last executing test programs: 2m53.452395538s ago: executing program 4 (id=3751): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x64050) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2002) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x5b) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000300), 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) read$alg(r4, 0x0, 0x0) write$cgroup_devices(r4, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2f, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffc}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x400000000010, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2m51.666252498s ago: executing program 4 (id=3759): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0xfffffffe}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) (fail_nth: 15) 2m51.425664913s ago: executing program 4 (id=3760): sendmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="0ad4fadc0d59d64615b7cfdcf8ded820a923d137fe9863dd8a05342a81f860aae5a71f1e9fdc040a1d94b70ccadc34f2002a17ebc63110e7c4c30b7827de858ed4e7b6327dc6da04e7f507a3d9d60e24a327e8ead160fd", 0x57}], 0x1, &(0x7f0000000780)=[{0x58, 0x1, 0x5, "7d121969c3117928f4fdb0703194cbc3878d91415333475f40d5c42c78797d554bf5c3aeb7b3d2947d3ba101a25b7df3b9c4b65af84c82f34bdb22fe50f01075ee494605a4aebf"}, {0x18, 0x102, 0x6, "30ebdad3126ea06a"}, {0xf8, 0x6, 0x6, "6e9bf284d4434cf23dee0c754b3473d40621d29eb5297ad9f7a3661bdf8f8ac31857840bfdbcdbe9c7f6da897b96dab06495b559db2ac5e6a171c4e42555af0ba4ef89a3ac73566f478707c8cbe97df103e9d0f534ca755a6c3961ffd3728ff095c221b574fe2bb750019806fce69461d94e55cca971531a58a793c73c1eb4a416ebfd129614f372952601fa3e13f5eb6342d35c30ef5b28d7a39f12898b061caf164f419d388ccf5ac7bf597a248b6bf0afd9c84905ecdc8991dab79cfa8626f51edd387b89c1ce25d75e219c73ebd1c8b8d54789a04718d6f3a28694df80f5c741bc"}, {0x80, 0x29, 0xe, "1020098ca3c62d30a19ad786d6992bd990e9ab1f0302b9562a4c2fc3d9f7bf7244d06058c2f63d9bdaac237c0fdb7ce50f495b94229e968ccbdfee65b06dc89a4f90e871a6d59f3c471b44913fb32eaac09e779c03c5f23ef0a45c7c9de8ddd8a88a53b61ae3041c2d4fa63f"}], 0x1e8}}], 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r0, &(0x7f0000002f00)=[{{&(0x7f00000005c0)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x18, 0x1, 0x25, 0x5}}], 0x18}}], 0x1, 0x8000) 2m50.849424965s ago: executing program 4 (id=3765): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0xfffffffe}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 2m49.13706698s ago: executing program 4 (id=3776): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0xfffffffe}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 2m48.885241603s ago: executing program 4 (id=3779): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b00000008000840000000000500050000000010050004"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x6, 0x17, &(0x7f0000001e80)=ANY=[@ANYBLOB="1800000000000000000000000800000218110000", @ANYRES64=r1, @ANYRES32], &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000002280)={0x11c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x2000) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x67, @loopback, 0x4e22, 0x1, 'rr\x00', 0x0, 0x1, 0x50}, {@multicast2, 0x4e24, 0x0, 0x3d0, 0x7, 0x74a}}, 0x44) recvmmsg$unix(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002102, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}}, 0xa4) r5 = epoll_create1(0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '/\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008841}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000e00)={{r0}, r10, 0xa, @unused=[0x9, 0x7, 0x5, 0x7], @name="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"}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0x90000005}) connect$unix(r0, &(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2m42.124113564s ago: executing program 2 (id=3815): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x0, 0x7, 0xe, 0x8000000, 0x0, 0x7, 0x6}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090805070000002bbd7000ffdbdf25050017003ca0000002"], 0x38}}, 0x20000000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x6) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4810) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x8}, &(0x7f0000000300)=0x8) r9 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r0, &(0x7f0000000100)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000006c0)={0x0, 0x80000000, 0x6}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000ac0)={r10, "99a9f86995ed036773ab5f49576af08d"}) write(r2, &(0x7f0000000140)="1fab9050c1d896a81a69b4887634d9b80846642fd62936f0694ca36ccf70eeb0acb2ece81e17fe673d32a5904b2867737b904e4f408d8ef8d9905b41e99da94e98a4c640f1c1f9e0f147f8ff73fa933d0153739bc0fc2651cdcccc873e7377c79943139de21809e9de85b7aa17f1ce26a3c399e907a83ef04fc606230e884637e52bf31881865bf8fe67c5528e8d4be633d25dd1f80e932d3b9d935926761a01fa3eeeb931040a99bd6fee8204c0f84b8f85b395f945fc74", 0xb8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 2m41.090338045s ago: executing program 2 (id=3823): r0 = socket$kcm(0x29, 0x7, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r1, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000080)={0x1, 0x93, "660d5123b4878752472796f37fabbc87c9eba7ac2aeae0ae9f54878afd1d1bcf7954ee41592685bc625ec0d756859d0af8d60ce7b7d778c61746c8256b484cd6afbcffe2fdd95871c7562d1a29f23fb3688ab027f2c367e609a254c422d0264b097d51df5a541d843359fbe4b011d8accc2f0b0e743714ad160821cafc722887b881c9366437e527b73d5fad4b6af526ea6008"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}}], 0x2, 0x4040080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m40.783676031s ago: executing program 2 (id=3826): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) write$ppp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100030000009500000000000000b7080000004100007b8afbff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf98000000000000560800000000000085000000bc000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m40.429573116s ago: executing program 2 (id=3829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r3, 0x50dc85624ea6cf59, 0xfffffffe, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004040}, 0x44000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c140280361402800c"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m39.334682616s ago: executing program 2 (id=3835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000051}, 0x4040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x5, 0x1, 0x9, 0x0, 0x1}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0xce24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r2, &(0x7f0000000040)='+-^.\x00', 0x80680, &(0x7f00000000c0)={@align=0xfffffffffffffff8, {0x0, 0x6, 0x3, 0x200}}, 0x800, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x4}, {[0x7, 0x6, 0x7, 0x40]}, 0x26d1c79c, 0x39, &(0x7f0000000280)=""/57}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @random="03497f306bc3"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2m38.962479959s ago: executing program 2 (id=3839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x48, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x3}, @mss={0x2, 0x4, 0xfe}, @sack={0x5, 0x12, [0x4800, 0x62, 0x5, 0x9]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) 2m33.591950981s ago: executing program 32 (id=3779): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b00000008000840000000000500050000000010050004"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x6, 0x17, &(0x7f0000001e80)=ANY=[@ANYBLOB="1800000000000000000000000800000218110000", @ANYRES64=r1, @ANYRES32], &(0x7f0000001f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000002280)={0x11c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x2000) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x67, @loopback, 0x4e22, 0x1, 'rr\x00', 0x0, 0x1, 0x50}, {@multicast2, 0x4e24, 0x0, 0x3d0, 0x7, 0x74a}}, 0x44) recvmmsg$unix(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002102, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}}, 0xa4) r5 = epoll_create1(0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '/\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008841}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000e00)={{r0}, r10, 0xa, @unused=[0x9, 0x7, 0x5, 0x7], @name="ce65a76adbd180feb3feb5ca2dcb42fabba7f71141702ccf8c6dd6d92feea2434b97a35da253055aec142bca7d49ee59d191e189dac2f886429202eff61d159c2296e98127210e9b8ffbc022be4b439faf92bb874f89fc9e2ebff65065b54bd2d8e707199dffc828da976d442439a2e5f12862fdd5d96c430ab0cf887ea6c697741f0e93ced4683dcaf465c20d89874c313b73484b12df4bc487f898097e90e2f1c8d9d2ef377e4f9f68dcf7f546d3d201a4c0768295f168ee039a29a28f1f2ff64066b6ce4713611e3188e6be57dcba143127be61de5c944ebd478ca8db2b78eae64810a4e9dfd39c6e7063e1b9cec574a24bd5810987f4c0d6d158b60f5224718fccd92050fa2374d42ef165f346a6ba4d2e6ed6217674eb45dd3220a4254ef3b9c8cf98999fdae00ca92340e335ec4909fcb0cad6f6a9f9993d9e4e0d58cc11cb83c497980df0bbce5b2bb0b523d28f055875893ffebd320a97a65fe62bad6018d1ec6176333ee8cb2041b2aff71133fc4725ec0f45e0ca7cb1568bd8c0f3c6596d3c996704a9335176f47d225295c289f880badab43a7d36ff1d8db0e80ac9d4325613928e84d75f91ccbf1c22f0b7d724bcd464865dfce47b56054f12b81e7953685fe95941438b2202baf040ae1caf111fc510952ecbc6a87809513b3d2f113fafdd39105d5ec20505a0649a43c371484020d2bfc3311f99c378bb413c886da1d4114726c4a3189ed11ff1eb51bd3694f3ea90c38d405fb26b51cd5167bc54865a8a957648cfa298a199f3819163dd82ed9dafd6a1adb715bb6858348ab44a40e39cfecd5dc2c28861a700a858b25ba4b004bffd4d89089f393a2cfcf137366f3447093eb1bbe8d4c571a1e0e655582a125d8e45bfabbfa5502f54f243a9d65aea78f16931f4f5462e9f7a319184a7e248fe92ee463b35416c1193bf752bab0a1fa2c87643363e58bd68d050989d845c82e00f30bd44ceb0f7810beffbd8bff0c2bc9c8c61f569299f90a73503e181772941cb2c63f11213a0a98088b4ce2b43e0f32e4d5f233188b502909d6c78a35a8ac2bc84d4e4575a0e8330468c0c9c4437789f215e2c0e168f094c8e42e048e4246a02b015c83d4240603e21e19123ec623bfdf1e2bfc94571c22d886698e312e738e629c406172e407dc56b6b77abee26d67d8372101d1af675361da82c001fc2ec23f38e33931a3f70fa2419e87e35c400fee27122b7fa052c80d2b73e66a54656be7e29f6991af46997f0d4a01d27c3abfd6826cc55e3e53465403b4da58624c06f9a62cb3293943cf746435c076c7ae00b82a9159760f12234654e7a8421945fa086a84ecee5b8a3947eb0b06e70bdf8144d1988650f62a6791c22f71fe4dcd1027c56dda6bfb478509bfb5d4ebd119146755fb5670790c3fc164a3ec6abfdbaa869cb96234e1565ea9b6740abfa6d1c50415c3476241a2ba621fe633059189bfefd1e43a7641cde1c04acbc34b0430dc444f4a0ea40fc31a0ed3e91a342b272d12cbda867414fc2fd6ab777d793f020494388860b1dcea417092eddbfeb0ef99641b492a9e093b2b772a516ced5310a13e896a6d26539305c4ce14f7c721f54c48c23d1d5224bd27ee78e0bc4c02fdbcc074dcb8e3ab4e7eb2953b1220bc573819e15dde2114b3d68eff5858d8822238dcc5c2553933b95e450f89f01b87039dd590cb2b5d19b1d1e269d85eab9699e9d51419122935759837bd308db81ce4b3ed3f9d82db53eb698bdc6f8510a5cce3a33714c24d55e2eaae21fa24097bca37f8cb095f6d41824837141f648e64ec631ec9f09efe0b7e6b58339eb9c2dda7d4c0d852ae46da6251aa1f9be54f215b4285ff2876c47f4c41320e52d345ef20f3a273606b38be97dba55bb69d48336e0bf3050ee311d43e06069e35bd26156aca51e28e0e11aa1feeba315cb21f764ae1af46dc2a938eadf40fa53eefaf23f33bb28b0d4e812c578523ddd053cdeae1d46a64cec1746e5795ae47f721eacf91605900d65facfb77a5357a0ff9f49e142f6f4ae33f8d986825a101cf5a5507546171bfff03f920436bafe3876d4c5b96e1b4f7bc3acbbfd1bf0d664032b310f271cc747daab16fdef4a571bf1309e2ccbb464a04ebb13e9a4f6d40a6b7f76cacb689dffa3e0b9115675ed3e270fba78c82628a248f6e8f64d89d2ecc517dd46ee4cd93a6defa7844b646633a75c5a26efcb6596ea3947141f423d9919a231c317317f3d984720bf455f0f7e34eb46ef39849add9e0d444fe59305938215d13ede498ac7733c47822e7cc7aa8e553f7da7ed01529f04fb46471fea074524399362ab38381527c51607e4edb6879f3e000478afc99b15e544666590cf8147ee517f4a034fb42e6608e2e4125b56060ecc425a8e161982c873cf83823460ebae427783aa8758148b8c3ef40026ebcad65a882eadc2d15579c360829b4db4e9f31a7dfb3f2150e6f88d7c027ee229c45b0cdb2e6a93d5155ffee8189d093dfcf611ae6aca42825f07505294eb5a98f4a2995898c5c252361c4ef6a76d8d40df7ff3562132db5719910615742757d77f807be4408d6b5c01460008c6376f0f282aa564c2c43ec4a078fdaddd0836ea23fffffe4ba2cb616da64f69277eb2becca8e96ec53530d3722669d257d5fbdc6864986fcbe894b654f42d38b1b5b247bc30bccab5722c370daa2061e919a85c383aeebbc29dc0a45c1b892a28ca1bebe6924d3a2caeb67d27ff62febc20faa3047dce10b09bf181d17247684cc76e2eb75cbb7160836ef83424c75f73984d55584f5d5d6cf16d3090ff6bcc3848ee21dd0a0a15b1df82abe41bf1169e60a18a9397116024472b3897cb72e86081f100d5bd71126b3cd08da4cdda5240b99da987de3907a319fd3a5ce689ab62b0e1ffe969e8b07498b502e53a5208f4dfe4610698ee0fa59df6881216adf6ecd82a82088ea898ab87681673fe364b5fe229a0ae55f659c96312fad7891cf481e773b561eecb689c4b45ab1b7ffdc45766a6c17844701097687d27bc6974f3a4449a13b9af52e4490555835dd83f929fe55d0fa1e21f87304b5c667e21ca639e82334b8dfc521f3b003608c51c61e83aa6ff0631d5cbd2d5094cc3c276e5f6034fa21075435c179b770e2ec854a0c330f656c46d3503a973b32372f47a6be74a7bde728febb20995a40794f6a7064fbaefd08d5fde0e82c57a7a9891298256a76de1e878e4175c6473fc599ea0ad56fbbcd8f70fa200cca082565356189d5dd474198858ca56bdb22b7112c5e8247eac899babd643f2175e366a0b7ca99ad4a44294ce552016ea4ec6eedc80a093af75ce02efdd1569d7033e5d7d7672e74ee9691f2596c00460230be6720228dcb0e0db806758fb46632d5e9d7cc86975a432e4a685416c9a924273bf96b8c27fe81afc1b1a9435939372b46257ca5ee006ca0ff5863a4647e24c6e10fcde7ccea76bd46d564a8dfa9dc20762a3ae15868867ec64ccae1b44910705ddbfea2b483ccbff2c0b750db32700302d6322f58c5278e23e13f42affb81ba0ea301d14db5500f2d717ac7da775a7564963b080d22e1ad5dab61fad193a307bf7a297f4273e77a211e66547f5c7f755f5cdcce509fa1e69ea9054cb1461500e7b8a771d7810f622c971d8b627c2ae1f5b011131b55cc69aab79b6e059a3f6e1e24f266ebf383445cc276566813a327afe85a7f389f33167cfd7ad4f27d513d3cc024b50c427078613a703d0c8a879214642588bd43e61c2db69d141acbafce36183b61a7269831645ac1e2f7b402f38fbd2ad66b86bc1457e24a83cce3e1adacbd55500a940e8f3afa4db30a010465e69e886fb71508fde8ace4515f596e808b37d23abd9ddee0daddd101f2bdcf9852c99285f1eed816613e6bac7f2fc2d56b48a3c62882c38d6f2dff514b22f0478066952e8787ad7333d6513fe9de275dd5e0e8011690cd41adc0c8beb7fee447d3fb9187cea2b8e1ab28729c25e913e0684bd216ca939f1752d58c55774871473816f04e304c28bd594595d8abfbd67b5b452a818816f4b96280a57c5631e1d71797378a9c566a6162e440c7cc2e5ae2ed39d26554984b0095edf79ad1cc7586926221ae8ae989b210e6b715a8d7bd3ea340c2b7d0980c8fc6db1adc3580af166eede2c51ef17ab17e49bcd341ac9071e157b7340152e39c4345c391213d17d785842483d4f92aa08194664e090c41c2cd16b1062ab522c0f46e3ca8b7923f586847be798500cc29593ee49abb16e4fb91ce55ba74839e99d80a71c4e5a64b18fad7fe81d69523b2e5c2c263df6fe9e1475e4e6218fe34f458a88f20e9c5fe9d7810d230699d0f839e68b27d07c87f4213c29e461b9b62bba252894dce95ec16b69a7b3aebf221c2f882282c5109028ffa49f84e03805b563ec41d605006614b01964d27b479b45264d48b87100939915131167a0e73c08b7fc948c0244ba3ba3fba0832f4f68ee9a9ab3aa8e0e6cd6d3f39e4093f8a4bb6593e621991c3c9a2feb453de0dacf1b7376249206664fecd4b5154dec8a245d773f4a024e6f4c4306a4bc6ffc344795089be1ac60e727a5497aa3930c655718bdb01c162d8809e5626f2af7e5a10d140779172476467506570a3b955901d3220841b21ec4ebe1a74a8cca4b14120a7e67c129e4ea8c753e7d65027f925e5245ead2385cc64d3c5d08fcfce058721fc2d913cf9de8a585679c54a4b9fde488dea616f7aa53ac750d20ba6489034e3a1c3ea1e0ef86d916b476f6a50a3bdaf8f80e0e7e3634f514082e68f787fc5a1039f3c8004073e7754472bf99753b871bb62132d833375f4411d9ce2c8e52cc7557bb3e2556ea9382c0bf601c0c2d6840dd1cf25f0a1e1623e05742f881455584794fbef171e15784f24f81945ebe502666447eceeaf52584c066482ebe1252303a8bbc4cc7c5331d7a17a4ca11b880e451f4e7158fc8284091cc6c958b41a4017827292276a4a85bf3196e9aa700666a0982b926db7c8038dcf536378d8571aceb07a30ee7388ef3ffbcc6ff0b61424cceb2c4fb3bf7bc0aed96bfad40cf24085b5e313718ec8b69692e740d5f8baa9e2e08bcdd5b170b9a0cec183c3c0909a61d72945fa25cc1fc2e2906160cd23c37d89de5bd2f4aea8ba662f5dfc2748e1526543a35bb2d3293297e134f1816dfa955c47bba0edcd3d14dc67fe2a00f0c7f559cac5aa9afbf53664d03b38d4708f7307de3d3023f4955ed296714cacc4f846f663f74241baf3e2285f6c6d8b94a0be7669195f671486b340cb3540fa55a954cb38d363fea89bf99d477afcfa54f5ae8361f484e0b7f6fc175b727f961216f7feba792a39d35fe13846aac2884e65f660c0e4bbb93e0438bdf5fac7b81d082de80a64b2d41cb6d0c920a832318a9ce242b52a55d5685d2f9a47835fb3fa8d8556a94705c231f6154683952b9a5263dc60b7b4865a0f670ccd9586bf20198bea5a820e154a18d12f21627ad953edd2cae5e24b3248e3d6846baf4512a1fdcba9f99c6c9a7bcc029080b64757121c6d300f98c97fb096a8f9c257af3a78a35a183699319a2b3623b6ea26b39e08497ea256b9357ad5625cd7420b28cb6db822436d15dd35adc56fecbe4cf724fa5c547927ee575a91930b76c8b7c7dc233c984feaf66d109dee78cddf3a6298f96c110b77f8cc06e9e2e9a986700"}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0x90000005}) connect$unix(r0, &(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2m23.79246774s ago: executing program 33 (id=3839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x48, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x3}, @mss={0x2, 0x4, 0xfe}, @sack={0x5, 0x12, [0x4800, 0x62, 0x5, 0x9]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) 2m3.808210421s ago: executing program 6 (id=4037): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@loopback, @mcast2, [0xffffff00, 0xff, 0xff], [0xffffff00, 0xffff00, 0xffffffff], 'syzkaller1\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xd, 0x19cd33d636c04710, 0x5f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xff000000, 0xffffff00, 0x7fffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'pimreg1\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x3c, 0x9, 0x5, 0x2}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x11, 0xa, 0x81, 0x3, @private2={0xfc, 0x2, '\x00', 0x11}, @private0, @remote, [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0xffff00, 0xff000000], [0xff, 0xffffffff, 0xffffff00, 0xff], 0x2351, 0xce2}}]}, @unspec=@CT2={0x0, 'CT\x00', 0x2, {0x4, 0xe9, 0x101, 0x52ee, 'syz0\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffcc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3bb, 0xe4, 0x0, 0x0, 0x2a4, 0x2a4, 0x2a4, 0x4, 0x0, {[{{@uncond, 0xbc, 0xc6}, @unspec=@MARK={0x0, 'MARK\x00', 0x2, {0xe0, 0x9a}}}, {{@arp={@multicast2, @private=0xa010100, 0xffffff00, 0xffffffff, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0x0, 0xff]}}, 0x2, 0x4, 0xff, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x8001}}}], {{'\x00', 0xbc, 0xfffffffffffffe06}, {0x24}}}}, 0xffbb) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xa516, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffd, 0x2}, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f0000000040)={0x32, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x7}]}, 0x18) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) close(r5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="05039685e7e3"}) write$tun(r3, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d08"}}}}, 0x3f) 2m2.721170922s ago: executing program 6 (id=4044): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'pimreg1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1800000001c9010400000000000000000a0020030400028026fd487bd365a383f53c9c66432fdd2d9c31c521f6ff7ceaed9f180d24359a1ec4d5b949b99a2e554f1817781b518e559f71b23f2e27383644cae39d8c0cc4735db9e912635fbd179667c14f4f961ccf685e7fcc46f143224b57afe58ac583439a3b3d4c5192351d7e8d73fd1d5affb774e485dc9d0617c7c81391f257411cfcb464d3af5f7b2ad93f34a6d353c88ae4e0b5f2ea7e1832f7f954bbe7fd681ddaf1ad050c8572a44a0a0aeed9b6a6a1ef5bf5dc32f63a7a6596b3218b585e098ea85fb8829aeab5dfb02d68218ace0000"], 0x18}, 0x1, 0x0, 0x0, 0x200088d0}, 0x44) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xe95}], 0x1, 0x8000, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000340)={r2, &(0x7f0000000100)='\x00', 0x301c0, &(0x7f0000000180)={@align, {0x4, 0x0, 0x6, 0x4}}, 0x80000001, &(0x7f0000000200), &(0x7f0000000280)=0x80000001}) sendmsg$nl_generic(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x68050}, 0x40440c4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r7, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r10, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) 2m2.124779252s ago: executing program 6 (id=4049): sendmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="0ad4fadc0d59d64615b7cfdcf8ded820a923d137fe9863dd8a05342a81f860aae5a71f1e9fdc040a1d94b70ccadc34f2002a17ebc63110e7c4c30b7827de858ed4e7b6327dc6da04e7f507a3d9d60e24a327e8ead160fdd04b", 0x59}], 0x1}}], 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a010400000000000000000a0004040900010073797a31000000002c00048028000180080001006e6174001c00028008000240e100000a080003400000000208000140000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'ip6gretap0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x39b3) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0xe, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x70}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 2m1.363499197s ago: executing program 6 (id=4056): r0 = socket$kcm(0x29, 0x7, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r1, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000080)={0x1, 0x93, "660d5123b4878752472796f37fabbc87c9eba7ac2aeae0ae9f54878afd1d1bcf7954ee41592685bc625ec0d756859d0af8d60ce7b7d778c61746c8256b484cd6afbcffe2fdd95871c7562d1a29f23fb3688ab027f2c367e609a254c422d0264b097d51df5a541d843359fbe4b011d8accc2f0b0e743714ad160821cafc722887b881c9366437e527b73d5fad4b6af526ea6008"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x4040}}], 0x2, 0x4040080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m1.171703365s ago: executing program 6 (id=4058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair(0x17, 0x2, 0x1, &(0x7f0000000000)) socket(0x36, 0x80000, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x802, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x3, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x7, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$MRT(r2, 0x0, 0xce, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff000000080001001500080005002500000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x0) 2m0.499880104s ago: executing program 6 (id=4062): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r5, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4000830a, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000080)=0x6, 0x4) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000600)={r3, &(0x7f00000004c0)='\x00', 0x2, &(0x7f0000000500)={@_ha_fsid={[0x3, 0xef]}, {0x9, 0x7, 0x800, 0x7}}, 0x4, &(0x7f0000000540)={@_ha_fsid}, &(0x7f00000005c0)=0x9}) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r8, 0x20}, {r8, 0x6478}, {r8, 0x1}], 0x3, 0x0, 0x0, 0x0) shutdown(r8, 0x0) sendto$inet6(r7, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, 0x0, 0x0, 0x10, 0xa6c}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r11, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, 0x8) 1m45.271472169s ago: executing program 34 (id=4062): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r5, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4000830a, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000080)=0x6, 0x4) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000600)={r3, &(0x7f00000004c0)='\x00', 0x2, &(0x7f0000000500)={@_ha_fsid={[0x3, 0xef]}, {0x9, 0x7, 0x800, 0x7}}, 0x4, &(0x7f0000000540)={@_ha_fsid}, &(0x7f00000005c0)=0x9}) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r8, 0x20}, {r8, 0x6478}, {r8, 0x1}], 0x3, 0x0, 0x0, 0x0) shutdown(r8, 0x0) sendto$inet6(r7, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, 0x0, 0x0, 0x10, 0xa6c}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r11, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, 0x8) 9.446663358s ago: executing program 5 (id=4670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (fail_nth: 30) 9.199502597s ago: executing program 7 (id=4672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x10, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)="7b4974ab7e52412bf48bbacd7a92e29e47a4295546ffd962a2e1bd696e72c18eedabce90df5932c3d1ac747e") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x0, 0x268, 0x33a, 0x268, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x2000000000, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0xd}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000000380)}], 0x7, &(0x7f0000000440)=""/118, 0x76}, 0x5}, {{&(0x7f0000000a00)=@caif=@util, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000a80)=""/75, 0x4b}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x2, &(0x7f0000001b40)=""/22, 0x16}, 0x6}], 0x2, 0x40, &(0x7f0000001c00)={0x77359400}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c40)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0xc6dcdff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001f00)={'ip6_vti0\x00', &(0x7f0000001e80)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x9, 0x1, 0x69, @dev={0xfe, 0x80, '\x00', 0x37}, @remote, 0x7, 0x7800, 0xf, 0x6}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001f40)={r0, 0x9, 0x0, 0xdb62}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002180)={0xffffffffffffffff, 0x20, &(0x7f0000002140)={&(0x7f0000001fc0)=""/184, 0xb8, 0x0, &(0x7f0000002080)=""/145, 0x91}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002500)={'ip6tnl0\x00', &(0x7f0000002480)={'ip6_vti0\x00', r2, 0x29, 0x5, 0x7, 0xdca2, 0x68, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0x5, 0x3}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0xf, 0x200cc, 0x6, 0x0, 0xffffffffffffffff, 0x6a}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r7, 0xf500000000000000}, 0x38) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002200)=@generic={&(0x7f00000021c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002240), &(0x7f0000002280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0xe, 0x10, &(0x7f0000001cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbd08}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0xc, 0x4, 0x3, 0xffffffffffffffec, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001d40)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000001d80)=""/242, 0x41000, 0x9a, '\x00', r2, @sk_skb=0x4, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001f80)={0x2, 0xf, 0x5, 0x10}, 0x10, r4, r5, 0x8, &(0x7f0000002300)=[r6, r7, r8, r9], &(0x7f0000002340)=[{0x1, 0x2, 0xd, 0x5}, {0x3, 0x5, 0xc, 0x6}, {0x4, 0x2, 0x5, 0x8}, {0x5, 0x5, 0x0, 0x9}, {0x2, 0x1, 0x9, 0xa}, {0x2, 0x4, 0x0, 0xd}, {0x3, 0x3, 0x10, 0x5}, {0x1, 0x4, 0xf, 0xa}], 0x10, 0x6}, 0x94) socket$igmp6(0xa, 0x3, 0x2) 8.923730632s ago: executing program 5 (id=4673): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0xf, 0x2000, 0x10, @local, @private0, 0x0, 0x40, 0x6, 0x2}}) recvfrom$packet(r3, &(0x7f0000000500)=""/208, 0xd0, 0x22, &(0x7f00000006c0)={0x11, 0x15, r5, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 8.409251085s ago: executing program 3 (id=4674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000280)=""/65, 0x41}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008"], 0x1c}}, 0x4000) 8.143192958s ago: executing program 7 (id=4675): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x8397de475a1b5b02) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000000c0), 0x0, 0x0, 0x3b}}], 0x1, 0x20000040) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff7}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(r6, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002102, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x90000005}) connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="180100002f00010000000040fcdbdf250501f2801400020000000000000000000000ffff7f00000114000400ff02000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1088cb6567a472fa66cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f07a3b0b1245789c3c200ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b00400e900000000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) listen(r1, 0xfff) accept(r1, 0xfffffffffffffffd, &(0x7f0000000680)=0x3c) 7.877580913s ago: executing program 5 (id=4676): socket$key(0xf, 0x3, 0x2) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) close(r1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000034d2645fee50119d8cea6d2d4ab4780befddd77de4caf295047226c0a88553582f95", @ANYRES16=r8, @ANYBLOB="010000000000000000001200000018000180140002006e657464657673696d30000000000000080009000000000008000600000000000800070001000000"], 0x3c}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0x1, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x802}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x400c000) (async) r14 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc(0x0, r14) 7.617254042s ago: executing program 0 (id=4677): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0x80000002}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000702000000000200000000", @ANYRESDEC=r1, @ANYBLOB="0382000000000000140012800c0001006d616376746170006400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x200048c0}, 0x8854) pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000580)={0x0, 0x1, 0x4, r1, 0x1}, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1a4, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf955}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa738}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9c72716b6fb1c005115f227b64cbc197af7a337cce3f8e4d847c50389b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3bc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) pselect6(0x40, &(0x7f0000000000)={0x8, 0x10, 0x0, 0x8e, 0x1ca9, 0x7f7, 0xffffffffffffffff, 0x5}, &(0x7f0000000040)={0xbb1, 0xcc1, 0x9, 0x9, 0x1, 0x10000, 0x93, 0x6}, &(0x7f00000000c0)={0x6, 0x0, 0x40, 0x0, 0x9, 0x0, 0x7d0e, 0x3452}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) 7.509193083s ago: executing program 3 (id=4678): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000805000900000001", @ANYRES32=0x0, @ANYBLOB="15010000000001002400128009000100626f6e64000000001400028008000300e90c00000800090003000000"], 0x44}}, 0x28000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCGNPMODE(r1, 0x4004743c, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) 6.77302708s ago: executing program 1 (id=4681): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @nested={0x8, 0x2b, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x28}], 0x1}, 0x24000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a00010000000000000000000a0080", @ANYRESOCT], 0x38}}, 0x0) 4.040872548s ago: executing program 0 (id=4682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0xe, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000500)=""/210, 0xd2}], 0x7, &(0x7f0000000680)=""/4096, 0x1000}, 0x200021c0) bind$unix(0xffffffffffffffff, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001740)) getsockname$packet(r1, &(0x7f0000001780)={0x11, 0x0, 0x0}, &(0x7f00000017c0)=0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000001800), {[{{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x0, 0x2, 0x1, 0x3], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8af9, 0x2, 0x4, 'snmp_trap\x00', {0x3}}}}, {{@ip={@loopback, @remote, 0x0, 0xff, 'pimreg1\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x0, 0x7, 0x10}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@addrtype={{0x30}, {0x21, 0x200, 0x1}}, @common=@ah={{0x30}, {[0x80000000, 0xfffffaa7], 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "55293e79a73e8744bb30a436e72de15dcc0ea7f1941849eebdd1372efbfc"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x4, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@exit]}, &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x44, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001c00)={0x3, 0x4, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001c40)=[{0x2, 0x1, 0x8, 0x7}, {0x2, 0x3, 0xf}, {0x5, 0x1, 0x4, 0xc}, {0x1, 0x2, 0xf, 0x8}, {0x1, 0x1, 0xb, 0x8}, {0x4, 0x1, 0x9, 0x6}, {0x4, 0x1, 0x1, 0x4}, {0x5, 0x1, 0x0, 0x9}], 0x10, 0x8}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e40)={0x0}, &(0x7f0000001e80)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001ec0)={r4, r2, 0x25, 0x5, @val=@uprobe_multi={&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)=[0x6, 0xfff, 0x1, 0x5], &(0x7f0000001e00), 0xfdc, 0x4, 0x1, r5}}, 0x40) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000001f00)=0x1ef, 0x4) r7 = socket(0x2a, 0xa, 0xa0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x28, r8, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000020c0)=@ccm_128={{0x304}, "c716c7203f688e58", "3c470b23912575604a4d97fdabd6edb4", "55fd5681", "d5fb739af6ce783c"}, 0x28) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000002640)={{0x6, 0x9, 0x0, 0xb1e, 0xfffffff8}, &(0x7f0000002100)=[{}, {}, {}, {}, {}, {}, {}]}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, r8, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x56c, 0x39}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000027c0)=[{{0x1, 0x1, 0x0, 0x1}, {0x2}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x38) bind$xdp(r7, &(0x7f0000002800)={0x2c, 0xa, r2, 0xf, r7}, 0x10) connect$inet(r7, &(0x7f0000002840)={0x2, 0x4e20, @multicast1}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000002880)={'lo\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000002900), r7) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x38, r11, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0x98, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xcdb5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8800}, 0x30000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000002b80)=@l2tp6={0xa, 0x0, 0xb, @local, 0x2, 0x1}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002c00)="b3065dedbf2b48ed7c0722df018012999ca7a9ccf04b20e96d78797913059019", 0x20}, {&(0x7f0000002c40)="54e62bb012c15d730c0ed8c0a8048373582bbf1def3ea8d4323be9456d4e3e1b26685026702f2ae99d1c2675869cb46798ea56c9f9e5693ae9d473c21e1af51452976ce1681b206fabbb472683df5d6edb5c7515e420a8d8308dff4862e035df4f7f760cffd8c03c84ebbeea90e867d170c44f5ebd730b909bdb17495eb0121ae65fea71287bb41a65f9b578e109822d8ea3aacca957ee340b20aebd4785150ba86051cfc77f88b5d3f112681c90dd18c64c1da5a69bfb8295de6162d61f38be6a9a0867d355774ae44b7ff71d5e5024a4d8cda728c6437d8006d2f50df289aaf9b3526fdaf8abead2d857", 0xeb}, {&(0x7f0000002d40)="8d4632c9a6a90b84ca36adc324bc5e92c2241a97499030c00a3ae575b6df245d291e19e12e1533b38069be25dc62ae1b8c6aa5883c3e3c51371cce72be2ee506ae836d25c8971ed587487e7267fa7a77dcaa1f24535ab37d6df28a6044dcffd29c97316c4bca43055f7102d5efb668e9196e04fc03737e422456ea5f8127db3e3e", 0x81}, {&(0x7f0000002e00)="b3b9083d763cd697b9c68394fc8c13b8d0d203ce06740b6ed88eb48db390", 0x1e}, {&(0x7f0000002e40)="f5932c020ef0003fbb443217ceee410f0d7775b40410172fef8509c7b924d623205e179d3a10917ac94ffa81b50a336bbdbff3c89e53a2868e287224a8d2d4533ad2d03e3bf2d03b744ad9f0389bb95bfc82518709540e9208851007255b8d11804adcb7433f0a82d9f94628fa5a801f845b", 0x72}], 0x5, &(0x7f0000002f40)=[{0x20, 0x11, 0xdb, "b32d785890992c4bfea79eef1c"}, {0x90, 0x6, 0x4, "eff013158b464bf283d99d505edc0b36dfe1eb639b42986db61325f86649fe8400972121a99a6a453cc82cf7e60690f15dd814bef17e5c1c5d8ca0786c80da9597baec5c7299c41af3b227165692d3a5ef75195965e2a74424e933271458fc0c3f6238fb95776a81c9b86d09f0487e31f7a8a9a205272befda11b39baec9"}, {0x40, 0x110, 0x80, "1f4ee492105f92cfbae816399ae222f91e532225ce7b0bb1b7ccf17a5a922831cb8463796bebe53f3b8c0b07bc45"}, {0x18, 0x6, 0xb1, "ccda"}, {0x60, 0x125, 0x2, "211facc04bc2551f1019e9dc70622a775ca40f9049aa4ecb43c7ea80e6d12e6d134dc0568be279be0e3e99bacd7c848823373438c7606f329665e942783bde5ca52a6ebbe3935a463b40e4fa75"}, {0x1010, 0x1, 0x2f350d4f, "7250110c0a37915d3c44b3465601fad6035745e943e5c851018af5239dc78aab3e62f9707ba586c0f787b63fe21ab9cac53447255f93518c5b30ca4541d37273f633e070259e83b9ed8facb510a5ef2fd6d5355275384413373bd00d343f34ec54eb5f705b2abade94ff9fae44dfaa4b2d95f7383f8fd252fa9f73f2cc4c1979b2d8a8b895daa374638e4f949cf6bfea54fd7b087596aa59f252e354544186a9cdbbf09d0ea21cae1bc299eb8c6922b235e5bae7f5a1c3a63ae9bde6fdf1e56d24ae40a166692de084db239a8767fd23e603385838c121e0c8dc9cea9e1a9c501905a933c7c72dba0d320d88698d16846d9d43c61fa7029e10d7443ad928b0ddf2aea3752bf77688086ebd5af24eb091b75e40a354f8980f4c2d58c9d29c4ded59dcf4954820f0ff30e37659bfdf5ff8615187f1d6c4a30bc08fa8d7e87d84fe078d613e0c652342ea34448836bf2f8ed182d458dda6791950a87b0827aa6a092389fd4ba9080ce902ac552a7316e679103d1e8684b426c61ef7379b43bb4a2b14e5030028870e0349a34915f8f4770854c48c44665e12ca37ff30f187c75916dd821cc9ec07a60aebc10dcb6b8ddb69cbc7da44c0337098bacd7a65dd07c3b4db67b03e4a6f0daf8b7a244af104ae2be9da352b459b1176fd02a82b1962ae83293b73beeb61c4eeba5677b89a24c7fa2919d83bbffb19a05977096b77b0053d4b8df491e83e53c2e9d22d634bf3118c4d55d81ad1cf0706d1b3bc899dba383178888dadb7a1b8ef9b2ea617d8113507bad6617cb97f5429c69153a9ef24c9a2719c2fe39700335fee54e9ef1328617f740460c81c68229359a63677600a6ca2dee28fde906e03b65e04eed20a22806d606872413071590e74f8d0f2f1fdc124dc0aad9a2c0b741e4ed5361ab5fd860f605c0a639479146a3413e88ae86a676e3c3435b2e3ea180059e3b4419776f730ec12d59202311bdd45bccf410ba07930552b37356e7a120597597bbe458752f04ad29ff0ce1dc1074ffe6cf1960b7e61049293ca05e81074044c974421d84d0281a443e85496bbb7409eaacbf921ce95b51ab7e6dedbaa3563f26395d599623b220574e932abe58eaba7b92a553060363b8ef63f84ffb08be2f44d43f19bdd1f35b0e1c56fd98281cb3719453175614f0d640a2844e63a615bd319bd3606a93640b4624f8b9a9f4336328ec317c306532d17798cc092f02b02170028c6109b24001f86e3d7287e4fe3b7cec16f5710da4955feba61217189f1eb5190d251f6227663fc845fd01735adf7ac1f973afb8d9cc19b17c9b8bcff9e789c1f4918f939f1108d12585c0468a8d4ecdceb01801ab9e95e7e9a0e1b1e8a9ae74257f1198a6d74b2bce9954131fccff4be7a8fb367d64dd3c878dd200aab981465e50e14d22590d6fa2918b34774343e1e0c7aef2b859e6e30f0fba0a6784d691658d58b9a5c905e781a4e746402de57419c994e3ea2d344bf583f5b7008d0f1aa2f035b4a1170ba3bda9675ad8e8a1f66a69f1f075aa86ecd2734c73cd742efb36af86f8b69e5a0c9245e8693d9643f916d3b43f4c334454a8dde5d89166396d9b6294f54a806324b5bc799c2debea09ee3fe4213ac8dcd3d859017197e8acea6d2a55fcbb1aad2b739b54a371b459441b59bf367bea5479384922f058997e6c048f9ba7091fd8ab780eb4c15a5d5f0fc29b6bad81b80ee1d815b12636d96a6f7fe6c6ee0822b2a8ff0f41d90165b8cd9401916f5941a0edec75eb48f0633e9aabc009f13c3e1b168418c48541e9322fccf4d7c50075b42bae441180c2b2875d59503abdb3e5a3071610bd9e563488e75b6d205e0c594c6cdf32d540bbd7d9c9dc9ef89981141c313dc1a47aa6f75c287b6ae655fdca43bc024eb0b7afa25cf403ff4a2a0ac9e91c363e2eb07da820ee9d5388d25a521cc7fa5ce93ea853dfa152bd07765f9381e78f6726d0930cf8eeb0a17608be39f45b74a0c537bb62c02923ac01e77c38d523d160711e35098cfff1b33f46d30bbd3169d7417a60b3402cb475fd2341b21f4d22e24d66638175afd834e4de7880b894a4971174e2ca6feb60dc4dabbf7a163c64500abf61a3b57164f0f47b83680e58bb0617e0f7b68ec5f2a363b8c59919e6dafde936286b25280e4b78e3bd45ef87a20fe8be6cdbab36c15c9866d60946d9b16e9aac0e1180461d6151e64c49cd8cb807d2964804b8ae666d05d73547850b063345e50dbb23c172c7c5660e6e40a3cf0fd24f24383dba795ca808bf0b39e65d8d7327faf3843dbbb2e1f273e1bcf82bf03896455449866bf60d2e9b5049ae6cd193395c8dd7f97ae790e19393ef777b751e376d9227abeef656171fb9dda204dbfb9e105d693a93159c87820325a7971de44e925404b3af78bbe5e52d184f7752407f10b4bc670078a539669616c82b18badeccacff11027d3a3f6eeba56e512e233f50dcd45e1b54fd88749c4dfe9565d192a80e9e12abbafdaf86308381f40fb98995410a9a1fb1e9efa31a1252300dee41cf96d729a7a9e2820395f1678666d1431bbbeb6dd23d0a1a2ee4fb1eef6294c1857880f03ce45f6a090ee2cc8bf9d0d40c00d24cbff7cc6f28e6357180e17c46484c45cf818cb901941984d4cc8385243866680abf5121a88e6336d83a7f0e45ea7250dd9df660a5d816f8c318d98e9ecace3ba4f39c440987e7bd28d142125f013657a488638121f5bfd51d491fefc53ec9caa306c55c53e15375dff0b583ab306d417d29dd3fa7417b2f5be5c5de51f6c332a217285b064801f5029c6080e8c2e0660f1407ef04dce87d963f51f94debb58bafb28875e86953372a0f1655dea220f5f7fa1d3c79c159c01f6f068406ac250e8fd5db01c0bb3371fd59358a2a4ce56dbf000cd53ba1c26745347d6451d34546bf6e9c786b02bc2aa5fe97dbb41d7b974c3a2fe8b98445215f7eea21f6753ae9e5e1215fe2c21757add293dac88a8ac6c4f013a081f832cd006f6a1794b17d64541b0a607657839126e4a541f20fd39d296747c807a1c53ce836d51b0c576ac86e4effdcbcefa593b0caeb7fd693837c9202096389510ce2b35c1727200a3507ca7c5dc98f904653942d1b6f03fd7c74440faede0b5f1b49c35d63ed8e9eb4ab0d301bcfa388fe634b4c1e5c13a64059ae981456e65681a061e43f99ed669ae9d0e6b4f97298bc6ff91b5d9966e003616aa6189f85a237054bf60aa4763c1b5b891d86a4ce8ce6f1673d4345166ab0e8ae0881c0e6fdc382e94fa9a49aeef94c6e37b5464bc1b89a926def5c20fec266592ca8cbd746a81a7bc421d73c80e1c9a29137a85d45d233b6b5408cd9f5035d9590ded0e61345995bbd8c2d70099524e676e9f353ac1a850d1e5dbbd73b88a71bfdfd8c641c48eb279db5e85dadeb416f666151e6ec9ce42c5adb96a084d86b05529e59d5bbd2622fba9bbf7bd765c02c89de688c6f868e6394c86d6f6c4ff48947255f6d99152b1027b24f976a5587239521475c7e85f384426bb9d800ef9248f390c1a7ca81c17c14dabd26e1e1e54d3aec2deede03aa71a4068eab13be3f624467d6ff327dd9b9090b12d820aab66830026c80e92816f5f189a5e4e38d8885564d2de639ac42e72d0ba54be9ad62ffd6538818f8e2c61f49c082778b44f8607616ba23344f5ec9e4573d37e67a7218d19281352a8dd229822a00795d76e9b3cfddb169a705f192bd495738fef3933370929f8c298542f29137b66a55774424f35c159526136fc98a72af8f2c723805b866688f2036eed9cf7969f5c945278b8f4f1ae62c0dfc63167cc21bdb7ebe5c36b2711bfd138044c395644a069e2ab0403a6060bf3c96edddbc6d1edcd0a40f93b7aba6e13a4c0fc569a44f7b078eee6b5d38f921bb7e3a596d780142c95dd138c05db14d6e328c6794a140aa5e83f7469e657efbb0c70698cb2698d02b88abc00de777458611f6d4781f1044a4eeb6170e0dcbac32eb6459ef0834a98e8ac8a125f0b6e4ace78f05792f5b8c334bfb143d49eeaaa954aa5ee3adf9126515df157f9952efa4386a278dbe1d4b57e528217118336c2fc9c82436903c94b90ff73a649c3e40a86d2ed6026fb1f9e7a19bb531899d4fac7e829c35d29563a1d57bea3997d75db0a5cda8d6a39e4182cb54be743daf374aa2a30ba6a5eae782f7c8b337ac60c86fb4b1b3a356c71f39045f2b07989461966f3dd0e1056ddf2b84a19a439e0c7b4439a54b999398a783ec920d101bb7ffcc61d9b5adc7522acc76e54fcd44159605d7c905f00dfce9addea07f82a60993bf8dfd28170078a66a8b1dc5bf2ac5057a246bdf063a92e8c4b4cfd11f6b808c609639a9140f8965cbc883e76e5a8c519fb73dd003b709143bc78e6962cdcb48a6290c69b290113d718086e7321c17f2552af8a0dd8ec1a741d76a46fc6ecbd0b95d41653a55eeb7f1c0252a9df2015b7315cb51ca1b73ca2d3e5644685ad5da839f9a3a8b4e495f5cd777ff4d5a727015cbc8532ebd5dda5c025b92945cdc26ac8a9a24d60e8a18c3abace74fa9683d096434dd0c200361c146b7a674915376b9f271fb0adc45baa26c74e1ca93b229b488f065875b5ad5235077fdbfe8b41fdb0db427eb18b00adf99a4f865af4bfedea631431fa380975247f6346ab360138278fe45c80be96ba7fa0552f0ae931d13f451828c611716d12acb58361fda019c6802183c1517738cd448778cc65cbac8606ba34d538a80e4aa33e110577c37cfca009b4814f9d2621cf04eb7241b298b3280910af34a6fb168d7155cb107d8b95bb3c3d7765eed2ffd97682e63b441e2a021b9744aaa83a6b7d72328599e3446e77faa6a0eb50244e5ef8c351f4f72c212950369d6da7cab47fba5392bf51bc4c01aac0117cfb2f03b17cb2bf74c705f16a217e2f359d20debcd1e0f731587f6d1987b6d48b4cc71c8712c32a2e20be3d8d8745abcc62d6c4e21b66b57e35ea8372536481ccefcbaaf3ab195973664c5a8b68acb896a42d63448192614e686a181a1d7f90a9b139f2b0b3de0cb7bcfd8342c919c8f2b126ff7251ceb8510298c41d53287fa3032ab72c50ee6329b1e3b41a39babd4bc9b501ed1689344b6291c9216196a9f8e46f7d9fa012535fd821f88c0009934fe97a1128c82f4c0b7cab7785aa7a183a9b4fadf3e863021b6720d152ab9fe7a5f2391ffdeb6d3aee014e81c4945c8fdb0665c2a9f458db4ab2deb74b783517322f0d9d34f424a0057e5abce8c47a37b045bfd223f2db1511e4a36cd70f82ad2cf119a5a720429e7c7f5dda07bdc7dc1bb4ba223066b0010de98adc2236286e102d1fad80cd987187d759b7e1353c2941c1304d43d7f00edd8091a608a43f395f71b0f0631df1e61bde2ff5fcd9c9955a22dee732b87c28e41effad65ebdf80c7c6c5a56c17fcf343235c24a3f277de249dd8ed4d8efa0adbec4b28cb75c9de2df5383137074f79a52762bff799eb45bef9c2505074717ef3394cf4de535bceb36d09efe1e54b49559700b0dde980c72909691b6658d2187ddcbcf08fae708b8aa8adfb62764a61a2352ea1f2d66df15eddc07ea776b8d3069b87543bf96a9438e9510800bbfacf9ec7af7fc000fa85b55951dda11f6665529d3282c5f874aedeac5b4c4378bdec939d795fa81586e89bfff1f31c29067de29ba95ff59f027184551f379463ec4ae4515802d7c9d614be357b7ea5441f8c69b3f9830717d2aad10b76b0089769af609acc9251c9b6bb358f74616c15dc65ae20"}], 0x1178}, 0x800) 4.03722098s ago: executing program 7 (id=4683): r0 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) listen(r2, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x928d3576aea92be4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) close(0x3) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) listen(r2, 0x8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) (async) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000340)) (async) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x928d3576aea92be4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r7, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) (async) close(0x3) (async) 3.896984579s ago: executing program 5 (id=4684): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+10000}, 0x10) (async) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) socketpair(0x28, 0xa, 0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) (async) shutdown(r0, 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000011c0)={&(0x7f00000001c0)=""/4096, 0x1230000, 0x1000, 0x6, 0x1}, 0x20) r6 = socket$inet(0x2, 0x2, 0x8) bind$inet(r5, &(0x7f0000001200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) (async) r7 = socket(0x27, 0x6, 0x101) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001240)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x0, 0xfffff254, {{0x20, 0x4, 0x3, 0x3c, 0x80, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @loopback, {[@cipso={0x86, 0x6c, 0x2, [{0x0, 0x6, "f1e20caf"}, {0xf244b9abad7a5456, 0x10, "461e28ecdbc028285e13003e5665"}, {0x7, 0xc, "256a238d495fc4dff0cd"}, {0x0, 0x12, "0544e348c1530c50df7479d299aa57f5"}, {0x2, 0x11, "1813138406aa067e3ef3ffb771f8cb"}, {0x0, 0x11, "1cd414b4df361c87e81bb4b19ac909"}, {0x5, 0x10, "7077abdf0ca7690b62686db686ff"}]}]}}}}}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0xe, r8, 0xc}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000001380)=0x9) syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r5) (async, rerun: 32) sendto(r5, &(0x7f0000001400)="dcb6314c1b1c00c2340444e806c9ac60ce1262fe10368a4a4304113088a1740f99981f609c3cfd1ade2f60c63416e51199bda42d1994d4256036a10181515dddb95730b8e2aa7ee0ab0b92f8e0a8e5e7", 0x50, 0x1, &(0x7f0000001480)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80) (rerun: 32) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001500)=0x0) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000001540)={{{@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e24, 0x0, 0x4e22, 0x3, 0xa, 0x60, 0xa0, 0x2f, 0x0, r10}, {0x2, 0x6, 0x1, 0x2, 0x5c2, 0xc5ac, 0x73, 0x1}, {0x10001, 0x9, 0x80000000, 0x10}, 0x7fffffff, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d4, 0x3c}, 0x2, @in=@local, 0x0, 0xc1faf0f990a2b5b2, 0x2, 0x6, 0x3, 0x6, 0x6}}, 0xe8) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r11 = socket(0x23, 0x6, 0x7f) (async, rerun: 32) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000001b40)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0xa6504db5f38b362a}, 0xc, &(0x7f0000001b00)={&(0x7f0000001680)={0x448, 0x3f3, 0xc02, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0xb, [0x10, 0x7, 0x5, 0xe22d, 0x0, 0x6, 0x9, 0x7ff, 0xb1, 0x8, 0x48e, 0x0, 0x6, 0x160000, 0x10001, 0x7362b54c, 0x7fff, 0x9b82, 0x35a, 0x1, 0x0, 0x8, 0x4, 0x1b7, 0x3, 0x3, 0x61, 0x401, 0x800, 0x9, 0x800, 0x80000001, 0x7, 0x400, 0x1, 0x0, 0xfffff353, 0x17b, 0x44d834aa, 0x1, 0x2, 0x9, 0x40, 0x9, 0xff, 0xc, 0x3, 0x7, 0x2, 0xffffff7f, 0xd77a, 0x800, 0x2, 0xb, 0x40, 0x0, 0x7, 0x9, 0x10, 0x32a, 0xdd36, 0xffffffff, 0xfff, 0x8], [0x3ff, 0xd, 0x9, 0x5, 0x9, 0x8, 0x774, 0x800, 0x6, 0x6, 0x0, 0xffffff4c, 0x1, 0x6, 0x784c, 0x7, 0x6, 0x6, 0x1, 0x1, 0x2, 0xb8d, 0x7, 0x8, 0x80000000, 0x7, 0x2, 0xd, 0x10001, 0x7fffffff, 0x2, 0x5, 0x6fd955f3, 0xfffffff1, 0xff, 0x5, 0xc, 0x6, 0x800, 0x5, 0x8, 0xfffffffb, 0xf, 0x0, 0x6, 0x7680, 0xf, 0x0, 0x8001, 0x0, 0x9, 0x8, 0x2, 0xfffffff8, 0x8, 0x40, 0x800, 0x36b1, 0x0, 0x10000, 0x5, 0x3, 0x200, 0x4], [0x4, 0x8, 0x4, 0x6, 0x0, 0xb, 0x6, 0xb, 0x9, 0x0, 0x7fffffff, 0x47827c9f, 0xbd6, 0x2, 0x8, 0xffa, 0xffffffff, 0x7, 0x6, 0x0, 0x7, 0x9, 0x5, 0x4, 0x1, 0xc71, 0x4, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x81, 0x2, 0x4, 0xff, 0xfd9, 0x8001, 0x3105, 0x100, 0x8, 0x9, 0x1000, 0x4, 0xb948, 0x9, 0x400, 0x3, 0x695bedb6, 0x7, 0x5, 0x4, 0x9, 0x54, 0x6, 0x5, 0x5, 0x1, 0xbb3, 0x2, 0x3, 0x5, 0x3, 0x8], [0x0, 0x2, 0x0, 0x5, 0x1, 0xb430, 0xfffffff7, 0xce, 0x2, 0x9, 0xfe9f, 0xfffffff9, 0x4000, 0x0, 0x9, 0x80, 0x5, 0x9, 0x3, 0x0, 0x1, 0xd489, 0x0, 0x10, 0xd4f, 0x80, 0x2, 0x9, 0x0, 0x7, 0x10, 0x401, 0x9, 0x2, 0x497c, 0x10, 0x8, 0xbe5b, 0x8001, 0x7, 0xffffffff, 0xf43, 0x0, 0x3, 0xdf, 0xb1, 0x1, 0x1, 0x4, 0x4, 0x6, 0x5, 0x7, 0x7ff, 0xfffffff9, 0x40, 0xe, 0x7, 0x4, 0x3, 0x6a7, 0x80, 0x1, 0x4], 0x25, [',\x00', '$%$+.