5}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r7, &(0x7f0000000300)="5af9", 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r6, 0x40, 0x7807, 0x80, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, @empty, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r6, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1.417186ms ago: executing program 2 (id=9014): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0 (id=9015): socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x80000001, 0x0, 0x0, 0x100}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000700)) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000700)) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) (async) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9}, &(0x7f0000000580), 0x0}, 0x20) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, 0x0) socket(0x400000000010, 0x3, 0x0) kernel console output (not intermixed with test programs): 69536][ T4928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7462'. [ 1224.899065][ T4932] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1224.945787][ T4942] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7464'. [ 1224.955220][ T4941] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7464'. [ 1225.019290][ T4940] netlink: 'syz.0.7463': attribute type 4 has an invalid length. [ 1225.124028][ T4940] netlink: 'syz.0.7463': attribute type 4 has an invalid length. [ 1225.147376][ T4947] sctp: [Deprecated]: syz.5.7468 (pid 4947) Use of int in maxseg socket option. [ 1225.147376][ T4947] Use struct sctp_assoc_value instead [ 1225.654756][ T4964] batman_adv: batadv0: Adding interface: macsec2 [ 1225.661417][ T4964] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 1225.841399][ T4965] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7473'. [ 1226.293547][ T4985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7477'. [ 1226.349038][ T4985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7477'. [ 1226.358231][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7477'. [ 1226.466218][ T4993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7479'. [ 1226.722491][ T5000] netlink: 'syz.3.7482': attribute type 11 has an invalid length. [ 1228.726969][ T5096] netlink: 'syz.5.7511': attribute type 2 has an invalid length. [ 1229.093720][ T5108] netlink: 'syz.0.7515': attribute type 3 has an invalid length. [ 1229.118838][ T5108] netlink: 'syz.0.7515': attribute type 1 has an invalid length. [ 1229.135619][ T5108] NCSI netlink: No device for ifindex 0 [ 1229.505588][ T5119] syzkaller0: entered promiscuous mode [ 1229.511144][ T5119] syzkaller0: entered allmulticast mode [ 1231.566534][ T5161] __nla_validate_parse: 10 callbacks suppressed [ 1231.566557][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7529'. [ 1231.582627][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7529'. [ 1231.618864][ T5163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7529'. [ 1231.628025][ T5163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7529'. [ 1233.532113][ T5139] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1233.720476][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7531'. [ 1233.823674][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7531'. [ 1233.906666][ T5183] netlink: 'syz.3.7533': attribute type 1 has an invalid length. [ 1233.915761][ T5184] netlink: 'syz.3.7533': attribute type 1 has an invalid length. [ 1233.959986][ T5184] bond7: entered promiscuous mode [ 1234.013452][ T5181] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1234.104399][ T5183] batman_adv: batadv0: Interface deactivated: dummy0 [ 1234.137822][ T5183] batman_adv: batadv0: Removing interface: dummy0 [ 1234.160447][ T5183] bond2: (slave veth0_to_bond): Releasing active interface [ 1234.179624][ T5183] bond0: (slave bond_slave_0): Releasing backup interface [ 1234.218600][ T5183] bond0: (slave bond_slave_1): Releasing backup interface [ 1234.229719][ T5183] team_slave_0: left allmulticast mode [ 1234.236962][ T5183] team0: Port device team_slave_0 removed [ 1234.244173][ T5183] team_slave_1: left allmulticast mode [ 1234.250182][ T5201] Bluetooth: MGMT ver 1.23 [ 1234.270403][ T5183] team0: Port device team_slave_1 removed [ 1234.276959][ T5183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.300712][ T5183] net_ratelimit: 13 callbacks suppressed [ 1234.300733][ T5183] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1234.340567][ T5204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7535'. [ 1234.373621][ T5184] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1234.450613][ T5196] bridge_slave_0: left allmulticast mode [ 1234.474679][ T5196] bridge_slave_0: left promiscuous mode [ 1234.480563][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.491527][ T5196] bridge_slave_1: left allmulticast mode [ 1234.497240][ T5196] bridge_slave_1: left promiscuous mode [ 1234.503084][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.591420][ T5196] bond5: (slave veth0_to_bond): Releasing active interface [ 1234.644580][ T5196] bond0: (slave bond_slave_0): Releasing backup interface [ 1234.725746][ T5196] bond0: (slave bond_slave_1): Releasing backup interface [ 1234.774615][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.805926][ T5196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.833591][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.849088][ T5196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.900525][ T5196] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1234.937678][ T5184] bond7: left promiscuous mode [ 1235.071037][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7540'. [ 1235.210937][ T5222] veth9: entered allmulticast mode [ 1235.242289][ T5222] bond6: (slave veth9): Enslaving as an active interface with an up link [ 1235.287334][ T5222] bond6 (unregistering): (slave veth9): Releasing backup interface [ 1235.362894][ T5222] bond6 (unregistering): Released all slaves [ 1235.476710][ T5247] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.7544'. [ 1235.485965][ T5247] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.7544'. [ 1235.794426][ T5254] tap0: tun_chr_ioctl cmd 1074025692 [ 1236.025204][ T5278] macvlan3: entered allmulticast mode [ 1236.591058][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7549'. [ 1236.608328][ T5307] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 1236.615689][ T5307] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 1236.623009][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7549'. [ 1236.638547][ T5307] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1236.691197][ T5300] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1236.879063][ T5318] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1236.908841][ T5318] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1236.922226][ T5321] netlink: 'syz.1.7555': attribute type 1 has an invalid length. [ 1236.948795][ T5318] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1236.958657][ T5323] netlink: 'syz.0.7554': attribute type 8 has an invalid length. [ 1237.014634][ T5321] bond6: option mode: invalid value (65) [ 1237.061789][ T5321] bond6 (unregistering): Released all slaves [ 1237.254084][ T5326] bond6 (unregistering): Released all slaves [ 1237.309562][ T5330] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7555'. [ 1237.526538][ T5343] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1237.583159][ T5344] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1237.927330][ T5356] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1238.836928][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 1238.846957][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 1238.883760][ T5397] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1239.002676][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7569'. [ 1239.012032][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7569'. [ 1239.714352][ T5433] syzkaller0: entered promiscuous mode [ 1239.719921][ T5433] syzkaller0: entered allmulticast mode [ 1239.865262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.993410][ T5433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1240.051387][ T5433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1240.150017][T11642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.157217][T11642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.176348][ T35] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20002 - 0 [ 1240.233105][T11642] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20002 - 0 [ 1240.286326][T11642] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20002 - 0 [ 1240.320490][ T5449] Bluetooth: MGMT ver 1.23 [ 1240.365761][T11642] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20002 - 0 [ 1240.544036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1244.253760][ T5458] __nla_validate_parse: 2 callbacks suppressed [ 1244.253779][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1244.268944][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1244.310343][ T5470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1244.320145][ T5470] tipc: Resetting bearer [ 1244.396869][ T5470] batadv_slave_1: entered promiscuous mode [ 1244.404611][ T5470] batman_adv: batadv0: Interface activated: macvtap2 [ 1244.413834][ T5470] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1244.435218][ T9700] bridge0: entered promiscuous mode [ 1244.463216][T27819] syz0: Port: 1 Link ACTIVE [ 1244.486313][T11642] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1244.563894][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7584'. [ 1244.574188][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7584'. [ 1244.827233][ T5496] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7587'. [ 1244.837050][ T5496] netlink: 'syz.5.7587': attribute type 12 has an invalid length. [ 1244.844926][ T5496] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7587'. [ 1245.204110][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7592'. [ 1245.230274][ T5517] netlink: 'syz.3.7592': attribute type 22 has an invalid length. [ 1245.248486][ T5517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7592'. [ 1245.446346][ T5523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7593'. [ 1245.471591][ T5523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7593'. [ 1245.575574][T11642] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 1248.177833][ T5517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1248.238448][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1248.960385][ T5586] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1249.303073][ T5588] bridge0: left allmulticast mode [ 1249.313239][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.347404][ T5588] ipvlan0: left allmulticast mode [ 1249.352533][ T5588] veth0_vlan: left allmulticast mode [ 1249.363421][ T5588] macvtap0: left promiscuous mode [ 1249.408345][ T5588] bond2: left promiscuous mode [ 1249.418417][ T5588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1249.427798][ T5588] xfrm1: left allmulticast mode [ 1249.434616][ T5588] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 1249.451993][ T5588] bond6: left promiscuous mode [ 1249.456928][ T5588] bond6: left allmulticast mode [ 1249.466927][ T5588] bond7: left promiscuous mode [ 1249.471830][ T5588] ip6gre1: left promiscuous mode [ 1249.621770][ T5598] netlink: 'syz.1.7611': attribute type 210 has an invalid length. [ 1249.689671][ T5592] lo speed is unknown, defaulting to 1000 [ 1249.785918][ T5605] vti1: entered promiscuous mode [ 1249.995970][ T5618] __nla_validate_parse: 130 callbacks suppressed [ 1249.995991][ T5618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7613'. [ 1250.467226][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.476398][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.570036][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.578282][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.623786][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.632113][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.641843][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.649967][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.659172][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.667043][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.676747][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.684614][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.733542][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.741708][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.750883][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.758735][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.767912][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1250.775775][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1250.784966][ T5635] netlink: 'syz.1.7619': attribute type 29 has an invalid length. [ 1251.032082][ T5592] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1251.330879][ T5656] syzkaller0: entered promiscuous mode [ 1251.348340][ T5656] syzkaller0: entered allmulticast mode [ 1251.426539][ T5654] bond4: Setting coupled_control to off (0) [ 1251.773549][ T5654] tipc: Resetting bearer [ 1251.779577][ T5654] tipc: Resetting bearer [ 1251.822329][ T5654] tipc: Resetting bearer [ 1251.969197][ T5654] tipc: Resetting bearer [ 1251.992353][ T5654] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 1251.999872][ T5654] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 1252.011875][ T5654] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1252.034773][T11682] tipc: Resetting bearer [ 1253.576887][ T5711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.118095][ T5728] bridge0: entered allmulticast mode [ 1254.360848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1255.065852][ T5750] vlan0: entered allmulticast mode [ 1255.079566][ T5750] veth0_vlan: entered allmulticast mode [ 1255.269016][ T5760] pim6reg1: entered promiscuous mode [ 1255.274394][ T5760] pim6reg1: entered allmulticast mode [ 1255.368947][T28335] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1255.425840][T28335] Bluetooth: hci2: command 0x0401 tx timeout [ 1255.598731][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1255.697639][ T5756] __nla_validate_parse: 31 callbacks suppressed [ 1255.697663][ T5756] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7651'. [ 1255.789384][ T5771] tun0: tun_chr_ioctl cmd 1074025675 [ 1255.810428][ T5771] tun0: persist enabled [ 1255.834222][ T5771] tun0: tun_chr_ioctl cmd 1074025675 [ 1255.839619][ T5771] tun0: persist disabled [ 1256.060985][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1256.078138][ T5781] IPVS: length: 160 != 8 [ 1256.738615][ T5814] x_tables: duplicate underflow at hook 2 [ 1256.758507][ T5814] xt_NFQUEUE: number of total queues is 0 [ 1256.940571][ T5814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7665'. [ 1257.169419][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7664'. [ 1257.621913][ T5844] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7670'. [ 1257.743975][ T5842] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7671'. [ 1257.753770][ T5850] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1257.754104][ T5842] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7671'. [ 1257.858905][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7671'. [ 1258.971051][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7681'. [ 1258.996466][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7681'. [ 1260.849818][ T5942] validate_nla: 22 callbacks suppressed [ 1260.849844][ T5942] netlink: 'syz.2.7697': attribute