last executing test programs: 6m38.081537025s ago: executing program 2 (id=1358): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @empty}, {0x306, @remote}, 0x2, {0x2, 0x4e24, @loopback}, 'ipvlan0\x00'}) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x37) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000540000000e0002006e9b8ef38a7673696d0000000f0002006e657464657673696d300000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0xf, 0x5, 0x400) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="eac2bc7c71a2b22e72cfb65d75e56a12", 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000440)={0x0, 0xc4, 0x8, 0x4dfe, 0x7b96, 0xfff, 0xfff7, 0x7ff, {0x0, @in={{0x2, 0x1, @broadcast}}, 0x4, 0x0, 0x8, 0x9, 0x4}}, &(0x7f0000000500)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000540)={r9, 0xd}, &(0x7f0000000580)=0x8) splice(r1, &(0x7f0000000180)=0x7, r7, &(0x7f00000001c0)=0xffff, 0x5, 0xa) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000200)={0x40, 0x2, 0x2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f00000000c0)={0x70004, 0x200}, 0x8) 6m34.921254634s ago: executing program 2 (id=1381): r0 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', @broadcast}) socket$nl_rdma(0x10, 0x3, 0x14) 6m34.807380129s ago: executing program 2 (id=1382): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x1d}}}], 0x18}, 0x922bac8556bdad8e) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffcc7, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x83, &(0x7f0000000480)={r7, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000580)={r7}, &(0x7f00000005c0)=0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) 6m33.779534815s ago: executing program 2 (id=1385): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140eca945095ee36f726aa6d71f70dce97000100", @ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf256f000000"], 0x14}, 0x1, 0x0, 0x0, 0x6c040}, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000300)) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4008, r2}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r2, r5}, 0x10) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@newspdinfo={0x34, 0x24, 0x200, 0x70bd2b, 0x25dfdbfd, 0x2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x34}}, 0x40008) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x1, 0x48, 0xe, 0x2}, {0x800, 0x6, 0x5, 0x25c0000}, {0x7f, 0x5, 0x8, 0x18}, {0x1, 0x7, 0x9, 0x9}]}, 0x10) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) 6m32.913601632s ago: executing program 2 (id=1391): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xe}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x40001) sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5005004}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x900, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x1d14e8ad56c73788) 6m32.22261649s ago: executing program 2 (id=1395): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000, 0x80000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x400, 0x6}, 0x0) socket$netlink(0x10, 0x3, 0x15) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x3, 0x10000}, 0x28) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x61}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911027000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x2}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 6m17.186178289s ago: executing program 32 (id=1395): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000, 0x80000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x400, 0x6}, 0x0) socket$netlink(0x10, 0x3, 0x15) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x3, 0x10000}, 0x28) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x61}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911027000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x2}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.299030121s ago: executing program 5 (id=4708): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900ffff626f6e64000000000c0002800800260001000000afae93c48f80537e28885280b5096efd82f036980555feae742b62c5f5b4d1ebea110241d13d02df146e77b49c301b43ec5a4fa86d188503f16ae80d5249f7901c6be8899830aa230c03a348e08cdf838f4fe1aa55a4bf7c6a5f3d2ae0b0917b98362fdd"], 0x3c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) 3.297394898s ago: executing program 4 (id=4709): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) 3.252411959s ago: executing program 1 (id=4710): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f00000002c0)='%', 0x0, 0xd01, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = socket(0x2c, 0x6, 0xfffffffd) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000001540)) (async) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000001540)) 3.141854892s ago: executing program 5 (id=4711): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) close(0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) sendmsg$inet(r3, &(0x7f00000044c0)={&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000004140)=[{&(0x7f0000000140)="70289d74d3345f8948320c66d01dd04c8170970cfe096c753bd54debd7ccac46bdf5", 0x22}, {&(0x7f0000000200)="aaf94bf80037f29a96a122fa84328ba81707fec5c4c8052c5e6aea08c3a1ce3c7fc38728a1a910eff9", 0x29}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="87d2c749a1bcf496bf83fd152a9a8b37220e4a533602a0db1e2d954f38c44fbf2647f1097019bca624dadb3f07666b2200ed3d02800dbf126ce73d37994c37ff1fc862811cfc6de4ab0d49ebd8a6d9663e61c1c81a8c111c67554bc3", 0x5c}, {&(0x7f0000003140)="dd025b2146fd20d379f5d428dfc97f6b10b5fa03782466ad09d136734c093b08363827d2bb44168d9bac95756a425373d6d5a92bad7cc87c2023498f72529f4ca466c352ac1bedc4ffc787e9418b42f4c4e369378d0459ef770ba002a0644fc23f7e52d514d454b513b660559a822fb0d6f5e1f6bbb77264136df9a63b10502233c6df129858f28a6a221c58a639d20161f56ec2a6d0058af364d7cdf0eeb539d7656f8ae8bf5ead3f0e41872ba18fbc031331d03f02080a0b4d988e0b302f239a61ec5459cdaf367a34d6fab5908fef075d950c44832aa583ec48c380d04fc8e3ae8018bd611a5b10091d7903d00a38d6fd135b49f99ddb869b6a7b56954b50e568d165a156aeb1e09f383f2b62d7dc9c6f573d772ae2209b385d3f91d2b5cb735bc288f12e098d80180fb6ac58c0ce13285f5a7cec180b47651a6b942047453518c7b29f1ed0ca1874833d8a54d913a1748b48a2509625f97780bc3ebea54b6801a74090bc913aa91cd26858d40b5baa24901ccc205711a0717d93faf6ee80ec20d7b3d65c2c571c2ebc640c4fbf2964a8d715a6f3e4496057ed842733c66c8d3eb9c4a1fbce01ac824418d77f0423ed8edafa9402ff911c51f145dd1a9991c8a9b1b9f17a7af2d8e4b08e59107282a3eea70e0956175925c1d187e33cedba73238e93b9383179b08500b434c18535d09873352333f69f8b27edbca7c48d66bfa8c45dfc06ee349a0a997fa6f1208273f3b3249ca4f78ad00d348777efb19603e36160ae90e7884575149c46f83dd7cc6099c408ffee1cf96856464ff990bfeedc8be1777959fdb654af05443af9ad8396d98fcd2b2fed316dbf47643e44b715fc96d146c3240f1acea06085be29b60063052064f6699a0bdf8f1e7193dc4293d2f74b60e3aef3bd35e7e8d64d69c555964c84309fd84d7a65be2eb6ab9c649027fb843093b7e411e7402e1069278a50f77547c9fbea450d4c85e47d274243a13f64eecfe8b813477da78bc80cca6f86aaa06c7163df8e5fd18beb9fa933a64883013f66fce0817b421978c1b63e4fb0e2e53463bfc225dd8852f0a2e9fa5c9a40225cf482e136adcdae185d36819179f179045f0510fa823398a4b0d514bbe45f470cf14bda72bea708ea1807dfb9f498efa6e4d8366a748d39956d95c021854c795626225bfe2617e15917593266bd0138d5da1554e09820d0059b8f8bde1654fc7be67bdd108c6aadeba93b1be0276d390dfc28e3c047770d32323b899c12c3ebf64e6e83eab31b963c763262f06bf32c743879eef659d8a17b081d929edd1c48eba20069f0c1fda2488390bf3ed81b709ed5c6b9b05b91a37fecb6b48f8cf73705035b369462dfb5deb88882ec68325c300f26fa5885c510a181b68db7905d5e76c89dbbfbbd1b35973b5fd3974f2098a7334b4641d968c641ab8723cb8d6aa6873031c06fa822a02a70a70ce7eb743ab75ef314fe889e138c33f6c7493b2bab6b7fdaf7e8de33c2f1b52357b7a98c6d516208a40033902eec2606c253dc822ba9de1551e6ef74416d56f3ca90baf9819d8a1cc2e62513d3881ea5c0f20e825e34dbc84aefea319f76f6bb12ffd2c979981fde06ad1ec1f225da5bd21ec488cde89ee3b028365b14532a701255fdab88f4f63c8b7d520a62e63506f250cdf6d4a4ed9176a44a08dde5b601cb1534b7ac1517d2ee9b5e81440687c748d43a6fecb661fad6d37efcf2293e166cb5f391179cfb6df64174f1fd267195ca16bf5f7dbc14bd1ab78e6caee7eeea7ce24ddde28e15a1ea35607b4aec43d8c364bf4aa4c93bea2f57281997d7aad21173c203b170821b77cdbc2d071e51b2ebae275063099f16065b7b2f29db99fe654ef4db971ccf5e6957ba6a1e619be8c9a03babccd44d438a20424d08efa264557335c2b78f68a03a2e6e4265e457505065d1dc55761f6b526fb4d42b31bf9f363ae38886be3aecc3cc2282d64f4c0a76f75f1ad66be4fa50c55426ab0b2cba15c6b7b42eb2c0d44e25b670f181e9eb9298a27701ae17513ab19534637940686caf5105cbaeb942720fc51b0e787541e0e16a30339391f4e37a060b6dee42a3a86f41747ce9df45ba1d4b8b2e2464c7b37e79df88660b7f58a95d0a2e7458d3853509ecd3b53602b3738f2fe7b605818859ff95c8848f7f92ac3303c4cd7d02169b7f2fe87990f49b8be9cc99848d5f629e6bf909b5cbb8b0daad710bc0a6d39f53e083817230996f8b218cd0aa9226b5f6ac535260ba8a592673f0025ac06f8018c0d452ff2093846389098eb477c62fe3dddc49e8c12810e3500f6cd58b64383cda0b93b3693469db0dc7605f2787e971658ff3059831d4a100e4748b72a3c22083cc6b397489fb83558312d212ee0df249e35d0dc811bb3d99f8de4774b47c4c9123148bcad93760c469bd821e005a7b31b03aa77703325c41649204348740b2abe3c9537197a2013cf930484a15c16cf80f5c1bcc906ef1795fdf5995771db12901d37ea296fcabb4bff1647b4a23522cdd90c147ada6fe7b6d159db8d096bd10acabe0577d1af02e78094b95c5d6510b6ce64a7466c81988dbf5d79af915552f83960422c1fa24ccab977d5571ea5eb35e4095304a51fdf8cf73bf950e0902d38ee16702a5bfbaa1bddd453283d33f62659d8ee950eaad7d21e03887883af2e68e4dcc0439f6cc11582dbd8876125f8c3d1533ca7090e50a36a3f95d8dd5dd4dfcabc36302888f0c1e460f743c43fdcb4fa1b87dfeaa3dd15e73b536676143b40173c5ae03402a7fffdc3597c5194d28e79a34f71d48ec34f09a7c21553a3e04b76e74933ad054df17b4de0fab7e9fcc814eae4dc15df728e7045c0260db792027c21cef1ab524616ae0c944270fc0282bafead0dd4792df173931cce8fa7558f88c4a03babc6b1a89e68ade98b101ee443f3dd53af821fc9b664cef3d3518c58855c58f2e8413a5b7005a9f4e788e34b8e9a1847b6b582ffa1ff050dba7f34a86147797e4bde12cdf8679401e6808989b1370e69451f2bd658b5b47491f526f4bdf2e8384dcd47916a56d98e927a5ecef431885b413a43d1c18d49127caf3e30eb045cd39fcb171dbe13520128382309f5d654dbd28fc7f0e79077ef55404d11e4ec24c026133465f13ea7b664b3f20feea34eebee6913aecd4689acf01f358bc9b036860f955b3954fc1030ac7a0cdf7bd07a668dcd03953a32781d2cc026c38bbc2384845b27a3ab9164b0f53255c7e348a2eaa584f1c40b2557dc074a0e43cb77ac3083e0cfb9c9a583226632b2592a0044e3516fdd0ac8e1b121f4b5ce4b897b1d4773c341a2ce3b161b0aa2e2822a32255fd20fe72851095d1bdffa29008378c3781261f17205e9a3b742ed4d1db485c243ee3394f427c3e49d7db79b5437b6aee0185806ac7b120211e9a2abe559553944b9e64af6fed4067ad3f562882f466da7fd8e04fd59a6d467b867d5124a3e0901e36f481e49a76442915571012065f0a0d77cab95d53ab8b5235b7696fac371236afde5527989a73b65932cd6dcaee6ee58af7e967a95cdfac2f8d316eef6574f845038c568ead4fd9e7149d79ba21092ff7e9ef80631863c5d098510ef039c0e2861711edf0f07ead530827cf43e28d6ed5d84ef976491a960d9c887e70ae980cf472fc9519bbad6d6568e39306333f1f8af615858a9ec691bf18de3366e473326e641c1f89e5113d29cb55ea3f933d0b228269534e54bde07d27cd40f307697f13063751522b8336ea86cd5e254b16e1aafdc335cd5bd7fbd8cabdf58151a5e723811bd113a05e563660b2141b2581195f431bafc98d8edf3c740f112379e146d808da6fc6eb49ee6ed003669b3bc54d0063d4075dda95ac32adf22383edf35c00343044b89bf5aba4a403489d2fbcee0b29f4fa9430849a5b452211864fa28289c814013c3b84a9a0129be1b3bd9e71aab7de6e8cafbfd25b18b3fade08de312b77f76987e20db8caa1b69fd13d3b2216cd7624d76c57caec7406110432a073ff0fc4236110191b8a66592382d80f9162a7074c571cc5740d325fa19bad9b1cf0c44ab8ac0c7092932c509af69f2db9e4e99fd635d5f5656386498a746e3e955a3fc21ba9cc153181616485bab70fa88b0ea2d1a98552e7610f186d6373812dde7ba95251df7b2258bd8254a656c8e11c3dadff83755109855e8356367022a217d2c92b459a4a8e81cc7c469e5afa0865f028390a016077c340ac4bc2bf7aa8874fa65145a7b17025e7f16e8e71ef79dd6bfce165d9b98fd663f9999b327b5a53ba98e23bfcdec3f084c7177761cf7a62d89dae6f83b60b26f1373fc244dbd5662b9b78e5d0d8d42a6c2bba59e91556fce4d54b141334426f341163d7e373eb006bf40ebf4b22b0fcbae1d0ff73172b6ae9776e8040bd48a9bbd44989f7d15595eefe96f9a6f6ad88aaab1ac2a4dc9305df44add010d1412be43a41d4b781b4d0f6d78fc7b482496d8a558d6c01dd136ea9383865c46323cd09dfd43453c3031b87a4bc8c56f2b74f45a31fa1a2920c23f30033f017703a3a37f0e9391a883745385c37e595b27bd5da49c3e9747c452480251780027bc7b64f0d6f4d08d90d0e9d417b648d384afd909fd197d9a124a54a8573ac1ca2893be2dc72c0335812faf93c1082c330f0f0897815be1d4bda9e6e6a616fcadb1a38ff96ea9059a7a7823d486399b87125dc2a58d27a8792dc383a32f9537a7d0a821d90aea84d46158b2c298de60abed9e6727cae9393d27f14f566893e43e57ef51ecb681fa1f6a0f37eeab3aa05ea5d5b459d880627687b0c735d8a45b97952c63ca48a23a1d6080bfd48cc90dec89ce2e1840b7e10d99881461aaffc1e7e6fbd739b5abf0d74dc2233cc9a497edfed89272d62ad43e525ab23d4fbd951cbffeaafe63ecd3dbf82d06dacad3f61aa03668ad1e78866d36c20e50f920cdbfa15011f64bd312709d684e69ccfe39633fd291ad4c7265cb0641cb16eea00b6749a5916fd024419077f9f4e9dd752283efa47bd3783c888147550a8f8c085d3cdb54f73dfaf85e1c063ac679aaffcb9585ce7b44534458a610c97ab765265f92f346688751b92f430192cdf8b78a004eba3f2738c1e1f98c62380870e8e67a09a943de00b18e10fee2539acd7a1851d06d603bd3542c9ee1c5879902c59376010104e92845fcce2fdcfa6a8ec425b1e8da3bef1f6fe7438f7d2ede0495de0c42038d0f4455beff2fbda037655d9fa1ecf7a299f439acdd739dfc699a24ddb06c789a95e70b6597f997a14a9b9cda2cfff53a995c9a9e2a9d0c562151b7cbe11a2d5e8a1cca59e0a1aa463f874d6478f24679f57acd1be0e3a7880bc1f019346b9010709ee091bea5fcbecc06dfb40f26dc3dffd369fa4d6252a73a0828eeec362793137a7709d50c05aaeaddfdd55374fa2909836c9230126e4e3d27e1bb277810eacf424933c1f9870a9d827dadf9d432dc505590df43319d564b2523895438e2686cfe64c5278abc11cbd97905298918a1eb5f5ca362ce98c94a40e476c61373ed599a7c59c70959f96c2f4c611a886ec3aa765ffe75ebe360ad9a23fbcd92910c04e9f9f4cba4e83fe166e2f689e9e07ab4da2d9efc27110cf6a00941ddf9cc599f507633cc3782c5db04d4c52c56322cf46e676dec1faa6ee7234ff861c21c5904e20ec4bb9b2dcc2abe2ab5a86ad85b76cad4ab577a29cea7da770f5c5ffe2db3bb26cdf33eb5dab4c57687f72344228346b9c4c00100beec0bc464d0bf25772c6", 0x1000}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7f000001ac1414aa00000000"], 0x148}, 0x20000801) listen(r2, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000300), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r6}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000) 2.858990886s ago: executing program 0 (id=4712): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000009c0), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) accept(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000300040024000e0101004700000000000000000000000000ff0000fa00000000d27f080b0000000008000d00e1000004"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213000e0200000000000000f8db74b3"], 0x10}}, 0x4000050) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r10, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) 2.754617684s ago: executing program 5 (id=4713): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x40db, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001e00050700000000005a8eae4b03516932000000ac1414aa0000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000007b500002400090000000000062cb490b3cbcb974e00000000d4f43f7100"/108], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000380)="2058ea6b42031a3b9eb47011138c4082ac388e9d660b5a4e71a2b4c120456f61096f8c444331ce863e2ac0c0a6c6fe82b314a6cd9f46de348bc12d08002c1f839d", 0x41, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x470bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.746475598s ago: executing program 1 (id=4714): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xed7cb1efa0beeaa0}, 0x4000000) connect$qrtr(r0, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) getsockname$qrtr(r0, 0x0, &(0x7f0000000980)) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=@dellink={0x34, 0x11, 0x20, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0xa00c}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x14040001}, 0x800) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r8, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 2.079581359s ago: executing program 1 (id=4715): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r1], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0xc1000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d0000c10000000000020000000000000600000000"], 0x24}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) recvmmsg(r5, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000d8}, 0x8080) sendmsg$NL80211_CMD_ASSOCIATE(r6, 0x0, 0x80081) 1.958942335s ago: executing program 3 (id=4716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) 1.956840744s ago: executing program 4 (id=4717): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfff) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800100000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240027012ebd7000fbdbdf25027c00000c0001800800020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.862267519s ago: executing program 0 (id=4718): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x33, 0x2, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo={0xc2, 0x4, 0xfffffffc}, @pad1]}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r1, &(0x7f00000000c0)="9946a179fd9d6235412947efa3bad662330e7e6c3eac916a72eeef7a2236fdf78288fa8f923ec233a4436d3a9b38369d2950a3704f650e18681bdea5e49f67d8cab01fa0403f949bbef25a87413da1e0cd4d69913244c62af901d24c300ea41379350215cd9fc9", &(0x7f0000000140)=""/4096}, 0x20) r2 = socket(0x3, 0x3, 0xe9e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x9, 0x0, 0x79, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x700, 0x868, 0x6}}) bind$xdp(r2, &(0x7f0000001240)={0x2c, 0x3, r3, 0x1f}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000001280)="d98af4a96bd0e4840f0f25802d2b3f3932601b8e3f78105e2419e0c43b3f1eb333c5011947043df1c694a46aba73d5cf75b9b7f101bb84f8f3ad03f9dff0bcdbcae6e1656c0145eee8b7fcb6554cf36f932a5abb2e3a45a88c54871e0b12784b36f6a93c71176fe3ee59a7d2bcb782d4b996af4e226f1b57d93042185ee8a07c4e2b1fc0", 0x84) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000001340)=0x1) tee(r1, r4, 0x6, 0x4) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000001380)={0x62, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x1, 'wlc\x00', 0x1, 0x6, 0x78}, 0x2c) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x880) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001500)={0x0, 0x9, 0xa, 0xca, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), r8) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r7, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000) pwritev(r5, &(0x7f0000002680)=[{&(0x7f0000001680)="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", 0x1000}], 0x1, 0x22, 