\\#&].#@#\x00', '\x00', '@\x00', 'erspan0\x00', '@%{\\)*\x00', '-\\\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x20048810) (async, rerun: 32) sendmsg$nl_xfrm(r5, &(0x7f0000001d40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)=@updsa={0x134, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast1, @in=@multicast2, 0x4e22, 0x8000, 0x4e22, 0x691b, 0xa, 0x80, 0x80, 0x87, 0x0, r10}, {@in=@rand_addr=0x64010101, 0x4d4, 0xff}, @in6=@empty, {0x7, 0x9, 0x45c8, 0x7, 0x5, 0x3, 0x9}, {0x0, 0x957, 0xa6, 0x4}, {0x2, 0x9, 0x7}, 0x70bd2a, 0x3507, 0xa, 0x1, 0x4, 0x7}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d4, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x3502, 0x0, 0x3, 0x8, 0x0, 0x9, 0x6}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) (async) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001d80), &(0x7f0000001dc0)=0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r5) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = accept4(r11, 0x0, &(0x7f0000001e40), 0x0) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x7, 0xe, &(0x7f0000001ec0)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @alu={0x0, 0x0, 0x4, 0xb, 0x6, 0x2, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001f40)='syzkaller\x00', 0x2, 0x8, &(0x7f0000001f80)=""/8, 0x40f00, 0xa, '\x00', r8, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000001fc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002000)={0x3, 0x5, 0x3, 0x12}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000002040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r12, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002080)=[{0x2, 0x1, 0xe, 0x5}], 0x10, 0x36}, 0x94) sendmsg$nl_route(r13, &(0x7f00000024c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002480)={&(0x7f0000002180)=@ipv6_newnexthop={0x300, 0x68, 0x8, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0xa}, [@NHA_GROUP_TYPE={0x6}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0x2b8, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2b4, 0x1, {{0x0, {0x21, 0x6, 0x4, 0x3, 0xfa, 0x40, 0x7, [@mcast1, @dev={0xfe, 0x80, '\x00', 0xa}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}, [@empty, @empty, @dev={0xfe, 0x80, '\x00', 0x35}, @loopback, @empty, @mcast1, @private2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x23}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @local, @local, @dev={0xfe, 0x80, '\x00', 0x27}, @empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private0, @private2, @mcast2]}}}, @NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x3}}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r14}}}]}, 0x300}, 0x1, 0x0, 0x0, 0x44010}, 0x10) 3.896746872s ago: executing program 1 (id=4685): sendmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="0ad4fadc0d59d64615b7cfdcf8ded820a923d137fe9863dd8a05342a81f860aae5a71f1e9fdc040a1d94b70ccadc34f2002a17ebc63110e7c4c30b7827de858ed4e7b6327dc6da04e7f507a3d9d60e24a327e8ead160fdd04b", 0x59}], 0x1}}], 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a010400000000000000000a0004040900010073797a31000000002c00048028000180080001006e6174001c00028008000240e100000a080003400000000208000140000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3.873652748s ago: executing program 3 (id=4686): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r2, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)=@delsa={0x268, 0x11, 0x330, 0x70bd2a, 0x25dfdbfc, {@in=@multicast2, 0x4d6, 0xa, 0x6c}, [@iptfs_reorder_window={0x6, 0x25, 0xd10c}, @algo_crypt={0x67, 0x2, {{'ctr-cast6-avx\x00'}, 0xf8, "a97939769f7d8e3d3d50172bab8ab85c90f5231a31bf178c7dbbf8ca325bf3"}}, @algo_auth_trunc={0xd8, 0x14, {{'sha224\x00'}, 0x460, 0xc0, "008e6eb59759ac26991bca383d07c18b6f11623addae7450fb2cd9cccf0083b1ba58935d74e86ddae55aa54e627f7d0adf0093c1bb401ee27809a0155c65d9879a07ecc3e52f4ce7318a8ec88c36796af5b45452a6cdfbb33eb97bc717dc31582c261234d75f9c8e07fe353dd3cc58552580fe2e1c55ad031be4505662c022fab3954aa9384853a0d9d17cac"}}, @XFRMA_SET_MARK_MASK={0x8}, @algo_aead={0xa7, 0x12, {{'rfc4543(aegis256-generic)\x00'}, 0x2d8, 0xa0, "7a7afb39203de2202da9a3c89e08f895775a0f6a1ed16cfde273f810f751ee6c06bad4f5d64cd32997668dba84e03b32d75ebc9f068a704b62b92b4a32d7fd2dfcb66a5d3fb6278e395a935b01a02efb50abb161a36fb9ce264d8f"}}, @iptfs_max_qsize={0x8, 0x28, 0xfffffffe}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in6=@loopback, 0x0, 0xa}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40040}, 0x88c0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 3.416397727s ago: executing program 7 (id=4687): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c0001800600060008"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000000300)="42ff7ab7b19e97142bd1c9ec4cd6f968c6faa567a976abc3df69895aae1ab7842b6c8830ce7587a596eab22bc377ab9eed7675d571d4a8a1", &(0x7f0000000340)=""/105}, 0x20) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x8d1) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x131}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) pipe(0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.332756482s ago: executing program 1 (id=4688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x2c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004084) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fbfffffb00000000000000008500000041000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) close(0x3) 3.326593997s ago: executing program 0 (id=4689): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0xfffffffe}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) (fail_nth: 99) 3.190070135s ago: executing program 3 (id=4690): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast2}], 0x10) listen(r0, 0x7) 2.948740068s ago: executing program 3 (id=4691): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/88, 0x58}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="680000001800050602000000000000000a400000fe0400010000000014000b0020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef0500080001000000f5eb05ff52cebdd3", 0x68) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) getsockname$packet(r2, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002f40)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2000000000000078, &(0x7f0000000200)=@raw=[@exit, @exit], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x71, &(0x7f0000000000)=""/113, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000034c0)={r3, 0x20, &(0x7f0000003480)={&(0x7f0000003300)=""/198, 0xc6, 0x0, &(0x7f0000003400)=""/92, 0x5c}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003600)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x51a, 0x0, 0x0, 0x0, 0xba}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0xeb}, @initr0, @generic={0xc, 0x6, 0x1, 0x4, 0x4}, @map_idx={0x18, 0x56616bb2087dc530}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x69}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x2, 0xd, 0x0, 0x2, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x4, 0xd8, &(0x7f0000002e00)=""/216, 0x41100, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002f80)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002fc0)={0x0, 0xc, 0x5, 0xa}, 0x10, r5, 0x0, 0x9, &(0x7f0000003500)=[r3, r2, r2, r2, r3], &(0x7f0000003540)=[{0x0, 0x2, 0xb, 0x6}, {0x1, 0x5, 0x2, 0x9}, {0x4, 0x2, 0x9, 0x2}, {0x3, 0x0, 0xd, 0x3}, {0x2, 0x5, 0xd, 0x7}, {0x5, 0x3, 0x10, 0x3}, {0x2, 0x4, 0x6, 0x7}, {0x2, 0x3, 0x2}, {0x0, 0x3, 0x1, 0xf}], 0x10, 0x8}, 0x94) sendmmsg$alg(r2, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000140)}, {&(0x7f0000000440)="4e538d682de0a81a6c27338f362b3334e67092358be6eb9ed37929cc035ce2113f264ff14c03f7ebcb667c9faa5e82c0b79a92732ee69699d015622c459dac51f74974e727eb1dc8a7a4d2162a68e842875a7f87c32fd5b2a589dd06910a9a151d993d28e0c3d405b8ec3f0c2ba7088cdee00d48cdc650408c5f65aa61751bc71b55ac1aee73b8fb6bb1bffbde56bf0b37153f8857a96b18bd9a6e57a8e16b91ded875de412f22dfbad12abd1f5fdcc61e213066c7238143f14dec02aa50ccdf4e49d7491bff8a7ec4724cee13e00c62739a9104237fcac1a38f7d4ea1ed71243d07406351c7dfe8287461ea45400d4e2e6a1efbe66cc822898b0e7914634d77378627a50476fabd99e2c3bf8feaaefd93d5ad1e547863d6d3d9d1aa05ec069e7a4301450ed510ac8a2119ea69859e7ff2800d0022fe05c88271ae4d2b51aee6822107e2d04999f7df6d9f436fc732564f081831c34cd69adc7b2f5a44277b34141262721270b848a5357fb4a3ed5930e7b506afc9aaf1e5ec684588643460dd1a0f9492c1afc05541083e905d95dc7c118223c74d7a42ea3c02a9dce9794b572b6a5659cc8456e8852691e851b3b20cb12d3cf0efc2ec51bdb97a67f9244599e3562e55a293e7965c26f576e89cbaaec29dcd71b20a8941dd82ab6446829ff399def74db3bdcd3aa113c997890038254cf8e993383de62871decb0f30a1e498dfcb32168de1ec08111d229c8471d7ad9ac20b9d8b5e8b185e08ed5294370f7f6b384c18488e8d0490157324aad5e73c9d3c24d41717af0d471c9665e5253ca46c7e0ad14bc02e1c87b5372c44d4835528156e9e2c2a32baca843c070c01e581aadd7146116c6642c2100b6586775c62a5a747ed59fd0e8bc2ce02831085ff995736a753b3c096bc4c6807efe6e6f41877ac83c2795849916ba335832d0ae6d3c5866a4bb26b43ea8f0e19d344d2bcd2b2aaf21989a137fb72622d23f2ecc9cfa5ee551cb4c4c7a43efdc5a50f01b12379f09ffc1cf2d374f6c2d056ec0364d6046eb7bbe56b06f5f29d7e8abb058ed709d9664ef71ed68ad50f6b7179f59216fdc1d72ac35a1da1f99b9bea6f0d6802ba0f32f9390f25de56fe1fcced515126f7720c279d16dd508baaf70033a0998319fc3c6f98124f31940d6315121bf92543de9f769bf7ffd781a906dca5f3746b0e8a79f03e13e2b8a8952e4c8f914cbbdb50ba721427e8cc9d8d44cbf1bbff785757fbc5bf75423a1b93ba10528c16d6a5a6ec56c269aa98addcb96b08af05f1196437ca51b989192efbb6334094cd773a7f8f530c124f28fe0ae7a44b606136dcdeb72d9789052066bf695dfac006d0e5141d048a41eadc31f217d0104c1db085ac9e1fc7a5a9b40c838529da70dfcb330e8361abdc48157d34522eebc87f755827360536285642f89b796804075db9415f3232d34d075bb066f7bd252b0143433ab2c6edafacdb5a7303950fb4a64b59e965d48c21a581044b750769a8ff13c3c4e4bf322657bad3370f3d83d3943361114aef2c654df0445ea5ed154a40451d2c72d8b3821f71b64db9377d8a8c533740a007d22b1cf4d5ca32b2be673fe67ee7ee46d1a04046d58ae0d803013a6ab0a37043544c7ad24f8fb865e639c9b413ca7b036d7176f1b544419e914553716f2435828a80d510ce6627fa08c4e9f68ca81dbb7d3ecd19ad3a11f3a630e20b134d25c999fdcbc7307224f0d55622ab772c02760298cdacab337528560fe574e72cff51e05e62f51d14726b10cf885678b6d0fcb9f46db3b9b3b78039d29c45fcc272e8707a12e551116ebd3ac0d90f643479bbd40b497abede89eaa9eefaa7319957668bb554ebd820191296c0d7203cf9e581c760969c43d5a2620bcd7e03827a80c92a381c495851c1ca4311aa9d0cc85f410e02f02200b0cf1ee2a7613e07f4563533d123180d51382844e58c4663693ada16f80972f3f5971f030f8d36598a0e8b5daef1cbf0cc8b13799d845467ed130856a37d0ee0b2a4ca80e05f0c92b24017fb6d49f89abb20e79106b061fce91574966d387ea5fcb2b78c5480c547471a32e2660a6aa7f10603aea6a83a620f12e43edb38e75aea83767cec2dc8526483c5dfac317b89649f7dd75b00ffd81ef6510a697790f0d348b300de46c3d5070adc0f091d6cbea05802e19a087823b3ef0972769a79a5bb6f697e4091be24813803fdbee87a6cd5ae9936c69f8053cfb81f0b3469616e5d4af383768c0b2ebf5a915e107613d096048e2b8b43d62bb880b7f2807b14e5d1bac5d1a0cbecfd3ffa338e165ea188f86df549e4eaa478b9bb44e4dfac7e8c11e647ddeb31e62fc83dc7fcbc790ebd68fd00c7032351fa3d4940b2b469c403ff090fe60dd0e665b1dd3f6ea394c26c859fb914c0257c39048bf4991adeff4554f39d711d5ae8a29cf1e89fb2620e48d8af711ecb3bfeac358eebd222ace0f587ca0904e91059ded3526731b8ae8776135069b046a04092cd68f136569de6bfca0331c32acd70230ea181d1e07a46f718ce5178ead4d36bf3c3881bdd23cba6d093fe32c3a51cc6487d89073d3dcaebc9ab44c0a0ec08eb26f83b9cca6b93aee1fe05a91b3b87ac5321987d6d2a8675e1c95bc20ccc04c1febc1486ccc42fc688173d60c7d03f999da1f0310566cd25548ff486abb02f2077facf3fd7901c7f12e217e4438b1c3ecf2047f938cb849fa5247d08b50b6ddf154a05289258bde460ca09ce4506a5cb7b077479cefec116c4ca4d2191aadcaec5f2eb425ec695733ca3826175ff2d719039bec5bc33ec517d7c3783fe64bd51dc7707e0a9245504dff7b380ac029489bac1eb9ac3ee9cac819b43a6893d7847f1dca80aafc78f3a1bddd0490f5233f3d3e4635e804f38a2dfb19437748cc95a388337ee0a5e2043aacf5aa5f9af1c1b8625a5ee2547cbbdacd342a4dbfd082bd92dbc653f2598b56f402830ed683f6c6febd8e7cd45f4f84e5fd560a91b13a5a3a42b02f5fe1b59be95c93909cfa20ccbdbcc1da43882cf1f8af8d86840f3f389a71366cb7e0b8894bd0d35176ad4b1597af88d2752fdf22eab18dd83c3dfebf7ef2c7c62993ae2e998a7f394c03a2d3aa6a8159ea52854e8eef594121c325e4c32f9f4f4e3e393d08a9ceeec7da81ba9f88101a0ff4f8de031ed664c1a77e72dd41e9e723bbffd37c55922b5e494868fa473c359b7e2bd01e0bfb7a4fdfdd2d3fb73a00388f19cb69082507670a32924314a4c9f713415dad5f1916f8c8c377ec87e7e3d80948c957c22b2915c2e664b2022e95018a6f8f21bee25e1f75b51aa71f7c89a063d5287b5d82cb535dcdc7d405e7513c79bab05d8f06ed02dfb0cd560222e85b404befb8023002d1a3e224624750c7c3bf634270f0eb30edd3a95cf53f6a94170de52631ebdbb7e84063c7112af51a4966ad434d97dad212056fba99417c2f8bb01def0335434190a70330c8f6c9aa6e90f1bab455bb3c0988239ea4e2d75d9cd6cb06b264ebd6452b6d0ff3c63ff5ac1093722c411479e1c9e1f1678375992bd7f616ff71531f26859470774cd5669f6da6421b5cd0f2e22c4a9d094cc051c179b42880bae05be4ac878d94774429ec59eb66703b214fb531e681c0f73a91334e570b95c3667909dfe1c713d8e3bb22ad11209cd0020174fae0bdd5300cc0ea61c86f0a69c9a2875811613960cbbb637b2beeeca5b616a2d7dcdb8264b0d3da301b789d622ffc10321cef138bfa37dbe57e37090b8978cf77477a57e137f6a9c7fa00482b507632af9c1ba74421cf10c2d8b25a6c299b986afdf692d78ef763d4cd9145c0a6b16618dc5e7817ce508ecb34f3ec693fe4f2cb014d738926299c242ceb1747e658262a44d14b66cd1ad5c9d8b3b63feb7fd58453f7713a32f7d664a9df530fa28b173cef7990e055fac8fb0ad0d88d599f5d254503634f030f0a3d8c4fdc8a861cf6850fe5079aa6aab446b84307e9fc122f0a814aad33c682682586f4103f19f91a36ec7619e1114a962c1c5a2a6c2838208842cf18fdb0076712709d763f0b505abd53db051165a84f0641e66af5d40972548541186361043a8d4694f711bd2d10d57a1fe0272ea7f71b8db8c7b67928c4d3b9f976fb6fd24124bed6093434af4bb5dc097c8686498119472bbf2a896ffbf7ca433b23ddc222f5fb540fed278cf95622d20c7a28bb612e951b205cbda98116d62260ab002990dabafcf61c6c1188e4ff7394d440f9e8ff76addc0288d43bdf873a10a60ad418cae00a9f91f7c3c0495b752276447c6e83a7e7773dd1c48086f788cb1d1fe1bad6ea1e061bdeea3650561e0a3ce971900bf8409597c68fa51a13a4d7dee833817f5d7aa7f3c0413d8c0a8510ed2962a2fb97b34524b90bc2fc2854099f8a4d228c430bcb7d7b5ebdb4f8ca0bee645f750d649bea4721ed8ca55a5d27c5632712033ed2915b41b8b609d229c85c9d5d5e25e3b6c01851625f07674b172ac861e64e27138c3e3f7308a6aaddd25ab6828f52455ba61b35a99a2c73a139894760bb5978518588cd00c80d68f3a3f6ef414d5ed4d809c5f3da64c631b536bd4e02fb8c97227d5058cdeb9e05f9ae6ae2ec0f1f11b3f87f952b98d05f4754dcdafab1d2ffbed92c78cb73c7fb3e8e32752b96f17d4a66c92d903ece4fee4ca16db8512c24fdb81def47dd5cd57fa0896daeacefdac6774600d1b537add9a7206675a5cce71f987beffcb9e9fb5f1b94f9bdfd5a3303aa937395d591738bbf43e50fd75cdafab2e7bfc038a265c9445f8a43482d5d1b99250cc87402c86c191efd7e8d014d4116606428729c9a51e7ce70177dda4646bc9d6d60c337548f5d8eeef572e51a03f5ea017b994b8d713c38755e8e0298417fa4665ffb5b65b3db82521da4ffefcb8aa17b9066ee0778c2af218676fd4fe34769823f554d4e716714fb29ce83e3cbf9b6f314bfeed621dc6555451e79456ed8f6891da1a5977cf51e3d2410cde52ae82d2ee0e164d9dbcddb165c0408febed9529c74c33e0b26525c04a81192458d279e5626e661a04c68756cced6e637454a65c7705eb38f461ab0a30e7967ecc0e2e36789b6a4bb32ade81a4f652c7ac31221501bdc31240c0526791288ed64c2a5a26733ef2106a5f203c043837f34422894bc3057303b30d66441351a224b6337680f4328da10c2a8f2908d8a8541e2d8dcf0093286316230dff20196cb44fe3a7cdeaafccdcc656c86f191e11aa86f28aee5c467c1af8700b675a7dad11e63cefb032414f41571a24fe1d72b198bda12bc9ef835b14b2f3e25c64389a5cfe13e99223839376706ddf462594fb24ab3e44b29522c1739fd5c94c74b83358cc19d086981c45c7369c7aba0cc8666198b362dd6b91d55161355054bc1b58c5a8437965354722c31bf1d31ad41f6f67a4f532b78baed2816d6f9b678585b7e18b4a59333b30e54bd2da10dacb21d9b1bd540781ef05a05ec000f78e2dc2264db43ff9aecc3e3c76fa24e8a421013f627db9bd33296022f1f53475fbc116fb87cec5007dc899d2cafdbba4402ee24e4f8c2a93839b48ac6a3c7e30f78465a6194da6ec8d9b9e32de55d073a8dff6bc9deff91be12b44c60497bb94186c8eebc055b46d87f2e76dd8ae3e69af9cdd537eca788dbb37726dd602e909fbe6ed8785aa24a76d50184d01332edbe4d442ddfec8c7eac09e57f8db6c485ccf9e54e69c6309df5b6c29da9886625c1f3554e2b870c76036864dd2a104efc29c955bc7621a43ca1ce3da714c", 0x1000}, {&(0x7f0000001440)="69bb2cf057fa1fdc9d5a891b09d98d4186b6bc5dab2640646402899c349f34c5efb96d190ecf1ab2", 0x28}, {&(0x7f0000001580)="2c534a6fbbee4a5fb1739fa73705d06dcc09c74a1f8f1f1d553163b8f79951a38230e3dfff318c65eb20e614827d013e0109b140f982edc4147a00921212d38f41a5b338f3a700797c6325402efbfd41f62ce27095d56f6b33bf3234b776eeb0fe6d8eedf83ba2e844d20991cab69ce266c8f45f779278d68f2abc29eddf0e46f48403450cbaa03fee2440c0e78da15688ee6ae3b10021ee008c77b9d4661bb2e008ea6bf2f986c3fd3b09698039a8edc5e6279fa14a07531dc1f995dfcaaa813998dec21d92866457b4736bf36f79a833fa55b4af9d", 0xd6}, {&(0x7f0000001680)="3bdfb03ab85195a1ca8d68ae29ce7411e89653e510c7a11105ba35a85ca868fea5a13c8391f601761e70653b5111bf6454608ba92d981423e092441e882d86d6ab97874c590610d049c2847d49ef420f4b65d9b3b9af4c2b51f5e35cc8cb5e30e9dc8a55b1604f8e8d3445c494ca9a2e50f9318997777aa88f4b9fc58f463357d23498e90ef1b9dee625fd51c01a3570cb7ac74d2305da705422fc74eb230fc1f21172416693f0613041821baf05e6ad9213c624d4cc95cc9ea8abb35dd3ed402252", 0xc2}, {&(0x7f0000001780)="7f5551b655a350581ac96cd5d38872bb024e4312c9c65e23615b839e6688b68e8aa536ad88d62898daf522b0bc31742672e454dca9de016cf8b1353f9cd5ae9b69ff2d1931520a2723269cc82136f175af41c80bf2ccb0b36aa9b11c5b429e7de1afe0206d21b6b2", 0x68}, {&(0x7f0000001880)="a630448c71de6f67d48372609fc7870a5433212e00500e30a70793ef42a595fa13713a0408731960ad2426d8f8630e3b7fd79c52b3d6505165638117a1fdc6ab38c14b2b12bb8bd9fba08c497722ba6fdd310a05694767336415681d2599f4539a96251a4efe2704b14b9e9b40bb1af6e899e9647f405b1cf1f52729770524586910cb3273f827af9d569c8752a456b82b33fdec5373b1a6b31a9d95eb8b43c8d780c1b8280acff4bfafa92ac920a28e0b997c29e22fae1a72ebe68262a0cfe47b13d9", 0xc3}, {&(0x7f0000001980)="4c88546306350c0835f6376eef8a7295eb52ff1aae01e33efa2f773d6e7403487b42c7981533557eeddfdc5182e762a2ffb35b4e1427", 0x36}, {&(0x7f00000019c0)="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", 0x1000}], 0x9, &(0x7f0000002a80), 0x0, 0x48c4}, {0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002c40)="4046d2c2247986ceef64436fce1881db", 0x10}, {&(0x7f00000002c0)="f3", 0x1}, {&(0x7f0000002cc0)="d014a999f3123bf6113ec495789ddafe261924336fe9942da3ac018e7df39e6ebbe41aa4a88f096ad709c8a2690210b9301e7b49c9f2ecba9f63e20d603f9de6db06d312657fc0b38493fadfb44a6e86ba31aa227cdaf3b2e4ab30aec20d0512c3b5fb544af94e692c781a03b79316335381affd59c28e374306e57dcba112c26174a79a0d24270a4ec134c7d8efe168c39d8cd44e8ec9ba6d0cf99aef5f1b75ee731fab784a56a9a9afa171b9d09f32310df28c98a4774018e64ab2ca572e251fee300e202960e0d7270b3f62872a1a9e29ae", 0xd3}], 0x3, &(0x7f0000003080)=[@assoc={0x18, 0x117, 0x4, 0x7dcd8735}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xc85}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf0, 0x117, 0x2, 0xd7, "4d0c118ce016bf93812989da031944eb9b622dbd834050889b60bd05507203cb643452246cdeb76a798d443fe895d63ae37708ce5bcd39c5b343da1afbeb99b5b26722587bead0f0481e862bc69c79abfce63b29e0483ba82b534955522d9e0b2200476def791f8b861d04acf96c1accb5e595f558a187c7dcd13f55661f87d135d942c225cedad888e1c4d1c07b197c4285d483992516247c50493138f239a3afdf3c7b2a3fe532d6d90f77e57f830a26e58b08e4700cbe70ed726e0ff47a75cd2d90bde203c80151001c01bd3a3d2e6880b2620c6218"}, @iv={0x78, 0x117, 0x2, 0x63, "1ad664b016486f0adb2c0eaf389cdd38ce56d8834a7fae125beea196ec8cbe43ebbd1af90b81a1013186182830ad5fffec2fdc8bab99ecd89183f0eef3f245711cc37ccc8c91d089c7fcaf5119f2985acedc7e8f0aebda6a6412a6b93c9bbd6671affb"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x40, 0x117, 0x2, 0x26, "10c6cd43638994c75d6ce1807acf5ed0f6909ad74344d3dffff953d2aab7be7b1b7c5f50e614"}, @assoc={0x18, 0x117, 0x4, 0xfffffffa}], 0x250, 0x80}], 0x2, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x3, 0x1, 0x9, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) socket(0x8, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r10}, 0xc) 2.571223037s ago: executing program 5 (id=4692): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c0001800600060008"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000000300)="42ff7ab7b19e97142bd1c9ec4cd6f968c6faa567a976abc3df69895aae1ab7842b6c8830ce7587a596eab22bc377ab9eed7675d571d4a8a1", &(0x7f0000000340)=""/105}, 