type 10 has an invalid length. [ 1260.880799][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1260.895239][ T5942] team0: Device netdevsim1 is of different type [ 1261.892887][ T5966] lo speed is unknown, defaulting to 1000 [ 1262.635536][ T5999] __nla_validate_parse: 5 callbacks suppressed [ 1262.635558][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7712'. [ 1262.650691][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7712'. [ 1262.683032][ T5958] dvmrp0: entered allmulticast mode [ 1262.852923][ T5975] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7707'. [ 1263.502063][ T6014] tipc: Enabled bearer , priority 0 [ 1263.530349][ T6014] syzkaller0: entered promiscuous mode [ 1263.535891][ T6014] syzkaller0: entered allmulticast mode [ 1263.546213][ T6014] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1263.554588][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7718'. [ 1263.555517][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7718'. [ 1263.666371][ T6014] tipc: Resetting bearer [ 1263.679609][ T6012] tipc: Resetting bearer [ 1263.799869][ T6012] tipc: Disabling bearer [ 1263.876146][ T5966] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1264.138797][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7723'. [ 1264.560720][ T6046] netlink: 'syz.2.7725': attribute type 61 has an invalid length. [ 1265.047450][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1265.543194][ T6079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7731'. [ 1265.553876][ T6079] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7731'. [ 1265.693925][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7734'. [ 1265.712810][ T6081] xfrm1: entered promiscuous mode [ 1265.718174][ T6081] xfrm1: entered allmulticast mode [ 1266.324814][ T6101] tipc: New replicast peer: 255.255.255.255 [ 1266.339958][ T6101] tipc: Enabled bearer , priority 10 [ 1267.030189][ T6126] lo speed is unknown, defaulting to 1000 [ 1267.646710][ T6143] __nla_validate_parse: 9 callbacks suppressed [ 1267.646732][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7749'. [ 1268.577663][ T6126] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1268.822784][ T6192] lo speed is unknown, defaulting to 1000 [ 1269.580762][ T6192] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1269.825892][ T6223] bond0: entered promiscuous mode [ 1269.840671][ T6223] bond_slave_0: entered promiscuous mode [ 1269.857281][ T6223] bond_slave_1: entered promiscuous mode [ 1269.894492][ T6223] bond0: left promiscuous mode [ 1269.901145][ T6223] bond_slave_0: left promiscuous mode [ 1269.923807][ T6223] bond_slave_1: left promiscuous mode [ 1270.031989][ T6228] bond0: entered promiscuous mode [ 1270.037094][ T6228] bond_slave_0: entered promiscuous mode [ 1270.043007][ T6228] bond_slave_1: entered promiscuous mode [ 1270.052032][ T6228] bond0: left promiscuous mode [ 1270.056864][ T6228] bond_slave_0: left promiscuous mode [ 1270.062582][ T6228] bond_slave_1: left promiscuous mode [ 1270.388094][ T6233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7766'. [ 1270.457456][ T6235] netlink: 'syz.0.7767': attribute type 1 has an invalid length. [ 1270.465231][ T6235] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7767'. [ 1270.646894][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7768'. [ 1270.988615][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1271.485032][ T6263] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1271.513613][ T6261] pim6reg: entered allmulticast mode [ 1271.609018][ T6266] kthread_run failed with err -4 [ 1271.662515][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1271.669482][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1271.676438][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1271.692172][ T6273] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1271.724416][ T6273] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1271.764976][ T6273] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1271.814214][ T6275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7777'. [ 1271.866682][ T6273] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1271.984221][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1271.997944][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7780'. [ 1272.010421][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1272.026428][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1272.053085][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1272.071243][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1272.093709][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 1272.105334][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7782'. [ 1272.144649][ T6287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7781'. [ 1272.190570][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7781'. [ 1272.334133][ T6289] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7783'. [ 1272.661563][ T6306] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1272.672909][ T6306] __nla_validate_parse: 1 callbacks suppressed [ 1272.672923][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'. [ 1272.805110][ T6313] x_tables: ip_tables: TEE.1 target: invalid size 40 (kernel) != (user) 0 [ 1272.875487][ T6315] pim6reg: entered allmulticast mode [ 1272.944060][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7792'. [ 1273.794962][ T6341] syzkaller0: entered promiscuous mode [ 1273.800602][ T6341] syzkaller0: entered allmulticast mode [ 1273.936842][ T6342] netlink: 'syz.0.7798': attribute type 9 has an invalid length. [ 1273.952203][ T6345] veth0_vlan: entered allmulticast mode [ 1273.972777][ T6341] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7801'. [ 1273.982159][ T6341] openvswitch: netlink: Message has 512 unknown bytes. [ 1275.181459][ T6401] netlink: 'syz.1.7815': attribute type 2 has an invalid length. [ 1275.339931][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7816'. [ 1275.360293][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7816'. [ 1275.400845][ T6409] syzkaller0: entered promiscuous mode [ 1275.406393][ T6409] syzkaller0: entered allmulticast mode [ 1275.460954][ T6414] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7819'. [ 1275.798421][ T6423] netlink: 'syz.3.7821': attribute type 4 has an invalid length. [ 1275.806373][ T6423] netlink: 'syz.3.7821': attribute type 5 has an invalid length. [ 1275.814606][ T6423] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7821'. [ 1276.263670][ T6427] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7822'. [ 1276.326280][ T6434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7824'. [ 1276.568292][ T6458] netlink: 'syz.5.7830': attribute type 5 has an invalid length. [ 1276.714510][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7831'. [ 1276.747117][ T6468] xt_TCPMSS: Only works on TCP SYN packets [ 1277.973900][ T6513] __nla_validate_parse: 3 callbacks suppressed [ 1277.973921][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7847'. [ 1278.176868][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1278.239958][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1278.255381][ T6524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7851'. [ 1278.338735][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7852'. [ 1278.369476][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7852'. [ 1278.388964][ T6525] netlink: 'syz.3.7852': attribute type 20 has an invalid length. [ 1278.810277][ T6541] IPv6: sit1: Disabled Multicast RS [ 1278.877021][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7856'. [ 1279.031231][ T6551] netlink: 'syz.2.7860': attribute type 11 has an invalid length. [ 1279.043798][ T6551] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.7860'. [ 1279.053202][ T6551] netlink: 'syz.2.7860': attribute type 11 has an invalid length. [ 1279.061081][ T6551] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.7860'. [ 1279.070439][ T6551] netlink: 'syz.2.7860': attribute type 11 has an invalid length. [ 1279.078323][ T6551] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.7860'. [ 1279.689796][ T6589] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1280.066626][ T6603] bond5: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 1280.076477][ T6603] bond5: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1280.090685][ T6603] bond5: entered allmulticast mode [ 1280.096463][ T6603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1280.124642][ T6610] tipc: Enabling of bearer rejected, failed to enable media [ 1280.134064][ T6611] tipc: Enabling of bearer rejected, failed to enable media [ 1280.188925][ T6610] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1280.239715][ T6610] bond6 (unregistering): Released all slaves [ 1280.301059][ T6619] nbd: must specify a size in bytes for the device [ 1280.314400][ T6619] netlink: 'syz.5.7881': attribute type 8 has an invalid length. [ 1280.331409][ T6619] geneve2: entered promiscuous mode [ 1280.337053][ T6619] geneve2: entered allmulticast mode [ 1280.737100][ T6632] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1281.976815][ T6707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1282.063381][ T6721] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1282.340764][ T6730] lo speed is unknown, defaulting to 1000 [ 1283.092899][ T6768] __nla_validate_parse: 16 callbacks suppressed [ 1283.092921][ T6768] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7917'. [ 1283.899068][ T6793] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7924'. [ 1283.983775][ T6730] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1283.992488][ T6730] hsr0 speed is unknown, defaulting to 1000 [ 1284.318837][ T6806] siw: device registration error -23 [ 1284.360696][ T6780] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1284.381228][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7931'. [ 1284.396937][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7930'. [ 1284.426821][ T6806] ipip0: entered promiscuous mode [ 1284.432395][ T6806] ipip0: entered allmulticast mode [ 1284.543496][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7931'. [ 1284.678815][ T6818] netlink: 'syz.0.7930': attribute type 11 has an invalid length. [ 1284.821152][ T6830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7935'. [ 1284.966979][ T6827] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7934'. [ 1285.128899][ T6837] batman_adv: batadv0: Adding interface: dummy0 [ 1285.135322][ T6837] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.161108][ T6837] batman_adv: batadv0: Interface activated: dummy0 [ 1285.319704][ T6849] netlink: 'syz.3.7940': attribute type 3 has an invalid length. [ 1286.019782][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7937'. [ 1286.533153][ T6902] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7949'. [ 1286.602134][ T6903] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 1286.822635][ T6911] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1286.948634][T27824] IPVS: starting estimator thread 0... [ 1287.025044][ T6910] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1287.079281][ T6916] IPVS: using max 24 ests per chain, 57600 per kthread [ 1287.104388][ T6920] netlink: 'syz.1.7954': attribute type 30 has an invalid length. [ 1287.118515][ T6920] netlink: 'syz.1.7954': attribute type 21 has an invalid length. [ 1287.327484][ T6923] FAULT_INJECTION: forcing a failure. [ 1287.327484][ T6923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.341576][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.2.7955 Not tainted syzkaller #0 PREEMPT(full) [ 1287.341597][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1287.341609][ T6923] Call Trace: [ 1287.341615][ T6923] [ 1287.341768][ T6923] dump_stack_lvl+0xe8/0x150 [ 1287.341808][ T6923] should_fail_ex+0x40c/0x560 [ 1287.341833][ T6923] _copy_to_user+0x31/0xb0 [ 1287.341860][ T6923] simple_read_from_buffer+0xe1/0x170 [ 1287.341888][ T6923] proc_fail_nth_read+0x1bb/0x230 [ 1287.341913][ T6923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.341937][ T6923] ? rw_verify_area+0x24a/0x4c0 [ 1287.341964][ T6923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.341985][ T6923] vfs_read+0x213/0xa80 [ 1287.342010][ T6923] ? do_sock_getsockopt+0x51d/0x7e0 [ 1287.342038][ T6923] ? __pfx_vfs_read+0x10/0x10 [ 1287.342061][ T6923] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1287.342085][ T6923] ? do_sys_openat2+0x14e/0x200 [ 1287.342103][ T6923] ? kmem_cache_free+0x182/0x650 [ 1287.342122][ T6923] ? fd_install+0x94/0x3d0 [ 1287.342154][ T6923] ksys_read+0x150/0x270 [ 1287.342179][ T6923] ? __pfx_ksys_read+0x10/0x10 [ 1287.342256][ T6923] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1287.342284][ T6923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.342302][ T6923] do_syscall_64+0x174/0x580 [ 1287.342326][ T6923] ? trace_irq_disable+0x3b/0x140 [ 1287.342348][ T6923] ? clear_bhb_loop+0x40/0x90 [ 1287.342368][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.342384][ T6923] RIP: 0033:0x7fe4e655e68e [ 1287.342401][ T6923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1287.342416][ T6923] RSP: 002b:00007fe4e749cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1287.342433][ T6923] RAX: ffffffffffffffda RBX: 00007fe4e749d6c0 RCX: 00007fe4e655e68e [ 1287.342445][ T6923] RDX: 000000000000000f RSI: 00007fe4e749d0a0 RDI: 0000000000000006 [ 1287.342455][ T6923] RBP: 00007fe4e749d090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.342465][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.342474][ T6923] R13: 00007fe4e6826038 R14: 00007fe4e6825fa0 R15: 00007fff5ee41ce8 [ 1287.342499][ T6923] [ 1287.911063][ T6928] netlink: 'syz.0.7957': attribute type 16 has an invalid length. [ 1287.913589][ T6932] netlink: 'syz.1.7959': attribute type 49 has an invalid length. [ 1288.130444][ T6949] __nla_validate_parse: 12 callbacks suppressed [ 1288.130467][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7965'. [ 1288.191366][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1288.332115][ T6949] bond8: Unable to set up delay as MII monitoring is disabled [ 1288.344304][ T6949] bond8 (unregistering): Released all slaves [ 1288.611046][ T6962] syzkaller1: entered promiscuous mode [ 1288.616613][ T6962] syzkaller1: entered allmulticast mode [ 1288.684000][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7968'. [ 1288.731645][ T6974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7966'. [ 1288.865881][ T6969] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7969'. [ 1289.133256][ T6981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7972'. [ 1289.207955][ T6984] netlink: 'syz.3.7974': attribute type 1 has an invalid length. [ 1289.495278][ T6999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7978'. [ 1289.530623][ T6999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1289.732648][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7981'. [ 1289.750090][ T7008] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1289.864737][ T7017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7984'. [ 1289.963134][ T7019] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1289.986750][ T7019] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1290.200255][ T7029] lo speed is unknown, defaulting to 1000 [ 1290.546056][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7990'. [ 1290.683679][ T7043] batadv_slave_1: entered promiscuous mode [ 1290.692052][ T7043] batadv_slave_1: left promiscuous mode [ 1291.245376][ T7029] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1291.253680][ T7029] hsr0 speed is unknown, defaulting to 1000 [ 