0x6) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) pselect6(0x40, &(0x7f00000026c0)={0x1, 0x9, 0x3, 0x9, 0x401, 0x8000, 0xffffffff, 0x7a}, &(0x7f0000002700)={0x1, 0x4, 0x6, 0x0, 0x9, 0xa, 0x1ff, 0x7}, &(0x7f0000002740)={0x100000000, 0x2, 0x2, 0x7fff, 0x2, 0xffffffffffffffff, 0xffff, 0x7fff}, &(0x7f00000027c0)={r9, r10+10000000}, &(0x7f0000002840)={&(0x7f0000002800)={[0x9]}, 0x8}) unshare(0x2000000) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x7c, r11, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a40), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002b40)={'gretap0\x00', &(0x7f0000002a80)={'syztnl1\x00', r3, 0x20, 0x8000, 0x6, 0x5, {{0x1f, 0x4, 0x3, 0x26, 0x7c, 0x65, 0x4, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x44, 0x41, 0x3, 0x4, [{@broadcast, 0x5}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x5cd6}, {@rand_addr=0x64010102, 0x6bbbcd85}, {@private=0xa010102, 0x100}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xe34d}, {@multicast2, 0x3}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x88, [@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f00000030c0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003080)={&(0x7f0000002e00)={0x258, r12, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x258}}, 0x40) 1.721648754s ago: executing program 5 (id=4719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x80088a02, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100282a23708afa00"/18, @ANYRES32=r9, @ANYBLOB="1400040073797a6b616c6c65723000000000000008000500020000000500530000000000"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.661850489s ago: executing program 3 (id=4720): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) sendmsg$nl_xfrm(r3, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080b0) sendmsg$802154_dgram(r2, &(0x7f0000001cc0)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4009840) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) write$nci(r0, &(0x7f0000000c40)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x8, {0x6, [{0x0, 0x1}, {0x0, 0x81}, {0x3, 0x3}, {0x1, 0x3}, {0x3, 0x5}, {0x2, 0x3}]}}, 0x10) 1.521126081s ago: executing program 0 (id=4721): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xe}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x8) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r5, 0x50487, 0x80c4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtclass={0x24, 0x28, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffff}, {0x6, 0xfff3}, {0x6, 0x8}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000680001000000b84acaeed82a46e1000000000000080005"], 0x20}, 0x1, 0x0, 0x0, 0x20008845}, 0x8004) r8 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8) 1.17804503s ago: executing program 0 (id=4722): r0 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000001000200000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x4}) 1.175472719s ago: executing program 5 (id=4723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xffffffff, 0x0, 0xfffffffd}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002fbd7040fbdbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="05002e00a4670b0100000005002d0001000000"], 0x2c}}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2000000000000194, &(0x7f0000000340)}, 0xfffffffffffffeb9) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r8 = socket(0x15, 0x5, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) sendmmsg$inet(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)="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", 0x1e2}], 0x1}}], 0x2, 0x2090) 1.039872073s ago: executing program 4 (id=4724): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x401}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'cpuacct'}, {0x0, 'net_cls'}, {0x2b, 'rdma'}, {0x77, 'blkio'}, {0x6, 'cpuset'}, {0x2d, 'net'}, {0x2b, 'freezer'}]}, 0x35) r5 = socket(0x8, 0x80000, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000007c0)={{r3, &(0x7f0000000640)='\x00', 0x141000, &(0x7f0000000680)={@_ha_fsid={[0x96b2, 0xd7fb]}, {0xc, 0x8, 0x6, 0x400}}, 0x3, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x3d}, {[0xa, 0x5, 0x7, 0x1]}, 0x4, 0x62, &(0x7f0000000740)=""/98}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x16, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x1a, &(0x7f00000002c0)=""/26, 0x41100, 0x8, '\x00', r6, 0x25, r3, 0x8, &(0x7f0000000600)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[r7], &(0x7f0000000880)=[{0x5, 0x5, 0x3, 0xb}], 0x10, 0xab0}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001b00)={{r8, &(0x7f0000000980)='rdma', 0x10800, &(0x7f00000009c0)={@_ha_fsid={[0x9, 0x4]}, {0x104f, 0x0, 0x10, 0xce2}}, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=0x80}, 0x1, &(0x7f0000001ac0)=[{0x2, 0x8880000, &(0x7f0000000a80)='@/\x00', &(0x7f0000000ac0)="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", 0x1000, 0x10}]}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001c00)={r2, 0x78, &(0x7f0000001b80)=[@in6={0xa, 0x4e21, 0x9, @loopback, 0x1}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x20, @empty, 0x4}]}, &(0x7f0000001c40)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000001c80)={r1, 0xff, 0x6, 0x21}, &(0x7f0000001cc0)=0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000001dc0)={'ip_vti0\x00', &(0x7f0000001d00)={'erspan0\x00', r6, 0x80, 0x7, 0x2, 0x5, {{0x28, 0x4, 0x0, 0x9, 0xa0, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, {[@rr={0x7, 0xf, 0x9b, [@broadcast, @loopback, @local]}, @timestamp_prespec={0x44, 0x54, 0x65, 0x3, 0x8, [{@local, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0xe0a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x6}, {@multicast2, 0xb1}, {@broadcast, 0xfff}, {@multicast1, 0x5}, {@multicast1}, {@private=0xa010100, 0x5}]}, @timestamp={0x44, 0x28, 0xe8, 0x0, 0xa, [0x1, 0x80000001, 0x2, 0x719, 0xa7, 0x4, 0x2, 0x7, 0x3]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)=@newlinkprop={0x40, 0x6c, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x4008, 0x3445}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x240000c5}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000001f00)={r1, 0x88, 0x3}, 0x8) r11 = socket(0x1c, 0x1, 0x7) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x80, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$bt_hci(r3, &(0x7f0000002080)={0x1, @create_conn_cancel={{0x408, 0x6}, {@none}}}, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003200)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x8, [@struct={0x10, 0x4, 0x0, 0x4, 0x1, 0x3ff, [{0xe, 0x4, 0xffffffff}, {0x5, 0x3, 0x3}, {0x5, 0x4, 0x7ff}, {0x1, 0x3, 0xfff}]}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @enum64={0x3, 0x2, 0x0, 0x13, 0x1, 0x2, [{0xe, 0x7, 0x1}, {0x2, 0x2, 0x16}]}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0x2}, {0x3, 0x1}, {0xa, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x7}, {0x4, 0x4}]}, @fwd={0xa}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @var={0x4, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x2e, 0x5f, 0x61, 0x0, 0x5f, 0x30]}}, &(0x7f0000002200)=""/4096, 0x10c, 0x1000, 0x0, 0xd39}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000003240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000003280)=0x20) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000003300), r4) sendmsg$FOU_CMD_DEL(r11, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x40, r12, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40010) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000003400)={0x2, 'pimreg0\x00', {0x52}, 0x9}) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000003540)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7a3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x60004000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000003840)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003800)={&(0x7f00000035c0)={0x23c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x194, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_SRF={0x168, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "191ef21989e3"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x94, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SERVICE_INFO={0x83, 0xb, "ba38965a0c9238e64d6bc6acc2a6b10295a7520e66885d1b93c870981317a4af9b8b485eea8c139af09104753650da00638ca3543239a37a08782b1262426ef875827dc5053a63813b857008d801417ebe755c82bc445def136ec6dbc509185bbb71acc3c57f7b72af1d4c5f4d3ec66deb3dcdcdf90b19ce97c9c3ff8c9bb7"}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4040880}, 0x40) epoll_create1(0x0) 985.992199ms ago: executing program 1 (id=4725): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@call={0x85, 0x0, 0x0, 0x6c}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (rerun: 32) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000005300001802c0001801400030000000000000000000000ffff0000000014000400fe8000000000000000000000000000aa3c0003800c00028005000100000000002c0001800e000300fe80000000000000000000000000001c14000400fe8800000000000000000000000000013c0002800c00028005000100000000002c00018014000300ff010000000000000000000000000001140004"], 0xbc}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x80, r9, 0xa05, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x16}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0x890}, 0x40) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 892.515172ms ago: executing program 4 (id=4726): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64], 0x32600) sendmsg$netlink(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c28"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200000000ffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x24, 0x0, 0x9d, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r4, r3, 0x2f, 0x14, 0x4, @void, @value=r3, @void, @void, r5}, 0x20) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x6a) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="060700c3000000000000000000000a0001007770535ee3370000709e19284c5b6b19d93774a82a2e0bd1209160e4ed46d91db9b3911098cc9403b8345e03ab9ea224a635de31289bf964a466ae2324aeb36528c5910800000019444362698552d991044ecf6ecc61caeddc5e95941640d5bb7b84507418761668ca8b6cc16e0f84767ee82bbc1ddd29"], 0x20}}, 0x4004000) 700.616792ms ago: executing program 1 (id=4727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r1, 0x331, 0x1, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) r3 = socket(0x200000000000011, 0x2, 0xd) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f00000002c0)=0x63faebe, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x34, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}]}, 0x34}}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x3, @none, 0x7ff, 0x1}, 0xe) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 609.840441ms ago: executing program 3 (id=4728): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x61}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@loopback={0xffffffffffffc0fe, 0x7ffffffff000}, 0x40800, 0x0, 0x3, 0x1, 0xfab0, 0xffff}, 0x20) (async) getpeername(r0, &(0x7f0000000080), &(0x7f00000001c0)=0x80) r1 = socket$kcm(0x11, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xfd}, 0x18) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffff8, 0x8001, 0x5, 0x3, 0x8, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x7fffffff}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) connect$nfc_llcp(r11, &(0x7f0000000240)={0x27, r12, 0x1, 0x1, 0xfd, 0x8, "4523ef8c0667b3f1a18bd4ff23fd77e577f35a6d0a2585f260cacd61acfe19a8d64c5cf6f12360a1b2b732fdb478d79fbbe31a531687636cbaa2246f5c7bfa", 0x3a}, 0x60) 536.194052ms ago: executing program 4 (id=4729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 520.135276ms ago: executing program 3 (id=4730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) readv(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x2a020400) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x24, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) 429.841476ms ago: executing program 0 (id=4731): epoll_create1(0x0) unshare(0x20000400) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r4) (async) close(r4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000a40)={0x0, [], 0x68, "1920998c1a4d02"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000a40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x68, "1920998c1a4d02"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001a40)={r6, 0xf}) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) 325.869843ms ago: executing program 4 (id=4732): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xfe5, &(0x7f0000001840)=""/4069}, 0x94) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x0, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {0x9, 0x1}, {0x7, 0xf}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 275.721488ms ago: executing program 3 (id=4733): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000004c0)={0xa0000000}) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f00000005c0)={&(0x7f0000000480), 0x0, 0x800, 0x0, 0xfffffffffffffffb, 0x6, 0xff, 0x4, 0x2}) 173.958623ms ago: executing program 0 (id=4734): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002a40)={'syztnl2\x00', &(0x7f00000029c0)={'syztnl1\x00', 0x0, 0x7, 0x700, 0x100, 0x101, {{0xe, 0x4, 0x0, 0x38, 0x38, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp={0x44, 0x24, 0xba, 0x0, 0x8, [0x5, 0x0, 0x4, 0x0, 0x3c9f, 0x94, 0x6, 0x2]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002d40)=@gettclass={0x24, 0x2a, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x10, 0xe}, {0x1, 0xc}, {0x6, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f00000000c0)=0xf, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket(0x2a, 0x4, 0x9d32) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) close(0xffffffffffffffff) r6 = socket$inet6(0xa, 0x6, 0x6) close(0x3) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0xd0, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f0000000180)={0xa, 0x4e24, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8001}}], 0x18}, 0x440e0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x98, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x5, 0x5, 0x2, 0x7fffffff, 0x7a, 0x4}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x7, 0x7634, 0x2, 0x9, 0x3}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0xf3, 0x4, 0x6}}]}]}}}]}, 0x98}}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "e9ff0202", "7cf56f776d00"}, 0x28) 48.356894ms ago: executing program 5 (id=4735): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfff) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800100000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240027012ebd7000fbdbdf25027c00000c0001800800020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 26.547429ms ago: executing program 3 (id=4736): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000100)=0x1080000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a1180003", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x3}, 0x20) getpeername$tipc(r1, &(0x7f0000000000), &(0x7f0000000200)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xc4}}, 0x40000) 0s ago: executing program 1 (id=4737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) ioctl$sock_ifreq(r1, 0x112cb, &(0x7f0000000080)={'team_slave_1\x00', @ifru_map={0x3ac14213, 0x3, 0x2, 0x7, 0xd, 0x6}}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r8, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000080)={r11}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r11, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440), 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$tun(r0, &(0x7f0000000380)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x24, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x30, 0x4, 0x66, 0x80, 0x4, 0x32, 0xaf, @private=0xa010100, @local}, "50040124c5aee3f3"}}}, 0x46) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.704389][T17909] IPVS: using max 24 ests per chain, 57600 per kthread [ 518.716986][T17494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 518.745643][T17904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3131'. [ 518.821371][T17494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.932921][T17912] lo speed is unknown, defaulting to 1000 [ 518.969777][T17912] lo speed is unknown, defaulting to 1000 [ 519.061465][T17928] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3135'. [ 519.097118][T17930] netlink: 'syz.1.3134': attribute type 2 has an invalid length. [ 519.107172][T17928] 0ªX¹¦À: renamed from batadv0 [ 519.125410][T17930] netlink: 'syz.1.3134': attribute type 2 has an invalid length. [ 519.141837][T17928] 0ªX¹¦À: entered allmulticast mode [ 519.176952][T17928] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 519.194378][T17928] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 519.258889][ T1160] hsr_slave_1: left promiscuous mode [ 519.273895][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.301514][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.330201][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.369570][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.419803][ T1160] batman_adv: batadv0: Removing interface: ipvlan2 [ 519.469650][ T1160] macsec0: left allmulticast mode [ 519.480443][ T1160] veth1_macvtap: left allmulticast mode [ 519.498601][ T1160] veth1_macvtap: left promiscuous mode [ 519.517481][ T1160] veth0_macvtap: left promiscuous mode [ 519.984560][ T29] audit: type=1107 audit(1777967162.014:7): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 520.134975][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 520.298803][ T8099] smbdirect: ib_dev[syz ] removed [ 520.320608][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3136'. [ 520.342108][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3136'. [ 520.660182][T17494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.687314][T17494] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.703989][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.711225][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.730312][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.737563][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.576317][T17494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.643197][T17494] veth0_vlan: entered promiscuous mode [ 521.660345][T17494] veth1_vlan: entered promiscuous mode [ 521.712048][T17494] veth0_macvtap: entered promiscuous mode [ 521.724538][T17494] veth1_macvtap: entered promiscuous mode [ 521.754737][T17494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.777554][T17494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.808192][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.817594][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.829281][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.841967][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.066333][T18002] bridge8: entered promiscuous mode [ 522.142792][T18005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.447047][T18021] Bluetooth: MGMT ver 1.23 [ 522.459512][T17940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.618136][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.651362][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.744745][T18029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3148'. [ 522.771221][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.791544][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.816803][T18033] netlink: 'syz.0.3147': attribute type 2 has an invalid length. [ 522.832710][T18033] netlink: 'syz.0.3147': attribute type 2 has an invalid length. [ 522.870155][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3148'. [ 523.197151][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3152'. [ 523.230012][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 523.262091][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 524.246785][T18080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.269504][T18080] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.438100][T18080] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 524.462464][T18080] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 524.498253][T18080] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 524.516602][T18078] tipc: Resetting bearer [ 524.597605][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.604912][ T8101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.678079][T18095] geneve2: entered promiscuous mode [ 524.684175][T18095] geneve2: entered allmulticast mode [ 524.750214][T18103] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3163'. [ 524.790323][T18102] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 524.816320][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.830143][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.860251][T18103] .70·X: renamed from veth1_virt_wifi (while UP) [ 524.874800][T18103] .70·X: entered allmulticast mode [ 524.894008][T18103] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 524.918954][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 524.939612][T18098] lo speed is unknown, defaulting to 1000 [ 524.940211][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 525.169360][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3165'. [ 525.319281][ T5649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 525.335215][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 525.344077][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 525.355225][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 525.366875][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 525.514435][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3167'. [ 525.707538][T18136] netlink: 'syz.5.3168': attribute type 2 has an invalid length. [ 525.736379][T18136] netlink: 'syz.5.3168': attribute type 2 has an invalid length. [ 526.297585][T18155] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3171'. [ 526.400538][T18090] lo speed is unknown, defaulting to 1000 [ 526.535179][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3172'. [ 527.035301][T18182] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3179'. [ 527.080348][T18183] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3179'. [ 527.098796][T18182] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3179'. [ 527.220050][T18189] netlink: 'syz.0.3181': attribute type 3 has an invalid length. [ 527.228600][T18189] netlink: 'syz.0.3181': attribute type 3 has an invalid length. [ 527.236931][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3181'. [ 527.327228][T18194] netlink: 'syz.1.3182': attribute type 2 has an invalid length. [ 527.344247][T18194] netlink: 'syz.1.3182': attribute type 2 has an invalid length. [ 527.433486][ T5649] Bluetooth: hci3: command tx timeout [ 527.584559][ T1167] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 527.657696][T18090] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.665085][T18090] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.672427][T18090] bridge_slave_0: entered allmulticast mode [ 527.680242][T18090] bridge_slave_0: entered promiscuous mode [ 527.689262][T18090] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.696900][T18090] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.704237][T18090] bridge_slave_1: entered allmulticast mode [ 527.712003][T18090] bridge_slave_1: entered promiscuous mode [ 527.759211][T18090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.772890][T18090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.878736][T18090] team0: Port device team_slave_0 added [ 527.890994][T18090] team0: Port device team_slave_1 added [ 527.979752][T18090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.987331][T18090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.015409][T18090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.047868][T18090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.066898][T18090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.153369][T18090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.272891][T18230] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 528.286771][T18090] hsr_slave_0: entered promiscuous mode [ 528.297039][T18090] hsr_slave_1: entered promiscuous mode [ 528.304546][T18090] debugfs: 'hsr0' already exists in 'hsr' [ 528.310347][T18090] Cannot create hsr debugfs directory [ 528.325636][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3188'. [ 528.355543][T18230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.587499][T18241] bond2: (slave batadv1): Opening slave failed [ 528.607407][T18238] lo speed is unknown, defaulting to 1000 [ 529.420188][T18249] syzkaller0: entered promiscuous mode [ 529.426154][T18249] syzkaller0: entered allmulticast mode [ 529.513544][ T5649] Bluetooth: hci3: command tx timeout [ 530.495148][T18203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.509110][T18234] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 530.562559][T18090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 530.640802][T18090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.684057][T18090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 530.722758][T18090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.734547][T18090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 530.753802][T18090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.771676][T18090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 530.898936][T18090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.971636][T18273] netlink: 'syz.0.3197': attribute type 2 has an invalid length. [ 530.993784][T18273] netlink: 'syz.0.3197': attribute type 2 has an invalid length. [ 531.171801][T18090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.235518][T18090] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.259914][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.267249][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.288897][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.296201][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.601958][ T5649] Bluetooth: hci3: command tx timeout [ 532.170638][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3204'. [ 532.317469][T18090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.407986][T18316] xt_hashlimit: size too large, truncated to 1048576 [ 532.572309][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 532.946048][T18090] veth0_vlan: entered promiscuous mode [ 532.966554][T18090] veth1_vlan: entered promiscuous mode [ 533.026961][T18090] veth0_macvtap: entered promiscuous mode [ 533.054044][T18090] veth1_macvtap: entered promiscuous mode [ 533.096095][T18090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.113941][T18090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.154665][ T8099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.175369][ T8099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.359250][ T8099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.385444][ T8099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.661882][T18345] netlink: 'syz.0.3211': attribute type 2 has an invalid length. [ 533.676798][ T5649] Bluetooth: hci3: command tx timeout [ 533.686682][T18345] netlink: 'syz.0.3211': attribute type 2 has an invalid length. [ 533.739978][T17385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.770944][T17385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.846854][ T8095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.864447][ T8095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.079719][T18365] openvswitch: netlink: Message has 8 unknown bytes. [ 534.246624][T18372] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3218'. [ 534.275849][T18372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3218'. [ 534.446984][T18382] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 534.485180][T18382] bond3 (unregistering): Released all slaves [ 534.547681][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3222'. [ 534.873620][T18401] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3229'. [ 535.078952][T18410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 535.086293][T18410] IPv6: NLM_F_CREATE should be set when creating new route [ 535.108036][T18411] netlink: 'syz.5.3232': attribute type 2 has an invalid length. [ 535.123628][T18411] netlink: 'syz.5.3232': attribute type 2 has an invalid length. [ 535.208989][T18413] x_tables: duplicate underflow at hook 2 [ 535.218541][T18402] geneve2: left promiscuous mode [ 535.225675][T18402] geneve2: left allmulticast mode [ 535.383360][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'. [ 535.746425][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 535.933877][T18436] xt_l2tp: missing protocol rule (udp|l2tpip) [ 536.109192][T18441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 536.214268][T18441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 536.824528][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3250'. [ 537.158192][T18486] netlink: 'syz.4.3252': attribute type 2 has an invalid length. [ 537.178754][T18486] netlink: 'syz.4.3252': attribute type 2 has an invalid length. [ 537.429916][T18493] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3256'. [ 537.576321][T18497] lo speed is unknown, defaulting to 1000 [ 537.584294][T18498] netlink: 'syz.1.3257': attribute type 13 has an invalid length. [ 537.621209][T18498] gretap0: refused to change device tx_queue_len [ 537.648022][T18498] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 538.050743][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 538.060192][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3263'. [ 538.069762][T18510] netlink: 'syz.0.3263': attribute type 18 has an invalid length. [ 538.150762][T18519] sctp: [Deprecated]: syz.0.3263 (pid 18519) Use of int in max_burst socket option. [ 538.150762][T18519] Use struct sctp_assoc_value instead [ 538.233338][ T5649] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 538.235249][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 538.447161][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 538.565183][T18543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3270'. [ 538.715691][T18550] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 539.031483][T18555] netlink: 'syz.0.3272': attribute type 2 has an invalid length. [ 539.073392][T18555] netlink: 'syz.0.3272': attribute type 2 has an invalid length. [ 539.200697][T18559] netlink: 'syz.4.3275': attribute type 21 has an invalid length. [ 539.223512][T18559] IPv6: NLM_F_CREATE should be specified when creating new route [ 539.241233][T18559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.248582][T18559] IPv6: NLM_F_CREATE should be set when creating new route [ 539.255935][T18559] IPv6: NLM_F_CREATE should be set when creating new route [ 539.263233][T18559] IPv6: NLM_F_CREATE should be set when creating new route [ 539.596621][T18576] netlink: 'syz.1.3280': attribute type 13 has an invalid length. [ 540.186064][T18583] lo speed is unknown, defaulting to 1000 [ 540.221572][T18596] netlink: 'syz.5.3285': attribute type 1 has an invalid length. [ 540.651075][T18606] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3282'. [ 540.691822][T18618] netlink: 'syz.5.3292': attribute type 11 has an invalid length. [ 540.813554][T18631] netlink: 'syz.3.3293': attribute type 2 has an invalid length. [ 540.973761][T18635] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 540.991456][T18635] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 541.002321][T18635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.012051][T18635] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 541.028633][T18627] lo speed is unknown, defaulting to 1000 [ 541.059652][T18635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3297'. [ 541.234796][T18641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3298'. [ 541.791852][T18660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3304'. [ 541.806957][T18660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3304'. [ 542.014252][T18660] bridge_slave_0 (unregistering): left allmulticast mode [ 542.021608][T18660] bridge_slave_0 (unregistering): left promiscuous mode [ 542.034456][T18660] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.082829][T18666] syzkaller0: entered promiscuous mode [ 542.092919][T18666] syzkaller0: entered allmulticast mode [ 542.578741][T18681] __nla_validate_parse: 1 callbacks suppressed [ 542.578764][T18681] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3308'. [ 542.662060][T18676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.527868][T18709] validate_nla: 1 callbacks suppressed [ 543.527889][T18709] netlink: 'syz.5.3313': attribute type 2 has an invalid length. [ 543.578921][T18709] netlink: 'syz.5.3313': attribute type 2 has an invalid length. [ 543.639732][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 543.657365][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 543.998765][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3317'. [ 544.024854][T18731] netlink: 'syz.1.3319': attribute type 2 has an invalid length. [ 544.042578][T18732] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3319'. [ 544.181026][T18742] ieee802154 phy0 wpan0: encryption failed: -22 [ 544.201008][T18744] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3321'. [ 544.249097][T18744] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 544.515371][T18757] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3324'. [ 544.668283][T18756] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 544.707800][T18756] bond1 (unregistering): Released all slaves [ 544.797106][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 544.814890][T18775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3330'. [ 544.872908][T18775] macvlan1: entered allmulticast mode [ 544.889822][T18775] hsr0: entered allmulticast mode [ 544.903328][T18775] hsr_slave_0: entered allmulticast mode [ 544.911499][T18775] hsr_slave_1: entered allmulticast mode [ 545.055657][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 545.230276][T18797] netlink: 'syz.0.3334': attribute type 2 has an invalid length. [ 545.261397][T18797] netlink: 'syz.0.3334': attribute type 2 has an invalid length. [ 545.564818][T18812] netlink: 'syz.4.3339': attribute type 1 has an invalid length. [ 545.608038][T18812] bond1: entered promiscuous mode [ 545.613978][T18812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.689107][T18812] ipvlan2: entered allmulticast mode [ 545.706990][T18812] bond1: entered allmulticast mode [ 545.784507][T18815] bond1: (slave bridge1): making interface the new active one [ 545.814464][T18815] bridge1: entered promiscuous mode [ 545.823897][T18815] bridge1: entered allmulticast mode [ 545.848413][T18815] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 545.889968][T18823] netlink: 'syz.3.3342': attribute type 1 has an invalid length. [ 546.004327][T18823] bond1: entered promiscuous mode [ 546.019948][T18823] bond1: entered allmulticast mode [ 546.036429][T18823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.099710][T18823] erspan1: entered allmulticast mode [ 546.115609][T18823] bond1: (slave erspan1): making interface the new active one [ 546.123807][T18823] erspan1: entered promiscuous mode [ 546.126649][T18837] netlink: 'syz.0.3346': attribute type 8 has an invalid length. [ 546.139124][T18823] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 546.164011][T18837] veth1_to_team: entered promiscuous mode [ 546.171380][T18837] gretap0: entered promiscuous mode [ 546.178798][T18837] veth1_to_team: left promiscuous mode [ 546.186180][T18837] gretap0: left promiscuous mode [ 546.427538][T18843] syzkaller1: entered promiscuous mode [ 546.441408][T18843] syzkaller1: entered allmulticast mode [ 546.762824][T18862] Cannot find set identified by id 0 to match [ 546.788781][T18861] Cannot find set identified by id 0 to match [ 546.897564][T18866] lo speed is unknown, defaulting to 1000 [ 547.085554][T18874] Cannot find set identified by id 1 to match [ 547.216429][T18877] netlink: 'syz.4.3356': attribute type 2 has an invalid length. [ 547.240113][T18877] netlink: 'syz.4.3356': attribute type 2 has an invalid length. [ 547.817362][T18885] __nla_validate_parse: 6 callbacks suppressed [ 547.817385][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3358'. [ 548.547326][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3366'. [ 548.585048][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'. [ 548.616426][ T8101] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.625807][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3366'. [ 548.635662][ T8099] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.637772][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'. [ 