0x20) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x131}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) pipe(0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.406720136s ago: executing program 0 (id=4693): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x4e20, 0x401, 0x4e22, 0x0, 0xa, 0x0, 0x1a0, 0x88}, {0x4, 0x7, 0x100, 0x7, 0x8, 0xfa1, 0x4, 0x6}, {0xffff, 0x2, 0x9, 0x6}, 0x400, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x33}, 0x2, @in=@loopback, 0x3503, 0x3, 0x3, 0xff, 0x2, 0x64, 0x91}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.093168462s ago: executing program 1 (id=4694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x64050) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2002) 1.749572033s ago: executing program 0 (id=4695): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xa, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x7, 0x6, 0x8}, @generic={0x8, 0x2}, @generic={0x2, 0x2}]}}}}}}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000400"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.614787206s ago: executing program 7 (id=4696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2f7}, {0xa, 0x4e20, 0x9000000, @loopback, 0xd}, 0x0, {[0x5, 0xfffffffe, 0x1, 0x570, 0x7, 0x9, 0x2000, 0x7]}}, 0x5c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x1e, 0x3, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="00000000010000070000000000e9000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r13, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r14}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r13}, &(0x7f0000000280), &(0x7f00000003c0)=r15}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030300000000ffffffdf1100000008000300", @ANYRES32=r12, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20040890) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x44, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006a0001002abd7000fedbdf25020000000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x2400c881}, 0x40008d2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r9, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={@loopback, 0x0, 0x0, 0x10, 0x0, [{@multicast2}]}}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="600000000206010100000000000000000100000014000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f727400000029e35b4d5c88ea47868d3bd42251fa6e3bed2682147a38bb24ec9241b6181c9af0fe"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1.054510988s ago: executing program 1 (id=4697): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x103, &(0x7f0000000140)=""/259}, 0x94) 870.027891ms ago: executing program 1 (id=4698): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) close(0x3) r2 = socket(0xb, 0x800, 0x8) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004855}, 0x20004800) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r3, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000440)=""/18, 0x12}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x2000c044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) socket$nl_generic(0x10, 0x3, 0x10) r6 = accept(r4, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002f00090027bd70000000000004000060f8b23f0001ac0f2004001ef2c015f52180a66d9de01eeeea0728346eaa5b7cbc773ad7024904a4ff"], 0x20}, 0x1, 0x0, 0x0, 0x20002804}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x13, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd2}, [@generic={0x66, 0x8, 0x0, 0xfffd}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xe5, &(0x7f00000005c0)=""/229, 0x41000, 0x8}, 0x94) 632.391787ms ago: executing program 0 (id=4699): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000080)={0x5, 0x8, [0x4, 0x7, 0x9, 0x1ff], &(0x7f0000000040)=[0x0]}) r3 = socket(0x3, 0x1, 0x38) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) (async) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000080)={0x5, 0x8, [0x4, 0x7, 0x9, 0x1ff], &(0x7f0000000040)=[0x0]}) (async) socket(0x3, 0x1, 0x38) (async) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) (async) 543.159865ms ago: executing program 7 (id=4700): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r2, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)=@delsa={0x268, 0x11, 0x330, 0x70bd2a, 0x25dfdbfc, {@in=@multicast2, 0x4d6, 0xa, 0x6c}, [@iptfs_reorder_window={0x6, 0x25, 0xd10c}, @algo_crypt={0x67, 0x2, {{'ctr-cast6-avx\x00'}, 0xf8, "a97939769f7d8e3d3d50172bab8ab85c90f5231a31bf178c7dbbf8ca325bf3"}}, @algo_auth_trunc={0xd8, 0x14, {{'sha224\x00'}, 0x460, 0xc0, "008e6eb59759ac26991bca383d07c18b6f11623addae7450fb2cd9cccf0083b1ba58935d74e86ddae55aa54e627f7d0adf0093c1bb401ee27809a0155c65d9879a07ecc3e52f4ce7318a8ec88c36796af5b45452a6cdfbb33eb97bc717dc31582c261234d75f9c8e07fe353dd3cc58552580fe2e1c55ad031be4505662c022fab3954aa9384853a0d9d17cac"}}, @XFRMA_SET_MARK_MASK={0x8}, @algo_aead={0xa7, 0x12, {{'rfc4543(aegis256-generic)\x00'}, 0x2d8, 0xa0, "7a7afb39203de2202da9a3c89e08f895775a0f6a1ed16cfde273f810f751ee6c06bad4f5d64cd32997668dba84e03b32d75ebc9f068a704b62b92b4a32d7fd2dfcb66a5d3fb6278e395a935b01a02efb50abb161a36fb9ce264d8f"}}, @iptfs_max_qsize={0x8, 0x28, 0xfffffffe}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in6=@loopback, 0x0, 0xa}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40040}, 0x88c0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 397.462892ms ago: executing program 5 (id=4701): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {0x6}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 3 (id=4702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) (fail_nth: 7) kernel console output (not intermixed with test programs): 48] tun0: tun_chr_ioctl cmd 1074025680 [ 655.688082][T21768] netlink: 'syz.0.3875': attribute type 22 has an invalid length. [ 655.696251][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 655.756537][ T8648] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.765920][T21768] netlink: 'syz.0.3875': attribute type 22 has an invalid length. [ 655.766100][ T8661] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.767510][ T8661] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.785730][ T8666] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.791436][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 655.900071][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 655.903302][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 655.911468][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 655.936441][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 655.945452][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 656.342980][T21788] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3879'. [ 656.470392][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3881'. [ 656.538857][T21786] tun0: tun_chr_ioctl cmd 1074025680 [ 657.279364][T21808] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.291003][T21809] netlink: 'syz.3.3887': attribute type 16 has an invalid length. [ 657.291136][T21809] netlink: 'syz.3.3887': attribute type 17 has an invalid length. [ 657.310013][T21808] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.447727][T21809] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.447880][T21809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.469713][T21809] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.469868][T21809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.518422][T21809] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 657.544653][T21773] lo speed is unknown, defaulting to 1000 [ 657.675207][T21800] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 657.675253][T21800] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 657.779089][T21800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 657.787545][T21800] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 657.888250][T21800] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 657.888294][T21800] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 657.982383][T21800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 657.982430][T21800] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 658.025822][ T5622] Bluetooth: hci0: command tx timeout [ 658.036920][T21800] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 658.047403][T21800] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 658.153197][T21826] lo speed is unknown, defaulting to 1000 [ 658.332746][T21800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 658.339862][T21800] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 658.523459][T21832] tipc: Started in network mode [ 658.523512][T21832] tipc: Node identity 2ed4a97131ff, cluster identity 4711 [ 658.523705][T21832] tipc: Enabled bearer , priority 0 [ 658.610584][T21832] syzkaller0: entered promiscuous mode [ 658.610711][T21832] syzkaller0: entered allmulticast mode [ 658.777401][T21832] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 658.780128][T21843] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 658.925002][T21832] tipc: Resetting bearer [ 659.214906][T21831] tipc: Resetting bearer [ 659.272872][T21831] tipc: Disabling bearer [ 659.305060][T21773] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.313566][T21773] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.320978][T21773] bridge_slave_0: entered allmulticast mode [ 659.330181][T21773] bridge_slave_0: entered promiscuous mode [ 659.344016][T21773] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.354357][T21773] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.361820][T21773] bridge_slave_1: entered allmulticast mode [ 659.372630][T21773] bridge_slave_1: entered promiscuous mode [ 659.528967][T21858] __nla_validate_parse: 1 callbacks suppressed [ 659.538950][T21858] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3898'. [ 659.608169][T21859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3899'. [ 659.778746][T21773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.865072][T21773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.875494][T21864] netlink: 'syz.0.3903': attribute type 10 has an invalid length. [ 659.948094][T21773] team0: Port device team_slave_0 added [ 659.957656][T21773] team0: Port device team_slave_1 added [ 659.997404][T21773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.004537][T21773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.031506][T21773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.045394][T21773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.052571][T21773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.078742][T21773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.170279][T21874] syzkaller1: entered promiscuous mode [ 660.170325][T21874] syzkaller1: entered allmulticast mode [ 660.331587][T21773] hsr_slave_0: entered promiscuous mode [ 660.340808][T21773] hsr_slave_1: entered promiscuous mode [ 660.348535][T21773] debugfs: 'hsr0' already exists in 'hsr' [ 660.357784][T21773] Cannot create hsr debugfs directory [ 660.984638][T21895] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3911'. [ 661.083537][T21900] netlink: 'syz.1.3911': attribute type 4 has an invalid length. [ 661.239333][T21773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 661.259943][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.272877][T21773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 661.299199][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.307630][T21773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 661.450013][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.457054][T21773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 661.573941][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 661.918499][T21920] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3917'. [ 662.061318][T21773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.184722][T21773] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.282996][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.283260][ T7876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.335170][T21927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3918'. [ 662.335331][T21927] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 662.404474][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.404761][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.576828][T21934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3921'. [ 662.610950][T21935] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3920'. [ 662.881616][T21932] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.881955][T21932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.882800][T21932] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.883069][T21932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.107589][T21932] hsr0: left promiscuous mode [ 663.119163][T21932] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 663.152162][ T7215] lo speed is unknown, defaulting to 1000 [ 664.194549][T21967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3930'. [ 664.358648][T21967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'. [ 664.361274][T21967] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3930'. [ 664.493653][T21773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.884222][T21979] netlink: 'syz.3.3932': attribute type 10 has an invalid length. [ 665.335951][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 665.346430][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 665.355123][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 665.370046][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 665.378023][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 665.578836][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 665.586439][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 665.595489][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 665.605743][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 665.608431][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 665.768599][T21773] veth0_vlan: entered promiscuous mode [ 665.808938][T21773] veth1_vlan: entered promiscuous mode [ 665.930481][T21773] veth0_macvtap: entered promiscuous mode [ 665.971257][T21773] veth1_macvtap: entered promiscuous mode [ 666.004516][T21773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.064735][T21773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.367036][ T8661] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.367621][ T8661] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.487820][ T8666] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.490175][ T8666] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.537747][ T7876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.537791][ T7876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.600515][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.609734][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.976118][T22025] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000 [ 667.192539][T21991] lo speed is unknown, defaulting to 1000 [ 667.213000][T22029] netlink: 'syz.1.3942': attribute type 1 has an invalid length. [ 667.377030][T22029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.430030][T22031] macvlan3: entered promiscuous mode [ 667.430193][T22031] macvlan3: entered allmulticast mode [ 667.431373][T22031] bond4: entered allmulticast mode [ 667.431639][T22031] bond4: entered promiscuous mode [ 667.432842][T22031] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 667.437172][T22031] team0: Port device macvlan3 added [ 667.711668][ T5622] Bluetooth: hci6: command tx timeout [ 668.779944][T22061] netlink: 'syz.0.3950': attribute type 1 has an invalid length. [ 668.882146][T22058] batman_adv: batadv0: Adding interface: macvtap1 [ 668.890000][T22058] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.920669][T22058] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 669.085162][T22061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 669.209926][T22063] batman_adv: batadv0: Removing interface: macvtap1 [ 669.394937][T22066] macvlan3: entered promiscuous mode [ 669.403658][T22066] macvlan3: entered allmulticast mode [ 669.404038][T22066] bond3: entered allmulticast mode [ 669.404087][T22066] bond3: entered promiscuous mode [ 669.404812][T22066] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 669.439659][T22066] team0: Port device macvlan3 added [ 669.567539][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3952'. [ 669.576719][T22083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3952'. [ 669.623968][T21991] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.634050][T21991] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.634242][T21991] bridge_slave_0: entered allmulticast mode [ 669.682206][T21991] bridge_slave_0: entered promiscuous mode [ 669.766093][T21991] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.766486][T21991] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.767050][T21991] bridge_slave_1: entered allmulticast mode [ 669.788994][ T5622] Bluetooth: hci6: command tx timeout [ 669.813966][T21991] bridge_slave_1: entered promiscuous mode [ 669.870826][T21991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.889119][T21991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.965609][T21991] team0: Port device team_slave_0 added [ 669.996325][T21991] team0: Port device team_slave_1 added [ 670.034620][T21991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.042046][T21991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.042080][T21991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.069928][T22092] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3954'. [ 670.070550][T22087] tun0: tun_chr_ioctl cmd 1074025680 [ 670.203546][T21991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.203586][T21991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.203641][T21991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.416857][T21991] hsr_slave_0: entered promiscuous mode [ 670.428778][T21991] hsr_slave_1: entered promiscuous mode [ 670.436583][T21991] debugfs: 'hsr0' already exists in 'hsr' [ 670.436624][T21991] Cannot create hsr debugfs directory [ 670.738351][T22109] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.3960'. [ 670.916357][T22094] ip6erspan0: entered allmulticast mode [ 671.122400][T22113] lo speed is unknown, defaulting to 1000 [ 671.305493][T21991] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 671.343716][T21991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.391644][T21991] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 671.868807][ T5622] Bluetooth: hci6: command tx timeout [ 671.969650][T21991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 672.022120][T21991] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 672.654095][T22133] Unsupported ieee802154 address type: 0 [ 673.730262][T21991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.834067][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'. [ 673.946382][ T5622] Bluetooth: hci6: command tx timeout [ 673.988095][T22139] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.988759][T22139] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.081560][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025afd800: rx timeout, send abort [ 674.094974][T22139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.111427][T22139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.294804][T21991] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 674.334838][T21991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.343360][ T1015] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.632595][T22151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3969'. [ 674.746304][ T8656] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.759208][ T8648] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.759404][ T8648] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.918325][T22166] netlink: 'syz.1.3972': attribute type 1 has an invalid length. [ 674.973801][T22169] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3973'. [ 675.089658][T21991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.155297][T21991] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.192411][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.192760][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.305464][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.305791][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.496992][T22172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3974'. [ 675.673889][T22178] netlink: 'syz.1.3975': attribute type 1 has an invalid length. [ 675.795102][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'. [ 675.805766][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3978'. [ 675.916044][T22178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.060619][T22180] macvlan4: entered promiscuous mode [ 676.060754][T22180] macvlan4: entered allmulticast mode [ 676.061473][T22180] bond5: entered allmulticast mode [ 676.061570][T22180] bond5: entered promiscuous mode [ 676.082446][T22180] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 676.146368][T22180] team0: Port device macvlan4 added [ 676.622187][T22208] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.3982'. [ 676.721902][T22210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 676.763681][T22212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3984'. [ 677.206175][T22212] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.510767][T22212] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.721720][T22220] lo speed is unknown, defaulting to 1000 [ 677.743064][T21991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.887977][T22240] netlink: 'syz.0.3989': attribute type 29 has an invalid length. [ 677.899812][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3989'. [ 677.969638][T22212] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.004135][T22232] syzkaller1: entered promiscuous mode [ 678.004179][T22232] syzkaller1: entered allmulticast mode [ 678.417561][T22212] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.967142][ T8665] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.185906][ T8665] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.185981][ T8665] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.203358][ T8665] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.224503][T22245] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 679.453888][T21991] veth0_vlan: entered promiscuous mode [ 