1291.370717][ T7075] netlink: 'syz.3.7998': attribute type 1 has an invalid length. [ 1291.717601][ T7090] syzkaller0: entered promiscuous mode [ 1291.723161][ T7090] syzkaller0: entered allmulticast mode [ 1292.645044][ T7101] gretap0: entered promiscuous mode [ 1293.146842][ T7128] __nla_validate_parse: 9 callbacks suppressed [ 1293.146862][ T7128] netlink: 632 bytes leftover after parsing attributes in process `syz.0.8015'. [ 1293.185921][ T6820] udevd[6820]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 1293.252156][ T7137] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8017'. [ 1293.422135][ T7146] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1293.436869][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8019'. [ 1293.450277][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8019'. [ 1293.459313][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8019'. [ 1293.470755][ T7147] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1293.957478][ T7163] lo speed is unknown, defaulting to 1000 [ 1293.966068][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1294.050728][ T7169] syzkaller0: entered promiscuous mode [ 1294.056282][ T7169] syzkaller0: entered allmulticast mode [ 1294.109918][ T7169] tipc: Enabled bearer , priority 0 [ 1294.117552][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1294.126484][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1294.135428][ T7169] netlink: 'syz.3.8024': attribute type 18 has an invalid length. [ 1294.157265][ T7168] tipc: Resetting bearer [ 1294.255322][ T7168] tipc: Disabling bearer [ 1294.371855][ T7175] sctp: [Deprecated]: syz.0.8027 (pid 7175) Use of int in maxseg socket option. [ 1294.371855][ T7175] Use struct sctp_assoc_value instead [ 1294.405406][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8026'. [ 1294.584206][ T7186] netlink: 'syz.3.8029': attribute type 1 has an invalid length. [ 1294.664038][ T7193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8030'. [ 1294.694124][ T7186] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1294.754757][ T7194] bond8: (slave dummy0): making interface the new active one [ 1294.764045][ T7196] netlink: 'syz.0.8031': attribute type 1 has an invalid length. [ 1294.800395][ T7194] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1295.070507][ T7208] netlink: 'syz.1.8035': attribute type 1 has an invalid length. [ 1295.326673][ T7208] bond6: entered promiscuous mode [ 1295.334360][ T7208] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1295.424735][ T7163] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1295.505774][ T7208] netlink: 'syz.1.8035': attribute type 5 has an invalid length. [ 1295.559405][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.566950][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.845098][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.857733][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.890231][ T7214] veth0_vlan: left allmulticast mode [ 1295.964983][ T7214] mac80211_hwsim hwsim73 wlan0: left promiscuous mode [ 1295.971844][ T7214] mac80211_hwsim hwsim73 wlan0: left allmulticast mode [ 1295.984409][ T7214] vlan0: left promiscuous mode [ 1295.989706][ T7214] macvtap1: left promiscuous mode [ 1296.008592][ T7214] vlan2: left allmulticast mode [ 1296.013500][ T7214] bridge1: left allmulticast mode [ 1296.075841][ T7214] bond2: left promiscuous mode [ 1296.080683][ T7214] bond2: left allmulticast mode [ 1296.094722][ T7214] vlan3: left promiscuous mode [ 1296.107464][ T7214] geneve2: left promiscuous mode [ 1296.112460][ T7214] geneve2: left allmulticast mode [ 1296.195611][ T7214] veth9: left allmulticast mode [ 1296.205130][ T7214] bond6: left promiscuous mode [ 1296.211738][ T7163] hsr0 speed is unknown, defaulting to 1000 [ 1296.372138][ T7208] macvtap2: entered allmulticast mode [ 1296.377789][ T7224] ±ÿª¨úrBº“: entered allmulticast mode [ 1296.385674][ T7224] tunl0: entered allmulticast mode [ 1296.392254][ T7224] gre0: entered allmulticast mode [ 1296.399059][ T7224] gretap0: entered allmulticast mode [ 1296.405823][ T7224] erspan0: entered allmulticast mode [ 1296.414648][ T7224] ip_vti0: entered allmulticast mode [ 1296.421097][ T7224] ip6_vti0: entered allmulticast mode [ 1296.427655][ T7224] sit0: entered allmulticast mode [ 1296.434412][ T7224] ip6tnl0: entered allmulticast mode [ 1296.441302][ T7224] ip6gre0: entered allmulticast mode [ 1296.448023][ T7224] syz_tun: entered allmulticast mode [ 1296.455232][ T7224] ip6gretap0: entered allmulticast mode [ 1296.464710][ T7224] bond0: entered allmulticast mode [ 1296.471193][ T7224] team0: entered allmulticast mode [ 1296.476594][ T7224] xfrm0: entered allmulticast mode [ 1296.495707][ T7224] tipc: Resetting bearer [ 1296.502301][ T7224] dummy0: entered allmulticast mode [ 1296.509346][ T7224] nlmon0: entered allmulticast mode [ 1296.517368][ T7224] vxcan0: entered allmulticast mode [ 1296.524273][ T7224] vxcan1: entered allmulticast mode [ 1296.534037][ T7224] veth0: entered allmulticast mode [ 1296.540607][ T7224] veth1: entered allmulticast mode [ 1296.546992][ T7224] wg0: entered allmulticast mode [ 1296.553417][ T7224] wg1: entered allmulticast mode [ 1296.559397][ T7224] wg2: entered allmulticast mode [ 1296.565215][ T7224] veth0_to_bridge: entered allmulticast mode [ 1296.572019][ T7224] bridge_slave_0: entered allmulticast mode [ 1296.609217][ T7224] veth1_to_bridge: entered allmulticast mode [ 1296.616457][ T7224] bridge_slave_1: entered allmulticast mode [ 1296.624123][ T7224] veth0_to_bond: entered allmulticast mode [ 1296.631450][ T7224] bond_slave_0: entered allmulticast mode [ 1296.638746][ T7224] veth1_to_bond: entered allmulticast mode [ 1296.645774][ T7224] bond_slave_1: entered allmulticast mode [ 1296.657041][ T7224] veth0_to_team: entered allmulticast mode [ 1296.664309][ T7224] team_slave_0: entered allmulticast mode [ 1296.672464][ T7224] veth1_to_team: entered allmulticast mode [ 1296.679718][ T7224] team_slave_1: entered allmulticast mode [ 1296.686629][ T7224] veth0_to_batadv: entered allmulticast mode [ 1296.701303][ T7224] batadv_slave_0: entered allmulticast mode [ 1296.709927][ T7224] veth1_to_batadv: entered allmulticast mode [ 1296.718561][ T7224] batadv_slave_1: entered allmulticast mode [ 1296.726956][ T7224] veth0_to_hsr: entered allmulticast mode [ 1296.733502][ T7224] hsr_slave_0: entered allmulticast mode [ 1296.740420][ T7224] veth1_to_hsr: entered allmulticast mode [ 1296.746917][ T7224] hsr_slave_1: entered allmulticast mode [ 1296.753373][ T7224] hsr0: entered allmulticast mode [ 1296.759027][ T7224] veth1_virt_wifi: entered allmulticast mode [ 1296.766069][ T7224] veth0_virt_wifi: entered allmulticast mode [ 1296.773128][ T7224] veth1_macvtap: entered allmulticast mode [ 1296.779751][ T7224] veth0_macvtap: entered allmulticast mode [ 1296.786406][ T7224] macvtap0: entered allmulticast mode [ 1296.792635][ T7224] macsec0: entered allmulticast mode [ 1296.798649][ T7224] geneve0: entered allmulticast mode [ 1296.804717][ T7224] geneve1: entered allmulticast mode [ 1296.832117][ T7224] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1296.840201][ T7224] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1296.847757][ T7224] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1296.856329][ T7224] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1296.864781][ T7224] mac80211_hwsim hwsim75 wlan0: left promiscuous mode [ 1296.871734][ T7224] mac80211_hwsim hwsim76 wlan1: entered allmulticast mode [ 1296.879800][ T7224] bridge1: entered allmulticast mode [ 1296.886043][ T7224] bridge2: entered allmulticast mode [ 1296.892127][ T7224] @: entered allmulticast mode [ 1296.897812][ T7224] bridge3: left promiscuous mode [ 1296.903583][ T7224] bond1: left promiscuous mode [ 1296.909002][ T7224] vti60: entered allmulticast mode [ 1296.914756][ T7224] syztnl0: entered allmulticast mode [ 1296.937525][ T7224] gre1: entered allmulticast mode [ 1296.943835][ T7224] bridge4: entered allmulticast mode [ 1296.949713][ T7224] veth2: entered allmulticast mode [ 1296.955699][ T7224] veth3: entered allmulticast mode [ 1296.961736][ T7224] bridge5: entered allmulticast mode [ 1296.967897][ T7224] vxlan0: entered allmulticast mode [ 1296.973848][ T7224] veth4: entered allmulticast mode [ 1296.979873][ T7224] veth5: entered allmulticast mode [ 1296.985851][ T7224] bridge6: entered allmulticast mode [ 1296.991957][ T7224] vti0: left promiscuous mode [ 1296.996686][ T7224] vti0: entered allmulticast mode [ 1297.003227][ T7224] bridge7: entered allmulticast mode [ 1297.009161][ T7224] bridge8: entered allmulticast mode [ 1297.016154][ T7224] macvtap2: entered allmulticast mode [ 1297.022432][ T7224] bridge9: entered allmulticast mode [ 1297.028320][ T7224] gre2: entered allmulticast mode [ 1297.047230][ T7224] vxlan1: entered allmulticast mode [ 1297.052653][ T7224] bond2: entered allmulticast mode [ 1297.057877][ T7224] geneve2: entered allmulticast mode [ 1297.066231][ T7224] bond3: entered allmulticast mode [ 1297.072017][ T7224] macsec2: entered allmulticast mode [ 1297.077457][ T7224] bridge10: entered allmulticast mode [ 1297.083005][ T7224] bridge11: entered allmulticast mode [ 1297.088511][ T7224] vlan0: entered allmulticast mode [ 1297.094560][ T7224] vti1: left promiscuous mode [ 1297.099270][ T7224] vti1: entered allmulticast mode [ 1297.105434][ T7224] bond4: entered allmulticast mode [ 1297.110664][ T7224] bridge12: entered allmulticast mode [ 1297.116211][ T7224] xfrm1: left promiscuous mode [ 1297.121101][ T7224] veth6: entered allmulticast mode [ 1297.126356][ T7224] veth7: entered allmulticast mode [ 1297.131609][ T7224] vxlan2: entered allmulticast mode [ 1297.137528][ T7224] bond6: entered allmulticast mode [ 1297.143266][ T7224] ip6tnl2: entered allmulticast mode [ 1297.163289][ T7224] veth8: entered allmulticast mode [ 1297.168653][ T7224] veth9: entered allmulticast mode [ 1297.178467][ T5296] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.188687][ T5296] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 53839 - 0 [ 1297.197777][ T5296] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20002 - 0 [ 1297.207453][ T5296] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.217164][ T5296] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 53839 - 0 [ 1297.231577][ T5296] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20002 - 0 [ 1297.272356][ T24] hsr0 speed is unknown, defaulting to 1000 [ 1297.278351][ T24] syz2: Port: 1 Link ACTIVE [ 1297.279678][ T5296] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.307280][ T5296] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 53839 - 0 [ 1297.321660][ T5296] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20002 - 0 [ 1297.330727][ T5296] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.342820][ T5296] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 53839 - 0 [ 1297.352808][ T5296] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20002 - 0 [ 1297.518803][ T7247] xt_TCPMSS: Only works on TCP SYN packets [ 1297.764374][ T7254] syzkaller0: entered promiscuous mode [ 1297.778252][ T7254] syzkaller0: entered allmulticast mode [ 1298.273961][ T7267] __nla_validate_parse: 38 callbacks suppressed [ 1298.273984][ T7267] netlink: 428 bytes leftover after parsing attributes in process `syz.3.8051'. [ 1298.293080][ T7267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1298.330768][ T7267] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8051'. [ 1298.364528][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8054'. [ 1299.025203][ T7301] bond8: (slave dummy0): Releasing active interface [ 1299.140308][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8058'. [ 1299.332285][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8060'. [ 1299.789213][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1299.951938][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8066'. [ 1300.418453][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8073'. [ 1300.561469][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1300.576415][ T7361] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1300.757914][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8076'. [ 1301.071274][ T7389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1301.110208][ T7389] team0: Mode changed to "roundrobin" [ 1301.934052][ T7433] netlink: 'syz.2.8092': attribute type 9 has an invalid length. [ 1301.957819][ T7437] FAULT_INJECTION: forcing a failure. [ 1301.957819][ T7437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.976058][ T7437] CPU: 1 UID: 0 PID: 7437 Comm: syz.0.8093 Not tainted syzkaller #0 PREEMPT(full) [ 1301.976088][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1301.976101][ T7437] Call Trace: [ 1301.976110][ T7437] [ 1301.976120][ T7437] dump_stack_lvl+0xe8/0x150 [ 1301.976161][ T7437] should_fail_ex+0x40c/0x560 [ 1301.976193][ T7437] _copy_to_user+0x31/0xb0 [ 1301.976229][ T7437] simple_read_from_buffer+0xe1/0x170 [ 1301.976266][ T7437] proc_fail_nth_read+0x1bb/0x230 [ 1301.976300][ T7437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1301.976335][ T7437] ? rw_verify_area+0x24a/0x4c0 [ 1301.976371][ T7437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1301.976401][ T7437] vfs_read+0x213/0xa80 [ 1301.976440][ T7437] ? __pfx___mutex_lock+0x10/0x10 [ 1301.976538][ T7437] ? __pfx_vfs_read+0x10/0x10 [ 1301.976575][ T7437] ? __fget_files+0x2a/0x420 [ 1301.976611][ T7437] ? __fget_files+0x3a2/0x420 [ 1301.976638][ T7437] ? __fget_files+0x2a/0x420 [ 1301.976677][ T7437] ksys_read+0x150/0x270 [ 1301.976713][ T7437] ? __pfx_ksys_read+0x10/0x10 [ 1301.976757][ T7437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.976782][ T7437] do_syscall_64+0x174/0x580 [ 1301.976811][ T7437] ? trace_irq_disable+0x3b/0x140 [ 1301.976848][ T7437] ? clear_bhb_loop+0x40/0x90 [ 1301.976876][ T7437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.976900][ T7437] RIP: 0033:0x7f3a6555e68e [ 1301.976922][ T7437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1301.976942][ T7437] RSP: 002b:00007f3a663a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1301.976966][ T7437] RAX: ffffffffffffffda RBX: 00007f3a663a56c0 RCX: 00007f3a6555e68e [ 1301.976982][ T7437] RDX: 000000000000000f RSI: 00007f3a663a50a0 RDI: 0000000000000004 [ 1301.976996][ T7437] RBP: 00007f3a663a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.977009][ T7437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.977023][ T7437] R13: 00007f3a65826038 R14: 00007f3a65825fa0 R15: 00007ffc9cc06718 [ 1301.977061][ T7437] [ 1302.447276][ T7447] syzkaller1: entered promiscuous mode [ 1302.459862][ T7447] syzkaller1: entered allmulticast mode [ 1303.181365][ T7480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.253904][ T7482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1303.498762][ T7501] __nla_validate_parse: 8 callbacks suppressed [ 1303.498783][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8110'. [ 1303.572375][ T7501] netlink: 'syz.0.8110': attribute type 1 has an invalid length. [ 1303.732603][ T7514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8114'. [ 1304.209761][ T7517] netlink: 766 bytes leftover after parsing attributes in process `syz.2.8116'. [ 1304.220062][ T7517] netlink: 'syz.2.8116': attribute type 75 has an invalid length. [ 1304.296758][ T7520] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8117'. [ 1304.670310][ T7541] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 1304.727975][ T7544] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1305.246656][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8128'. [ 1305.786161][ T7571] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8130'. [ 1305.916863][ T7574] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8131'. [ 1306.105676][ T7589] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8135'. [ 1306.114703][ T7589] IPv6: NLM_F_CREATE should be specified when creating new route [ 1306.179775][ T7593] netlink: 'syz.0.8138': attribute type 12 has an invalid length. [ 1306.359306][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8139'. [ 1306.412739][ T7604] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1306.527460][ T7600] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1306.536927][ T7597] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1306.542900][ T7597] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1306.564951][ T7597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1306.570937][ T7597] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1306.603363][ T7597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1306.609387][ T7597] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1307.569508][ T7632] dvmrp0: left allmulticast mode [ 1307.574672][ T7632] team0: left allmulticast mode [ 1307.598060][ T5629] Bluetooth: hci2: command 0x0401 tx timeout [ 1307.640372][ T7597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1307.646380][ T7597] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1307.774953][ T7597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1307.792215][ T7597] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1308.437795][ T7655] openvswitch: netlink: IP tunnel dst address not specified [ 1308.675612][ T7669] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 1308.685920][ T7669] mac80211_hwsim hwsim75 wlan0: left allmulticast mode [ 1308.903029][ T7680] bond0: entered promiscuous mode [ 1308.943529][ T7680] bond0: left promiscuous mode [ 1309.071744][ T7684] bond0: entered promiscuous mode [ 1309.082822][ T7684] bond0: left promiscuous mode [ 1309.341174][ T7698] dummy0: left allmulticast mode [ 1309.350798][ T7698] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1309.764131][ T7706] __nla_validate_parse: 3 callbacks suppressed [ 1309.764148][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8164'. [ 1309.779305][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8164'. [ 1309.789188][ T7706] netlink: 'syz.2.8164': attribute type 1 has an invalid length. [ 1309.799738][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8164'. [ 1309.799738][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8164'. [ 1310.062409][ T7710] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8166'. [ 1310.397516][T27824] IPVS: starting estimator thread 0... [ 1310.406174][ T7729] netlink: 'syz.3.8171': attribute type 8 has an invalid length. [ 1310.413974][ T7729] netlink: 'syz.3.8171': attribute type 9 has an invalid length. [ 1310.426504][ T7733] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8173'. [ 1310.439449][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8172'. [ 1310.508098][ T7739] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8174'. [ 1310.662097][ T7730] IPVS: using max 26 ests per chain, 62400 per kthread [ 1311.578555][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8179'. [ 1311.594432][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8179'. [ 1312.014029][ T7762] team0 (unregistering): Port device team_slave_0 removed [ 1312.055234][ T7762] team0 (unregistering): Port device team_slave_1 removed [ 1312.085311][ T7772] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1312.098140][ T7771] netlink: 'syz.2.8183': attribute type 1 has an invalid length. [ 1312.205312][ T7771] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1312.243198][ T7774] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1312.276300][ T7771] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1312.286017][ T7771] bond7: (slave batadv1): making interface the new active one [ 1312.295017][ T7771] batadv1: entered promiscuous mode [ 1312.300751][ T7771] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 1312.315017][ T7771] tipc: Resetting bearer [ 1312.328511][ T7771] tipc: Disabling bearer [ 1312.362042][ T7771] team0 (unregistering): Port device xfrm0 removed [ 1312.415691][ T7774] bond7 (unregistering): (slave veth11): Releasing active interface [ 1312.434683][ T7774] bond7 (unregistering): (slave batadv1): Releasing active interface [ 1312.446615][ T7774] bond7 (unregistering): Released all slaves [ 1312.829507][ T7797] netlink: 'syz.0.8190': attribute type 3 has an invalid length. [ 1312.841599][ T7797] netlink: 'syz.0.8190': attribute type 3 has an invalid length. [ 1313.460962][ T7829] netlink: 'syz.1.8198': attribute type 13 has an invalid length. [ 1313.469275][ T7829] netlink: 'syz.1.8198': attribute type 17 has an invalid length. [ 1313.567890][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.576512][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.587393][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.636192][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.645859][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.659022][ T7829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1313.669406][ T7829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1313.683486][ T7829] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1313.759945][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1313.771111][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1313.791430][ T7828] ipvlan1: entered promiscuous mode [ 1313.797716][ T7828] ipvlan1: left promiscuous mode [ 1313.983986][ T7835] netlink: 'syz.2.8200': attribute type 1 has an invalid length. [ 1314.009911][ T7835] bond7: entered promiscuous mode [ 1314.015377][ T7835] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1314.030475][ T7835] bond7: entered allmulticast mode [ 1314.076189][ T7835] bond7: (slave bridge0): making interface the new active one [ 1314.083748][ T7835] bridge0: entered promiscuous mode [ 1314.089183][ T7835] bridge0: entered allmulticast mode [ 1314.095766][ T7835] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 1314.302889][ T7840] syzkaller1: entered promiscuous mode [ 1314.308446][ T7840] syzkaller1: entered allmulticast mode [ 1315.000342][ T7851] __nla_validate_parse: 9 callbacks suppressed [ 1315.000364][ T7851] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8207'. [ 1315.407659][ T7866] bond1: option lp_interval: invalid value (0) [ 1315.416349][ T7866] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1315.438549][ T7866] bond1 (unregistering): Released all slaves [ 1316.175242][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8218'. [ 1316.258053][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8218'. [ 1316.319751][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8218'. [ 1316.466380][ T7905] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8222'. [ 1316.674056][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8226'. [ 1316.699769][ T7920] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8226'. [ 1316.730531][ T7920] IPv6: NLM_F_CREATE should be specified when creating new route [ 1317.170091][ T7936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8231'. [ 1317.207118][ T7940] xt_limit: Overflow, try lower: 324382443/0 [ 1317.372611][ T7945] syzkaller0: entered promiscuous mode [ 1317.378168][ T7945] syzkaller0: entered allmulticast mode [ 1317.596434][ T7958] syzkaller0: entered promiscuous mode [ 1317.601944][ T7958] syzkaller0: entered allmulticast mode [ 1317.622595][ T7951] tipc: Enabled bearer , priority 0 [ 1317.633072][ T7950] tipc: Resetting bearer [ 1317.701039][ T7950] tipc: Disabling bearer [ 1317.820116][ T7960] netlink: 'syz.5.8238': attribute type 58 has an invalid length. [ 1317.828109][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8238'. [ 1317.974754][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8239'. [ 1318.030552][ T7962] xt_TCPMSS: Only works on TCP SYN packets [ 1319.635207][ T8006] netlink: 'syz.0.8250': attribute type 8 has an invalid length. [ 1319.725920][ T8008] syzkaller0: entered promiscuous mode [ 1319.731488][ T8008] syzkaller0: entered allmulticast mode [ 1319.786714][ T8008] TC_ACT_REPEAT abuse ? [ 1319.813830][ T8016] IPVS: stopping backup sync thread 6721 ... [ 1319.939200][ T8014] syzkaller0: entered promiscuous mode [ 1319.944947][ T8014] syzkaller0: entered allmulticast mode [ 1319.997039][ T8024] bond1: entered promiscuous mode [ 1320.002222][ T8024] bond1: entered allmulticast mode [ 1320.039793][ T8024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1320.606938][ T8038] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1320.729467][ T8040] erspan1: entered allmulticast mode [ 1320.743106][ T8042] syzkaller1: entered promiscuous mode [ 1320.748879][ T8042] syzkaller1: entered allmulticast mode [ 1320.771199][ T8042] macsec1: entered promiscuous mode [ 1320.787155][ T8042] virt_wifi0: entered promiscuous mode [ 1320.793296][ T8042] macsec1: entered allmulticast mode [ 1320.798761][ T8042] virt_wifi0: entered allmulticast mode [ 1320.948307][ T8046] __nla_validate_parse: 12 callbacks suppressed [ 1320.948330][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8260'. [ 1320.963908][ T8046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8260'. [ 1320.973269][ T8042] virt_wifi0: left allmulticast mode [ 1320.979738][ T8042] virt_wifi0: left promiscuous mode [ 1321.015668][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8260'. [ 1321.032386][ T8047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8260'. [ 1321.567092][ T8049] netlink: 'syz.3.8262': attribute type 1 has an invalid length. [ 1325.306170][ T8049] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1325.307646][ T8052] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1325.496811][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8267'. [ 1325.579353][ T8073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8267'. [ 1326.609456][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8276'. [ 1326.628347][ T8116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8279'. [ 1326.762955][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8280'. [ 1326.858881][ T8123] syzkaller0: entered promiscuous mode [ 1326.880152][ T8123] syzkaller0: entered allmulticast mode [ 1326.921830][ T8128] sctp: [Deprecated]: syz.0.8285 (pid 8128) Use of int in max_burst socket option deprecated. [ 1326.921830][ T8128] Use struct sctp_assoc_value instead [ 1327.217619][ T8138] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1327.468524][ T8140] dvmrp0: left allmulticast mode [ 1327.855143][ T8152] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8291'. [ 1328.019082][ T8158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8293'. [ 1328.039531][T27824] IPVS: starting estimator thread 0... [ 1328.333198][ T8161] IPVS: using max 39 ests per chain, 93600 per kthread [ 1328.339286][ T8171] netlink: 'syz.1.8295': attribute type 28 has an invalid length. [ 1328.349790][ T8171] netlink: 'syz.1.8295': attribute type 3 has an invalid length. [ 1328.357651][ T8171] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8295'. [ 1328.714277][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8298'. [ 1329.074748][ T8204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8304'. [ 1329.275814][ T8216] xt_l2tp: v2 sid > 0xffff: 262144 [ 1329.373702][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8307'. [ 1329.383302][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8307'. [ 1329.757783][ T8232] netlink: 'syz.3.8312': attribute type 12 has an invalid length. [ 1330.264791][ T8248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1330.275801][ T8250] netlink: 'syz.5.8316': attribute type 1 has an invalid length. [ 1330.305597][ T8247] syzkaller0: entered promiscuous mode [ 1330.311152][ T8247] syzkaller0: entered allmulticast mode [ 1332.427265][ T8308] __nla_validate_parse: 5 callbacks suppressed [ 1332.427287][ T8308] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8331'. [ 1332.645300][ T8321] netlink: 'syz.3.8335': attribute type 10 has an invalid length. [ 1332.691572][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.726417][ T8321] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1332.759094][ T8330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.792558][ T8330] netlink: 'syz.5.8338': attribute type 6 has an invalid length. [ 1332.813416][ T8330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.866339][ T8325] macvlan0: entered promiscuous mode [ 1333.000776][ T8338] netlink: 'syz.1.8340': attribute type 2 has an invalid length. [ 1333.015216][ T8338] netlink: 'syz.1.8340': attribute type 1 has an invalid length. [ 1333.059190][ T8340] netlink: zone id is out of range [ 1333.064421][ T8340] netlink: zone id is out of range [ 1333.069568][ T8340] netlink: zone id is out of range [ 1333.074716][ T8340] netlink: zone id is out of range [ 1333.079857][ T8340] netlink: zone id is out of range [ 1333.085021][ T8340] netlink: zone id is out of range [ 1333.090166][ T8340] netlink: zone id is out of range [ 1333.095317][ T8340] netlink: zone id is out of range [ 1333.100725][ T8340] netlink: zone id is out of range [ 1333.105883][ T8340] netlink: zone id is out of range [ 1333.155949][ T8340] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8341'. [ 1333.219186][ T8343] netlink: 'syz.3.8342': attribute type 12 has an invalid length. [ 1333.589701][ T8355] FAULT_INJECTION: forcing a failure. [ 1333.589701][ T8355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.621873][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.0.8346 Not tainted syzkaller #0 PREEMPT(full) [ 1333.621905][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1333.621920][ T8355] Call Trace: [ 1333.621933][ T8355] [ 1333.621944][ T8355] dump_stack_lvl+0xe8/0x150 [ 1333.621984][ T8355] should_fail_ex+0x40c/0x560 [ 1333.622016][ T8355] _copy_from_user+0x2d/0xb0 [ 1333.622050][ T8355] ___sys_sendmsg+0x1c6/0x360 [ 1333.622084][ T8355] ? __lock_acquire+0x683/0x2cf0 [ 1333.622121][ T8355] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.622195][ T8355] ? __fget_files+0x2a/0x420 [ 1333.622224][ T8355] ? __fget_files+0x3a2/0x420 [ 1333.622266][ T8355] __x64_sys_sendmsg+0x1b1/0x290 [ 1333.622309][ T8355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1333.622375][ T8355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.622401][ T8355] do_syscall_64+0x174/0x580 [ 1333.622431][ T8355] ? trace_irq_disable+0x3b/0x140 [ 1333.622460][ T8355] ? clear_bhb_loop+0x40/0x90 [ 1333.622488][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.622516][ T8355] RIP: 0033:0x7f3a6559de59 [ 1333.622539][ T8355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.622558][ T8355] RSP: 002b:00007f3a663a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.622583][ T8355] RAX: ffffffffffffffda RBX: 00007f3a65825fa0 RCX: 00007f3a6559de59 [ 1333.622600][ T8355] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1333.622615][ T8355] RBP: 00007f3a663a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.622629][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.622643][ T8355] R13: 00007f3a65826038 R14: 00007f3a65825fa0 R15: 00007ffc9cc06718 [ 1333.622680][ T8355] [ 1333.941110][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8347'. [ 1334.133585][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8347'. [ 1334.401803][ T8374] bond8: Unable to set up delay as MII monitoring is disabled [ 1334.450251][ T8374] bond8 (unregistering): Released all slaves [ 1334.701759][ T8386] bridge_slave_0: left allmulticast mode [ 1334.707740][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.717867][ T8386] bridge_slave_1: left allmulticast mode [ 1334.723548][ T8386] bridge_slave_1: left promiscuous mode [ 1334.729303][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.740068][ T8386] bond0: (slave bond_slave_0): Releasing backup interface [ 1334.785757][ T8386] bond0: (slave bond_slave_1): Releasing backup interface [ 1334.811177][ T8386] team0: Port device team_slave_0 removed [ 1334.822134][ T8386] team0: Port device team_slave_1 removed [ 1334.828450][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.838725][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.899080][ T8387] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1334.903799][ T8388] team0: Port device xfrm0 added [ 1335.046879][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8358'. [ 1335.512859][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8365'. [ 1335.522315][ T8420] bond0: Unable to set down delay as MII monitoring is disabled [ 1335.587086][ T8423] netlink: 'syz.2.8366': attribute type 1 has an invalid length. [ 1335.787678][ T8423] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1335.795574][ T8440] netlink: 'syz.2.8366': attribute type 10 has an invalid length. [ 1335.803513][ T8440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8366'. [ 1335.829060][ T8424] bond8: (slave veth13): Enslaving as an active interface with a down link [ 1335.853920][ T8434] bond8: (slave dummy0): making interface the new active one [ 1335.862520][ T8434] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1335.897547][ T8431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1335.924983][ T8440] dummy0: entered promiscuous mode [ 1335.943934][ T8440] bond8: (slave dummy0): Releasing active interface [ 1336.067825][ T8437] IPVS: Unknown mcast interface: vca [ 1336.163346][ T8439] syzkaller0: entered promiscuous mode [ 1336.168903][ T8439] syzkaller0: entered allmulticast mode [ 1339.996780][ T8478] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8377'. [ 1340.067591][ T8478] bond9: option fail_over_mac: invalid value (127) [ 1340.081830][ T8478] bond9 (unregistering): Released all slaves [ 1340.128138][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8382'. [ 1340.353132][ T8500] xt_hashlimit: invalid rate [ 1340.682689][ T8521] netlink: 'syz.0.8385': attribute type 21 has an invalid length. [ 1340.691719][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8385'. [ 1340.709323][ T8522] netlink: 'syz.0.8385': attribute type 21 has an invalid length. [ 1340.746777][ T8522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8385'. [ 1340.772719][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1340.784889][ T8522] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8385'. [ 1340.819889][ T8521] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8385'. [ 1340.902522][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8385'. [ 1340.936186][ T8534] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1341.108970][ T8539] pimreg: entered allmulticast mode [ 1341.248573][ T8539] pimreg: left allmulticast mode [ 1341.256549][ T8542] netlink: 'syz.2.8394': attribute type 1 has an invalid length. [ 1341.356598][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1341.365689][ T8552] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1341.446844][ T8550] bond9: (slave bridge13): Enslaving as an active interface with an up link [ 1341.631970][ T8565] geneve3: entered allmulticast mode [ 1343.210247][ T8629] syzkaller1: entered promiscuous mode [ 1343.220992][ T8629] syzkaller1: entered allmulticast mode [ 1343.383926][ T8638] syzkaller0: entered promiscuous mode [ 1343.389492][ T8638] syzkaller0: entered allmulticast mode [ 1343.463325][ T8638] tipc: Enabled bearer , priority 0 [ 1343.494886][ T8638] tipc: Resetting bearer [ 1343.505882][ T8637] tipc: Resetting bearer [ 1343.581749][ T8637] tipc: Disabling bearer [ 1344.070971][ T8673] netlink: 'syz.1.8428': attribute type 1 has an invalid length. [ 1344.082729][ T8671] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1344.154359][ T8673] bond7: entered promiscuous mode [ 1344.162131][ T8673] bond7: entered allmulticast mode [ 1344.167847][ T8673] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1344.661888][ T8699] netlink: 'syz.2.8437': attribute type 1 has an invalid length. [ 1344.749444][ T8699] bond10: (slave gretap2): making interface the new active one [ 1344.757808][ T8699] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 1344.846248][ T8699] vlan1: entered allmulticast mode [ 1344.851444][ T8699] bond10: entered allmulticast mode [ 1344.856717][ T8699] gretap2: entered allmulticast mode [ 1344.863588][ T8699] bond10: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1345.205370][ T8716] __nla_validate_parse: 10 callbacks suppressed [ 1345.205391][ T8716] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8441'. [ 1345.277247][ T8715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8441'. [ 1345.356491][ T8727] netlink: 'syz.5.8446': attribute type 11 has an invalid length. [ 1345.552616][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8447'. [ 1345.717051][ T8724] xt_TCPMSS: Only works on TCP SYN packets [ 1345.723046][ T8735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1345.751480][ T8724] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8445'. [ 1345.855762][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8451'. [ 1345.885896][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8451'. [ 1345.923245][ T8750] net_ratelimit: 718 callbacks suppressed [ 1345.923265][ T8750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1346.117586][ T8762] netlink: 'syz.3.8452': attribute type 5 has an invalid length. [ 1346.147051][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8451'. [ 1348.351715][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8454'. [ 1348.733120][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8459'. [ 1348.774151][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8459'. [ 1349.347219][ T8810] netlink: 'syz.0.8466': attribute type 5 has an invalid length. [ 1349.526429][ T8817] tipc: Started in network mode [ 1349.543087][ T8817] tipc: Node identity 4672dedc6fe5, cluster identity 4711 [ 1349.558085][ T8817] tipc: Enabled bearer , priority 0 [ 1349.738147][ T8823] syzkaller0: entered promiscuous mode [ 1349.759669][ T8823] syzkaller0: entered allmulticast mode [ 1349.773062][ T8823] tipc: Resetting bearer [ 1349.832276][ T8832] vti0: entered promiscuous mode [ 1349.837308][ T8832] vti0: entered allmulticast mode [ 1349.843685][ T8805] bond0: (slave wlan0): Opening slave failed [ 1349.853694][ T8815] tipc: Resetting bearer [ 1353.667255][ T8815] tipc: Disabling bearer [ 1353.767488][ T8846] syzkaller0: entered promiscuous mode [ 1353.773335][ T8846] syzkaller0: entered allmulticast mode [ 1353.782232][T22433] tipc: Node number set to 697818844 [ 1354.450373][ T8880] FAULT_INJECTION: forcing a failure. [ 1354.450373][ T8880] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.501079][ T8880] CPU: 0 UID: 0 PID: 8880 Comm: syz.3.8482 Not tainted syzkaller #0 PREEMPT(full) [ 1354.501110][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1354.501125][ T8880] Call Trace: [ 1354.501135][ T8880] [ 1354.501145][ T8880] dump_stack_lvl+0xe8/0x150 [ 1354.501185][ T8880] should_fail_ex+0x40c/0x560 [ 1354.501217][ T8880] should_failslab+0xa8/0x100 [ 1354.501252][ T8880] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1354.501279][ T8880] ? local_lock_release+0x9c/0x160 [ 1354.501312][ T8880] ? __alloc_skb+0x1d7/0x7a0 [ 1354.501338][ T8880] ? __alloc_skb+0x1d7/0x7a0 [ 1354.501375][ T8880] __alloc_skb+0x1d7/0x7a0 [ 1354.501417][ T8880] pfkey_send_acquire+0x60e/0x2d70 [ 1354.501565][ T8880] ? copy_templates+0x5de/0x620 [ 1354.501627][ T8880] ? km_query+0x2e/0x210 [ 1354.501682][ T8880] km_query+0x11c/0x210 [ 1354.501705][ T8880] ? km_query+0x2e/0x210 [ 1354.501734][ T8880] xfrm_add_acquire+0x7a0/0xdd0 [ 1354.501788][ T8880] ? __pfx_xfrm_add_acquire+0x10/0x10 [ 1354.501824][ T8880] ? __nla_parse+0x40/0x60 [ 1354.501858][ T8880] xfrm_user_rcv_msg+0x7a8/0xf30 [ 1354.501897][ T8880] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1354.501966][ T8880] ? __mutex_trylock_common+0x15f/0x270 [ 1354.501993][ T8880] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1354.502020][ T8880] ? rcu_is_watching+0x15/0xb0 [ 1354.502067][ T8880] ? trace_contention_end+0x3d/0x140 [ 1354.502103][ T8880] netlink_rcv_skb+0x226/0x4a0 [ 1354.502200][ T8880] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1354.502234][ T8880] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1354.502286][ T8880] ? netlink_deliver_tap+0x2e/0x1b0 [ 1354.502320][ T8880] ? netlink_deliver_tap+0x2e/0x1b0 [ 1354.502357][ T8880] xfrm_netlink_rcv+0x79/0x90 [ 1354.502388][ T8880] netlink_unicast+0x7bb/0x940 [ 1354.502439][ T8880] netlink_sendmsg+0x813/0xb40 [ 1354.502486][ T8880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.502526][ T8880] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1354.502557][ T8880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.502590][ T8880] sock_sendmsg_nosec+0x13a/0x180 [ 1354.502620][ T8880] ____sys_sendmsg+0x54e/0x850 [ 1354.502660][ T8880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1354.502705][ T8880] ? import_iovec+0x73/0xa0 [ 1354.502741][ T8880] ___sys_sendmsg+0x2a5/0x360 [ 1354.502774][ T8880] ? __lock_acquire+0x683/0x2cf0 [ 1354.502809][ T8880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1354.502884][ T8880] ? __fget_files+0x2a/0x420 [ 1354.502913][ T8880] ? __fget_files+0x3a2/0x420 [ 1354.502954][ T8880] __x64_sys_sendmsg+0x1b1/0x290 [ 1354.502991][ T8880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1354.503046][ T8880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.503071][ T8880] do_syscall_64+0x174/0x580 [ 1354.503102][ T8880] ? trace_irq_disable+0x3b/0x140 [ 1354.503130][ T8880] ? clear_bhb_loop+0x40/0x90 [ 1354.503159][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.503182][ T8880] RIP: 0033:0x7fd3a779de59 [ 1354.503204][ T8880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.503224][ T8880] RSP: 002b:00007fd3a8617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1354.503248][ T8880] RAX: ffffffffffffffda RBX: 00007fd3a7a25fa0 RCX: 00007fd3a779de59 [ 1354.503266][ T8880] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1354.503281][ T8880] RBP: 00007fd3a8617090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.503295][ T8880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.503309][ T8880] R13: 00007fd3a7a26038 R14: 00007fd3a7a25fa0 R15: 00007ffcdbc624e8 [ 1354.503346][ T8880] [ 1355.335085][ T8908] __nla_validate_parse: 3 callbacks suppressed [ 1355.335105][ T8908] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8489'. [ 1356.324208][ T8917] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8490'. [ 1356.748501][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1358.457738][ T8876] erspan0: entered promiscuous mode [ 1358.464997][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8480'. [ 1358.927244][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8494'. [ 1358.984665][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8495'. [ 1359.025334][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8495'. [ 1359.034993][ T8932] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1359.154602][ T8937] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8496'. [ 1359.171990][ T8932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8494'. [ 1359.247128][ T8938] bond8: (slave veth11): Enslaving as an active interface with an up link [ 1359.420562][ T8932] bond8: (slave bridge15): Enslaving as an active interface with an up link [ 1359.446922][ T8927] FAULT_INJECTION: forcing a failure. [ 1359.446922][ T8927] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.503823][ T8927] CPU: 0 UID: 0 PID: 8927 Comm: syz.2.8492 Not tainted syzkaller #0 PREEMPT(full) [ 1359.503854][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1359.503868][ T8927] Call Trace: [ 1359.503878][ T8927] [ 1359.503889][ T8927] dump_stack_lvl+0xe8/0x150 [ 1359.503928][ T8927] should_fail_ex+0x40c/0x560 [ 1359.503960][ T8927] should_failslab+0xa8/0x100 [ 1359.503995][ T8927] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1359.504021][ T8927] ? local_lock_release+0x9c/0x160 [ 1359.504051][ T8927] ? __alloc_skb+0x1d7/0x7a0 [ 1359.504076][ T8927] ? __alloc_skb+0x1d7/0x7a0 [ 1359.504111][ T8927] __alloc_skb+0x1d7/0x7a0 [ 1359.504145][ T8927] netlink_sendmsg+0x5d4/0xb40 [ 1359.504192][ T8927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1359.504231][ T8927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1359.504261][ T8927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1359.504294][ T8927] sock_sendmsg_nosec+0x13a/0x180 [ 1359.504323][ T8927] ____sys_sendmsg+0x54e/0x850 [ 1359.504363][ T8927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1359.504406][ T8927] ? import_iovec+0x73/0xa0 [ 1359.504446][ T8927] ___sys_sendmsg+0x2a5/0x360 [ 1359.504486][ T8927] ? __lock_acquire+0x683/0x2cf0 [ 1359.504523][ T8927] ? __pfx____sys_sendmsg+0x10/0x10 [ 1359.504594][ T8927] ? __fget_files+0x2a/0x420 [ 1359.504624][ T8927] ? __fget_files+0x3a2/0x420 [ 1359.504664][ T8927] __x64_sys_sendmsg+0x1b1/0x290 [ 1359.504701][ T8927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1359.504754][ T8927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.504779][ T8927] do_syscall_64+0x174/0x580 [ 1359.504809][ T8927] ? trace_irq_disable+0x3b/0x140 [ 1359.504837][ T8927] ? clear_bhb_loop+0x40/0x90 [ 1359.504864][ T8927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.504887][ T8927] RIP: 0033:0x7fe4e659de59 [ 1359.504909][ T8927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.504927][ T8927] RSP: 002b:00007fe4e749d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.504951][ T8927] RAX: ffffffffffffffda RBX: 00007fe4e6825fa0 RCX: 00007fe4e659de59 [ 1359.504968][ T8927] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000006 [ 1359.504982][ T8927] RBP: 00007fe4e749d090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.504996][ T8927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.505009][ T8927] R13: 00007fe4e6826038 R14: 00007fe4e6825fa0 R15: 00007fff5ee41ce8 [ 1359.505045][ T8927] [ 1359.795258][ T8960] netlink: 'syz.1.8502': attribute type 1 has an invalid length. [ 1359.838369][ T8960] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1360.019339][ T8958] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8501'. [ 1360.042996][ T8960] bond9: (slave veth13): Enslaving as an active interface with a down link [ 1360.110185][ T8963] vlan4: entered allmulticast mode [ 1360.115385][ T8963] bridge0: entered allmulticast mode [ 1360.275729][ T8968] FAULT_INJECTION: forcing a failure. [ 1360.275729][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.323683][ T8968] CPU: 0 UID: 0 PID: 8968 Comm: syz.5.8503 Not tainted syzkaller #0 PREEMPT(full) [ 1360.323712][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1360.323726][ T8968] Call Trace: [ 1360.323735][ T8968] [ 1360.323744][ T8968] dump_stack_lvl+0xe8/0x150 [ 1360.323785][ T8968] should_fail_ex+0x40c/0x560 [ 1360.323799][ T8971] netlink: 476 bytes leftover after parsing attributes in process `syz.3.8505'. [ 1360.323817][ T8968] should_failslab+0xa8/0x100 [ 1360.323879][ T8968] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1360.324005][ T8968] ? local_lock_release+0x9c/0x160 [ 1360.324101][ T8968] ? __alloc_skb+0x1d7/0x7a0 [ 1360.324160][ T8968] ? __alloc_skb+0x1d7/0x7a0 [ 1360.324258][ T8968] __alloc_skb+0x1d7/0x7a0 [ 1360.324339][ T8968] pfkey_send_acquire+0x60e/0x2d70 [ 1360.324445][ T8968] ? copy_templates+0x5de/0x620 [ 1360.324526][ T8968] ? km_query+0x2e/0x210 [ 1360.324610][ T8968] km_query+0x11c/0x210 [ 1360.324674][ T8968] ? km_query+0x2e/0x210 [ 1360.324747][ T8968] xfrm_add_acquire+0x7a0/0xdd0 [ 1360.324897][ T8968] ? __pfx_xfrm_add_acquire+0x10/0x10 [ 1360.324987][ T8968] ? __nla_parse+0x40/0x60 [ 1360.325078][ T8968] xfrm_user_rcv_msg+0x7a8/0xf30 [ 1360.325177][ T8968] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1360.325387][ T8968] ? __mutex_trylock_common+0x15f/0x270 [ 1360.325482][ T8968] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1360.325555][ T8968] ? rcu_is_watching+0x15/0xb0 [ 1360.325649][ T8968] ? trace_contention_end+0x3d/0x140 [ 1360.325725][ T8968] netlink_rcv_skb+0x226/0x4a0 [ 1360.325819][ T8968] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1360.325903][ T8968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1360.326044][ T8968] ? netlink_deliver_tap+0x2e/0x1b0 [ 1360.326127][ T8968] ? netlink_deliver_tap+0x2e/0x1b0 [ 1360.326223][ T8968] xfrm_netlink_rcv+0x79/0x90 [ 1360.326299][ T8968] netlink_unicast+0x7bb/0x940 [ 1360.326430][ T8968] netlink_sendmsg+0x813/0xb40 [ 1360.326553][ T8968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.326660][ T8968] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1360.326752][ T8968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.326864][ T8968] sock_sendmsg_nosec+0x13a/0x180 [ 1360.326934][ T8968] ____sys_sendmsg+0x54e/0x850 [ 1360.327039][ T8968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1360.327141][ T8968] ? import_iovec+0x73/0xa0 [ 1360.327223][ T8968] ___sys_sendmsg+0x2a5/0x360 [ 1360.327301][ T8968] ? __lock_acquire+0x683/0x2cf0 [ 1360.327403][ T8968] ? __pfx____sys_sendmsg+0x10/0x10 [ 1360.327570][ T8968] ? __fget_files+0x2a/0x420 [ 1360.327646][ T8968] ? __fget_files+0x3a2/0x420 [ 1360.327755][ T8968] __x64_sys_sendmsg+0x1b1/0x290 [ 1360.327854][ T8968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1360.327986][ T8968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.328052][ T8968] do_syscall_64+0x174/0x580 [ 1360.328143][ T8968] ? trace_irq_disable+0x3b/0x140 [ 1360.328238][ T8968] ? clear_bhb_loop+0x40/0x90 [ 1360.328313][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.328377][ T8968] RIP: 0033:0x7f0f2739de59 [ 1360.328448][ T8968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.328509][ T8968] RSP: 002b:00007f0f28338028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1360.328573][ T8968] RAX: ffffffffffffffda RBX: 00007f0f27625fa0 RCX: 00007f0f2739de59 [ 1360.328616][ T8968] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1360.328649][ T8968] RBP: 00007f0f28338090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.328690][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.328732][ T8968] R13: 00007f0f27626038 R14: 00007f0f27625fa0 R15: 00007fffe79140a8 [ 1360.328830][ T8968] [ 1360.743669][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8507'. [ 1360.887116][ T8985] netlink: 'syz.1.8508': attribute type 3 has an invalid length. [ 1361.061151][ T8984] pim6reg1: entered promiscuous mode [ 1361.066622][ T8984] pim6reg1: entered allmulticast mode [ 1361.458360][ T9016] x_tables: duplicate underflow at hook 3 [ 1361.572721][ T9026] netlink: zone id is out of range [ 1361.577911][ T9026] netlink: zone id is out of range [ 1361.583031][ T9026] netlink: zone id is out of range [ 1361.588240][ T9026] netlink: zone id is out of range [ 1361.593438][ T9026] netlink: zone id is out of range [ 1361.598579][ T9026] netlink: zone id is out of range [ 1361.649732][ T9021] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8516'. [ 1361.706645][ T9013] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8516'. [ 1361.712908][ T9026] netlink: zone id is out of range [ 1361.720928][ T9026] netlink: zone id is out of range [ 1361.726077][ T9026] netlink: zone id is out of range [ 1361.731233][ T9026] netlink: zone id is out of range [ 1361.846456][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8518'. [ 1361.863122][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8518'. [ 1361.901962][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8518'. [ 1362.148502][ T30] audit: type=1804 audit(1783539038.119:33): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8522" name="/newroot/443/cgroup.controllers" dev="tmpfs" ino=2282 res=1 errno=0 [ 1362.247123][ T30] audit: type=1800 audit(1783539038.119:34): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8522" name="cgroup.controllers" dev="tmpfs" ino=2282 res=0 errno=0 [ 1362.729214][ T9068] netlink: 'syz.5.8529': attribute type 1 has an invalid length. [ 1362.951241][ T9068] bond3: entered promiscuous mode [ 1362.965118][ T9068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1362.996912][ T9077] netlink: 'syz.2.8532': attribute type 2 has an invalid length. [ 1363.033504][ T9079] netlink: 'syz.3.8534': attribute type 1 has an invalid length. [ 1363.062173][ T9079] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8534'. [ 1363.092872][ T9068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1363.113527][ T9068] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1363.153580][ T9068] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1363.182630][ T9068] bond3: (slave xfrm1): making interface the new active one [ 1363.190084][ T9068] xfrm1: entered promiscuous mode [ 1363.200793][ T9068] xfrm1: left promiscuous mode [ 1363.254787][ T9077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8532'. [ 1363.700516][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8542'. [ 1363.760777][ T9113] netlink: 'syz.3.8541': attribute type 2 has an invalid length. [ 1365.036086][ T9185] netdevsim netdevsim0 €Â: renamed from netdevsim0 [ 1365.058047][ T9191] netlink: 'syz.2.8562': attribute type 23 has an invalid length. [ 1365.186405][ T9196] syzkaller0: entered promiscuous mode [ 1365.191954][ T9196] syzkaller0: entered allmulticast mode [ 1365.218423][ T9199] IPv6: NLM_F_CREATE should be specified when creating new route [ 1365.428480][ T9202] syzkaller0: entered promiscuous mode [ 1365.443693][ T9202] syzkaller0: entered allmulticast mode [ 1365.953131][ T9234] syzkaller1: entered promiscuous mode [ 1365.981581][ T9234] syzkaller1: entered allmulticast mode [ 1366.114836][ T9231] dummy0: entered allmulticast mode [ 1366.135322][ T9246] __nla_validate_parse: 9 callbacks suppressed [ 1366.135342][ T9246] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8576'. [ 1366.173887][ T9246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.278000][ T9253] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 1366.284227][ T9246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.370827][ T9246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.644784][ T9258] xt_hashlimit: size too large, truncated to 1048576 [ 1366.848498][ T9274] netlink: 'syz.0.8577': attribute type 11 has an invalid length. [ 1366.880064][ T9274] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8577'. [ 1367.832708][ T9297] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1367.870373][ T9297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1367.910814][ T9301] netlink: 'syz.2.8585': attribute type 3 has an invalid length. [ 1368.084754][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8587'. [ 1368.124999][ T9310] x_tables: duplicate underflow at hook 3 [ 1368.361106][ T9309] lo speed is unknown, defaulting to 1000 [ 1368.372654][ T9317] syzkaller0: entered promiscuous mode [ 1368.386248][ T9317] syzkaller0: entered allmulticast mode [ 1369.133298][ T9332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8592'. [ 1370.004266][ T9309] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1370.012792][ T9309] hsr0 speed is unknown, defaulting to 1000 [ 1370.080449][ T9355] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1370.153948][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8596'. [ 1370.165574][ T9357] netlink: 'syz.0.8596': attribute type 1 has an invalid length. [ 1371.664903][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8608'. [ 1371.790967][ T9412] netlink: 'syz.5.8612': attribute type 1 has an invalid length. [ 1371.806331][ T9412] netlink: 236 bytes leftover after parsing attributes in process `syz.5.8612'. [ 1371.818660][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8612'. [ 1371.883679][ T9417] netlink: 'syz.5.8612': attribute type 13 has an invalid length. [ 1371.911606][ T9417] netlink: 'syz.5.8612': attribute type 17 has an invalid length. [ 1372.061019][ T9417] net_ratelimit: 2 callbacks suppressed [ 1372.061035][ T9417] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1372.088578][ T9427] netlink: 'syz.1.8615': attribute type 4 has an invalid length. [ 1372.105522][ T9424] lo speed is unknown, defaulting to 1000 [ 1372.113431][ T9427] netlink: 'syz.1.8615': attribute type 4 has an invalid length. [ 1372.215523][ T9427] SET target dimension over the limit! [ 1372.237240][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8615'. [ 1372.274558][ T9429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1372.405152][ T9436] netlink: 'syz.5.8618': attribute type 2 has an invalid length. [ 1372.592188][ T9448] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8621'. [ 1372.955685][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1373.167934][ T9424] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1373.176664][ T9424] hsr0 speed is unknown, defaulting to 1000 [ 1373.352469][ T9467] netlink: 'syz.3.8626': attribute type 1 has an invalid length. [ 1373.872785][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8630'. [ 1373.886834][ T9467] bond10: (slave bridge16): making interface the new active one [ 1373.895644][ T9467] bond10: (slave bridge16): Enslaving as an active interface with an up link [ 1374.066713][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8633'. [ 1374.076011][ T9486] netlink: 59 bytes leftover after parsing attributes in process `syz.3.8633'. [ 1374.263091][ T9504] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1374.431649][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8636'. [ 1374.466650][ T9510] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1375.113484][ T9536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1375.131368][ T9540] netlink: 'syz.3.8646': attribute type 21 has an invalid length. [ 1375.673215][ T9561] syzkaller0: entered promiscuous mode [ 1375.689528][ T9561] syzkaller0: entered allmulticast mode [ 1375.966980][ T9574] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1375.977255][ T9576] netlink: 'syz.1.8656': attribute type 13 has an invalid length. [ 1375.990771][ T9576] netlink: 'syz.1.8656': attribute type 17 has an invalid length. [ 1376.072582][ T9576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.121524][ T9576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.175189][ T9576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.191968][ T9582] netlink: 'syz.2.8657': attribute type 4 has an invalid length. [ 1376.268442][ T9585] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1376.284150][ T9585] ipt_ECN: cannot use operation on non-tcp rule [ 1376.370968][ T9576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1376.381546][ T9576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1376.398725][ T9576] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1376.500736][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.538899][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.773504][ T9591] bond10: entered promiscuous mode [ 1376.937211][ T9600] ipip0: entered promiscuous mode [ 1376.974868][ T9598] __nla_validate_parse: 5 callbacks suppressed [ 1376.974891][ T9598] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1377.152092][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8664'. [ 1377.449977][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8667'. [ 1377.698009][ T9617] veth11: entered allmulticast mode [ 1377.744290][ T9617] bond9: (slave veth11): Enslaving as an active interface with an up link [ 1377.973487][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8672'. [ 1377.978758][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8670'. [ 1378.064877][ T9636] tipc: Enabled bearer , priority 0 [ 1378.146996][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8673'. [ 1378.163647][ T9636] syzkaller0: entered promiscuous mode [ 1378.182616][ T9636] syzkaller0: entered allmulticast mode [ 1378.190316][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8673'. [ 1378.213962][ T9635] tipc: Resetting bearer [ 1382.003091][ T9635] tipc: Disabling bearer [ 1382.023165][ T9647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8674'. [ 1382.038784][ T9651] veth0_to_team: entered promiscuous mode [ 1382.066405][ T9651] veth0_to_team: left promiscuous mode [ 1382.379114][ T9670] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8680'. [ 1382.960111][ T9701] netlink: 'syz.1.8688': attribute type 1 has an invalid length. [ 1383.154788][ T9707] bond11: (slave gretap1): making interface the new active one [ 1383.164100][ T9707] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1383.195359][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8690'. [ 1383.197501][ T9717] netlink: 'syz.2.8691': attribute type 49 has an invalid length. [ 1383.243031][ T9701] vlan5: entered allmulticast mode [ 1383.249696][ T9701] bond11: entered allmulticast mode [ 1383.255036][ T9701] gretap1: entered allmulticast mode [ 1383.262822][ T9701] bond11: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1383.441403][ T9725] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8694'. [ 1383.451527][ T9725] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1383.461095][ T9725] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1383.530069][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8695'. [ 1383.768109][ T9741] tipc: Enabling of bearer rejected, failed to enable media [ 1383.969676][ T9749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1384.139157][ T9749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.147604][ T9749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.212317][ T9749] wireguard: wg0: Could not create IPv4 socket [ 1384.218568][ T9749] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1384.238982][ T29] lo speed is unknown, defaulting to 1000 [ 1384.244791][ T29] syz1: Port: 1 Link ACTIVE [ 1384.249412][ T29] lo speed is unknown, defaulting to 1000 [ 1384.834438][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1385.001003][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1385.089458][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1385.335871][ T9797] netlink: 'syz.5.8711': attribute type 1 has an invalid length. [ 1385.361537][ T9797] netlink: 'syz.5.8711': attribute type 1 has an invalid length. [ 1385.384285][ T9797] netlink: 'syz.5.8711': attribute type 1 has an invalid length. [ 1385.407987][ T9797] netlink: 'syz.5.8711': attribute type 1 has an invalid length. [ 1385.427940][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8711'. [ 1385.475141][ T9811] syzkaller0: entered promiscuous mode [ 1385.496660][ T9811] syzkaller0: entered allmulticast mode [ 1387.271639][ T9865] __nla_validate_parse: 4 callbacks suppressed [ 1387.271663][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8722'. [ 1390.403022][ T9865] vlan2: entered promiscuous mode [ 1390.408140][ T9865] veth1: entered promiscuous mode [ 1390.744429][ T9883] bridge13: entered allmulticast mode [ 1390.776578][ T9883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8728'. [ 1391.683078][ T9893] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8732'. [ 1391.774989][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8735'. [ 1391.988713][ T9917] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8735'. [ 1391.999615][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8735'. [ 1392.009151][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8735'. [ 1392.024312][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8735'. [ 1392.034277][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8735'. [ 1392.044448][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8735'. [ 1392.238097][ T9931] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1392.391065][ T9939] xfrm0: entered allmulticast mode [ 1392.412932][ T9939] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1392.500266][ T9946] netlink: 'syz.3.8747': attribute type 16 has an invalid length. [ 1392.522916][ T9946] __nla_validate_parse: 1 callbacks suppressed [ 1392.522936][ T9946] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8747'. [ 1392.673780][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8749'. [ 1392.710657][ T9952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.718600][ T9952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.727239][ T9952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.735468][ T9952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.753039][ T9946] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8747'. [ 1392.775875][ T9952] batman_adv: batadv0: Interface deactivated: dummy0 [ 1392.783116][ T9952] batman_adv: batadv0: Removing interface: dummy0 [ 1392.903521][ T9960] netlink: 'syz.2.8752': attribute type 6 has an invalid length. [ 1393.003266][ T9958] lo speed is unknown, defaulting to 1000 [ 1393.285513][ T9974] netlink: 'syz.1.8756': attribute type 2 has an invalid length. [ 1393.399672][ T9977] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8757'. [ 1393.600755][ T9982] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1394.160318][ T9958] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1394.168627][ T9958] hsr0 speed is unknown, defaulting to 1000 [ 1394.876240][T10043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8764'. [ 1395.032609][T10039] veth17: entered allmulticast mode [ 1395.047394][T10046] netlink: 'syz.2.8771': attribute type 1 has an invalid length. [ 1395.153474][T10046] bond11: entered promiscuous mode [ 1395.159340][T10046] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1395.290630][T10046] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1395.297862][T10046] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1395.315334][T10046] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1395.329394][T10046] bond11: (slave ip6gre2): making interface the new active one [ 1395.351751][T10046] ip6gre2: entered promiscuous mode [ 1395.358690][T10046] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 1395.645242][T10055] netlink: 'syz.5.8772': attribute type 21 has an invalid length. [ 1395.685299][T10055] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8772'. [ 1395.707727][T10055] netlink: 'syz.5.8772': attribute type 5 has an invalid length. [ 1395.715536][T10055] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8772'. [ 1395.726248][T10055] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8772'. [ 1395.924607][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.933168][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.939361][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.945496][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.951723][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.957829][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.963977][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.970135][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.976232][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.982433][T10059] tc action pedit 'at' offset 5 out of bounds [ 1395.988602][T10059] 0: reclassify loop, rule prio 0, protocol 800 [ 1396.160635][T10059] netlink: 'syz.1.8775': attribute type 10 has an invalid length. [ 1396.202473][T10059] syz_tun: entered promiscuous mode [ 1396.232704][T10059] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1397.179229][T10105] netlink: 'syz.2.8785': attribute type 2 has an invalid length. [ 1397.208853][T10109] IPVS: set_ctl: invalid protocol: 3 5.0.0.0:49158 [ 1397.538397][T10126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8789'. [ 1397.567245][T10124] lo speed is unknown, defaulting to 1000 [ 1397.711629][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8790'. [ 1397.733648][T10125] netlink: 'syz.5.8790': attribute type 1 has an invalid length. [ 1397.741656][T10125] netlink: 756 bytes leftover after parsing attributes in process `syz.5.8790'. [ 1397.837765][T10137] netlink: 'syz.2.8793': attribute type 16 has an invalid length. [ 1397.845660][T10137] netlink: 'syz.2.8793': attribute type 17 has an invalid length. [ 1397.960240][T10117] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8786'. [ 1398.738736][T10150] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1398.753277][T10137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.773889][T10142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.907009][T10124] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1398.925954][T10124] hsr0 speed is unknown, defaulting to 1000 [ 1399.247310][T10167] sock: sock_timestamping_bind_phc: sock not bind to device [ 1399.255901][T10168] sock: sock_timestamping_bind_phc: sock not bind to device [ 1399.300097][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8800'. [ 1399.690222][T10177] bond0: (slave syz_tun): Releasing backup interface [ 1399.699159][T10179] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8801'. [ 1399.794495][T10177] team0: Port device xfrm0 removed [ 1399.800978][T10177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1399.817971][T10178] team0: Mode changed to "roundrobin" [ 1400.309117][T10187] xt_CT: No such helper "syz0" [ 1400.314722][T10186] xt_CT: No such helper "syz0" [ 1400.529854][T10197] netlink: 'syz.1.8806': attribute type 3 has an invalid length. [ 1400.562100][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8807'. [ 1400.824231][T10192] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8805'. [ 1401.154246][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8810'. [ 1401.209405][T10216] xt_TCPMSS: Only works on TCP SYN packets [ 1401.687662][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8813'. [ 1401.725533][T10229] netlink: 'syz.1.8814': attribute type 1 has an invalid length. [ 1401.883545][T10213] bridge_slave_1: left allmulticast mode [ 1401.889311][T10213] bridge_slave_1: left promiscuous mode [ 1401.895086][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.904145][T10213] bridge_slave_0: left allmulticast mode [ 1401.909876][T10213] bridge_slave_0: left promiscuous mode [ 1401.915813][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.007129][T10229] bond12: entered promiscuous mode [ 1402.012761][T10229] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1402.026778][T10232] bond12: entered allmulticast mode [ 1402.098579][T10229] bond12: (slave bridge18): making interface the new active one [ 1402.106294][T10229] bridge18: entered promiscuous mode [ 1402.111873][T10229] bridge18: entered allmulticast mode [ 1402.121578][T10229] bond12: (slave bridge18): Enslaving as an active interface with an up link [ 1403.366585][T10266] netlink: 'syz.1.8823': attribute type 1 has an invalid length. [ 1403.404233][T10266] __nla_validate_parse: 1 callbacks suppressed [ 1403.404255][T10266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8823'. [ 1403.463981][T10266] netlink: 'syz.1.8823': attribute type 1 has an invalid length. [ 1403.487467][T10266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8823'. [ 1403.597666][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8825'. [ 1403.750947][T10278] lo speed is unknown, defaulting to 1000 [ 1403.836497][T10283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.029122][T10293] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1404.125379][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8834'. [ 1404.625917][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8838'. [ 1404.988911][T10333] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8840'. [ 1405.317334][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8844'. [ 1405.444171][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8845'. [ 1405.515638][T10350] bridge0: port 1(erspan0) entered blocking state [ 1405.522682][T10350] bridge0: port 1(erspan0) entered disabled state [ 1405.529343][T10350] erspan0: entered allmulticast mode [ 1405.541497][T10350] erspan0: entered promiscuous mode [ 1405.552932][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8844'. [ 1405.554545][T10278] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1405.585885][T10278] hsr0 speed is unknown, defaulting to 1000 [ 1406.066140][T10386] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1406.776072][T10401] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8858'. [ 1407.136823][T10412] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1407.194931][T10417] syzkaller0: entered promiscuous mode [ 1407.227105][T10417] syzkaller0: entered allmulticast mode [ 1407.626699][T10425] netlink: 'syz.0.8867': attribute type 10 has an invalid length. [ 1407.679342][T10439] netlink: 'syz.0.8867': attribute type 1 has an invalid length. [ 1407.687272][T10439] netlink: 'syz.0.8867': attribute type 2 has an invalid length. [ 1407.919128][T10442] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1407.980461][T10444] vti0: entered promiscuous mode [ 1408.407925][T10459] __nla_validate_parse: 7 callbacks suppressed [ 1408.407946][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8876'. [ 1408.468047][T10459] bond13: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1408.482658][T10459] bond13 (unregistering): Released all slaves [ 1408.515888][T10468] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8877'. [ 1408.548025][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8877'. [ 1408.917261][T10465] sit0: entered promiscuous mode [ 1408.936845][T10465] sit0: left allmulticast mode [ 1409.082981][T10465] netlink: 'syz.2.8878': attribute type 1 has an invalid length. [ 1409.090788][T10465] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8878'. [ 1409.418235][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8883'. [ 1409.428767][T10489] netlink: 'syz.1.8883': attribute type 1 has an invalid length. [ 1409.444050][T10489] netlink: 'syz.1.8883': attribute type 28 has an invalid length. [ 1409.463698][T10489] netlink: 'syz.1.8883': attribute type 3 has an invalid length. [ 1409.473940][T10489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8883'. [ 1409.501169][T10497] netlink: 'syz.2.8885': attribute type 3 has an invalid length. [ 1409.559882][T10497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8885'. [ 1409.770357][T10508] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 1409.778663][T10511] lo speed is unknown, defaulting to 1000 [ 1409.785215][T10513] netlink: 'syz.3.8892': attribute type 2 has an invalid length. [ 1410.096946][T10521] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1410.464353][T10511] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1410.481924][T10511] hsr0 speed is unknown, defaulting to 1000 [ 1410.583990][T10530] vlan1: entered promiscuous mode [ 1410.589173][T10530] gretap0: entered promiscuous mode [ 1410.843115][T10538] netlink: 'syz.0.8900': attribute type 28 has an invalid length. [ 1410.851671][T10538] netlink: 'syz.0.8900': attribute type 3 has an invalid length. [ 1410.860736][T10538] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1411.749206][T10559] netlink: 'syz.2.8907': attribute type 5 has an invalid length. [ 1411.757502][T10559] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.8907'. [ 1412.861790][T10583] lo speed is unknown, defaulting to 1000 [ 1413.491518][T10583] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1413.499398][T10583] hsr0 speed is unknown, defaulting to 1000 [ 1413.574173][T10593] block nbd5: server does not support multiple connections per device. [ 1413.586369][T10593] block nbd5: shutting down sockets [ 1413.723229][T10610] tipc: Enabled bearer , priority 0 [ 1413.756488][T10609] tipc: Disabling bearer [ 1414.156141][T10607] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8918'. [ 1414.172845][T10620] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1415.463234][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1415.472176][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1415.490791][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1415.499724][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1415.519394][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8931'. [ 1415.541816][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8931'. [ 1415.575445][T10657] netlink: 'syz.3.8930': attribute type 1 has an invalid length. [ 1415.583247][T10657] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1415.606498][T10655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8931'. [ 1415.977169][T10675] syzkaller0: entered promiscuous mode [ 1415.982711][T10675] syzkaller0: entered allmulticast mode [ 1416.222721][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8939'. [ 1416.246975][T10685] "syz.2.8939" (10685) uses obsolete ecb(arc4) skcipher [ 1416.615854][T10688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.652672][T10688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.674254][T10688] bond0 (unregistering): Released all slaves [ 1416.701075][T10695] netlink: 'syz.1.8944': attribute type 1 has an invalid length. [ 1416.753565][T10695] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1416.779869][T10695] syz_tun: left promiscuous mode [ 1416.796010][T10695] bond13: (slave syz_tun): Enslaving as a backup interface with an up link [ 1416.870228][T10695] bond13 (unregistering): (slave syz_tun): Releasing backup interface [ 1416.940795][T10695] bond13 (unregistering): Released all slaves [ 1417.000545][T10702] syzkaller1: entered promiscuous mode [ 1417.006102][T10702] syzkaller1: entered allmulticast mode [ 1417.585437][T10731] "syz.1.8952" (10731) uses obsolete ecb(arc4) skcipher [ 1417.780074][T10733] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 1417.958276][T10747] bond12 (unregistering): Released all slaves [ 1418.039570][T10745] netlink: 'syz.0.8949': attribute type 4 has an invalid length. [ 1418.090911][T10758] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1418.100974][T10758] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1418.111723][T10758] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1418.197839][T10762] netlink: 'syz.2.8960': attribute type 12 has an invalid length. [ 1418.656477][T10782] netlink: 'syz.0.8967': attribute type 1 has an invalid length. [ 1419.095344][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1419.112625][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1419.139855][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1419.170813][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1419.178669][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1419.220338][T28335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1419.229610][T28335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1419.237092][T28335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1419.248477][T28335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1419.298332][T28335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1420.066972][T10798] lo