548.660495][ T8099] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.681571][T18917] vlan2: entered promiscuous mode [ 548.694211][T18917] bridge0: entered promiscuous mode [ 548.708016][ T8099] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.108954][T18935] validate_nla: 2 callbacks suppressed [ 549.108976][T18935] netlink: 'syz.3.3372': attribute type 2 has an invalid length. [ 549.152618][T18935] netlink: 'syz.3.3372': attribute type 2 has an invalid length. [ 549.335931][T18941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3375'. [ 549.541294][T18953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.570992][T18956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.178041][T18977] netlink: 'syz.3.3385': attribute type 34 has an invalid length. [ 550.523299][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 550.689614][T18997] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3392'. [ 551.156402][T19013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3395'. [ 551.166093][T19013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3395'. [ 551.720627][T19035] netlink: 'syz.1.3402': attribute type 1 has an invalid length. [ 551.915042][T19035] bond4: entered promiscuous mode [ 551.939832][T19035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 552.005939][T19037] macvtap1: entered allmulticast mode [ 552.062741][T19042] bond4: (slave bridge2): making interface the new active one [ 552.083484][T19042] bridge2: entered promiscuous mode [ 552.098585][T19042] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 552.241821][T19050] vxcan2: entered allmulticast mode [ 552.582175][T19068] netlink: 'syz.0.3410': attribute type 6 has an invalid length. [ 552.692397][T19070] netlink: 'syz.4.3411': attribute type 1 has an invalid length. [ 552.726416][T19070] netlink: 'syz.4.3411': attribute type 2 has an invalid length. [ 552.760280][T19076] syzkaller1: entered promiscuous mode [ 552.776871][T19076] syzkaller1: entered allmulticast mode [ 553.397107][T19094] __nla_validate_parse: 3 callbacks suppressed [ 553.397128][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 554.116131][T19092] syzkaller1: entered promiscuous mode [ 554.140389][T19092] syzkaller1: entered allmulticast mode [ 554.269863][T19132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3424'. [ 554.291586][T19134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3425'. [ 554.421186][T19137] lo speed is unknown, defaulting to 1000 [ 554.556536][T17385] vlan2: left allmulticast mode [ 554.581601][T17385] geneve0: left allmulticast mode [ 554.605283][T17385] vlan2: left promiscuous mode [ 554.625788][T17385] geneve0: left promiscuous mode [ 554.655212][T17385] bridge0: port 1(vlan2) entered disabled state [ 554.987312][T19163] netlink: 'syz.1.3434': attribute type 3 has an invalid length. [ 555.004724][T19163] netlink: 'syz.1.3434': attribute type 1 has an invalid length. [ 555.021141][T19163] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3434'. [ 555.099434][T19163] netlink: 'syz.1.3434': attribute type 4 has an invalid length. [ 555.287158][T17385] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 555.295930][T17385] bridge1 (unregistering): entered promiscuous mode [ 555.581473][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3436'. [ 555.908801][T17385] bond2 (unregistering): (slave bridge1): Releasing active interface [ 555.913220][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'. [ 555.933203][T17385] bridge1 (unregistering): left promiscuous mode [ 555.950300][T15533] block nbd64: NBD_DISCONNECT [ 556.076730][T17385] bond0 (unregistering): Released all slaves [ 556.105872][T17385] bond1 (unregistering): Released all slaves [ 556.178631][T17385] bond2 (unregistering): Released all slaves [ 556.243816][T15533] udevd[15533]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 556.259986][T17385] bond3 (unregistering): Released all slaves [ 556.294563][T17385] bond4 (unregistering): Released all slaves [ 556.320233][T17385] bond5 (unregistering): Released all slaves [ 556.358333][T17385] bond6 (unregistering): Released all slaves [ 556.389734][T17385] bond7 (unregistering): Released all slaves [ 556.425488][T17385] bond8 (unregistering): Released all slaves [ 556.476718][T17385] bond9 (unregistering): Released all slaves [ 556.502695][T17385] bond10 (unregistering): Released all slaves [ 556.529825][T17385] bond11 (unregistering): Released all slaves [ 556.550095][T17385] bond12 (unregistering): Released all slaves [ 556.577176][T17385] bond13 (unregistering): Released all slaves [ 556.602383][T17385] bond14 (unregistering): Released all slaves [ 556.627646][T17385] bond15 (unregistering): Released all slaves [ 556.917723][T19187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3440'. [ 557.178114][T17385] : left promiscuous mode [ 557.397543][T19208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3442'. [ 557.743164][T17385] tipc: Left network mode [ 558.256523][T19232] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20000 [ 558.294926][T19229] lo speed is unknown, defaulting to 1000 [ 558.406354][T19237] netlink: 'syz.4.3449': attribute type 2 has an invalid length. [ 558.442591][T19237] netlink: 'syz.4.3449': attribute type 2 has an invalid length. [ 559.271744][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.309626][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.359156][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.420016][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.453953][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.497733][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.543343][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.563666][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.590936][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.617223][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 559.704364][T19270] netem: change failed [ 560.734362][ T1162] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.761608][ T1162] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.868179][ T1162] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.906940][ T1162] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.090416][T19306] netlink: 'syz.3.3466': attribute type 2 has an invalid length. [ 561.123199][T19306] netlink: 'syz.3.3466': attribute type 2 has an invalid length. [ 561.298381][T19308] geneve2: entered promiscuous mode [ 561.374283][ T1160] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 49710 - 0 [ 561.499115][ T1160] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 49710 - 0 [ 561.533973][ T1160] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 49710 - 0 [ 561.597585][T17385] hsr_slave_0: left promiscuous mode [ 561.624212][T17385] hsr_slave_1: left promiscuous mode [ 562.751140][ T1160] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 49710 - 0 [ 562.778573][T19327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 562.794582][T19328] pim6reg: entered allmulticast mode [ 562.809852][T19336] pim6reg: left allmulticast mode [ 562.878620][T19341] 8021q: VLANs not supported on vcan0 [ 562.895828][ T7531] team_slave_0: entered promiscuous mode [ 562.903431][ T7531] team_slave_1: entered promiscuous mode [ 563.117705][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.445646][T19370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.575974][T19376] netlink: 'syz.1.3481': attribute type 2 has an invalid length. [ 563.598986][T19376] netlink: 'syz.1.3481': attribute type 2 has an invalid length. [ 563.727302][T17385] IPVS: stop unused estimator thread 0... [ 563.988558][T17385] bridge_slave_1: left allmulticast mode [ 564.007328][T17385] bridge_slave_1: left promiscuous mode [ 564.014658][T17385] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.056824][T17385] dvmrp0: left allmulticast mode [ 564.062082][T17385] dvmrp8: left allmulticast mode [ 564.187130][T17385] bond13 (unregistering): (slave ip6gre2): Releasing backup interface [ 564.195565][T17385] ip6gre2 (unregistering): left promiscuous mode [ 564.227589][T17385] bond22 (unregistering): (slave ip6gretap0): Releasing active interface [ 564.238219][T17385] ip6gretap0 (unregistering): left allmulticast mode [ 564.247950][T19403] openvswitch: netlink: IPv4 tun info is not correct [ 564.457865][T17385] bond1 (unregistering): (slave geneve2): Releasing active interface [ 564.601186][T17385] bond0 (unregistering): (slave bridge2): Releasing active interface [ 564.609546][T17385] bridge2 (unregistering): left promiscuous mode [ 564.616600][T17385] bridge2 (unregistering): left allmulticast mode [ 564.799664][T17385] bond21 (unregistering): (slave bridge7): Releasing backup interface [ 564.808329][T17385] bridge7 (unregistering): left promiscuous mode [ 564.879716][T17385] bond1 (unregistering): Released all slaves [ 564.904107][T17385] bond0 (unregistering): Released all slaves [ 564.920804][T17385] bond2 (unregistering): Released all slaves [ 564.948248][T17385] bond3 (unregistering): Released all slaves [ 564.964787][T17385] bond4 (unregistering): Released all slaves [ 564.982151][T17385] bond5 (unregistering): Released all slaves [ 564.998635][T17385] bond6 (unregistering): Released all slaves [ 565.025674][T17385] bond7 (unregistering): Released all slaves [ 565.045481][T17385] bond8 (unregistering): Released all slaves [ 565.071096][T17385] bond9 (unregistering): Released all slaves [ 565.088435][T17385] bond10 (unregistering): (slave lo): Releasing backup interface [ 565.096905][T17385] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 565.109152][T17385] bond10 (unregistering): Released all slaves [ 565.125993][T17385] bond11 (unregistering): Released all slaves [ 565.152066][T17385] bond12 (unregistering): Released all slaves [ 565.172284][T17385] bond13 (unregistering): Released all slaves [ 565.191094][T17385] bond14 (unregistering): (slave bond15): Releasing backup interface [ 565.200329][T17385] bond14 (unregistering): Released all slaves [ 565.222692][T17385] bond15 (unregistering): Released all slaves [ 565.239040][T17385] bond16 (unregistering): Released all slaves [ 565.262466][T17385] bond17 (unregistering): Released all slaves [ 565.278654][T17385] bond18 (unregistering): Released all slaves [ 565.300628][T17385] bond19 (unregistering): Released all slaves [ 565.316961][T17385] bond20 (unregistering): Released all slaves [ 565.333958][T17385] bond21 (unregistering): Released all slaves [ 565.358489][T17385] bond22 (unregistering): Released all slaves [ 565.373987][T19394] __nla_validate_parse: 76 callbacks suppressed [ 565.374007][T19394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3486'. [ 565.760374][T19419] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3494'. [ 565.779323][T19417] netlink: 'syz.0.3493': attribute type 10 has an invalid length. [ 565.805686][T19417] syz_tun: entered promiscuous mode [ 565.859921][T19417] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 566.428636][T19444] netlink: 'syz.3.3499': attribute type 2 has an invalid length. [ 566.450461][T19444] netlink: 'syz.3.3499': attribute type 2 has an invalid length. [ 566.731719][T19450] syzkaller0: entered promiscuous mode [ 566.742895][T19450] syzkaller0: entered allmulticast mode [ 566.982504][T19467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3507'. [ 567.055014][T19470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3508'. [ 569.927058][T19467] vlan2: entered promiscuous mode [ 569.932179][T19467] bridge0: entered promiscuous mode [ 569.963991][T19489] tipc: Enabling of bearer rejected, failed to enable media [ 570.209784][T19515] netlink: 'syz.5.3520': attribute type 2 has an invalid length. [ 570.236708][T19515] netlink: 'syz.5.3520': attribute type 2 has an invalid length. [ 570.273718][T19523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3522'. [ 570.340679][T19524] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 570.496794][T19531] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 570.529876][T19535] nbd: couldn't find a device at index 0 [ 570.546269][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'. [ 570.562372][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'. [ 570.573265][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3525'. [ 570.588017][T19535] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3526'. [ 570.651833][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 570.679660][T19535] 0ªX¹¦À: renamed from batadv0 (while UP) [ 570.706295][T19535] 0ªX¹¦À: entered allmulticast mode [ 570.717714][T19535] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 571.181917][T19559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.250493][T19567] netlink: 'syz.1.3534': attribute type 2 has an invalid length. [ 571.283746][T19570] openvswitch: netlink: Multiple metadata blocks provided [ 571.303375][T19567] netlink: 'syz.1.3534': attribute type 2 has an invalid length. [ 571.313656][T19575] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3537'. [ 571.939428][T19602] veth13: entered allmulticast mode [ 572.318545][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3554'. [ 572.559863][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3556'. [ 572.779755][T19643] netlink: 'syz.4.3559': attribute type 2 has an invalid length. [ 572.805887][T19643] netlink: 'syz.4.3559': attribute type 2 has an invalid length. [ 572.855993][T19650] bond4: left promiscuous mode [ 572.865533][T19650] bridge2: left promiscuous mode [ 572.882662][T19650] macvtap1: left allmulticast mode [ 572.908749][T19649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3561'. [ 573.245030][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 573.527798][T19671] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 574.108211][T19671] bond2: entered promiscuous mode [ 574.143646][T19671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 574.180313][T19691] netlink: 'syz.4.3570': attribute type 2 has an invalid length. [ 574.192535][T19679] syzkaller0: entered promiscuous mode [ 574.204771][T19679] syzkaller0: entered allmulticast mode [ 574.414253][T19697] netlink: 'syz.3.3572': attribute type 2 has an invalid length. [ 574.442745][T19697] netlink: 'syz.3.3572': attribute type 2 has an invalid length. [ 574.484289][T19704] netlink: 'syz.4.3573': attribute type 13 has an invalid length. [ 574.499444][T19704] netlink: 'syz.4.3573': attribute type 17 has an invalid length. [ 574.645602][T19699] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.653432][T19699] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.705219][T19699] team_slave_0: left promiscuous mode [ 574.724674][T19699] team_slave_1: left promiscuous mode [ 574.801510][T19699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.814974][T19699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.000072][T19704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.008981][T19704] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.021775][T19704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.062798][T19704] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.070097][T19704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.087851][T19704] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.095059][T19704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.120384][T19704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.131292][T19704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.165502][T19704] veth1_vlan: left promiscuous mode [ 575.172352][T19704] veth0_vlan: left promiscuous mode [ 575.179498][T19704] veth0_vlan: entered promiscuous mode [ 575.190613][T19704] veth1_vlan: entered promiscuous mode [ 575.204954][T19704] veth1_macvtap: left promiscuous mode [ 575.211902][T19704] veth0_macvtap: left promiscuous mode [ 575.219945][T19704] veth0_macvtap: entered promiscuous mode [ 575.242639][T19704] veth1_macvtap: entered promiscuous mode [ 575.259634][T19704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.273679][T19704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 575.287387][T19704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.301639][T19704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.318084][T19704] bond1: left promiscuous mode [ 575.322906][T19704] bridge1: left promiscuous mode [ 575.329330][T19704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.337634][T19704] ipvlan2: left allmulticast mode [ 575.342686][T19704] bond1: left allmulticast mode [ 575.347999][T19704] bridge1: left allmulticast mode [ 575.356205][T19704] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 575.371216][T19704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.379580][T19704] geneve2: left promiscuous mode [ 575.386545][T19704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 575.395202][T19704] vlan2: left promiscuous mode [ 575.400030][T19704] bridge0: left promiscuous mode [ 575.466685][ T7532] team_slave_0: entered promiscuous mode [ 575.472509][ T7532] team_slave_1: entered promiscuous mode [ 575.609721][ T1167] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 49710 - 0 [ 575.629150][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 49887 - 0 [ 575.640445][ T1167] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 49710 - 0 [ 575.649896][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 49887 - 0 [ 575.751334][ T1167] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 49710 - 0 [ 575.770564][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 49887 - 0 [ 575.814885][ T1167] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 49710 - 0 [ 575.843071][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 49887 - 0 [ 575.966157][T19747] netlink: 'syz.0.3587': attribute type 2 has an invalid length. [ 575.974207][T19747] netlink: 'syz.0.3587': attribute type 2 has an invalid length. [ 575.987381][T19742] __nla_validate_parse: 5 callbacks suppressed [ 575.987400][T19742] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3583'. [ 576.013204][T19742] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3583'. [ 576.049435][T19742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3583'. [ 576.144956][T19751] can: request_module (can-proto-0) failed. [ 576.377711][T19751] lo speed is unknown, defaulting to 1000 [ 