679.533451][T21991] veth1_vlan: entered promiscuous mode [ 679.828073][T21991] veth0_macvtap: entered promiscuous mode [ 679.903932][T21991] veth1_macvtap: entered promiscuous mode [ 680.050307][T22276] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4000'. [ 680.107085][T22279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3998'. [ 680.203283][T21991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.293131][T21991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.511591][ T8656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.512704][ T8656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.518942][ T8656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.519551][ T8656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.882015][ T8666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.882067][ T8666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.033901][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'. [ 681.110336][ T7876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.110377][ T7876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.730769][T22313] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4011'. [ 682.082471][T22332] netlink: 'syz.1.4014': attribute type 13 has an invalid length. [ 682.082528][T22332] netlink: 'syz.1.4014': attribute type 58 has an invalid length. [ 682.082786][T22332] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4014'. [ 682.168583][T22332] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 682.235258][T22322] siw: device registration error -23 [ 682.258022][T22335] netlink: 'syz.3.4015': attribute type 6 has an invalid length. [ 682.293617][T22335] tipc: Enabling of bearer rejected, failed to enable media [ 682.372454][T22338] netlink: 'syz.1.4016': attribute type 21 has an invalid length. [ 682.383369][T22338] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.393316][T22338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 682.393374][T22338] IPv6: NLM_F_CREATE should be set when creating new route [ 682.393423][T22338] IPv6: NLM_F_CREATE should be set when creating new route [ 682.393449][T22338] IPv6: NLM_F_CREATE should be set when creating new route [ 682.452369][T22338] netlink: 'syz.1.4016': attribute type 2 has an invalid length. [ 682.933153][T22350] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 682.953908][T22350] bond6 (unregistering): Released all slaves [ 683.343572][T22366] bond6: entered promiscuous mode [ 683.721979][T22378] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.4027'. [ 684.077807][T22384] veth0: entered promiscuous mode [ 684.152701][T22379] veth0: left promiscuous mode [ 684.173786][T22385] lo speed is unknown, defaulting to 1000 [ 684.254639][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4030'. [ 684.442350][T22404] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4034'. [ 684.643784][T22396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4032'. [ 684.643890][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4032'. [ 684.663344][T22412] tipc: Enabling of bearer rejected, failed to enable media [ 685.610980][T22434] veth0: entered promiscuous mode [ 685.644138][T22433] veth0: left promiscuous mode [ 685.660527][T22429] syzkaller1: entered promiscuous mode [ 685.660578][T22429] syzkaller1: entered allmulticast mode [ 685.863312][T22440] __nla_validate_parse: 1 callbacks suppressed [ 685.875817][T22440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4042'. [ 686.186402][T22440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 686.359334][T22460] block nbd0: not configured, cannot reconfigure [ 686.382259][T22460] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4046'. [ 686.399334][T22458] veth0: entered promiscuous mode [ 686.491156][T22447] veth0: left promiscuous mode [ 686.875021][T22472] netlink: 'syz.1.4050': attribute type 1 has an invalid length. [ 686.884776][T22472] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4050'. [ 686.972733][T22477] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.4051'. [ 687.018421][T22480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4050'. [ 687.466519][T22482] lo speed is unknown, defaulting to 1000 [ 688.112757][T22512] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4060'. [ 688.794957][T22531] openvswitch: netlink: Actions may not be safe on all matching packets [ 689.319680][T22546] ip6gretap1: entered allmulticast mode [ 689.322761][T22546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 689.323378][T22546] batman_adv: batadv0: Adding interface: ip6gretap1 [ 689.323391][T22546] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.323421][T22546] batman_adv: batadv0: Interface activated: ip6gretap1 [ 689.406022][T22546] netlink: 'syz.1.4070': attribute type 1 has an invalid length. [ 689.406067][T22546] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4070'. [ 689.591477][T22542] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.017458][T22566] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.4077'. [ 690.328341][T22568] lo speed is unknown, defaulting to 1000 [ 690.669792][T22582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4083'. [ 690.705053][T22586] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4082'. [ 690.759413][T22582] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 691.232821][T22602] __nla_validate_parse: 3 callbacks suppressed [ 691.232879][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4086'. [ 691.366292][T22602] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.554769][T22602] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.749728][T22602] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.932385][T22602] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.276006][ T8656] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.365822][ T8648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.455934][ T8662] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.516678][ T8648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.550021][T22630] netlink: 'syz.5.4091': attribute type 1 has an invalid length. [ 692.728828][T22630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.764159][T22632] macvlan2: entered promiscuous mode [ 692.770839][T22632] macvlan2: entered allmulticast mode [ 692.778640][T22632] bond1: entered allmulticast mode [ 692.784782][T22632] bond1: entered promiscuous mode [ 692.789975][T22638] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 692.796716][T22632] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 692.798321][T22632] team0: Port device macvlan2 added [ 692.923931][T22641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4093'. [ 693.077146][T22642] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 693.077200][T22642] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 693.077385][T22642] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 693.354887][T22645] sit0: entered promiscuous mode [ 693.361733][T22645] netlink: 'syz.5.4096': attribute type 1 has an invalid length. [ 693.370805][T22645] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4096'. [ 693.384409][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4098'. [ 693.400149][T22649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4098'. [ 694.287773][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4105'. [ 694.317261][T22675] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.318455][T22675] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.414228][T22678] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4106'. [ 694.448793][T22675] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.448864][T22675] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.629950][T22675] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.630016][T22675] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.722204][T22685] netlink: 'syz.3.4107': attribute type 7 has an invalid length. [ 694.741208][T22682] bridge_slave_0: left allmulticast mode [ 694.748677][T22682] bridge_slave_0: left promiscuous mode [ 694.756141][T22682] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.781810][T22682] bridge_slave_1: left allmulticast mode [ 694.789087][T22682] bridge_slave_1: left promiscuous mode [ 694.796464][T22682] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.816054][T22682] bond0: (slave bond_slave_0): Releasing backup interface [ 694.852958][T22682] bond0: (slave bond_slave_1): Releasing backup interface [ 694.902387][T22682] team0: Port device team_slave_0 removed [ 694.923487][T22682] team0: Port device team_slave_1 removed [ 694.928446][T22682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.928471][T22682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.935233][T22682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.935257][T22682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.966981][T22682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 695.003705][T22675] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.003767][T22675] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.219892][ T8662] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.219945][ T8662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.252301][ T7876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.252439][ T7876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.280813][ T83] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.280946][ T83] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.411369][T22692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4108'. [ 695.826646][ T8662] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.826779][ T8662] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.500972][T22736] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4117'. [ 698.588694][T22749] tun0: tun_chr_ioctl cmd 1074025680 [ 699.357641][T22769] sctp: [Deprecated]: syz.0.4129 (pid 22769) Use of int in maxseg socket option. [ 699.357641][T22769] Use struct sctp_assoc_value instead [ 699.427944][T22774] geneve0: entered promiscuous mode [ 699.437152][T22774] geneve0: left promiscuous mode [ 699.717066][T22782] tun0: tun_chr_ioctl cmd 1074025680 [ 699.858574][T22783] lo speed is unknown, defaulting to 1000 [ 699.999420][T22791] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4137'. [ 700.744561][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4143'. [ 700.780280][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4143'. [ 700.936612][T22807] sit0: left promiscuous mode [ 701.036323][T22807] bond1: left allmulticast mode [ 701.036458][T22807] bond1: left promiscuous mode [ 701.046811][T22807] macvlan2: left promiscuous mode [ 701.046910][T22807] macvlan2: left allmulticast mode [ 701.508571][T22823] tun0: tun_chr_ioctl cmd 1074025680 [ 701.539773][T22827] xt_hashlimit: size too large, truncated to 1048576 [ 701.616671][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 701.616737][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 701.667357][T22828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4150'. [ 701.667519][T22828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4150'. [ 701.667557][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4150'. [ 702.914190][T22857] syzkaller0: entered promiscuous mode [ 702.914319][T22857] syzkaller0: entered allmulticast mode [ 703.733961][ T5619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 703.753058][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 703.768608][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 703.781377][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 703.793593][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 704.384313][T22892] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4169'. [ 704.521420][T22898] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 704.569771][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'. [ 705.178425][T22877] lo speed is unknown, defaulting to 1000 [ 705.267620][T22917] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4177'. [ 705.749929][T22932] bond2: entered allmulticast mode [ 705.762884][T22935] macvlan0: entered promiscuous mode [ 705.825299][T22938] macvlan3: entered promiscuous mode [ 705.833884][T22938] macvlan3: entered allmulticast mode [ 705.841206][T22938] bond2: entered promiscuous mode [ 705.847385][T22938] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 705.865905][ T5619] Bluetooth: hci7: command tx timeout [ 705.894878][T22938] bond2: left promiscuous mode [ 706.079867][T22935] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 706.128548][T22935] bond7: (slave lo): Enslaving as an active interface with an up link [ 706.153859][T22935] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 706.190954][ T5715] lo speed is unknown, defaulting to 1000 [ 706.211922][T15379] lo speed is unknown, defaulting to 1000 [ 706.219378][T15382] lo speed is unknown, defaulting to 1000 [ 706.389392][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4185'. [ 706.523650][T22949] lo speed is unknown, defaulting to 1000 [ 706.569805][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4187'. [ 707.162523][T22980] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.4192'. [ 707.611891][T22992] netlink: 'syz.1.4194': attribute type 1 has an invalid length. [ 707.870765][T23001] netlink: 'syz.1.4194': attribute type 10 has an invalid length. [ 707.870887][T23001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4194'. [ 707.907773][T22992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 707.945785][ T5619] Bluetooth: hci7: command tx timeout [ 708.000035][T22994] bond8: (slave veth7): Enslaving as an active interface with a down link [ 708.024155][T22986] lo speed is unknown, defaulting to 1000 [ 708.136839][T22998] bond8: (slave dummy0): making interface the new active one [ 708.147659][T22998] dummy0: entered promiscuous mode [ 708.162909][T22998] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 708.216638][T23001] bond8: (slave dummy0): Releasing active interface [ 708.282227][T22877] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.282361][T22877] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.282554][T22877] bridge_slave_0: entered allmulticast mode [ 708.307548][T22877] bridge_slave_0: entered promiscuous mode [ 708.597810][T23021] netlink: 'syz.1.4201': attribute type 4 has an invalid length. [ 708.606038][T22877] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.613317][T22877] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.621503][T22877] bridge_slave_1: entered allmulticast mode [ 708.629641][T22877] bridge_slave_1: entered promiscuous mode [ 708.677426][T23022] netlink: 'syz.1.4201': attribute type 4 has an invalid length. [ 708.757019][T22877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.780471][T22877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.826899][T22877] team0: Port device team_slave_0 added [ 709.040865][T22877] team0: Port device team_slave_1 added [ 709.399041][T22877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.399080][T22877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.399126][T22877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.457026][T22877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.457074][T22877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.457144][T22877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.564173][T22877] hsr_slave_0: entered promiscuous mode [ 709.571231][T22877] hsr_slave_1: entered promiscuous mode [ 709.577753][T22877] debugfs: 'hsr0' already exists in 'hsr' [ 709.583615][T22877] Cannot create hsr debugfs directory [ 709.782233][T23032] tc_dump_action: action bad kind [ 709.805407][T23032] netlink: 'syz.1.4204': attribute type 13 has an invalid length. [ 709.893981][T23034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4205'. [ 709.982250][T23035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4205'. [ 710.025748][ T5619] Bluetooth: hci7: command tx timeout [ 710.675373][T22877] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 710.675586][T23053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4209'. [ 710.703866][T23055] netlink: 'syz.0.4211': attribute type 39 has an invalid length. [ 710.740055][T22877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.749080][T22877] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 710.793069][T22877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.802668][T23053] ovs-system: left promiscuous mode [ 710.815731][T23058] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4212'. [ 710.999022][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4213'. [ 711.259427][T22877] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 711.319489][T22877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.329605][T22877] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 711.358374][T22877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.401249][T23065] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.445796][T23080] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.4214'. [ 711.624618][T23072] tipc: Started in network mode [ 711.624671][T23072] tipc: Node identity 0ea9a0092ae1, cluster identity 4711 [ 711.624864][T23072] tipc: Enabled bearer , priority 0 [ 711.775090][T23074] syzkaller0: entered promiscuous mode [ 711.781109][T23074] syzkaller0: entered allmulticast mode [ 711.787580][T23074] tipc: Resetting bearer [ 711.992880][ T7876] tipc: Resetting bearer [ 712.020491][T23056] tipc: Resetting bearer [ 712.115946][ T5619] Bluetooth: hci7: command tx timeout [ 715.100310][T23056] tipc: Disabling bearer [ 715.342777][ T7215] tipc: Node number set to 608739337 [ 715.363145][T23065] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.488176][T23065] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.573025][T23065] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.917588][ T8662] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.045025][ T8648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.302609][T23121] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 716.467366][ T8666] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.566527][ T7876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.611538][T23130] FAULT_INJECTION: forcing a failure. [ 716.611538][T23130] name failslab, interval 1, probability 0, space 0, times 0 [ 716.624895][T23130] CPU: 0 UID: 0 PID: 23130 Comm: syz.3.4223 Not tainted syzkaller #0 PREEMPT(full) [ 716.624924][T23130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 716.624936][T23130] Call Trace: [ 716.624946][T23130] [ 716.624955][T23130] dump_stack_lvl+0xe8/0x150 [ 716.624996][T23130] should_fail_ex+0x410/0x560 [ 716.625034][T23130] should_failslab+0xa8/0x100 [ 716.625065][T23130] __kmalloc_noprof+0xfe/0x720 [ 716.625096][T23130] ? nft_pernet+0x23/0x240 [ 716.625120][T23130] ? nf_tables_newrule+0x1524/0x28a0 [ 716.625149][T23130] ? nf_tables_newrule+0x1524/0x28a0 [ 716.625185][T23130] nf_tables_newrule+0x1524/0x28a0 [ 716.625231][T23130] ? __pfx_nf_tables_newrule+0x10/0x10 [ 716.625259][T23130] ? lock_acquire+0x115/0x350 [ 716.625283][T23130] ? nfnl_pernet+0x23/0x240 [ 716.625398][T23130] ? __nla_parse+0x40/0x60 [ 716.625425][T23130] nfnetlink_rcv+0x1288/0x28c0 [ 716.625487][T23130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 716.625529][T23130] ? ref_tracker_free+0x689/0x830 [ 716.625584][T23130] ? skb_clone+0x246/0x3a0 [ 716.625613][T23130] ? __netlink_deliver_tap+0x811/0x860 [ 716.625646][T23130] ? netlink_deliver_tap+0x2e/0x1b0 [ 716.625670][T23130] ? netlink_deliver_tap+0x2e/0x1b0 [ 716.625709][T23130] netlink_unicast+0x7bd/0x940 [ 716.625744][T23130] netlink_sendmsg+0x813/0xb40 [ 716.625778][T23130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.625813][T23130] ? apparmor_socket_sendmsg+0x98/0x360 [ 716.625847][T23130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.625870][T23130] sock_sendmsg_nosec+0x13a/0x180 [ 716.625901][T23130] ____sys_sendmsg+0x54e/0x850 [ 716.625929][T23130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.625961][T23130] ? import_iovec+0x73/0xa0 [ 716.625996][T23130] ___sys_sendmsg+0x2a5/0x360 [ 716.626016][T23130] ? __lock_acquire+0x6df/0x2e50 [ 716.626044][T23130] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.626102][T23130] ? __fget_files+0x2a/0x420 [ 716.626129][T23130] ? __fget_files+0x3a2/0x420 [ 716.626166][T23130] __x64_sys_sendmsg+0x1b1/0x290 [ 716.626191][T23130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.626235][T23130] do_syscall_64+0x166/0x520 [ 716.626265][T23130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.626288][T23130] ? clear_bhb_loop+0x70/0xc0 [ 716.626314][T23130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.626333][T23130] RIP: 0033:0x7f66dbf9e159 [ 716.626353][T23130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.626370][T23130] RSP: 002b:00007f66dcf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.626392][T23130] RAX: ffffffffffffffda RBX: 00007f66dc225fa0 RCX: 00007f66dbf9e159 [ 716.626406][T23130] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 716.626419][T23130] RBP: 00007f66dcf30090 R08: 0000000000000000 R09: 0000000000000000 [ 716.626432][T23130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.626444][T23130] R13: 00007f66dc226038 R14: 00007f66dc225fa0 R15: 00007ffd4891fcf8 [ 716.626474][T23130] [ 716.970095][T22877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.016871][T22877] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.090708][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.090964][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.197046][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.197220][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.333430][T23094] udevd[23094]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 717.853771][T23153] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4228'. [ 717.955080][T23157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.022987][T23153] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4228'. [ 718.128956][T23165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4230'. [ 718.232523][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4233'. [ 718.344960][T23172] netlink: 'syz.0.4234': attribute type 1 has an invalid length. [ 718.349296][T23169] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.450813][T23172] 8021q: adding VLAN 0 to HW filter on device bond5 [ 718.500901][T23169] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.577930][T23180] FAULT_INJECTION: forcing a failure. [ 718.577930][T23180] name failslab, interval 1, probability 0, space 0, times 0 [ 718.597057][T23180] CPU: 0 UID: 0 