speed is unknown, defaulting to 1000 [ 1420.162983][T10838] erspan0: left promiscuous mode [ 1420.193538][T10838] ipip0: left promiscuous mode [ 1420.291523][T10842] __nla_validate_parse: 7 callbacks suppressed [ 1420.291545][T10842] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8978'. [ 1420.685387][T10798] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1420.712303][T10798] hsr0 speed is unknown, defaulting to 1000 [ 1420.721024][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8982'. [ 1421.121192][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.128348][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.146735][T10798] bridge_slave_0: entered allmulticast mode [ 1421.154709][T10798] bridge_slave_0: entered promiscuous mode [ 1421.163391][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.170629][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.177939][T10798] bridge_slave_1: entered allmulticast mode [ 1421.185892][T10798] bridge_slave_1: entered promiscuous mode [ 1421.286163][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.313633][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.341845][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8983'. [ 1421.366043][ T5629] Bluetooth: hci4: command tx timeout [ 1421.405436][T11673] netdevsim netdevsim0 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.413663][T11673] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.425187][T10798] team0: Port device team_slave_0 added [ 1421.432490][T11673] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.441279][T11673] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.450266][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8983'. [ 1421.487855][T10798] team0: Port device team_slave_1 added [ 1421.563975][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.594869][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.620843][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.633921][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.640938][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.686959][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.751373][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8988'. [ 1421.847520][T10881] lo speed is unknown, defaulting to 1000 [ 1421.859792][T10798] hsr_slave_0: entered promiscuous mode [ 1421.866665][T10798] hsr_slave_1: entered promiscuous mode [ 1421.873193][T10798] debugfs: 'hsr0' already exists in 'hsr' [ 1421.878976][T10798] Cannot create hsr debugfs directory [ 1421.936373][T10889] syzkaller0: entered promiscuous mode [ 1421.945926][T10889] syzkaller0: entered allmulticast mode [ 1422.069834][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8989'. [ 1422.527985][T10881] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1422.536267][T10881] hsr0 speed is unknown, defaulting to 1000 [ 1422.682718][T10909] bond_slave_1: entered promiscuous mode [ 1422.764742][T10911] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8995'. [ 1422.773969][T10911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8995'. [ 1422.930163][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8998'. [ 1423.469406][ T5629] Bluetooth: hci4: command tx timeout [ 1423.698212][T10931] netlink: 'syz.0.9001': attribute type 7 has an invalid length. [ 1423.729418][T10931] netlink: 'syz.0.9001': attribute type 8 has an invalid length. [ 1423.747547][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9001'. [ 1424.469863][T10798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1424.480229][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1424.514136][T10798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1424.528161][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1424.536177][T10798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1424.549099][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1424.557199][T10798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1424.568491][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1424.689705][T10798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.708512][T10798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.720673][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.728022][ T7050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.813190][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.820476][T11673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.035201][T10965] netlink: 'syz.1.9009': attribute type 2 has an invalid length. [ 1425.524598][ T5629] Bluetooth: hci4: command tx timeout [ 1425.620119][T10984] __nla_validate_parse: 4 callbacks suppressed [ 1425.620141][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9013'. [ 1425.684030][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9013'. [ 1425.700106][T10984] erspan0: entered promiscuous mode [ 1425.749678][T22433] [ 1425.752073][T22433] ====================================================== [ 1425.759142][T22433] WARNING: possible circular locking dependency detected [ 1425.766277][T22433] syzkaller #0 Not tainted [ 1425.770722][T22433] ------------------------------------------------------ [ 1425.777806][T22433] kworker/0:8/22433 is trying to acquire lock: [ 1425.784067][T22433] ffff888059ffe558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1425.794172][T22433] [ 1425.794172][T22433] but task is already holding lock: [ 1425.801568][T22433] ffff8880b20d1070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1425.810726][T22433] [ 1425.810726][T22433] which lock already depends on the new lock. [ 1425.810726][T22433] [ 1425.811717][T10798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1425.821272][T22433] [ 1425.821272][T22433] the existing dependency chain (in reverse order) is: [ 1425.837087][T22433] [ 1425.837087][T22433] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 1425.844946][T22433] _raw_spin_lock_bh+0x36/0x50 [ 1425.850266][T22433] hsr_dev_xmit+0x237/0x360 [ 1425.855313][T22433] dev_hard_start_xmit+0x2cd/0x830 [ 1425.861059][T22433] __dev_queue_xmit+0x1435/0x37f0 [ 1425.866626][T22433] NF_HOOK+0x33a/0x3c0 [ 1425.871318][T22433] arp_xmit+0x16c/0x270 [ 1425.876024][T22433] arp_solicit+0xbdc/0xe40 [ 1425.880990][T22433] __neigh_event_send+0xf0c/0x1510 [ 1425.886699][T22433] neigh_resolve_output+0x1a1/0x720 [ 1425.892429][T22433] ip_finish_output2+0xc4b/0x10b0 [ 1425.898025][T22433] ip_output+0x29f/0x450 [ 1425.902810][T22433] iptunnel_xmit+0x626/0xd10 [ 1425.907980][T22433] ip_tunnel_xmit+0x195b/0x2040 [ 1425.913380][T22433] __gre_xmit+0x19e/0x240 [ 1425.918305][T22433] erspan_xmit+0xad5/0x1590 [ 1425.923330][T22433] dev_hard_start_xmit+0x2cd/0x830 [ 1425.928972][T22433] sch_direct_xmit+0x257/0x4c0 [ 1425.934260][T22433] __dev_queue_xmit+0x1754/0x37f0 [ 1425.939802][T22433] alb_send_lp_vid+0x348/0x550 [ 1425.945191][T22433] alb_send_learning_packets+0x12c/0x300 [ 1425.951353][T22433] alb_fasten_mac_swap+0x45d/0xf70 [ 1425.956993][T22433] bond_alb_handle_active_change+0xc85/0xf50 [ 1425.963505][T22433] bond_change_active_slave+0x1098/0x36d0 [ 1425.969750][T22433] bond_select_active_slave+0x8a6/0xcd0 [ 1425.975826][T22433] bond_enslave+0x239c/0x3b10 [ 1425.981068][T22433] do_set_master+0x563/0x720 [ 1425.986268][T22433] rtnl_newlink_create+0x4c8/0x7b0 [ 1425.991939][T22433] rtnl_newlink+0x167f/0x1bd0 [ 1425.997159][T22433] rtnetlink_rcv_msg+0x802/0xc00 [ 1426.002627][T22433] netlink_rcv_skb+0x226/0x4a0 [ 1426.007944][T22433] netlink_unicast+0x7bb/0x940 [ 1426.013234][T22433] netlink_sendmsg+0x813/0xb40 [ 1426.018560][T22433] sock_sendmsg_nosec+0x13a/0x180 [ 1426.024128][T22433] ____sys_sendmsg+0x54e/0x850 [ 1426.029420][T22433] ___sys_sendmsg+0x2a5/0x360 [ 1426.034634][T22433] __x64_sys_sendmsg+0x1b1/0x290 [ 1426.040110][T22433] do_syscall_64+0x174/0x580 [ 1426.045230][T22433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.051745][T22433] [ 1426.051745][T22433] -> #0 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}: [ 1426.060034][T22433] __lock_acquire+0x1520/0x2cf0 [ 1426.065431][T22433] lock_acquire+0x106/0x350 [ 1426.070466][T22433] _raw_spin_lock+0x2e/0x40 [ 1426.075499][T22433] sch_direct_xmit+0x15f/0x4c0 [ 1426.080790][T22433] __dev_queue_xmit+0x1754/0x37f0 [ 1426.086342][T22433] hsr_forward_skb+0x152a/0x28c0 [ 1426.091820][T22433] hsr_dev_xmit+0x242/0x360 [ 1426.096872][T22433] dev_hard_start_xmit+0x2cd/0x830 [ 1426.102540][T22433] __dev_queue_xmit+0x1435/0x37f0 [ 1426.108176][T22433] ip6_output+0x337/0x540 [ 1426.113126][T22433] NF_HOOK+0x177/0x4f0 [ 1426.117763][T22433] mld_sendpack+0x890/0xe10 [ 1426.122789][T22433] mld_ifc_work+0x839/0xe70 [ 1426.127830][T22433] process_scheduled_works+0xa8e/0x14e0 [ 1426.133903][T22433] worker_thread+0xa47/0xfb0 [ 1426.139037][T22433] kthread+0x388/0x470 [ 1426.143634][T22433] ret_from_fork+0x514/0xb70 [ 1426.148798][T22433] ret_from_fork_asm+0x1a/0x30 [ 1426.154085][T22433] [ 1426.154085][T22433] other info that might help us debug this: [ 1426.154085][T22433] [ 1426.164316][T22433] Possible unsafe locking scenario: [ 1426.164316][T22433] [ 1426.171820][T22433] CPU0 CPU1 [ 1426.177215][T22433] ---- ---- [ 1426.182615][T22433] lock(&hsr->seqnr_lock); [ 1426.187127][T22433] lock(&qdisc_xmit_lock_key#3); [ 1426.194680][T22433] lock(&hsr->seqnr_lock); [ 1426.202236][T22433] lock(&qdisc_xmit_lock_key#3); [ 1426.207367][T22433] [ 1426.207367][T22433] *** DEADLOCK *** [ 1426.207367][T22433] [ 1426.215539][T22433] 11 locks held by kworker/0:8/22433: [ 1426.220935][T22433] #0: ffff888032c27d40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1426.231773][T22433] #1: ffffc9000324fc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1426.244955][T22433] #2: ffff88802cd3f530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 1426.254199][T22433] #3: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x206/0xe10 [ 1426.263439][T22433] #4: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 1426.272497][T22433] #5: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 1426.282621][T22433] #6: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1426.291769][T22433] #7: ffff8880b20d1070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1426.301270][T22433] #8: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x28c0 [ 1426.310784][T22433] #9: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 1426.320718][T22433] #10: ffff88807b717228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 1426.333453][T22433] [ 1426.333453][T22433] stack backtrace: [ 1426.339377][T22433] CPU: 0 UID: 0 PID: 22433 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 1426.339404][T22433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1426.339420][T22433] Workqueue: mld mld_ifc_work [ 1426.339448][T22433] Call Trace: [ 1426.339459][T22433] [ 1426.339470][T22433] dump_stack_lvl+0xe8/0x150 [ 1426.339504][T22433] print_circular_bug+0x2e1/0x300 [ 1426.339528][T22433] check_noncircular+0x12e/0x150 [ 1426.339567][T22433] __lock_acquire+0x1520/0x2cf0 [ 1426.339616][T22433] ? sch_direct_xmit+0x15f/0x4c0 [ 1426.339644][T22433] lock_acquire+0x106/0x350 [ 1426.339672][T22433] ? sch_direct_xmit+0x15f/0x4c0 [ 1426.339701][T22433] ? NF_HOOK+0x177/0x4f0 [ 1426.339722][T22433] ? mld_sendpack+0x890/0xe10 [ 1426.339744][T22433] ? mld_ifc_work+0x839/0xe70 [ 1426.339770][T22433] _raw_spin_lock+0x2e/0x40 [ 1426.339794][T22433] ? sch_direct_xmit+0x15f/0x4c0 [ 1426.339821][T22433] sch_direct_xmit+0x15f/0x4c0 [ 1426.339853][T22433] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1426.339887][T22433] __dev_queue_xmit+0x1754/0x37f0 [ 1426.339916][T22433] ? __dev_queue_xmit+0x29b/0x37f0 [ 1426.339941][T22433] ? local_lock_release+0x9c/0x160 [ 1426.339967][T22433] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1426.339995][T22433] ? __alloc_skb+0x276/0x7a0 [ 1426.340021][T22433] ? __alloc_skb+0x276/0x7a0 [ 1426.340048][T22433] ? __copy_skb_header+0xa3/0x4a0 [ 1426.340087][T22433] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1426.340110][T22433] ? __asan_memcpy+0x40/0x70 [ 1426.340135][T22433] ? __pskb_copy_fclone+0xb7e/0x1200 [ 1426.340177][T22433] ? hsr_addr_subst_dest+0x30a/0xaa0 [ 1426.340206][T22433] hsr_forward_skb+0x152a/0x28c0 [ 1426.340238][T22433] ? ret_from_fork_asm+0x1a/0x30 [ 1426.340263][T22433] ? hsr_forward_skb+0xb3/0x28c0 [ 1426.340292][T22433] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1426.340317][T22433] ? do_raw_spin_lock+0x12b/0x2f0 [ 1426.340342][T22433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1426.340369][T22433] ? hsr_dev_xmit+0x237/0x360 [ 1426.340392][T22433] hsr_dev_xmit+0x242/0x360 [ 1426.340414][T22433] ? hsr_dev_xmit+0x2d/0x360 [ 1426.340437][T22433] dev_hard_start_xmit+0x2cd/0x830 [ 1426.340480][T22433] __dev_queue_xmit+0x1435/0x37f0 [ 1426.340508][T22433] ? __dev_queue_xmit+0x29b/0x37f0 [ 1426.340528][T22433] ? ___neigh_create+0x1cd2/0x22b0 [ 1426.340559][T22433] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1426.340580][T22433] ? neigh_connected_output+0x1e7/0x470 [ 1426.340611][T22433] ? eth_header+0x11b/0x200 [ 1426.340637][T22433] ? __asan_memcpy+0x40/0x70 [ 1426.340674][T22433] ? ip6_output+0x11e/0x540 [ 1426.340696][T22433] ip6_output+0x337/0x540 [ 1426.340719][T22433] ? __pfx_ip6_output+0x10/0x10 [ 1426.340742][T22433] NF_HOOK+0x177/0x4f0 [ 1426.340767][T22433] ? __pfx_NF_HOOK+0x10/0x10 [ 1426.340788][T22433] ? icmp6_dst_alloc+0x39b/0x430 [ 1426.340879][T22433] ? __pfx_dst_output+0x10/0x10 [ 1426.340901][T22433] ? __local_bh_enable_ip+0xd0/0x130 [ 1426.340936][T22433] ? icmp6_dst_alloc+0x39b/0x430 [ 1426.340960][T22433] ? icmp6_dst_alloc+0x39b/0x430 [ 1426.340986][T22433] mld_sendpack+0x890/0xe10 [ 1426.341018][T22433] ? mld_sendpack+0x206/0xe10 [ 1426.341041][T22433] ? __pfx_mld_sendpack+0x10/0x10 [ 1426.341076][T22433] mld_ifc_work+0x839/0xe70 [ 1426.341107][T22433] ? rcu_is_watching+0x15/0xb0 [ 1426.341141][T22433] ? process_scheduled_works+0xa20/0x14e0 [ 1426.341166][T22433] process_scheduled_works+0xa8e/0x14e0 [ 1426.341207][T22433] ? __pfx_process_scheduled_works+0x10/0x10 [ 1426.341235][T22433] ? assign_work+0x3cf/0x5d0 [ 1426.341261][T22433] worker_thread+0xa47/0xfb0 [ 1426.341302][T22433] kthread+0x388/0x470 [ 1426.341331][T22433] ? __pfx_worker_thread+0x10/0x10 [ 1426.341354][T22433] ? __pfx_kthread+0x10/0x10 [ 1426.341385][T22433] ret_from_fork+0x514/0xb70 [ 1426.341417][T22433] ? __pfx_ret_from_fork+0x10/0x10 [ 1426.341448][T22433] ? __switch_to+0xc89/0x1420 [ 1426.341475][T22433] ? __pfx_kthread+0x10/0x10 [ 1426.341505][T22433] ret_from_fork_asm+0x1a/0x30 [ 1426.341535][T22433] [ 1426.743697][T10798] veth0_vlan: entered promiscuous mode [ 1426.755047][T10798] veth1_vlan: entered promiscuous mode [ 1426.776316][T10798] veth0_macvtap: entered promiscuous mode [ 1426.787627][T10798] veth1_macvtap: entered promiscuous mode [ 1426.851528][T10798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.863665][T10798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.878338][T11659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.887216][T11659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.898931][T11659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.907719][T11659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.958972][T10798] ieee80211 phy94: Selected rate control algorithm 'minstrel_ht' [ 1426.981207][ T7050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.989059][ T7050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.999222][T10798] ieee80211 phy95: Selected rate control algorithm 'minstrel_ht' [ 1427.020840][ T7050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.041520][ T7050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.588669][ T5629] Bluetooth: hci4: command tx timeout