576.391492][T19764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.669451][T19773] bond3: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 576.702244][T19773] bond3: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 576.928207][T19785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3597'. [ 577.039640][T19789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3599'. [ 577.430047][T19809] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 577.700201][T19823] sctp: [Deprecated]: syz.4.3613 (pid 19823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.700201][T19823] Use struct sctp_sack_info instead [ 577.867685][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 577.880396][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 577.909245][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 577.937839][T19832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.952124][T19829] netlink: 496 bytes leftover after parsing attributes in process `syz.4.3616'. [ 578.015281][T19829] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3616'. [ 578.089266][ T1167] tipc: Subscription rejected, illegal request [ 578.097220][ T7547] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 578.172693][T19838] team1: entered promiscuous mode [ 578.194125][T19838] team1: entered allmulticast mode [ 578.200806][T19838] 8021q: adding VLAN 0 to HW filter on device team1 [ 578.286368][T19840] fido_id[19840]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 578.586459][T19859] pim6reg1: entered promiscuous mode [ 578.606025][T19859] pim6reg1: entered allmulticast mode [ 578.622086][T19861] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.682907][T19862] validate_nla: 5 callbacks suppressed [ 578.682932][T19862] netlink: 'syz.1.3625': attribute type 2 has an invalid length. [ 578.711751][T19862] netlink: 'syz.1.3625': attribute type 2 has an invalid length. [ 578.838712][T19868] netlink: 'syz.5.3626': attribute type 2 has an invalid length. [ 579.611463][T19899] netlink: 'syz.4.3639': attribute type 21 has an invalid length. [ 579.688099][T19906] netlink: 'syz.5.3640': attribute type 12 has an invalid length. [ 580.132650][T19927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 580.198520][T19930] netlink: 'syz.1.3648': attribute type 2 has an invalid length. [ 580.207214][T19930] netlink: 'syz.1.3648': attribute type 2 has an invalid length. [ 580.801082][T19947] netlink: 'syz.5.3655': attribute type 39 has an invalid length. [ 580.892920][T19947] hsr_slave_0 (unregistering): left promiscuous mode [ 581.070597][T19952] __nla_validate_parse: 7 callbacks suppressed [ 581.070616][T19952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3657'. [ 581.160140][T19961] syzkaller1: entered promiscuous mode [ 581.166859][T19961] syzkaller1: entered allmulticast mode [ 581.257708][T19963] x_tables: duplicate underflow at hook 2 [ 581.644344][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3665'. [ 581.662220][T19976] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3665'. [ 581.671497][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3665'. [ 581.688088][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 581.790879][T19985] netlink: 'syz.3.3667': attribute type 1 has an invalid length. [ 582.034715][T19993] netlink: 'syz.4.3668': attribute type 2 has an invalid length. [ 582.118343][T19997] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 582.527513][T20008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3675'. [ 582.660563][T13328] IPVS: starting estimator thread 0... [ 582.672102][T20010] hsr0: entered promiscuous mode [ 582.740498][T20010] veth1_macvtap: left promiscuous mode [ 582.763572][T20013] IPVS: using max 25 ests per chain, 60000 per kthread [ 582.772335][T20010] veth0_macvtap: left promiscuous mode [ 582.818425][T20010] veth0_macvtap: entered promiscuous mode [ 582.852333][T20010] veth1_macvtap: entered promiscuous mode [ 582.884134][T20010] bridge0: port 3(vlan2) entered blocking state [ 582.890658][T20010] bridge0: port 3(vlan2) entered forwarding state [ 582.955015][T20010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.061115][T20010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.091058][T20010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.114128][T20010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.135755][T20010] ip6gre1: left promiscuous mode [ 583.147625][T20010] vlan0: left promiscuous mode [ 583.156997][T20010] bridge0: left promiscuous mode [ 583.178974][T20010] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 583.206369][T20010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.235632][T20010] bond6: left promiscuous mode [ 583.241159][T20010] ip6gre3: left promiscuous mode [ 583.254489][T20010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.266105][T20010] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.279860][T20010] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 583.292157][T20010] 8021q: adding VLAN 0 to HW filter on device eth0 [ 583.307327][T20010] 8021q: adding VLAN 0 to HW filter on device eth1 [ 583.320439][T20010] 8021q: adding VLAN 0 to HW filter on device eth2 [ 583.337487][T20010] 8021q: adding VLAN 0 to HW filter on device eth3 [ 583.368513][T20010] veth5: left promiscuous mode [ 583.429293][T20010] team1: left promiscuous mode [ 583.483380][T20011] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3677'. [ 583.498701][T20033] xt_bpf: check failed: parse error [ 583.590660][ T8101] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.629818][ T8101] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.765180][T20035] hmac(sha224: entered promiscuous mode [ 583.779827][ T8101] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.792402][ T8101] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.804724][ T8101] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.818505][ T8101] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.909607][ T8101] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.932165][ T8101] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.960086][ T8099] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 583.969040][T20050] x_tables: duplicate underflow at hook 2 [ 583.979623][ T8099] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 584.170272][T20057] validate_nla: 1 callbacks suppressed [ 584.170293][T20057] netlink: 'syz.5.3690': attribute type 2 has an invalid length. [ 584.213637][T20057] netlink: 'syz.5.3690': attribute type 2 has an invalid length. [ 584.328031][T20062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3693'. [ 584.346328][T20062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3693'. [ 584.367501][T20062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3693'. [ 584.822024][T20071] netlink: 'syz.0.3696': attribute type 49 has an invalid length. [ 585.051552][ T1167] wlan1: Trigger new scan to find an IBSS to join [ 585.058396][T20073] virt_wifi0: entered promiscuous mode [ 585.060348][T20073] macsec1: entered promiscuous mode [ 585.307197][T20078] lo speed is unknown, defaulting to 1000 [ 586.044127][T20100] team0: Port device team_slave_0 removed [ 586.158108][T20107] netlink: 'syz.3.3708': attribute type 2 has an invalid length. [ 586.202452][T20107] netlink: 'syz.3.3708': attribute type 2 has an invalid length. [ 586.277496][T20110] sctp: [Deprecated]: syz.0.3710 (pid 20110) Use of int in max_burst socket option deprecated. [ 586.277496][T20110] Use struct sctp_assoc_value instead [ 586.660394][T20123] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.704870][T20123] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 586.782013][T20131] xt_bpf: check failed: parse error [ 587.757361][T20164] xt_CT: No such helper "snmp_trap" [ 587.823811][T20151] __nla_validate_parse: 6 callbacks suppressed [ 587.823834][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'. [ 587.913200][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 588.040133][T20182] netlink: 'syz.5.3727': attribute type 2 has an invalid length. [ 588.059504][T20181] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 588.067443][T20182] netlink: 'syz.5.3727': attribute type 2 has an invalid length. [ 588.089882][T20181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.165915][T20184] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 588.275589][T20187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3729'. [ 588.393439][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 588.542539][T20197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3732'. [ 588.564271][T20197] syzkaller0: entered promiscuous mode [ 588.577471][T20197] syzkaller0: entered allmulticast mode [ 588.810265][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 589.422642][T20234] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3744'. [ 589.467675][T20239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3743'. [ 589.477294][T20233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.702742][T20246] netlink: 'syz.3.3746': attribute type 8 has an invalid length. [ 589.717872][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3748'. [ 589.746954][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3749'. [ 589.792535][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3748'. [ 589.812769][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3748'. [ 590.073665][ T1162] wlan1: Trigger new scan to find an IBSS to join [ 590.530768][ T5649] block nbd3: Receive control failed (result -1) [ 590.642004][T20282] lo speed is unknown, defaulting to 1000 [ 590.799146][ T5649] Bluetooth: hci2: command 0x0401 tx timeout [ 590.906994][T20290] nbd: must specify a size in bytes for the device [ 590.914358][T20290] nbd: couldn't find device at index 0 [ 591.024376][ T8101] wlan1: Creating new IBSS network, BSSID 96:fc:e3:c2:e4:b7 [ 591.907100][T20319] bridge0: port 3(vlan2) entered disabled state [ 591.913840][T20319] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.984567][T20320] bridge0: port 3(vlan2) entered blocking state [ 591.991088][T20320] bridge0: port 3(vlan2) entered forwarding state [ 591.997962][T20320] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.005194][T20320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.016623][T20320] bridge0: entered promiscuous mode [ 592.048470][T20320] bridge0: port 3(vlan2) entered disabled state [ 592.055060][T20320] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.291703][T20347] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 592.447054][T20347] netlink: 'syz.3.3773': attribute type 2 has an invalid length. [ 593.065596][T20361] syzkaller1: entered promiscuous mode [ 593.091048][T20361] syzkaller1: entered allmulticast mode [ 593.117859][T20374] __nla_validate_parse: 12 callbacks suppressed [ 593.117879][T20374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3782'. [ 593.196015][T20377] syzkaller1: entered promiscuous mode [ 593.202486][T20375] netlink: 'syz.5.3781': attribute type 4 has an invalid length. [ 593.217206][T20377] syzkaller1: entered allmulticast mode [ 593.254633][T20383] netlink: 'syz.5.3781': attribute type 4 has an invalid length. [ 593.337373][T20370] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3781'. [ 593.728552][T20401] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 593.758686][T20401] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 594.605135][T20426] ÿ: renamed from bond_slave_0 (while UP) [ 594.856227][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3801'. [ 594.948849][T20443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'. [ 595.010169][T20436] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 595.061003][T20436] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 595.184954][T20445] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 595.210961][T20445] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 595.307414][T20451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.344410][T20466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3811'. [ 595.381669][T20451] bond3 (unregistering): Released all slaves [ 596.062343][T20506] netlink: 'syz.5.3821': attribute type 1 has an invalid length. [ 596.085205][T20507] netlink: 'syz.5.3821': attribute type 1 has an invalid length. [ 596.109983][T20507] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3821'. [ 596.152723][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3822'. [ 596.393817][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 596.467828][T20522] bridge_slave_0: left allmulticast mode [ 596.486337][T20522] bridge_slave_0: left promiscuous mode [ 596.508173][T20522] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.547418][T20522] bridge_slave_1: left allmulticast mode [ 596.569602][T20522] bridge_slave_1: left promiscuous mode [ 596.601088][T20522] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.664011][T20522] bond0: (slave bond_slave_0): Releasing backup interface [ 596.693432][T20522] bond0: (slave bond_slave_1): Releasing backup interface [ 596.743769][T20522] team0: Port device team_slave_0 removed [ 596.776273][T20522] team0: Port device team_slave_1 removed [ 596.794880][T20522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.808721][T20522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.830872][T20522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.849830][T20522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.872534][T20522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 597.034065][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 597.265795][T20555] nbd: socks must be embedded in a SOCK_ITEM attr [ 597.316785][T20558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3837'. [ 597.531636][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 597.661050][T20573] hsr_slave_0: left promiscuous mode [ 597.692381][T20573] hsr_slave_1: left promiscuous mode [ 597.949587][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3847'. [ 597.968585][T20593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.254224][T20613] __nla_validate_parse: 3 callbacks suppressed [ 598.254247][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3852'. [ 598.308746][T20613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3852'. [ 598.644084][T20630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3858'. [ 598.664940][T20636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3857'. [ 598.861814][T20644] tipc: Failed to remove unknown binding: 66,0,0/3995113942:1178650738/1178650740 [ 598.892897][T20644] tipc: Failed to remove unknown binding: 66,0,0/3995113942:1178650738/1178650739 [ 598.904982][T20644] tipc: Failed to remove unknown binding: 66,0,0/3995113942:1178650738/1178650740 [ 598.917410][T20644] tipc: Failed to remove unknown binding: 66,0,0/3995113942:1178650738/1178650739 [ 599.419125][T20668] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 600.058957][T20698] x_tables: unsorted underflow at hook 2 [ 600.197366][T20701] tipc: Enabling of bearer rejected, failed to enable media [ 600.482134][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 600.971527][T20741] netlink: 'syz.4.3887': attribute type 1 has an invalid length. [ 600.980039][T20741] netlink: 'syz.4.3887': attribute type 4 has an invalid length. [ 601.010828][T20741] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3887'. [ 601.185787][T20747] gre1: entered promiscuous mode [ 601.479545][T20768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3896'. [ 601.542705][T20770] netlink: 'syz.5.3897': attribute type 1 has an invalid length. [ 601.556513][T20772] rdma_rxe: rxe_newlink: failed to add lo [ 601.631069][T20770] 8021q: adding VLAN 0 to HW filter on device bond8 [ 602.383642][T20802] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3907'. [ 602.408615][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 602.495301][T20808] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3910'. [ 602.657565][T20816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.631907][T20829] syzkaller0: entered promiscuous mode [ 603.645852][T20829] syzkaller0: entered allmulticast mode [ 603.928281][T20842] lo speed is unknown, defaulting to 1000 [ 604.159229][T20858] netlink: 'syz.4.3924': attribute type 9 has an invalid length. [ 604.197201][T20859] __nla_validate_parse: 2 callbacks suppressed [ 604.197223][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3923'. [ 604.595449][T20868] lo speed is unknown, defaulting to 1000 [ 604.810099][T20877] bridge3: entered promiscuous mode [ 604.834235][T20879] syzkaller0: entered promiscuous mode [ 604.843518][T20879] syzkaller0: entered allmulticast mode [ 605.604557][T20898] netlink: 724 bytes leftover after parsing attributes in process `syz.5.3936'. [ 605.614017][T20898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3936'. [ 605.624208][T20898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3936'. [ 605.633616][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3936'. [ 605.660817][T20903] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3938'. [ 606.029555][T20921] syzkaller0: entered promiscuous mode [ 606.041459][T20921] syzkaller0: entered allmulticast mode [ 606.377180][T20943] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3947'. [ 606.476886][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3947'. [ 606.498557][T20949] netlink: 'syz.0.3947': attribute type 5 has an invalid length. [ 606.541699][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3947'. [ 606.589272][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3949'. [ 606.608581][T20949] geneve3: entered promiscuous mode [ 606.645683][T20949] geneve3: entered allmulticast mode [ 606.685455][ T8101] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 606.722307][ T8101] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 606.770238][ T8101] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 606.790368][ T8101] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 607.020570][T20976] netlink: 'syz.4.3954': attribute type 1 has an invalid length. [ 607.095088][T20978] syzkaller0: entered promiscuous mode [ 607.100792][T20978] syzkaller0: entered allmulticast mode [ 607.190360][T20986] netlink: 'syz.1.3957': attribute type 1 has an invalid length. [ 607.342165][T20992] netlink: 'syz.3.3959': attribute type 21 has an invalid length. [ 607.401068][T20986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 607.414982][T20992] netlink: 'syz.3.3959': attribute