PID: 23180 Comm: syz.0.4235 Not tainted syzkaller #0 PREEMPT(full) [ 718.597088][T23180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.597101][T23180] Call Trace: [ 718.597110][T23180] [ 718.597120][T23180] dump_stack_lvl+0xe8/0x150 [ 718.597155][T23180] should_fail_ex+0x410/0x560 [ 718.597196][T23180] should_failslab+0xa8/0x100 [ 718.597223][T23180] __kmalloc_cache_noprof+0xa3/0x600 [ 718.597254][T23180] ? nft_trans_rule_add+0x59/0x440 [ 718.597359][T23180] ? nft_trans_rule_add+0x59/0x440 [ 718.597381][T23180] ? __pfx_nft_immediate_init+0x10/0x10 [ 718.597416][T23180] nft_trans_rule_add+0x59/0x440 [ 718.597436][T23180] ? nft_parse_register_store+0x2f0/0x370 [ 718.597468][T23180] nf_tables_newrule+0x1b50/0x28a0 [ 718.597515][T23180] ? __pfx_nf_tables_newrule+0x10/0x10 [ 718.597543][T23180] ? lock_acquire+0x115/0x350 [ 718.597564][T23180] ? nfnl_pernet+0x23/0x240 [ 718.597605][T23180] ? __nla_parse+0x40/0x60 [ 718.597631][T23180] nfnetlink_rcv+0x1288/0x28c0 [ 718.597686][T23180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 718.597724][T23180] ? ref_tracker_free+0x689/0x830 [ 718.597779][T23180] ? skb_clone+0x246/0x3a0 [ 718.597804][T23180] ? __netlink_deliver_tap+0x811/0x860 [ 718.597837][T23180] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.597858][T23180] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.597886][T23180] netlink_unicast+0x7bd/0x940 [ 718.597918][T23180] netlink_sendmsg+0x813/0xb40 [ 718.597951][T23180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.597983][T23180] ? apparmor_socket_sendmsg+0x98/0x360 [ 718.598015][T23180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.598037][T23180] sock_sendmsg_nosec+0x13a/0x180 [ 718.598065][T23180] ____sys_sendmsg+0x54e/0x850 [ 718.598090][T23180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.598122][T23180] ? import_iovec+0x73/0xa0 [ 718.598156][T23180] ___sys_sendmsg+0x2a5/0x360 [ 718.598174][T23180] ? __lock_acquire+0x6df/0x2e50 [ 718.598206][T23180] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.598263][T23180] ? __fget_files+0x2a/0x420 [ 718.598289][T23180] ? __fget_files+0x3a2/0x420 [ 718.598325][T23180] __x64_sys_sendmsg+0x1b1/0x290 [ 718.598348][T23180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.598390][T23180] do_syscall_64+0x166/0x520 [ 718.598417][T23180] ? trace_irq_disable+0x3b/0x140 [ 718.598439][T23180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.598460][T23180] ? clear_bhb_loop+0x70/0xc0 [ 718.598485][T23180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.598506][T23180] RIP: 0033:0x7f2efe99e159 [ 718.598526][T23180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.598542][T23180] RSP: 002b:00007f2eff7df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.598566][T23180] RAX: ffffffffffffffda RBX: 00007f2efec25fa0 RCX: 00007f2efe99e159 [ 718.598580][T23180] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 718.598594][T23180] RBP: 00007f2eff7df090 R08: 0000000000000000 R09: 0000000000000000 [ 718.598607][T23180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.598619][T23180] R13: 00007f2efec26038 R14: 00007f2efec25fa0 R15: 00007ffde4fac218 [ 718.598652][T23180] [ 718.925960][T23169] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.191723][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4237'. [ 719.212922][T23169] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.330140][T23192] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4237'. [ 719.707208][ T7876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.777393][ T8648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.828681][ T7869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.830446][ T8648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.421920][T23225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4244'. [ 720.500129][T22877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.765264][T23236] ip_tables: iptables: counters copy to user failed while replacing table [ 720.857299][T23241] netlink: 'syz.3.4247': attribute type 1 has an invalid length. [ 720.921355][T23242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4245'. [ 720.990830][T23241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.023472][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4245'. [ 721.064355][T23244] macvlan2: entered promiscuous mode [ 721.078250][T23244] macvlan2: entered allmulticast mode [ 721.970467][T23271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4250'. [ 721.999529][T22877] veth0_vlan: entered promiscuous mode [ 722.019587][T22877] veth1_vlan: entered promiscuous mode [ 722.437841][T22877] veth0_macvtap: entered promiscuous mode [ 722.461161][T22877] veth1_macvtap: entered promiscuous mode [ 722.528154][T22877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.547084][T22877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.583825][T23286] FAULT_INJECTION: forcing a failure. [ 722.583825][T23286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.607385][T23286] CPU: 0 UID: 0 PID: 23286 Comm: syz.5.4255 Not tainted syzkaller #0 PREEMPT(full) [ 722.607418][T23286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.607431][T23286] Call Trace: [ 722.607439][T23286] [ 722.607448][T23286] dump_stack_lvl+0xe8/0x150 [ 722.607485][T23286] should_fail_ex+0x410/0x560 [ 722.607519][T23286] _copy_to_user+0x31/0xb0 [ 722.607542][T23286] simple_read_from_buffer+0xe1/0x170 [ 722.607574][T23286] proc_fail_nth_read+0x1bb/0x230 [ 722.607603][T23286] ? common_file_perm+0x20e/0x2b0 [ 722.607636][T23286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.607669][T23286] ? rw_verify_area+0x24a/0x4c0 [ 722.607700][T23286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.607728][T23286] vfs_read+0x213/0xa80 [ 722.607761][T23286] ? __pfx___mutex_lock+0x10/0x10 [ 722.607790][T23286] ? __pfx_vfs_read+0x10/0x10 [ 722.607819][T23286] ? __fget_files+0x2a/0x420 [ 722.607851][T23286] ? __fget_files+0x3a2/0x420 [ 722.607875][T23286] ? __fget_files+0x2a/0x420 [ 722.607910][T23286] ksys_read+0x150/0x270 [ 722.607945][T23286] ? __pfx_ksys_read+0x10/0x10 [ 722.607986][T23286] do_syscall_64+0x166/0x520 [ 722.608012][T23286] ? trace_irq_disable+0x3b/0x140 [ 722.608031][T23286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.608052][T23286] ? clear_bhb_loop+0x70/0xc0 [ 722.608078][T23286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.608099][T23286] RIP: 0033:0x7f668995e98e [ 722.608120][T23286] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 722.608137][T23286] RSP: 002b:00007f668a935fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 722.608161][T23286] RAX: ffffffffffffffda RBX: 00007f668a9366c0 RCX: 00007f668995e98e [ 722.608176][T23286] RDX: 000000000000000f RSI: 00007f668a9360a0 RDI: 0000000000000005 [ 722.608190][T23286] RBP: 00007f668a936090 R08: 0000000000000000 R09: 0000000000000000 [ 722.608211][T23286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.608224][T23286] R13: 00007f6689c26038 R14: 00007f6689c25fa0 R15: 00007ffe20c1a348 [ 722.608258][T23286] [ 722.741420][ T8665] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.741654][ T8665] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.741746][ T8665] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.741816][ T8665] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.090012][T23293] __nla_validate_parse: 1 callbacks suppressed [ 723.097040][T23293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4256'. [ 723.147435][T23290] syzkaller0: entered promiscuous mode [ 723.154767][T23290] syzkaller0: entered allmulticast mode [ 723.389338][ T8662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.389392][ T8662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.879754][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.879884][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.928121][T23316] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 724.457036][T23333] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.4264'. [ 725.094432][T23337] lo speed is unknown, defaulting to 1000 [ 725.594497][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4268'. [ 725.868597][T23372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.914481][T23393] IPVS: set_ctl: invalid protocol: 148 224.0.0.2:20004 [ 727.031916][T23404] IPVS: set_ctl: invalid protocol: 112 48.0.13.242:0 [ 727.061022][T23395] openvswitch: netlink: IP tunnel dst address not specified [ 727.061157][T23395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.610754][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4275'. [ 727.610891][T23412] netlink: 'syz.1.4275': attribute type 10 has an invalid length. [ 727.628272][T23412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4275'. [ 731.015626][T23396] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4272'. [ 731.015887][T23396] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4272'. [ 731.052779][T23405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4272'. [ 731.052907][T23405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4272'. [ 731.124754][T23412] geneve2: entered promiscuous mode [ 731.124816][T23412] geneve2: entered allmulticast mode [ 731.728243][T23460] FAULT_INJECTION: forcing a failure. [ 731.728243][T23460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.728313][T23460] CPU: 0 UID: 0 PID: 23460 Comm: syz.7.4280 Not tainted syzkaller #0 PREEMPT(full) [ 731.728337][T23460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.728351][T23460] Call Trace: [ 731.728360][T23460] [ 731.728370][T23460] dump_stack_lvl+0xe8/0x150 [ 731.728405][T23460] should_fail_ex+0x410/0x560 [ 731.728437][T23460] _copy_from_user+0x2d/0xb0 [ 731.728454][T23460] ___sys_recvmsg+0x173/0x5a0 [ 731.728480][T23460] ? __pfx____sys_recvmsg+0x10/0x10 [ 731.728504][T23460] ? lock_acquire+0x115/0x350 [ 731.728540][T23460] ? __fget_files+0x3a2/0x420 [ 731.728574][T23460] do_recvmmsg+0x31a/0x7f0 [ 731.728611][T23460] ? __pfx_do_recvmmsg+0x10/0x10 [ 731.728643][T23460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 731.728669][T23460] ? __fget_files+0x3a2/0x420 [ 731.728702][T23460] __x64_sys_recvmmsg+0x198/0x250 [ 731.728725][T23460] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 731.728756][T23460] do_syscall_64+0x166/0x520 [ 731.728779][T23460] ? trace_irq_disable+0x3b/0x140 [ 731.728796][T23460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.728815][T23460] ? clear_bhb_loop+0x70/0xc0 [ 731.728839][T23460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.728858][T23460] RIP: 0033:0x7f58e4f9e159 [ 731.728876][T23460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.728893][T23460] RSP: 002b:00007f58e5e25028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 731.728915][T23460] RAX: ffffffffffffffda RBX: 00007f58e5225fa0 RCX: 00007f58e4f9e159 [ 731.728929][T23460] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 731.728942][T23460] RBP: 00007f58e5e25090 R08: 0000000000000000 R09: 0000000000000000 [ 731.728954][T23460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.728966][T23460] R13: 00007f58e5226038 R14: 00007f58e5225fa0 R15: 00007ffdde2818e8 [ 731.728997][T23460] [ 732.701947][T23498] netlink: 4912 bytes leftover after parsing attributes in process `syz.7.4289'. [ 732.944259][T23509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4288'. [ 733.767115][T23514] lo speed is unknown, defaulting to 1000 [ 733.823648][T23529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4292'. [ 733.845444][T23534] FAULT_INJECTION: forcing a failure. [ 733.845444][T23534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.845684][T23534] CPU: 0 UID: 0 PID: 23534 Comm: syz.1.4293 Not tainted syzkaller #0 PREEMPT(full) [ 733.845711][T23534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.845723][T23534] Call Trace: [ 733.845732][T23534] [ 733.845741][T23534] dump_stack_lvl+0xe8/0x150 [ 733.845775][T23534] should_fail_ex+0x410/0x560 [ 733.845804][T23534] _copy_from_user+0x2d/0xb0 [ 733.845822][T23534] ___sys_recvmsg+0x173/0x5a0 [ 733.845849][T23534] ? __pfx____sys_recvmsg+0x10/0x10 [ 733.845873][T23534] ? lock_acquire+0x115/0x350 [ 733.845920][T23534] do_recvmmsg+0x31a/0x7f0 [ 733.845947][T23534] ? __pfx_do_recvmmsg+0x10/0x10 [ 733.845978][T23534] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 733.846004][T23534] ? __fget_files+0x3a2/0x420 [ 733.846047][T23534] __x64_sys_recvmmsg+0x198/0x250 [ 733.846070][T23534] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 733.846100][T23534] do_syscall_64+0x166/0x520 [ 733.846124][T23534] ? trace_irq_disable+0x3b/0x140 [ 733.846141][T23534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.846161][T23534] ? clear_bhb_loop+0x70/0xc0 [ 733.846184][T23534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.846203][T23534] RIP: 0033:0x7fc8d8d9e159 [ 733.846221][T23534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.846237][T23534] RSP: 002b:00007fc8d9b9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 733.846264][T23534] RAX: ffffffffffffffda RBX: 00007fc8d9025fa0 RCX: 00007fc8d8d9e159 [ 733.846278][T23534] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 733.846291][T23534] RBP: 00007fc8d9b9a090 R08: 0000000000000000 R09: 0000000000000000 [ 733.846304][T23534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.846315][T23534] R13: 00007fc8d9026038 R14: 00007fc8d9025fa0 R15: 00007ffd3e95c318 [ 733.846345][T23534] [ 734.175171][T23539] xt_LOG: level 9 >= 8 [ 734.186854][T23539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 735.853554][T23595] netlink: 'syz.1.4301': attribute type 4 has an invalid length. [ 735.931739][T23595] netlink: 'syz.1.4301': attribute type 4 has an invalid length. [ 736.001481][T23595] tipc: Enabled bearer , priority 7 [ 736.590303][T23618] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4305'. [ 736.594323][T23617] FAULT_INJECTION: forcing a failure. [ 736.594323][T23617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.594354][T23617] CPU: 0 UID: 0 PID: 23617 Comm: syz.7.4306 Not tainted syzkaller #0 PREEMPT(full) [ 736.594376][T23617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.594388][T23617] Call Trace: [ 736.594397][T23617] [ 736.594405][T23617] dump_stack_lvl+0xe8/0x150 [ 736.594439][T23617] should_fail_ex+0x410/0x560 [ 736.594470][T23617] _copy_from_user+0x2d/0xb0 [ 736.594490][T23617] ___sys_recvmsg+0x173/0x5a0 [ 736.594517][T23617] ? __pfx____sys_recvmsg+0x10/0x10 [ 736.594542][T23617] ? lock_acquire+0x115/0x350 [ 736.594590][T23617] do_recvmmsg+0x31a/0x7f0 [ 736.594618][T23617] ? __pfx_do_recvmmsg+0x10/0x10 [ 736.594648][T23617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 736.594675][T23617] ? __fget_files+0x3a2/0x420 [ 736.594710][T23617] __x64_sys_recvmmsg+0x198/0x250 [ 736.594733][T23617] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 736.594764][T23617] do_syscall_64+0x166/0x520 [ 736.594788][T23617] ? trace_irq_disable+0x3b/0x140 [ 736.594805][T23617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.594824][T23617] ? clear_bhb_loop+0x70/0xc0 [ 736.594848][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.594867][T23617] RIP: 0033:0x7f58e4f9e159 [ 736.594886][T23617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.594903][T23617] RSP: 002b:00007f58e5e25028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 736.594926][T23617] RAX: ffffffffffffffda RBX: 00007f58e5225fa0 RCX: 00007f58e4f9e159 [ 736.594940][T23617] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 736.594953][T23617] RBP: 00007f58e5e25090 R08: 0000000000000000 R09: 0000000000000000 [ 736.594966][T23617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.594977][T23617] R13: 00007f58e5226038 R14: 00007f58e5225fa0 R15: 00007ffdde2818e8 [ 736.595015][T23617] [ 736.867730][T23624] syzkaller0: entered promiscuous mode [ 736.867770][T23624] syzkaller0: entered allmulticast mode [ 737.462307][T15379] tipc: Node number set to 2836411987 [ 737.592619][T23641] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.4312'. [ 738.015443][T23650] lo speed is unknown, defaulting to 1000 [ 738.283519][T23662] FAULT_INJECTION: forcing a failure. [ 738.283519][T23662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.298865][T23662] CPU: 1 UID: 0 PID: 23662 Comm: syz.7.4318 Not tainted syzkaller #0 PREEMPT(full) [ 738.298897][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.298907][T23662] Call Trace: [ 738.298916][T23662] [ 738.298932][T23662] dump_stack_lvl+0xe8/0x150 [ 738.298963][T23662] should_fail_ex+0x410/0x560 [ 738.298990][T23662] _copy_from_user+0x2d/0xb0 [ 738.299006][T23662] ___sys_recvmsg+0x173/0x5a0 [ 738.299029][T23662] ? __pfx____sys_recvmsg+0x10/0x10 [ 738.299050][T23662] ? lock_acquire+0x115/0x350 [ 738.299100][T23662] do_recvmmsg+0x31a/0x7f0 [ 738.299130][T23662] ? __pfx_do_recvmmsg+0x10/0x10 [ 738.299158][T23662] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 738.299181][T23662] ? __fget_files+0x3a2/0x420 [ 738.299210][T23662] __x64_sys_recvmmsg+0x198/0x250 [ 738.299230][T23662] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 738.299256][T23662] do_syscall_64+0x166/0x520 [ 738.299278][T23662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.299295][T23662] ? clear_bhb_loop+0x70/0xc0 [ 738.299314][T23662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.299330][T23662] RIP: 0033:0x7f58e4f9e159 [ 738.299346][T23662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.299361][T23662] RSP: 002b:00007f58e5e04028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 738.299381][T23662] RAX: ffffffffffffffda RBX: 00007f58e5226090 RCX: 00007f58e4f9e159 [ 738.299393][T23662] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 738.299404][T23662] RBP: 00007f58e5e04090 R08: 0000000000000000 R09: 0000000000000000 [ 738.299415][T23662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.299426][T23662] R13: 00007f58e5226128 R14: 00007f58e5226090 R15: 00007ffdde2818e8 [ 738.299452][T23662] [ 738.367239][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'. [ 738.544203][T23667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4320'. [ 738.606907][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4320'. [ 738.637086][T23664] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.810203][T23664] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.053169][T23680] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4323'. [ 739.251192][T23664] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.451319][T23664] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.794017][ T83] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.991867][ T8662] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.005362][ T8656] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.006615][ T6033] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.323758][T23711] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4333'. [ 740.363266][T23711] netlink: 'syz.1.4333': attribute type 1 has an invalid length. [ 740.417139][T23711] 8021q: adding VLAN 0 to HW filter on device bond9 [ 740.492848][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4336'. [ 740.522396][T23711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.541625][T23711] bond9: (slave bond0): Enslaving as an active interface with a down link [ 740.869896][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4338'. [ 741.071145][T23720] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.099182][T23732] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4340'. [ 741.471903][T23720] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.502061][T23741] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.756551][T23720] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.783280][T23741] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.839152][T23756] __nla_validate_parse: 1 callbacks suppressed [ 741.852160][T23756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4348'. [ 741.934212][T23720] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.011929][T23741] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.130509][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4350'. [ 742.163755][T23741] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.476742][ T6033] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.518293][ T8648] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.586776][ T6033] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.595719][ T8648] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.754917][T23771] netlink: 'syz.7.4354': attribute type 3 has an invalid length. [ 743.469913][ T6033] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.587244][ T8648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.678434][ T83] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.685764][ T8656] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.863463][T23799] FAULT_INJECTION: forcing a failure. [ 743.863463][T23799] name failslab, interval 1, probability 0, space 0, times 0 [ 743.863527][T23799] CPU: 0 UID: 0 PID: 23799 Comm: syz.3.4364 Not tainted syzkaller #0 PREEMPT(full) [ 743.863552][T23799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 743.863564][T23799] Call Trace: [ 743.863573][T23799] [ 743.863583][T23799] dump_stack_lvl+0xe8/0x150 [ 743.863617][T23799] should_fail_ex+0x410/0x560 [ 743.863647][T23799] should_failslab+0xa8/0x100 [ 743.863674][T23799] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 743.863696][T23799] ? pfn_valid+0x125/0x4c0 [ 743.863719][T23799] ? pfn_valid+0x125/0x4c0 [ 743.863748][T23799] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 743.863781][T23799] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 743.863812][T23799] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 743.863842][T23799] ? 0xffffffffa0404800 [ 743.863907][T23799] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 743.863936][T23799] ? _copy_from_user+0x94/0xb0 [ 743.863955][T23799] ? bpf_test_init+0x113/0x150 [ 743.863973][T23799] ? xdp_convert_md_to_buff+0x5b/0x330 [ 743.863997][T23799] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 743.864033][T23799] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 743.864059][T23799] ? __fget_files+0x2a/0x420 [ 743.864088][T23799] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 743.864110][T23799] bpf_prog_test_run+0x2c5/0x340 [ 743.864135][T23799] __sys_bpf+0xa22/0xd90 [ 743.864164][T23799] ? __pfx___sys_bpf+0x10/0x10 [ 743.864195][T23799] ? __fget_files+0x2a/0x420 [ 743.864234][T23799] ? ksys_write+0x242/0x270 [ 743.864262][T23799] ? __pfx_ksys_write+0x10/0x10 [ 743.864293][T23799] __x64_sys_bpf+0xba/0xd0 [ 743.864314][T23799] do_syscall_64+0x166/0x520 [ 743.864339][T23799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.864358][T23799] ? clear_bhb_loop+0x70/0xc0 [ 743.864381][T23799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.864400][T23799] RIP: 0033:0x7f66dbf9e159 [ 743.864417][T23799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.864433][T23799] RSP: 002b:00007f66dcf30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 743.864455][T23799] RAX: ffffffffffffffda RBX: 00007f66dc225fa0 RCX: 00007f66dbf9e159 [ 743.864470][T23799] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 743.864483][T23799] RBP: 00007f66dcf30090 R08: 0000000000000000 R09: 0000000000000000 [ 743.864495][T23799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.864506][T23799] R13: 00007f66dc226038 R14: 00007f66dc225fa0 R15: 00007ffd4891fcf8 [ 743.864538][T23799] [ 744.393765][T23804] bond3: entered allmulticast mode [ 744.520519][T23810] wireguard0: entered promiscuous mode [ 744.537313][T23810] wireguard0: entered allmulticast mode [ 744.537831][T23810] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 744.538523][T23810] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 744.578110][T23824] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4367'. [ 744.673680][T23815] tun0: tun_chr_ioctl cmd 1074025680 [ 744.975331][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4372'. [ 745.224435][T23839] FAULT_INJECTION: forcing a failure. [ 745.224435][T23839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.255750][T23839] CPU: 1 UID: 0 PID: 23839 Comm: syz.5.4374 Not tainted syzkaller #0 PREEMPT(full) [ 745.255785][T23839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 745.255799][T23839] Call Trace: [ 745.255808][T23839] [ 745.255817][T23839] dump_stack_lvl+0xe8/0x150 [ 745.255864][T23839] should_fail_ex+0x410/0x560 [ 745.255899][T23839] _copy_to_user+0x31/0xb0 [ 745.255923][T23839] simple_read_from_buffer+0xe1/0x170 [ 745.255955][T23839] proc_fail_nth_read+0x1bb/0x230 [ 745.255984][T23839] ? common_file_perm+0x20e/0x2b0 [ 745.256020][T23839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.256054][T23839] ? rw_verify_area+0x24a/0x4c0 [ 745.256085][T23839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.256115][T23839] vfs_read+0x213/0xa80 [ 745.256150][T23839] ? __pfx___mutex_lock+0x10/0x10 [ 745.256179][T23839] ? __pfx_vfs_read+0x10/0x10 [ 745.256209][T23839] ? __fget_files+0x2a/0x420 [ 745.256253][T23839] ? __fget_files+0x3a2/0x420 [ 745.256277][T23839] ? __fget_files+0x2a/0x420 [ 745.256313][T23839] ksys_read+0x150/0x270 [ 745.256345][T23839] ? __pfx_ksys_read+0x10/0x10 [ 745.256385][T23839] do_syscall_64+0x166/0x520 [ 745.256412][T23839] ? trace_irq_disable+0x3b/0x140 [ 745.256432][T23839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.256454][T23839] ? clear_bhb_loop+0x70/0xc0 [ 745.256482][T23839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.256504][T23839] RIP: 0033:0x7f668995e98e [ 745.256525][T23839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.256543][T23839] RSP: 002b:00007f668a935fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.256567][T23839] RAX: ffffffffffffffda RBX: 00007f668a9366c0 RCX: 00007f668995e98e [ 745.256583][T23839] RDX: 000000000000000f RSI: 00007f668a9360a0 RDI: 0000000000000005 [ 745.256597][T23839] RBP: 00007f668a936090 R08: 0000000000000000 R09: 0000000000000000 [ 745.256612][T23839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.256625][T23839] R13: 00007f6689c26038 R14: 00007f6689c25fa0 R15: 00007ffe20c1a348 [ 745.256662][T23839] [ 745.605154][T23850] xt_hashlimit: size too large, truncated to 1048576 [ 745.694564][T23848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4377'. [ 746.332726][T23866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4380'. [ 746.392081][T23871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4380'. [ 746.422741][T23863] team0: Port device veth3 added [ 746.880170][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4387'. [ 747.082482][T23886] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.364188][T23897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.418665][T23897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.480699][T23886] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.899662][T23886] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.045804][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4392'. [ 748.045927][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4392'. [ 748.100295][T23911] netlink: 'syz.5.4392': attribute type 1 has an invalid length. [ 748.301829][T23886] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.701440][ T8648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.717123][ T83] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.864953][T23938] FAULT_INJECTION: forcing a failure. [ 748.864953][T23938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.880332][ T8648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.888900][T23938] CPU: 0 UID: 0 PID: 23938 Comm: syz.3.4403 Not tainted syzkaller #0 PREEMPT(full) [ 748.888929][T23938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.888941][T23938] Call Trace: [ 748.888949][T23938] [ 748.888958][T23938] dump_stack_lvl+0xe8/0x150 [ 748.888994][T23938] should_fail_ex+0x410/0x560 [ 748.889027][T23938] _copy_from_user+0x2d/0xb0 [ 748.889049][T23938] ___sys_recvmsg+0x173/0x5a0 [ 748.889077][T23938] ? __pfx____sys_recvmsg+0x10/0x10 [ 748.889104][T23938] ? lock_acquire+0x115/0x350 [ 748.889154][T23938] do_recvmmsg+0x31a/0x7f0 [ 748.889185][T23938] ? __pfx_do_recvmmsg+0x10/0x10 [ 748.889220][T23938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 748.889258][T23938] ? __fget_files+0x3a2/0x420 [ 748.889296][T23938] __x64_sys_recvmmsg+0x198/0x250 [ 748.889321][T23938] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 748.889355][T23938] do_syscall_64+0x166/0x520 [ 748.889381][T23938] ? trace_irq_disable+0x3b/0x140 [ 748.889399][T23938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.889420][T23938] ? clear_bhb_loop+0x70/0xc0 [ 748.889446][T23938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.889467][T23938] RIP: 0033:0x7f66dbf9e159 [ 748.889488][T23938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.889506][T23938] RSP: 002b:00007f66dcf0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 748.889529][T23938] RAX: ffffffffffffffda RBX: 00007f66dc226090 RCX: 00007f66dbf9e159 [ 748.889544][T23938] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 748.889558][T23938] RBP: 00007f66dcf0f090 R08: 0000000000000000 R09: 0000000000000000 [ 748.889571][T23938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.889584][T23938] R13: 00007f66dc226128 R14: 00007f66dc226090 R15: 00007ffd4891fcf8 [ 748.889618][T23938] [ 749.203855][T23941] FAULT_INJECTION: forcing a failure. [ 749.203855][T23941] name failslab, interval 1, probability 0, space 0, times 0 [ 749.203959][T23941] CPU: 1 UID: 0 PID: 23941 Comm: syz.5.4402 Not tainted syzkaller #0 PREEMPT(full) [ 749.203985][T23941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.203998][T23941] Call Trace: [ 749.204008][T23941] [ 749.204018][T23941] dump_stack_lvl+0xe8/0x150 [ 749.204055][T23941] should_fail_ex+0x410/0x560 [ 749.204090][T23941] should_failslab+0xa8/0x100 [ 749.204116][T23941] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 749.204140][T23941] ? pfn_valid+0x125/0x4c0 [ 749.204166][T23941] ? pfn_valid+0x125/0x4c0 [ 749.204190][T23941] ? pfn_valid+0x125/0x4c0 [ 749.204220][T23941] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 749.204256][T23941] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 749.204293][T23941] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 749.204318][T23941] ? 0xffffffffa0404800 [ 749.204391][T23941] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 749.204430][T23941] ? xdp_convert_md_to_buff+0x5b/0x330 [ 749.204457][T23941] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 749.204499][T23941] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 749.204529][T23941] ? __fget_files+0x2a/0x420 [ 749.204562][T23941] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 749.204588][T23941] bpf_prog_test_run+0x2c5/0x340 [ 749.204618][T23941] __sys_bpf+0xa22/0xd90 [ 749.204649][T23941] ? __pfx___sys_bpf+0x10/0x10 [ 749.204683][T23941] ? __fget_files+0x2a/0x420 [ 749.204722][T23941] ? ksys_write+0x242/0x270 [ 749.204757][T23941] ? __pfx_ksys_write+0x10/0x10 [ 749.204787][T23941] __x64_sys_bpf+0xba/0xd0 [ 749.204809][T23941] do_syscall_64+0x166/0x520 [ 749.204834][T23941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.204853][T23941] ? clear_bhb_loop+0x70/0xc0 [ 749.204877][T23941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.204895][T23941] RIP: 0033:0x7f668999e159 [ 749.204913][T23941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.204929][T23941] RSP: 002b:00007f668a915028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.204951][T23941] RAX: ffffffffffffffda RBX: 00007f6689c26090 RCX: 00007f668999e159 [ 749.204965][T23941] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 749.204978][T23941] RBP: 00007f668a915090 R08: 0000000000000000 R09: 0000000000000000 [ 749.204990][T23941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.205001][T23941] R13: 00007f6689c26128 R14: 00007f6689c26090 R15: 00007ffe20c1a348 [ 749.205032][T23941] [ 749.525936][ T8662] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.780520][T23953] netlink: 'syz.5.4406': attribute type 1 has an invalid length. [ 749.912600][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4408'. [ 749.996718][T23953] bond4: entered promiscuous mode [ 750.006182][T23953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.180923][T23955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.181879][T23955] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 750.181935][T23955] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 750.199117][T23970] IPVS: lc: FWM 3 0x00000003 - no destination available [ 750.209919][T23955] bond4: (slave ip6gre1): making interface the new active one [ 750.209984][T23955] ip6gre1: entered promiscuous mode [ 750.226050][T23955] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 750.434219][T23982] FAULT_INJECTION: forcing a failure. [ 750.434219][T23982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.434273][T23982] CPU: 0 UID: 0 PID: 23982 Comm: syz.7.4414 Not tainted syzkaller #0 PREEMPT(full) [ 750.434305][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 750.434316][T23982] Call Trace: [ 750.434324][T23982] [ 750.434333][T23982] dump_stack_lvl+0xe8/0x150 [ 750.434364][T23982] should_fail_ex+0x410/0x560 [ 750.434393][T23982] _copy_from_user+0x2d/0xb0 [ 750.434411][T23982] ___sys_recvmsg+0x173/0x5a0 [ 750.434435][T23982] ? __pfx____sys_recvmsg+0x10/0x10 [ 750.434459][T23982] ? lock_acquire+0x115/0x350 [ 750.434505][T23982] do_recvmmsg+0x31a/0x7f0 [ 750.434531][T23982] ? __pfx_do_recvmmsg+0x10/0x10 [ 750.434561][T23982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 750.434585][T23982] ? __fget_files+0x3a2/0x420 [ 750.434618][T23982] __x64_sys_recvmmsg+0x198/0x250 [ 750.434639][T23982] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 750.434669][T23982] do_syscall_64+0x166/0x520 [ 750.434690][T23982] ? trace_irq_disable+0x3b/0x140 [ 750.434706][T23982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.434725][T23982] ? clear_bhb_loop+0x70/0xc0 [ 750.434745][T23982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.434762][T23982] RIP: 0033:0x7f58e4f9e159 [ 750.434781][T23982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.434797][T23982] RSP: 002b:00007f58e5e04028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 750.434818][T23982] RAX: ffffffffffffffda RBX: 00007f58e5226090 RCX: 00007f58e4f9e159 [ 750.434831][T23982] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 750.434842][T23982] RBP: 00007f58e5e04090 R08: 0000000000000000 R09: 0000000000000000 [ 750.434854][T23982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.434864][T23982] R13: 00007f58e5226128 R14: 00007f58e5226090 R15: 00007ffdde2818e8 [ 750.434893][T23982] [ 751.525209][T23999] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 751.615993][T24006] macvlan0: entered promiscuous mode [ 751.640149][T24006] netlink: 'syz.7.4423': attribute type 1 has an invalid length. [ 751.640202][T24006] netlink: 'syz.7.4423': attribute type 2 has an invalid length. [ 751.735836][T24017] netlink: 'syz.7.4423': attribute type 1 has an invalid length. [ 751.735876][T24017] netlink: 'syz.7.4423': attribute type 2 has an invalid length. [ 752.475637][T24046] lo speed is unknown, defaulting to 1000 [ 752.873042][T24061] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 753.152488][T24059] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 753.204196][T24059] bond5 (unregistering): Released all slaves [ 753.551203][T24047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4429'. [ 753.562776][T24077] tun0: tun_chr_ioctl cmd 1074025680 [ 757.342501][T24098] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.343128][T24098] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.395268][T24098] bridge0: entered allmulticast mode [ 757.421887][T24102] bridge_slave_1: left allmulticast mode [ 757.422020][T24102] bridge_slave_1: left promiscuous mode [ 757.422541][T24102] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.477943][T24103] netlink: 'syz.5.4442': attribute type 1 has an invalid length. [ 757.488602][T24102] bridge_slave_0: left allmulticast mode [ 757.494802][T24102] bridge_slave_0: left promiscuous mode [ 757.498693][T24102] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.516096][T24105] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4439'. [ 758.152215][T24120] bond5: entered promiscuous mode [ 758.164466][T24120] bond5: entered allmulticast mode [ 758.186053][T24120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 758.366607][T24127] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4444'. [ 759.496605][T24169] veth1_to_bond: entered allmulticast mode [ 759.504583][T24169] veth1_to_bond: entered promiscuous mode [ 759.507370][T24167] veth1_to_bond: left promiscuous mode [ 759.507796][T24167] veth1_to_bond: left allmulticast mode [ 759.908392][T24175] syz_tun: entered promiscuous mode [ 760.088706][T24186] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4458'. [ 761.515898][T24229] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4469'. [ 761.515943][T24229] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4469'. [ 762.011048][T24247] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4477'. [ 762.519565][T24245] bridge0: left allmulticast mode [ 762.763330][T24245] dummy0: left promiscuous mode [ 763.130498][T24245] macvlan0: left promiscuous mode [ 763.152495][T24245] tipc: Resetting bearer [ 763.373626][T24245] bond2: left allmulticast mode [ 763.381927][T24245] bond3: left promiscuous mode [ 763.381970][T24245] ip6gre2: left promiscuous mode [ 763.433938][T24245] bond4: left allmulticast mode [ 763.433991][T24245] bond4: left promiscuous mode [ 763.445876][T24245] macvlan3: left promiscuous mode [ 763.445903][T24245] macvlan3: left allmulticast mode [ 763.463895][T24245] bond5: left allmulticast mode [ 763.464030][T24245] bond5: left promiscuous mode [ 763.475952][T24245] macvlan4: left promiscuous mode [ 763.481987][T24245] macvlan4: left allmulticast mode [ 763.535001][T24245] bond6: left promiscuous mode [ 763.539955][T24245] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 763.541159][T24245] ip6gretap1: left allmulticast mode [ 763.576688][T24266] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 763.585786][ T8648] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.588503][ T8662] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.588545][ T8662] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.588579][ T8662] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.927978][T24303] netlink: 'syz.5.4487': attribute type 21 has an invalid length. [ 763.937275][T24303] IPv6: NLM_F_CREATE should be specified when creating new route [ 763.947412][T24303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.947454][T24303] IPv6: NLM_F_CREATE should be set when creating new route [ 763.947505][T24303] IPv6: NLM_F_CREATE should be set when creating new route [ 763.947545][T24303] IPv6: NLM_F_CREATE should be set when creating new route [ 763.985157][T24303] netlink: 'syz.5.4487': attribute type 2 has an invalid length. [ 764.270826][T24311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.333402][T24314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.990508][T24334] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4497'. [ 764.994154][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4496'. [ 765.009970][T24338] netlink: 296 bytes leftover after parsing attributes in process `syz.5.4496'. [ 765.291594][T24347] netlink: 'syz.1.4499': attribute type 21 has an invalid length. [ 765.301772][T24347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.301809][T24347] IPv6: NLM_F_CREATE should be set when creating new route [ 765.301907][T24347] IPv6: NLM_F_CREATE should be set when creating new route [ 765.301971][T24347] IPv6: NLM_F_CREATE should be set when creating new route [ 765.343851][T24347] netlink: 'syz.1.4499': attribute type 2 has an invalid length. [ 765.537605][T24349] vxcan2: entered allmulticast mode [ 765.660229][T24353] sit1: entered allmulticast mode [ 765.741114][T24356] netlink: 'syz.1.4501': attribute type 21 has an invalid length. [ 765.789698][T24356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4501'. [ 766.055069][T24368] netlink: zone id is out of range [ 766.055106][T24368] netlink: zone id is out of range [ 766.071198][T24368] netlink: zone id is out of range [ 766.078112][T24368] netlink: zone id is out of range [ 766.078155][T24368] netlink: zone id is out of range [ 766.092122][T24368] netlink: zone id is out of range [ 766.100445][T24368] netlink: zone id is out of range [ 766.469658][T24381] netlink: 'syz.5.4511': attribute type 21 has an invalid length. [ 766.469763][T24381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.493774][T24381] netlink: 'syz.5.4511': attribute type 2 has an invalid length. [ 766.570623][T24383] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4512'. [ 766.983770][T24396] netlink: 'syz.7.4515': attribute type 1 has an invalid length. [ 767.120762][T24398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4517'. [ 767.131807][T24398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4517'. [ 767.154270][T24398] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 767.614808][T24409] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4520'. [ 768.042662][T24415] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4523'. [ 768.072861][T24415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4523'. [ 768.487966][T24420] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4525'. [ 768.577404][T24423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4526'. [ 768.588635][T24430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4526'. [ 769.822846][T24455] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 769.825770][T24454] netlink: 'syz.1.4533': attribute type 16 has an invalid length. [ 769.825826][T24454] netlink: 'syz.1.4533': attribute type 17 has an invalid length. [ 770.654247][T24468] lo speed is unknown, defaulting to 1000 [ 770.661498][T24467] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 770.942940][T24463] __nla_validate_parse: 3 callbacks suppressed [ 770.950697][T24463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4534'. [ 771.093893][T24486] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4541'. [ 771.243191][T24483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4539'. [ 771.345125][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4539'. [ 771.463470][T24493] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4542'. [ 771.909629][T24493] syzkaller0: entered promiscuous mode [ 771.917085][T24493] syzkaller0: entered allmulticast mode [ 772.001401][T24501] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 772.288159][T24504] FAULT_INJECTION: forcing a failure. [ 772.288159][T24504] name failslab, interval 1, probability 0, space 0, times 0 [ 772.288213][T24504] CPU: 0 UID: 0 PID: 24504 Comm: syz.1.4544 Not tainted syzkaller #0 PREEMPT(full) [ 772.288239][T24504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.288252][T24504] Call Trace: [ 772.288261][T24504] [ 772.288270][T24504] dump_stack_lvl+0xe8/0x150 [ 772.288310][T24504] should_fail_ex+0x410/0x560 [ 772.288345][T24504] should_failslab+0xa8/0x100 [ 772.288371][T24504] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 772.288396][T24504] ? pfn_valid+0x125/0x4c0 [ 772.288421][T24504] ? pfn_valid+0x125/0x4c0 [ 772.288444][T24504] ? pfn_valid+0x125/0x4c0 [ 772.288473][T24504] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 772.288509][T24504] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 772.288544][T24504] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 772.288568][T24504] ? 