type 4 has an invalid length. [ 607.446384][T20992] netlink: 'syz.3.3959': attribute type 5 has an invalid length. [ 609.140199][T21069] lo speed is unknown, defaulting to 1000 [ 609.584524][T21091] __nla_validate_parse: 6 callbacks suppressed [ 609.584547][T21091] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3986'. [ 609.611912][T21090] xfrm1: entered allmulticast mode [ 609.834768][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3989'. [ 610.025424][T21113] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3992'. [ 610.399879][T21129] IPv6: sit2: Disabled Multicast RS [ 610.410805][T21129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3998'. [ 610.506747][T21141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4000'. [ 610.529424][T21141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4000'. [ 610.641233][T21141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4000'. [ 611.093748][T21164] ip6t_rpfilter: unknown options [ 611.207511][T21162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.236509][T21162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 611.249269][T21162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 611.277968][ T5649] Bluetooth: hci1: command 0x0406 tx timeout [ 611.537820][T21177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4011'. [ 611.747919][T21162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.763558][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 611.798767][T21162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 611.831560][T21162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 611.860835][T21190] sctp: [Deprecated]: syz.3.4013 (pid 21190) Use of int in max_burst socket option. [ 611.860835][T21190] Use struct sctp_assoc_value instead [ 611.899152][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4012'. [ 611.909501][T21190] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4013'. [ 611.980068][T21179] ÿ: renamed from bond_slave_0 (while UP) [ 612.148245][T21162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.182584][T21162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.207003][T21162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 612.268623][T21204] netlink: 'syz.4.4019': attribute type 1 has an invalid length. [ 612.431403][T21204] bond4: entered promiscuous mode [ 612.491925][T21204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.665476][T21162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.691796][T21162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.718713][T21162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 612.794079][T21206] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 612.806947][T21206] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 612.820301][T21206] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 613.104133][T21241] lo speed is unknown, defaulting to 1000 [ 613.168185][ T7530] IPVS: starting estimator thread 0... [ 613.273423][T21248] IPVS: using max 26 ests per chain, 62400 per kthread [ 613.314211][ T8101] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 613.335282][ T8101] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.352092][ T8101] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 613.607829][ T8101] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 613.633866][ T8101] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.649658][ T8101] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 613.698067][ T1162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 613.719447][ T1162] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.753099][ T1162] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 613.859891][ T1162] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 613.876854][ T1162] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.894765][T21274] netlink: 'syz.3.4037': attribute type 1 has an invalid length. [ 613.903599][ T1162] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 614.413538][T21286] netlink: 'syz.5.4038': attribute type 1 has an invalid length. [ 614.751409][T21304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.955386][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 615.442426][T21320] lo speed is unknown, defaulting to 1000 [ 615.628432][T21337] __nla_validate_parse: 11 callbacks suppressed [ 615.628456][T21337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4049'. [ 615.703411][T13328] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.036395][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.170971][T21347] ip6erspan1: entered allmulticast mode [ 616.355949][T21360] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4058'. [ 616.399950][T21364] netlink: 'syz.3.4059': attribute type 1 has an invalid length. [ 616.580432][ T7530] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.598342][T21364] 8021q: adding VLAN 0 to HW filter on device bond4 [ 616.733453][T21369] bond4: (slave veth3): Enslaving as an active interface with a down link [ 616.795316][T21372] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 616.810421][T21372] bond4: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 617.100063][T21387] netlink: 'syz.3.4066': attribute type 89 has an invalid length. [ 617.125777][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 617.141268][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 617.168548][T21393] netlink: 'syz.0.4065': attribute type 3 has an invalid length. [ 617.592509][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4071'. [ 617.812034][T21413] netlink: 758 bytes leftover after parsing attributes in process `syz.4.4073'. [ 617.852542][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4073'. [ 617.914816][ T7540] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 618.222177][T21420] syzkaller1: entered promiscuous mode [ 618.240127][T21420] syzkaller1: entered allmulticast mode [ 618.266430][T21422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4077'. [ 618.303161][T21402] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 618.727554][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4083'. [ 618.807505][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4086'. [ 618.844296][T21458] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4083'. [ 618.881155][T21447] bridge0: left promiscuous mode [ 619.171491][T21447] 0ªX¹¦À: left allmulticast mode [ 619.196333][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4091'. [ 619.388788][T21485] netlink: 'syz.0.4092': attribute type 1 has an invalid length. [ 619.550217][T21447] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 619.781050][T21447] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 621.513167][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 622.292263][T21447] ip6gre1: left allmulticast mode [ 622.368110][T21447] hsr0: left allmulticast mode [ 622.374647][T21447] hsr_slave_1: left allmulticast mode [ 622.381705][T21447] macvlan1: left allmulticast mode [ 622.402640][T21447] team1: left allmulticast mode [ 622.415477][T21447] bridge3: left promiscuous mode [ 622.421577][T21447] xfrm1: left allmulticast mode [ 622.435429][T21487] __nla_validate_parse: 1 callbacks suppressed [ 622.435450][T21487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4092'. [ 622.468983][ T8099] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.511278][ T8099] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.582238][ T8099] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.609377][ T8099] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.636270][ T8099] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.658601][ T8099] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.671307][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'. [ 622.685496][ T8099] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.704926][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'. [ 622.716670][ T8099] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.735992][T21498] syzkaller1: entered promiscuous mode [ 622.758972][T21498] syzkaller1: entered allmulticast mode [ 622.820739][T21511] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4097'. [ 623.183846][T21525] 8021q: VLANs not supported on ipvlan1 [ 623.506545][T21540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 623.576039][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4110'. [ 624.558813][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.579960][T21580] syzkaller1: entered promiscuous mode [ 624.598433][T21580] syzkaller1: entered allmulticast mode [ 624.617748][T21580] netlink: 'syz.0.4119': attribute type 16 has an invalid length. [ 624.634713][T21580] netlink: 'syz.0.4119': attribute type 3 has an invalid length. [ 624.653113][T21580] netlink: 'syz.0.4119': attribute type 2 has an invalid length. [ 624.667812][T21580] netlink: 'syz.0.4119': attribute type 1 has an invalid length. [ 624.691117][T21580] netlink: 64022 bytes leftover after parsing attributes in process `syz.0.4119'. [ 625.035430][T21598] syzkaller1: entered promiscuous mode [ 625.059039][T21598] syzkaller1: entered allmulticast mode [ 625.347018][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4127'. [ 625.370753][T21612] netlink: 'syz.0.4126': attribute type 3 has an invalid length. [ 625.383381][T21612] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4126'. [ 625.426396][ T7534] IPVS: starting estimator thread 0... [ 625.524609][T21614] IPVS: using max 24 ests per chain, 57600 per kthread [ 626.402790][T21626] netem: change failed [ 626.907302][T21676] netlink: 'syz.3.4135': attribute type 1 has an invalid length. [ 627.288556][T21672] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 627.306066][T21696] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4139'. [ 627.373168][T21676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 627.414463][T21680] team0: Port device ip6tnl1 added [ 627.449175][T21683] bond6: (slave geneve3): making interface the new active one [ 627.463389][T21683] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 627.551686][T21693] bond9: option tlb_dynamic_lb: invalid value (5) [ 627.580984][T21693] bond9 (unregistering): Released all slaves [ 627.657621][T21700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.664981][T21700] IPv6: NLM_F_CREATE should be set when creating new route [ 628.276907][T21714] syzkaller0: entered promiscuous mode [ 628.294165][T21714] syzkaller0: entered allmulticast mode [ 628.430571][T21722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4148'. [ 628.701917][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4150'. [ 628.767134][T21729] xt_TPROXY: Can be used only with -p tcp or -p udp [ 628.840748][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4153'. [ 628.859105][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4149'. [ 628.964231][T21742] bond0: entered promiscuous mode [ 628.977517][T21742] ÿ: entered promiscuous mode [ 628.988669][T21742] bond_slave_1: entered promiscuous mode [ 629.007583][T21742] batadv0: entered promiscuous mode [ 629.136082][T21745] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.167449][T21745] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.287249][T21745] bond4: left promiscuous mode [ 629.348684][T21744] lo speed is unknown, defaulting to 1000 [ 629.708379][T21762] bridge0: mtu less than device minimum [ 629.799639][T21766] netlink: 'syz.4.4158': attribute type 10 has an invalid length. [ 629.878712][T21765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4157'. [ 630.313159][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 630.414573][T21782] syzkaller1: entered promiscuous mode [ 630.433049][T21782] syzkaller1: entered allmulticast mode [ 630.477326][T21786] pim6reg1: entered promiscuous mode [ 630.490981][T21786] pim6reg1: entered allmulticast mode [ 630.777973][T21794] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4165'. [ 631.019757][T21799] syzkaller0: entered promiscuous mode [ 631.030673][T21799] syzkaller0: entered allmulticast mode [ 631.348858][T21812] syzkaller0: entered promiscuous mode [ 631.355262][T21812] syzkaller0: entered allmulticast mode [ 631.664230][T21830] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4174'. [ 632.046032][T21849] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4183'. [ 632.209613][T21849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.265393][T21849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.311848][T21849] bond0 (unregistering): Released all slaves [ 632.336858][T21861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4186'. [ 632.542357][T21852] bond0: option lacp_active: invalid value (8) [ 632.582890][T21852] bond0 (unregistering): Released all slaves [ 632.671058][T21854] syzkaller0: entered promiscuous mode [ 632.683280][T21854] syzkaller0: entered allmulticast mode [ 632.759554][T21869] netlink: 'syz.1.4186': attribute type 11 has an invalid length. [ 632.801677][T21878] syzkaller0: entered promiscuous mode [ 632.819888][T21878] syzkaller0: entered allmulticast mode [ 633.297311][T21888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4192'. [ 633.818296][T21911] bridge0: port 1(vlan3) entered blocking state [ 633.825039][T21911] bridge0: port 1(vlan3) entered disabled state [ 633.831796][T21911] vlan3: entered allmulticast mode [ 633.844138][T21911] bridge0: entered allmulticast mode [ 633.925800][T21911] vlan3: left allmulticast mode [ 633.949077][T21911] bridge0: left allmulticast mode [ 634.214343][T21918] __nla_validate_parse: 1 callbacks suppressed [ 634.214364][T21918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4199'. [ 634.264979][T21915] lo speed is unknown, defaulting to 1000 [ 634.384525][T21924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4202'. [ 634.583479][T21929] syzkaller0: entered promiscuous mode [ 634.626289][T21929] syzkaller0: entered allmulticast mode [ 635.212399][T21921] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4200'. [ 635.285187][T21936] syzkaller0: entered promiscuous mode [ 635.299220][T21936] syzkaller0: entered allmulticast mode [ 635.315541][T21919] lo speed is unknown, defaulting to 1000 [ 636.307983][T21955] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 636.987421][T21977] syzkaller0: entered promiscuous mode [ 637.001269][T21977] syzkaller0: entered allmulticast mode [ 637.187332][T21978] syzkaller0: entered promiscuous mode [ 637.193280][T21978] syzkaller0: entered allmulticast mode [ 637.423956][T21991] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 637.550960][T21996] netlink: 'syz.3.4221': attribute type 1 has an invalid length. [ 637.570685][T21996] netlink: 'syz.3.4221': attribute type 3 has an invalid length. [ 637.593219][T21996] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4221'. [ 637.613077][T21996] NCSI netlink: No device for ifindex 813332851 [ 637.687894][T22000] ipt_ECN: cannot use operation on non-tcp rule [ 637.852166][T22003] netlink: 'syz.3.4223': attribute type 10 has an invalid length. [ 637.896576][T22003] syz_tun: entered promiscuous mode [ 637.976849][T22003] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 638.017496][T21874] Set syz1 is full, maxelem 65536 reached [ 638.052563][T22013] netlink: 'syz.5.4224': attribute type 2 has an invalid length. [ 638.083109][T22013] netlink: 'syz.5.4224': attribute type 2 has an invalid length. [ 638.105369][T22011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4223'. [ 638.153789][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 638.183594][T22018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4226'. [ 638.236732][T22011] erspan2: entered allmulticast mode [ 638.374771][T22010] macsec1: entered promiscuous mode [ 638.773893][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4232'. [ 638.805217][T22040] syzkaller0: entered promiscuous mode [ 638.812878][T22040] syzkaller0: entered allmulticast mode [ 638.910081][T22041] syzkaller0: entered promiscuous mode [ 638.917643][T22043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4232'. [ 638.926830][T22041] syzkaller0: entered allmulticast mode [ 639.113299][T22048] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4233'. [ 639.292074][T22051] lo speed is unknown, defaulting to 1000 [ 639.527556][T22063] netlink: 'syz.3.4239': attribute type 1 has an invalid length. [ 639.600004][T22066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4240'. [ 639.753470][T22070] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4241'. [ 640.302916][T22087] syzkaller0: entered promiscuous mode [ 640.323640][T22087] syzkaller0: entered allmulticast mode [ 640.580287][T22089] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4234'. [ 640.601528][T22094] xt_l2tp: wrong L2TP version: 0 [ 640.899932][T22103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.944185][T22100] sock: sock_timestamping_bind_phc: sock not bind to device [ 640.973613][T22100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4250'. [ 641.099279][T22109] netlink: 276 bytes leftover after parsing attributes in process `syz.5.4253'. [ 641.151897][T22100] bond6: entered promiscuous mode [ 641.173916][T22100] bond6: entered allmulticast mode [ 641.183474][T22100] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.882217][T22123] lo speed is unknown, defaulting to 1000 [ 642.428724][T22140] syzkaller0: entered promiscuous mode [ 642.443733][T22140] syzkaller0: entered allmulticast mode [ 642.963533][T22143] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4262'. [ 643.019063][T22143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4262'. [ 643.749158][T22159] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4266'. [ 643.779984][T22159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4266'. [ 643.858764][T22159] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4266'. [ 644.105819][T22162] FAULT_INJECTION: forcing a failure. [ 644.105819][T22162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.187618][T22162] CPU: 1 UID: 0 PID: 22162 Comm: syz.1.4267 Not tainted syzkaller #0 PREEMPT(full) [ 644.187653][T22162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.187666][T22162] Call Trace: [ 644.187674][T22162] [ 644.187683][T22162] dump_stack_lvl+0xe8/0x150 [ 644.187713][T22162] should_fail_ex+0x412/0x560 [ 644.187745][T22162] _copy_from_user+0x2d/0xb0 [ 644.187777][T22162] ____sys_sendmsg+0x308/0x9f0 [ 644.187817][T22162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.187855][T22162] ? import_iovec+0x73/0xa0 [ 644.187890][T22162] ___sys_sendmsg+0x2a5/0x360 [ 644.187917][T22162] ? __lock_acquire+0x6b5/0x2cf0 [ 644.187945][T22162] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.188013][T22162] ? __fget_files+0x2a/0x420 [ 644.188039][T22162] ? __fget_files+0x3a0/0x420 [ 644.188074][T22162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 644.188106][T22162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.188133][T22162] ? try_to_wake_up+0x7f2/0x1380 [ 644.188188][T22162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.188212][T22162] do_syscall_64+0x15f/0xf80 [ 644.188239][T22162] ? clear_bhb_loop+0x40/0x90 [ 644.188265][T22162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.188286][T22162] RIP: 0033:0x7fe73b19cdd9 [ 644.188306][T22162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.188324][T22162] RSP: 002b:00007fe73c05d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.188346][T22162] RAX: ffffffffffffffda RBX: 00007fe73b415fa0 RCX: 00007fe73b19cdd9 [ 644.188362][T22162] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 644.188375][T22162] RBP: 00007fe73c05d090 R08: 0000000000000000 R09: 0000000000000000 [ 644.188388][T22162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.188400][T22162] R13: 00007fe73b416038 R14: 00007fe73b415fa0 R15: 00007ffcf85375a8 [ 644.188434][T22162] [ 644.768729][T22177] lo speed is unknown, defaulting to 1000 [ 644.886933][T22182] __nla_validate_parse: 1 callbacks suppressed [ 644.886954][T22182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4274'. [ 644.982120][T22180] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 644.994701][T22180] bond7 (unregistering): Released all slaves [ 645.262717][T22194] netlink: 'syz.5.4277': attribute type 1 has an invalid length. [ 645.495967][T22202] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 645.508586][T22202] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 645.530652][T22200] x_tables: duplicate underflow at hook 1 [ 645.580619][T22178] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4271'. [ 645.636974][T22197] syzkaller0: entered promiscuous mode [ 645.642627][T22197] syzkaller0: entered allmulticast mode [ 645.672562][T22211] netlink: 'syz.3.4283': attribute type 21 has an invalid length. [ 645.697651][T22194] bond0: (slave gretap1): making interface the new active one [ 645.706564][T22194] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 645.780837][T22211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4283'. [ 646.230012][T22225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4285'. [ 646.336943][T22217] macvlan2: entered promiscuous mode [ 646.342329][T22217] macvlan2: entered allmulticast mode [ 646.348701][T22217] bond0: entered promiscuous mode [ 646.353793][T22217] gretap1: entered promiscuous mode [ 646.360089][T22217] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 646.370717][T22217] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 646.382981][T22217] bond0: left promiscuous mode [ 646.387798][T22217] gretap1: left promiscuous mode [ 646.623717][T22232] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 647.195580][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 647.206932][T22248] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4292'. [ 647.641104][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 648.128987][T22260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4296'. [ 648.603251][T22262] lo speed is unknown, defaulting to 1000 [ 648.656237][T22263] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4297'. [ 649.004963][T22275] syzkaller0: entered promiscuous mode [ 649.010534][T22275] syzkaller0: entered allmulticast mode [ 649.033979][T22278] syzkaller0: entered promiscuous mode [ 649.039814][T22278] syzkaller0: entered allmulticast mode [ 649.133564][T22278] FAULT_INJECTION: forcing a failure. [ 649.133564][T22278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.146705][T22278] CPU: 1 UID: 0 PID: 22278 Comm: syz.1.4302 Not tainted syzkaller #0 PREEMPT(full) [ 649.146732][T22278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.146745][T22278] Call Trace: [ 649.146754][T22278] [ 649.146762][T22278] dump_stack_lvl+0xe8/0x150 [ 649.146792][T22278] should_fail_ex+0x412/0x560 [ 649.146825][T22278] _copy_from_user+0x2d/0xb0 [ 649.146858][T22278] __sys_sendto+0x2b0/0x710 [ 649.146887][T22278] ? __pfx___sys_sendto+0x10/0x10 [ 649.146910][T22278] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 649.146953][T22278] ? __fget_files+0x3a0/0x420 [ 649.146989][T22278] ? ksys_write+0x242/0x270 [ 649.147023][T22278] ? __pfx_ksys_write+0x10/0x10 [ 649.147059][T22278] __x64_sys_sendto+0xde/0x100 [ 649.147086][T22278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.147111][T22278] do_syscall_64+0x15f/0xf80 [ 649.147136][T22278] ? trace_irq_disable+0x3b/0x140 [ 649.147177][T22278] ? clear_bhb_loop+0x40/0x90 [ 649.147204][T22278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.147225][T22278] RIP: 0033:0x7fe73b19cdd9 [ 649.147246][T22278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.147264][T22278] RSP: 002b:00007fe73c05d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 649.147287][T22278] RAX: ffffffffffffffda RBX: 00007fe73b415fa0 RCX: 00007fe73b19cdd9 [ 649.147303][T22278] RDX: 0000000000000036 RSI: 0000200000000240 RDI: 0000000000000007 [ 649.147315][T22278] RBP: 00007fe73c05d090 R08: 00002000000001c0 R09: 0000000000000014 [ 649.147329][T22278] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 649.147341][T22278] R13: 00007fe73b416038 R14: 00007fe73b415fa0 R15: 00007ffcf85375a8 [ 649.147375][T22278] [ 649.150718][T22281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4303'. [ 649.618851][T22285] syzkaller0: entered promiscuous mode [ 649.625439][T22285] syzkaller0: entered allmulticast mode [ 649.714036][T22285] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 650.205552][T22300] netlink: 676 bytes leftover after parsing attributes in process `syz.4.4311'. [ 650.271123][T22304] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 650.500795][T22310] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4315'. [ 650.874622][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4322'. [ 650.896231][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4322'. [ 651.180530][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4326'. [ 651.653814][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4333'. [ 651.852286][T22379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4340'. [ 651.901087][T22382] netlink: 'syz.1.4339': attribute type 21 has an invalid length. [ 651.937334][T22384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4341'. [ 652.294037][T22404] netlink: 'syz.5.4344': attribute type 1 has an invalid length. [ 652.341373][T22404] bond9: entered promiscuous mode [ 652.347010][T22404] 8021q: adding VLAN 0 to HW filter on device bond9 [ 652.386743][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4344'. [ 652.551753][T22408] lo speed is unknown, defaulting to 1000 [ 653.309103][T22414] lo speed is unknown, defaulting to 1000 [ 653.316166][T22427] tipc: Started in network mode [ 653.322781][T22427] tipc: Node identity b648fffd2708, cluster identity 4711 [ 653.341442][T22427] tipc: Enabled bearer , priority 0 [ 653.349588][T22429] syzkaller0: entered promiscuous mode [ 653.356443][T22429] syzkaller0: entered allmulticast mode [ 653.372568][T22427] syzkaller0: entered promiscuous mode [ 653.389557][T22427] syzkaller0: entered allmulticast mode [ 653.631987][T22426] tipc: Resetting bearer [ 653.692327][T22426] tipc: Disabling bearer [ 653.757815][T22440] netlink: 'syz.1.4354': attribute type 1 has an invalid length. [ 653.855037][T22441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4354'. [ 653.958448][T22440] 8021q: adding VLAN 0 to HW filter on device bond7 [ 654.209100][T22448] syzkaller1: entered promiscuous mode [ 654.214652][T22448] syzkaller1: entered allmulticast mode [ 654.798155][T22464] syzkaller0: entered promiscuous mode [ 654.803720][T22464] syzkaller0: entered allmulticast mode [ 655.321323][T22479] lo speed is unknown, defaulting to 1000 [ 655.942422][T22497] tipc: Enabled bearer , priority 0 [ 655.974405][T22498] syzkaller0: entered promiscuous mode [ 655.979970][T22498] syzkaller0: entered allmulticast mode [ 656.096543][T22497] tipc: Resetting bearer [ 656.151236][T22497] tipc: Disabling bearer [ 656.456035][T22515] sit1: entered allmulticast mode [ 656.874288][T22539] xt_hashlimit: size too large, truncated to 1048576 [ 656.898928][T22533] lo speed is unknown, defaulting to 1000 [ 656.930476][T22544] netlink: 'syz.5.4383': attribute type 1 has an invalid length. [ 656.978835][T22544] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4383'. [ 658.126370][T22586] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 658.273552][T22590] netlink: 'syz.0.4389': attribute type 163 has an invalid length. [ 658.387258][T22594] netlink: 'syz.1.4392': attribute type 1 has an invalid length. [ 658.431853][T22594] bond8: entered promiscuous mode [ 658.437030][T22594] bond8: entered allmulticast mode [ 658.442618][T22594] 8021q: adding VLAN 0 to HW filter on device bond8 [ 658.473259][T22594] macvlan0: entered promiscuous mode [ 658.478643][T22594] macvlan0: entered allmulticast mode [ 658.486374][T22594] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 658.548615][T22597] lo speed is unknown, defaulting to 1000 [ 659.173384][T22608] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 659.732285][T22636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4404'. [ 659.755029][T22636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.638516][T22651] pimreg: entered allmulticast mode [ 660.693208][T22649] netlink: 'syz.5.4405': attribute type 10 has an invalid length. [ 660.939254][T22662] bridge0: port 1(syz_tun) entered blocking state [ 660.954719][T22662] bridge0: port 1(syz_tun) entered disabled state [ 660.966878][T22649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4405'. [ 660.982056][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4405'. [ 660.994209][T22662] syz_tun: entered allmulticast mode [ 661.008089][T22662] syz_tun: entered promiscuous mode [ 661.299304][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'. [ 661.316703][T22674] vlan0: entered allmulticast mode [ 661.321940][T22674] macvtap0: entered allmulticast mode [ 661.591001][T22684] syzkaller0: entered promiscuous mode [ 661.606953][T22684] syzkaller0: entered allmulticast mode [ 661.622876][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4416'. [ 661.658689][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4416'. [ 661.688388][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4416'. [ 661.704555][T22690] syzkaller0: entered promiscuous mode [ 661.710115][T22690] syzkaller0: entered allmulticast mode [ 661.744345][T22689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4417'. [ 661.874893][T22689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'. [ 662.079207][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4418'. [ 662.187976][T22696] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4420'. [ 662.305722][T22698] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4421'. [ 662.555686][T22711] IPVS: Unknown mcast interface: vcan0 [ 663.040975][T22715] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.048708][T22715] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.161566][T22731] smc: net device wlan0 erased user defined pnetid SYZ0 [ 663.175517][T22731] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4428'. [ 663.272648][T22715] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 663.288305][T22715] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 663.621849][T21644] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 663.633801][T21644] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 663.657751][T21644] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 663.679669][T21644] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 663.693338][T21644] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 663.708922][T21644] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 663.773140][T21644] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 663.803215][T21644] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 663.829794][T21644] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 663.860903][T21644] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 663.870056][T21644] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 663.879933][T21644] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 663.888880][T22748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4431'. [ 663.968720][T22754] netlink: 'syz.0.4434': attribute type 49 has an invalid length. [ 664.005755][T22754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4434'. [ 664.055279][T22758] syz_tun: left promiscuous mode [ 664.142543][T22758] .70·X: left allmulticast mode [ 664.155795][T22758] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 664.180664][T22766] xt_hashlimit: size too large, truncated to 1048576 [ 664.197157][T22764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4437'. [ 664.287300][T22771] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.329654][T22773] netlink: 'syz.4.4438': attribute type 1 has an invalid length. [ 664.374817][T22773] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4438'. [ 664.457289][T22771] bridge_slave_0 (unregistering): left allmulticast mode [ 664.477066][T22771] bridge_slave_0 (unregistering): left promiscuous mode [ 664.514948][T22771] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.617088][T22769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4437'. [ 664.632420][T22773] xt_hashlimit: size too large, truncated to 1048576 [ 664.768985][T22788] netlink: 'syz.3.4442': attribute type 1 has an invalid length. [ 664.971257][T22788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4442'. [ 665.055949][T22793] 8021q: adding VLAN 0 to HW filter on device bond8 [ 665.067904][T22793] bond7: (slave bond8): making interface the new active one [ 665.078693][T22793] bond7: (slave bond8): Enslaving as an active interface with an up link [ 665.112336][T22795] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 665.130137][T22788] 8021q: adding VLAN 0 to HW filter on device bond7 [ 665.597119][T22790] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 665.654555][T22821] netlink: 'syz.4.4452': attribute type 1 has an invalid length. [ 665.842136][T22832] syzkaller0: entered promiscuous mode [ 665.864727][T22832] syzkaller0: entered allmulticast mode [ 666.044126][T22850] sctp: [Deprecated]: syz.3.4459 (pid 22850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 666.044126][T22850] Use struct sctp_sack_info instead [ 666.099874][T22854] netlink: 'syz.0.4461': attribute type 1 has an invalid length. [ 666.447360][T22840] netlink: 'syz.4.4457': attribute type 1 has an invalid length. [ 666.479414][T22854] bond3: entered promiscuous mode [ 666.485375][T22854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.496417][T22860] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 666.516424][T22860] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 666.547253][T22860] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 666.577716][T22864] bond3: entered allmulticast mode [ 666.611937][T22854] bond3: (slave bridge1): making interface the new active one [ 666.619753][T22854] bridge1: entered promiscuous mode [ 666.626231][T22854] bridge1: entered allmulticast mode [ 666.636378][T22854] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 666.830892][T22885] 8021q: VLANs not supported on lo [ 666.838295][T22883] FAULT_INJECTION: forcing a failure. [ 666.838295][T22883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.883157][T22883] CPU: 0 UID: 0 PID: 22883 Comm: syz.5.4466 Not tainted syzkaller #0 PREEMPT(full) [ 666.883190][T22883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.883205][T22883] Call Trace: [ 666.883213][T22883] [ 666.883223][T22883] dump_stack_lvl+0xe8/0x150 [ 666.883255][T22883] should_fail_ex+0x412/0x560 [ 666.883288][T22883] _copy_from_user+0x2d/0xb0 [ 666.883319][T22883] __sys_bpf+0x229/0x950 [ 666.883356][T22883] ? __pfx___sys_bpf+0x10/0x10 [ 666.883406][T22883] ? ksys_write+0x242/0x270 [ 666.883439][T22883] ? __pfx_ksys_write+0x10/0x10 [ 666.883475][T22883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.883498][T22883] __x64_sys_bpf+0x7c/0x90 [ 666.883528][T22883] do_syscall_64+0x15f/0xf80 [ 666.883554][T22883] ? trace_irq_disable+0x3b/0x140 [ 666.883584][T22883] ? clear_bhb_loop+0x40/0x90 [ 666.883611][T22883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.883632][T22883] RIP: 0033:0x7faca5d9cdd9 [ 666.883653][T22883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.883675][T22883] RSP: 002b:00007faca6c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 666.883708][T22883] RAX: ffffffffffffffda RBX: 00007faca6016090 RCX: 00007faca5d9cdd9 [ 666.883724][T22883] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 666.883738][T22883] RBP: 00007faca6c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 666.883751][T22883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.883764][T22883] R13: 00007faca6016128 R14: 00007faca6016090 R15: 00007fffdd1c2f38 [ 666.883799][T22883] [ 667.476763][T22894] __nla_validate_parse: 7 callbacks suppressed [ 667.476785][T22894] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4471'. [ 667.509818][T22896] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4472'. [ 667.586840][T22896] netlink: 'syz.3.4472': attribute type 1 has an invalid length. [ 667.708603][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4473'. [ 667.723232][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4473'. [ 667.884060][T22908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4474'. [ 667.922746][T22908] 8021q: adding VLAN 0 to HW filter on device bond9 [ 667.966128][T22908] bond9: (slave veth7): Enslaving as an active interface with an up link [ 668.477723][T22901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.547915][T22945] mac80211_hwsim hwsim41 ªªªªª;: renamed from wlan0 [ 668.560827][T22947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4484'. [ 668.585114][T22941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4485'. [ 669.121396][T22970] netlink: 'syz.3.4493': attribute type 29 has an invalid length. [ 669.122703][T22969] netlink: 'syz.3.4493': attribute type 9 has an invalid length. [ 669.139155][T22970] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.348290][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4497'. [ 669.600375][T22989] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4498'. [ 669.756960][T22993] x_tables: duplicate underflow at hook 2 [ 670.010323][T23001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4501'. [ 670.184298][T23008] netlink: 'syz.0.4504': attribute type 1 has an invalid length. [ 670.195583][T22999] netlink: 'syz.4.4502': attribute type 14 has an invalid length. [ 670.216394][T22999] netlink: 'syz.4.4502': attribute type 13 has an invalid length. [ 670.308952][T23008] bond4: entered promiscuous mode [ 670.314567][T23008] bond4: entered allmulticast mode [ 670.320360][T23008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 670.372812][T23011] netlink: 'syz.1.4505': attribute type 49 has an invalid length. [ 670.380894][T23014] macsec2: entered promiscuous mode [ 670.390651][T23014] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 670.412093][T23017] : renamed from bond0 [ 670.468119][T23008] erspan1: entered allmulticast mode [ 670.498293][T23008] bond4: (slave erspan1): making interface the new active one [ 670.508697][T23008] erspan1: entered promiscuous mode [ 670.519023][T23008] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 670.639284][T23023] ip6erspan1: entered allmulticast mode [ 670.758696][T23036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.908771][T23040] netlink: 'syz.5.4513': attribute type 1 has an invalid length. [ 671.125373][T23054] netlink: 'syz.0.4517': attribute type 2 has an invalid length. [ 671.431878][T23067] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.456519][T23070] netlink: zone id is out of range [ 671.470729][T23070] netlink: zone id is out of range [ 671.485539][T23070] netlink: zone id is out of range [ 671.495282][T23070] netlink: zone id is out of range [ 671.500643][T23070] netlink: zone id is out of range [ 671.506371][T23070] netlink: zone id is out of range [ 671.541506][T23073] syzkaller0: entered promiscuous mode [ 671.555831][T23075] netlink: 'syz.1.4522': attribute type 2 has an invalid length. [ 671.559778][T23073] syzkaller0: entered allmulticast mode [ 671.580609][T23075] netlink: 'syz.1.4522': attribute type 2 has an invalid length. [ 671.656215][T23068] netem: change failed [ 671.932006][T23094] bond5: entered promiscuous mode [ 671.938493][T23094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 671.971025][T23094] bond5: (slave bridge2): making interface the new active one [ 671.979188][T23094] bridge2: entered promiscuous mode [ 671.988617][T23094] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 672.372137][T23109] xt_hashlimit: size too large, truncated to 1048576 [ 672.397691][T23110] IPVS: set_ctl: invalid protocol: 136 172.30.0.2:20005 [ 673.502522][T23122] __nla_validate_parse: 13 callbacks suppressed [ 673.502539][T23122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4536'. [ 673.546398][T23122] bridge2: port 1(veth9) entered blocking state [ 673.554967][T23122] bridge2: port 1(veth9) entered disabled state [ 673.561540][T23122] veth9: entered allmulticast mode [ 673.569207][T23122] veth9: entered promiscuous mode [ 673.576873][T23122] bridge2: port 1(veth9) entered blocking state [ 673.583290][T23122] bridge2: port 1(veth9) entered forwarding state [ 673.606823][T23123] bridge2: port 2(veth11) entered blocking state [ 673.613715][T23123] bridge2: port 2(veth11) entered disabled state [ 673.620276][T23123] veth11: entered allmulticast mode [ 673.628086][T23123] veth11: entered promiscuous mode [ 673.634429][T23123] bridge2: port 2(veth11) entered blocking state [ 673.640947][T23123] bridge2: port 2(veth11) entered forwarding state [ 673.715498][T23125] syzkaller0: entered promiscuous mode [ 673.721069][T23125] syzkaller0: entered allmulticast mode [ 673.866094][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4538'. [ 673.881620][T23127] tipc: Failed to remove unknown binding: 66,0,0/0:1095988506/1095988508 [ 673.891208][T23127] tipc: Failed to remove unknown binding: 66,0,0/0:1095988506/1095988507 [ 673.900181][T21646] bridge2: port 1(veth9) entered disabled state [ 673.907380][T23127] tipc: Failed to remove unknown binding: 66,0,0/0:1095988506/1095988508 [ 673.917765][T23127] tipc: Failed to remove unknown binding: 66,0,0/0:1095988506/1095988507 [ 673.918807][T21646] bridge2: port 2(veth11) entered disabled state [ 674.800622][T23085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 674.921056][T23148] validate_nla: 1 callbacks suppressed [ 674.921076][T23148] netlink: 'syz.3.4544': attribute type 2 has an invalid length. [ 674.992745][T23148] netlink: 'syz.3.4544': attribute type 2 has an invalid length. [ 675.026383][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4547'. [ 675.129362][T23158] netlink: 'syz.1.4547': attribute type 1 has an invalid length. [ 675.138148][T23158] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4547'. [ 675.367046][T23168] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4552'. [ 675.377130][T23168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4552'. [ 675.386671][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 675.422105][T23173] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4554'. [ 675.632382][T23184] syzkaller1: entered promiscuous mode [ 675.649177][T23184] syzkaller1: entered allmulticast mode [ 675.847282][T23197] netlink: 'syz.0.4559': attribute type 39 has an invalid length. [ 675.917420][T23197] bond0: (slave syz_tun): Releasing backup interface [ 676.054464][T23209] x_tables: duplicate underflow at hook 1 [ 676.067673][T23210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4559'. [ 676.311169][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'. [ 676.631104][T23230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.757191][T23192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.790940][T23233] netlink: 'syz.1.4568': attribute type 2 has an invalid length. [ 678.804025][T23233] netlink: 'syz.1.4568': attribute type 2 has an invalid length. [ 678.928062][T23235] syzkaller0: entered promiscuous mode [ 678.948965][T23235] syzkaller0: entered allmulticast mode [ 679.053811][T23242] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 679.230286][T23253] x_tables: duplicate underflow at hook 2 [ 679.276137][T23243] netlink: 83 bytes leftover after parsing attributes in process `syz.1.4572'. [ 679.518329][T23263] syzkaller1: entered promiscuous mode [ 679.529594][T23263] syzkaller1: entered allmulticast mode [ 679.736894][T23279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.326783][T23295] netlink: 'syz.4.4586': attribute type 21 has an invalid length. [ 680.336848][T23295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4586'. [ 680.700498][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4591'. [ 680.714780][T23306] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4591'. [ 680.971979][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4595'. [ 681.075418][T23321] netlink: 'syz.4.4597': attribute type 1 has an invalid length. [ 682.562507][T23268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.576787][T23289] netlink: 'syz.1.4582': attribute type 2 has an invalid length. [ 682.599222][T23289] netlink: 'syz.1.4582': attribute type 2 has an invalid length. [ 682.844450][T23324] lo speed is unknown, defaulting to 1000 [ 682.978759][T23345] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.987561][T23345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 682.994886][T23345] IPv6: NLM_F_CREATE should be set when creating new route [ 683.002215][T23345] IPv6: NLM_F_CREATE should be set when creating new route [ 683.009520][T23345] IPv6: NLM_F_CREATE should be set when creating new route [ 683.193870][ T50] Bluetooth: hci3: command tx timeout [ 683.471954][T23351] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4604'. [ 683.854170][T23368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.026868][T23368] bridge0: port 1(syz_tun) entered blocking state [ 684.033571][T23368] bridge0: port 1(syz_tun) entered forwarding state [ 684.065530][T23368] 8021q: adding VLAN 0 to HW filter on device  [ 684.094381][T23368] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.149014][T23368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.276247][T23368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.316107][T23368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.341332][T23368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 684.352065][T23368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.369372][T23368] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 684.390095][T21648] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.397501][T21648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.996741][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.175085][T23389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.187780][T23396] netlink: 'syz.4.4612': attribute type 2 has an invalid length. [ 687.210525][T23396] netlink: 'syz.4.4612': attribute type 2 has an invalid length. [ 687.432492][T23413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4620'. [ 687.778612][T23423] lo speed is unknown, defaulting to 1000 [ 687.810047][T23434] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4625'. [ 688.226851][T23449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4628'. [ 689.087248][T23491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 689.105177][T23491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 689.377725][T23494] lo speed is unknown, defaulting to 1000 [ 689.594102][ T5649] Bluetooth: hci3: command 0x0405 tx timeout [ 690.428437][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4635'. [ 690.438842][T23513] netlink: 'syz.0.4635': attribute type 29 has an invalid length. [ 691.211467][T23472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 691.221004][T23478] netlink: 'syz.5.4630': attribute type 2 has an invalid length. [ 691.247939][T23478] netlink: 'syz.5.4630': attribute type 2 has an invalid length. [ 691.278178][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4637'. [ 691.497089][T23525] xt_hashlimit: size too large, truncated to 1048576 [ 691.511089][T23528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4640'. [ 691.713994][T23540] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4644'. [ 691.726511][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4639'. [ 691.755776][T23541] openvswitch: netlink: Flow actions attr not present in new flow. [ 691.832257][T23548] netlink: 'syz.1.4645': attribute type 13 has an invalid length. [ 692.238642][T23548] bridge0: port 1(syz_tun) entered disabled state [ 692.289241][T23548] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.427844][T23568] netlink: 'syz.4.4648': attribute type 2 has an invalid length. [ 692.453983][T23568] netlink: 'syz.4.4648': attribute type 2 has an invalid length. [ 692.466961][T23548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.485895][T23548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.790860][T23567] lo speed is unknown, defaulting to 1000 [ 693.040915][T23582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.210816][T23590] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4654'. [ 693.778157][T23607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4658'. [ 693.817555][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4658'. [ 693.913675][T23614] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4659'. [ 694.274666][T23626] netlink: 'syz.3.4662': attribute type 13 has an invalid length. [ 694.304829][T23626] netlink: 'syz.3.4662': attribute type 17 has an invalid length. [ 694.477285][T23631] netlink: 'syz.4.4664': attribute type 2 has an invalid length. [ 694.486348][T23631] netlink: 'syz.4.4664': attribute type 2 has an invalid length. [ 696.726664][T23626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.737084][T23626] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.750764][T23626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.820061][T23626] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 696.921062][ T8101] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.949132][ T8101] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.968887][T23675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4671'. [ 696.969729][ T8101] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.980230][T23675] netlink: 'syz.3.4671': attribute type 1 has an invalid length. [ 696.998706][T23675] netlink: 568 bytes leftover after parsing attributes in process `syz.3.4671'. [ 697.008516][ T8101] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.040972][T23670] syzkaller1: entered promiscuous mode [ 697.061597][T23670] syzkaller1: entered allmulticast mode [ 697.081328][ T8101] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.103472][ T8101] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.115928][ T8101] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.135714][ T8101] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.232517][T23683] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4673'. [ 697.375814][T23676] syzkaller1: entered promiscuous mode [ 697.381416][T23676] syzkaller1: entered allmulticast mode [ 698.367806][T23664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.386397][T23703] netlink: 'syz.5.4678': attribute type 2 has an invalid length. [ 698.402647][T23703] netlink: 'syz.5.4678': attribute type 2 has an invalid length. [ 698.599574][T23711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4680'. [ 698.722830][T23720] netlink: 'syz.4.4684': attribute type 4 has an invalid length. [ 698.734020][T23718] syzkaller0: entered promiscuous mode [ 698.753039][T23718] syzkaller0: entered allmulticast mode [ 698.780108][T23720] netlink: 'syz.4.4684': attribute type 4 has an invalid length. [ 699.054336][T23732] lo speed is unknown, defaulting to 1000 [ 699.488850][T23723] lo speed is unknown, defaulting to 1000 [ 700.169613][T23770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4698'. [ 700.183823][T23770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4698'. [ 700.417320][T23777] syzkaller0: entered promiscuous mode [ 700.432387][T23777] syzkaller0: entered allmulticast mode [ 700.529050][T23781] lo speed is unknown, defaulting to 1000 [ 700.761502][T23787] macsec1: entered promiscuous mode [ 700.773557][T23787] 0ªX¹¦À: entered promiscuous mode [ 700.784445][T23787] macsec1: entered allmulticast mode [ 700.796397][T23787] 0ªX¹¦À: entered allmulticast mode [ 700.814018][T23787] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 700.839212][T23787] 0ªX¹¦À: left allmulticast mode [ 700.853509][T23787] 0ªX¹¦À: left promiscuous mode [ 701.315051][T23781] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4701'. [ 701.691967][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4705'. [ 701.829811][T23811] netlink: 'syz.0.4706': attribute type 13 has an invalid length. [ 701.838538][T23811] netlink: 'syz.0.4706': attribute type 17 has an invalid length. [ 701.898203][T23811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.908211][T23811] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.964262][T23811] 0ªX¹¦À: left allmulticast mode [ 701.971178][T23811] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 702.040059][T23811] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 702.050529][T23811] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 702.065298][T23811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 702.082734][T23811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 702.102879][T23811] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 702.131310][T23812] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.144690][T21653] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.151851][T21653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.285809][T23745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.295896][T23765] netlink: 'syz.3.4695': attribute type 2 has an invalid length. [ 702.304749][T23765] netlink: 'syz.3.4695': attribute type 2 has an invalid length. [ 702.539144][T23820] netlink: 'syz.3.4707': attribute type 1 has an invalid length. [ 702.619541][T23827] netlink: 'syz.4.4709': attribute type 5 has an invalid length. [ 702.692884][T23820] bond10: entered promiscuous mode [ 702.722742][T23820] 8021q: adding VLAN 0 to HW filter on device bond10 [ 703.304627][T23839] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4713'. [ 703.510849][T23826] 8021q: adding VLAN 0 to HW filter on device bond10 [ 703.524423][T23826] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 703.545714][T23826] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 703.609769][T23826] bond10: (slave ip6gre1): making interface the new active one [ 703.623313][T23826] ip6gre1: entered promiscuous mode [ 703.630411][T23826] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 703.745439][ T1167] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 703.842375][T23853] netlink: 'syz.4.4717': attribute type 2 has an invalid length. [ 703.862262][T23853] netlink: 'syz.4.4717': attribute type 2 has an invalid length. [ 704.139551][T23849] bond6: left promiscuous mode [ 704.166928][T23849] bond6: left allmulticast mode [ 704.189270][T23849] bond8: left promiscuous mode [ 704.202122][T23849] bond8: left allmulticast mode [ 704.215097][T23849] vlan0: left allmulticast mode [ 704.221612][T23849] macvtap0: left allmulticast mode [ 704.621344][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4723'. [ 705.848802][T23947] syzkaller1: entered promiscuous mode [ 705.866142][T23947] syzkaller1: entered allmulticast mode [ 705.890538][T23951] netlink: 'syz.5.4735': attribute type 2 has an invalid length. [ 705.904062][T17385] unregister_netdevice: waiting for bond10 to become free. Usage count = 2 [ 705.917587][T23951] netlink: 'syz.5.4735': attribute type 2 has an invalid length. [ 706.012241][T23952] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4737'. [ 707.513370][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 715.433185][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!