0xffffffffa0404800 [ 772.288638][T24504] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 772.288670][T24504] ? _copy_from_user+0x94/0xb0 [ 772.288690][T24504] ? bpf_test_init+0x113/0x150 [ 772.288710][T24504] ? xdp_convert_md_to_buff+0x5b/0x330 [ 772.288732][T24504] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 772.288765][T24504] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 772.288789][T24504] ? __fget_files+0x2a/0x420 [ 772.288816][T24504] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 772.288836][T24504] bpf_prog_test_run+0x2c5/0x340 [ 772.288860][T24504] __sys_bpf+0xa22/0xd90 [ 772.288885][T24504] ? __pfx___sys_bpf+0x10/0x10 [ 772.288914][T24504] ? __fget_files+0x2a/0x420 [ 772.288955][T24504] ? ksys_write+0x242/0x270 [ 772.288985][T24504] ? __pfx_ksys_write+0x10/0x10 [ 772.289030][T24504] __x64_sys_bpf+0xba/0xd0 [ 772.289054][T24504] do_syscall_64+0x166/0x520 [ 772.289076][T24504] ? trace_irq_disable+0x3b/0x140 [ 772.289093][T24504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.289111][T24504] ? clear_bhb_loop+0x70/0xc0 [ 772.289133][T24504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.289150][T24504] RIP: 0033:0x7fc8d8d9e159 [ 772.289167][T24504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.289183][T24504] RSP: 002b:00007fc8d9b9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 772.289204][T24504] RAX: ffffffffffffffda RBX: 00007fc8d9025fa0 RCX: 00007fc8d8d9e159 [ 772.289218][T24504] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 772.289230][T24504] RBP: 00007fc8d9b9a090 R08: 0000000000000000 R09: 0000000000000000 [ 772.289241][T24504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 772.289251][T24504] R13: 00007fc8d9026038 R14: 00007fc8d9025fa0 R15: 00007ffd3e95c318 [ 772.289281][T24504] [ 776.177169][T24511] team0: Port device wlan0 added [ 776.348559][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4550'. [ 776.361101][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4550'. [ 776.491813][T24538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4551'. [ 776.654709][T24547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4555'. [ 776.763555][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4555'. [ 777.137743][T24538] bond1: entered allmulticast mode [ 777.137936][T24538] bond1: entered promiscuous mode [ 777.141274][T24538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 777.212635][T24540] netpci0: tun_chr_ioctl cmd 1074025678 [ 777.218650][T24540] netpci0: group set to 0 [ 777.454157][ T8661] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 777.566296][ T8661] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.574293][ T8661] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.574383][ T8661] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.574458][ T8661] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.849433][T24574] lo speed is unknown, defaulting to 1000 [ 778.147772][T24583] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4563'. [ 778.156128][T24584] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4563'. [ 778.246088][T24584] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4563'. [ 778.481137][T24591] netlink: 'syz.0.4564': attribute type 1 has an invalid length. [ 778.568536][T24591] 8021q: adding VLAN 0 to HW filter on device bond6 [ 778.678765][T24593] bond6: (slave veth3): Enslaving as an active interface with a down link [ 779.087081][T24591] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.402334][T24591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.429644][T24591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.623633][T24591] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 779.623754][T24591] mac80211_hwsim hwsim34 wlan0: left allmulticast mode [ 779.675272][T24591] bond1: left promiscuous mode [ 779.675338][T24591] bond1: left allmulticast mode [ 779.690400][T24591] bond2: left allmulticast mode [ 779.690448][T24591] bond2: left promiscuous mode [ 779.700378][T24591] macvlan2: left promiscuous mode [ 779.700438][T24591] macvlan2: left allmulticast mode [ 779.777612][T24591] bond3: left allmulticast mode [ 779.777680][T24591] bond3: left promiscuous mode [ 779.782818][T24591] macvlan3: left promiscuous mode [ 779.782855][T24591] macvlan3: left allmulticast mode [ 779.804346][ T8648] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 779.846062][T24594] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 779.855883][T24594] bond6: (slave batadv1): making interface the new active one [ 779.866296][T24594] batadv1: entered promiscuous mode [ 779.872158][T24594] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 780.109317][T24625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4570'. [ 780.132758][ T8665] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.132891][ T8665] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.133016][ T8665] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.133083][ T8665] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.133159][ T8665] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.133220][ T8665] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.133316][ T8665] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.133382][ T8665] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.249685][T24628] FAULT_INJECTION: forcing a failure. [ 780.249685][T24628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.249814][T24628] CPU: 1 UID: 0 PID: 24628 Comm: syz.7.4571 Not tainted syzkaller #0 PREEMPT(full) [ 780.249840][T24628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 780.249851][T24628] Call Trace: [ 780.249859][T24628] [ 780.249868][T24628] dump_stack_lvl+0xe8/0x150 [ 780.249909][T24628] should_fail_ex+0x410/0x560 [ 780.249941][T24628] _copy_from_user+0x2d/0xb0 [ 780.249960][T24628] ___sys_recvmsg+0x173/0x5a0 [ 780.249988][T24628] ? __pfx____sys_recvmsg+0x10/0x10 [ 780.250013][T24628] ? lock_acquire+0x115/0x350 [ 780.250060][T24628] do_recvmmsg+0x31a/0x7f0 [ 780.250089][T24628] ? __pfx_do_recvmmsg+0x10/0x10 [ 780.250106][T24628] ? taprio_dequeue+0x250/0x540 [ 780.250235][T24628] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 780.250298][T24628] ? __pfx_sched_clock_cpu+0x10/0x10 [ 780.250327][T24628] __x64_sys_recvmmsg+0x198/0x250 [ 780.250346][T24628] ? __irq_exit_rcu+0xcb/0x220 [ 780.250372][T24628] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 780.250403][T24628] do_syscall_64+0x166/0x520 [ 780.250429][T24628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.250448][T24628] ? clear_bhb_loop+0x70/0xc0 [ 780.250471][T24628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.250489][T24628] RIP: 0033:0x7f58e4f9e159 [ 780.250508][T24628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.250525][T24628] RSP: 002b:00007f58e5e25028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 780.250566][T24628] RAX: ffffffffffffffda RBX: 00007f58e5225fa0 RCX: 00007f58e4f9e159 [ 780.250581][T24628] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 780.250594][T24628] RBP: 00007f58e5e25090 R08: 0000000000000000 R09: 0000000000000000 [ 780.250606][T24628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 780.250618][T24628] R13: 00007f58e5226038 R14: 00007f58e5225fa0 R15: 00007ffdde2818e8 [ 780.250650][T24628] [ 780.408380][T24619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.859304][T24636] syzkaller0: entered promiscuous mode [ 780.865698][T24636] syzkaller0: entered allmulticast mode [ 780.884481][T24640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4576'. [ 781.556706][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 781.851806][T24663] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 784.777248][T24663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.216048][T24679] FAULT_INJECTION: forcing a failure. [ 785.216048][T24679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.216183][T24679] CPU: 1 UID: 0 PID: 24679 Comm: syz.0.4583 Not tainted syzkaller #0 PREEMPT(full) [ 785.216212][T24679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.216226][T24679] Call Trace: [ 785.216235][T24679] [ 785.216245][T24679] dump_stack_lvl+0xe8/0x150 [ 785.216280][T24679] should_fail_ex+0x410/0x560 [ 785.216316][T24679] _copy_from_user+0x2d/0xb0 [ 785.216339][T24679] ___sys_recvmsg+0x173/0x5a0 [ 785.216377][T24679] ? __pfx____sys_recvmsg+0x10/0x10 [ 785.216438][T24679] do_recvmmsg+0x31a/0x7f0 [ 785.216468][T24679] ? irqentry_exit+0x218/0x910 [ 785.216496][T24679] ? __pfx_do_recvmmsg+0x10/0x10 [ 785.216529][T24679] ? __x64_sys_recvmmsg+0xe1/0x250 [ 785.216549][T24679] ? __x64_sys_recvmmsg+0x12f/0x250 [ 785.216572][T24679] ? kasan_check_range+0x30/0x2c0 [ 785.216607][T24679] __x64_sys_recvmmsg+0x198/0x250 [ 785.216631][T24679] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 785.216665][T24679] do_syscall_64+0x166/0x520 [ 785.216691][T24679] ? trace_irq_disable+0x3b/0x140 [ 785.216711][T24679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.216732][T24679] ? clear_bhb_loop+0x70/0xc0 [ 785.216758][T24679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.216779][T24679] RIP: 0033:0x7f2efe99e159 [ 785.216800][T24679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.216818][T24679] RSP: 002b:00007f2eff7df028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 785.216843][T24679] RAX: ffffffffffffffda RBX: 00007f2efec25fa0 RCX: 00007f2efe99e159 [ 785.216858][T24679] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 785.216872][T24679] RBP: 00007f2eff7df090 R08: 0000000000000000 R09: 0000000000000000 [ 785.216886][T24679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 785.216898][T24679] R13: 00007f2efec26038 R14: 00007f2efec25fa0 R15: 00007ffde4fac218 [ 785.216932][T24679] [ 785.597730][T24684] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4587'. [ 785.608564][T24684] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4587'. [ 785.617815][T24684] netlink: 'syz.0.4587': attribute type 6 has an invalid length. [ 785.638923][T24684] netlink: 'syz.0.4587': attribute type 5 has an invalid length. [ 785.638975][T24684] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4587'. [ 785.676873][T24686] tipc: Enabling of bearer rejected, failed to enable media [ 785.786651][T24690] netlink: 'syz.7.4586': attribute type 1 has an invalid length. [ 785.796608][T24689] netlink: 'syz.7.4586': attribute type 1 has an invalid length. [ 785.834382][T24690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 786.041960][T24690] bond1: (slave geneve2): making interface the new active one [ 786.053735][T24697] FAULT_INJECTION: forcing a failure. [ 786.053735][T24697] name failslab, interval 1, probability 0, space 0, times 0 [ 786.053782][T24697] CPU: 0 UID: 0 PID: 24697 Comm: syz.1.4590 Not tainted syzkaller #0 PREEMPT(full) [ 786.053804][T24697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 786.053815][T24697] Call Trace: [ 786.053823][T24697] [ 786.053831][T24697] dump_stack_lvl+0xe8/0x150 [ 786.053862][T24697] should_fail_ex+0x410/0x560 [ 786.053892][T24697] should_failslab+0xa8/0x100 [ 786.053915][T24697] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 786.053936][T24697] ? pfn_valid+0x125/0x4c0 [ 786.053957][T24697] ? pfn_valid+0x125/0x4c0 [ 786.053976][T24697] ? pfn_valid+0x125/0x4c0 [ 786.054000][T24697] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 786.054031][T24697] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 786.054060][T24697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 786.054081][T24697] ? 0xffffffffa0404800 [ 786.054140][T24697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 786.054167][T24697] ? _copy_from_user+0x94/0xb0 [ 786.054184][T24697] ? bpf_test_init+0x113/0x150 [ 786.054207][T24697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 786.054230][T24697] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 786.054263][T24697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 786.054287][T24697] ? __fget_files+0x2a/0x420 [ 786.054314][T24697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 786.054335][T24697] bpf_prog_test_run+0x2c5/0x340 [ 786.054359][T24697] __sys_bpf+0xa22/0xd90 [ 786.054399][T24697] ? __pfx___sys_bpf+0x10/0x10 [ 786.054435][T24697] ? __fget_files+0x2a/0x420 [ 786.054481][T24697] ? ksys_write+0x242/0x270 [ 786.054512][T24697] ? __pfx_ksys_write+0x10/0x10 [ 786.054545][T24697] __x64_sys_bpf+0xba/0xd0 [ 786.054569][T24697] do_syscall_64+0x166/0x520 [ 786.054596][T24697] ? trace_irq_disable+0x3b/0x140 [ 786.054614][T24697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.054636][T24697] ? clear_bhb_loop+0x70/0xc0 [ 786.054658][T24697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.054675][T24697] RIP: 0033:0x7fc8d8d9e159 [ 786.054691][T24697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.054706][T24697] RSP: 002b:00007fc8d9b9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 786.054726][T24697] RAX: ffffffffffffffda RBX: 00007fc8d9025fa0 RCX: 00007fc8d8d9e159 [ 786.054738][T24697] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 786.054750][T24697] RBP: 00007fc8d9b9a090 R08: 0000000000000000 R09: 0000000000000000 [ 786.054761][T24697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 786.054771][T24697] R13: 00007fc8d9026038 R14: 00007fc8d9025fa0 R15: 00007ffd3e95c318 [ 786.054801][T24697] [ 786.101535][T24690] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 786.454032][T24702] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4592'. [ 786.749517][T24707] syzkaller1: entered promiscuous mode [ 786.756716][T24707] syzkaller1: entered allmulticast mode [ 786.846535][T24711] netlink: 'syz.5.4594': attribute type 1 has an invalid length. [ 786.846664][T24711] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4594'. [ 786.846702][T24711] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4594'. [ 787.112867][T24719] tun0: tun_chr_ioctl cmd 1074025680 [ 787.470197][T24730] syzkaller0: entered promiscuous mode [ 787.478897][T24730] syzkaller0: entered allmulticast mode [ 788.420052][T24754] netlink: 'syz.5.4605': attribute type 1 has an invalid length. [ 788.432974][T24753] netlink: 'syz.7.4604': attribute type 21 has an invalid length. [ 788.624678][T24759] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4605'. [ 788.624806][T24759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4605'. [ 788.628049][T24759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4605'. [ 789.559129][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 791.346851][T24743] tun0: tun_chr_ioctl cmd 1074025680 [ 791.392956][T24753] netlink: 'syz.7.4604': attribute type 1 has an invalid length. [ 791.392999][T24753] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4604'. [ 791.844263][T24770] netlink: 'syz.5.4610': attribute type 7 has an invalid length. [ 791.924838][T24771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4609'. [ 792.309192][T24781] FAULT_INJECTION: forcing a failure. [ 792.309192][T24781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.309304][T24781] CPU: 1 UID: 0 PID: 24781 Comm: syz.0.4615 Not tainted syzkaller #0 PREEMPT(full) [ 792.309326][T24781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.309336][T24781] Call Trace: [ 792.309344][T24781] [ 792.309353][T24781] dump_stack_lvl+0xe8/0x150 [ 792.309391][T24781] should_fail_ex+0x410/0x560 [ 792.309426][T24781] _copy_from_user+0x2d/0xb0 [ 792.309449][T24781] ___sys_recvmsg+0x173/0x5a0 [ 792.309479][T24781] ? __pfx____sys_recvmsg+0x10/0x10 [ 792.309535][T24781] do_recvmmsg+0x31a/0x7f0 [ 792.309563][T24781] ? __pfx_do_recvmmsg+0x10/0x10 [ 792.309595][T24781] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 792.309625][T24781] ? __fget_files+0x3a2/0x420 [ 792.309661][T24781] __x64_sys_recvmmsg+0x198/0x250 [ 792.309686][T24781] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 792.309717][T24781] do_syscall_64+0x166/0x520 [ 792.309742][T24781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.309763][T24781] ? clear_bhb_loop+0x70/0xc0 [ 792.309786][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.309806][T24781] RIP: 0033:0x7f2efe99e159 [ 792.309825][T24781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.309842][T24781] RSP: 002b:00007f2eff7df028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 792.309865][T24781] RAX: ffffffffffffffda RBX: 00007f2efec25fa0 RCX: 00007f2efe99e159 [ 792.309879][T24781] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 792.309892][T24781] RBP: 00007f2eff7df090 R08: 0000000000000000 R09: 0000000000000000 [ 792.309905][T24781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 792.309917][T24781] R13: 00007f2efec26038 R14: 00007f2efec25fa0 R15: 00007ffde4fac218 [ 792.309948][T24781] [ 792.387797][T24778] tun0: tun_chr_ioctl cmd 1074025680 [ 792.578207][T24788] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4617'. [ 792.925572][T24798] netlink: 'syz.1.4623': attribute type 13 has an invalid length. [ 793.334319][T24813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4624'. [ 793.483647][T24816] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4626'. [ 793.971159][T24822] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4628'. [ 794.057584][T24825] atomic_op ffff88807f7b91e0 conn xmit_atomic 0000000000000000 [ 794.073371][T24825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4631'. [ 794.900396][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4637'. [ 794.900441][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4637'. [ 794.900492][T24847] netlink: 'syz.3.4637': attribute type 6 has an invalid length. [ 794.948224][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4637'. [ 794.959196][T24847] netlink: 'syz.3.4637': attribute type 6 has an invalid length. [ 795.048770][T24852] netlink: 'syz.7.4639': attribute type 1 has an invalid length. [ 795.737684][T24869] netlink: 'syz.1.4640': attribute type 1 has an invalid length. [ 796.841506][T24885] syzkaller0: entered promiscuous mode [ 796.841633][T24885] syzkaller0: entered allmulticast mode [ 797.341051][T24904] __nla_validate_parse: 5 callbacks suppressed [ 797.350220][T24904] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.4653'. [ 797.501930][T24902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.511426][T24902] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4652'. [ 797.511500][T24902] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4652'. [ 797.848368][T24905] lo speed is unknown, defaulting to 1000 [ 797.996417][T24917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4657'. [ 798.063065][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4658'. [ 798.070434][T24914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4656'. [ 798.239103][T24928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4660'. [ 798.322925][T24930] netlink: 'syz.0.4660': attribute type 10 has an invalid length. [ 798.323055][T24930] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4660'. [ 798.676767][T24930] dummy0: entered promiscuous mode [ 798.893042][T24943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4663'. [ 799.164577][T24955] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 799.166816][T24955] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 799.434756][T24958] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.4671'. [ 799.535095][T24960] FAULT_INJECTION: forcing a failure. [ 799.535095][T24960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.549041][T24960] CPU: 0 UID: 0 PID: 24960 Comm: syz.5.4670 Not tainted syzkaller #0 PREEMPT(full) [ 799.549073][T24960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.549085][T24960] Call Trace: [ 799.549095][T24960] [ 799.549104][T24960] dump_stack_lvl+0xe8/0x150 [ 799.549141][T24960] should_fail_ex+0x410/0x560 [ 799.549175][T24960] _copy_from_user+0x2d/0xb0 [ 799.549197][T24960] ___sys_recvmsg+0x173/0x5a0 [ 799.549226][T24960] ? __pfx____sys_recvmsg+0x10/0x10 [ 799.549265][T24960] ? lock_acquire+0x115/0x350 [ 799.549319][T24960] do_recvmmsg+0x31a/0x7f0 [ 799.549350][T24960] ? __pfx_do_recvmmsg+0x10/0x10 [ 799.549386][T24960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 799.549416][T24960] ? __fget_files+0x3a2/0x420 [ 799.549454][T24960] __x64_sys_recvmmsg+0x198/0x250 [ 799.549479][T24960] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 799.549514][T24960] do_syscall_64+0x166/0x520 [ 799.549540][T24960] ? trace_irq_disable+0x3b/0x140 [ 799.549562][T24960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.549583][T24960] ? clear_bhb_loop+0x70/0xc0 [ 799.549609][T24960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.549629][T24960] RIP: 0033:0x7f668999e159 [ 799.549650][T24960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.549672][T24960] RSP: 002b:00007f668a936028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 799.549697][T24960] RAX: ffffffffffffffda RBX: 00007f6689c25fa0 RCX: 00007f668999e159 [ 799.549712][T24960] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 799.549726][T24960] RBP: 00007f668a936090 R08: 0000000000000000 R09: 0000000000000000 [ 799.549739][T24960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 799.549752][T24960] R13: 00007f6689c26038 R14: 00007f6689c25fa0 R15: 00007ffe20c1a348 [ 799.549785][T24960] [ 800.107977][T24935] lo speed is unknown, defaulting to 1000 [ 800.487506][T24978] bridge_slave_0: left allmulticast mode [ 800.493410][T24978] bridge_slave_0: left promiscuous mode [ 800.500997][T24978] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.518748][T24978] bridge_slave_1: left allmulticast mode [ 800.525267][T24978] bridge_slave_1: left promiscuous mode [ 800.525661][T24978] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.550400][T24978] bond0: (slave bond_slave_0): Releasing backup interface [ 800.568164][T24978] bond0: (slave bond_slave_1): Releasing backup interface [ 800.614524][T24978] team0: Port device team_slave_0 removed [ 800.631683][T24978] team0: Port device team_slave_1 removed [ 800.638623][T24978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.638647][T24978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.655941][T24978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.663461][T24978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.673978][T24978] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 800.969655][T24986] syzkaller0: entered promiscuous mode [ 800.976783][T24986] syzkaller0: entered allmulticast mode [ 801.013948][T24989] netlink: 'syz.7.4675': attribute type 11 has an invalid length. [ 801.022122][T24989] netlink: 'syz.7.4675': attribute type 4 has an invalid length. [ 804.596414][T24996] syz.3.4678 (24996) used obsolete PPPIOCDETACH ioctl [ 804.674865][T25006] netlink: 'syz.1.4681': attribute type 8 has an invalid length. [ 804.906184][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 804.952161][T25016] __nla_validate_parse: 2 callbacks suppressed [ 804.959366][T25016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4686'. [ 805.462803][T25039] netlink: 4912 bytes leftover after parsing attributes in process `syz.7.4687'. [ 805.720198][T25042] pim6reg1: entered promiscuous mode [ 805.720324][T25042] pim6reg1: entered allmulticast mode [ 805.788712][T25047] FAULT_INJECTION: forcing a failure. [ 805.788712][T25047] name failslab, interval 1, probability 0, space 0, times 0 [ 805.788767][T25047] CPU: 0 UID: 0 PID: 25047 Comm: syz.0.4689 Not tainted syzkaller #0 PREEMPT(full) [ 805.788792][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.788806][T25047] Call Trace: [ 805.788815][T25047] [ 805.788824][T25047] dump_stack_lvl+0xe8/0x150 [ 805.788859][T25047] should_fail_ex+0x410/0x560 [ 805.788893][T25047] should_failslab+0xa8/0x100 [ 805.788920][T25047] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 805.788945][T25047] ? pfn_valid+0x125/0x4c0 [ 805.788974][T25047] ? pfn_valid+0x125/0x4c0 [ 805.788998][T25047] ? pfn_valid+0x125/0x4c0 [ 805.789029][T25047] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 805.789066][T25047] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 805.789100][T25047] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 805.789126][T25047] ? 0xffffffffa0404800 [ 805.789195][T25047] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 805.789229][T25047] ? _copy_from_user+0x94/0xb0 [ 805.789251][T25047] ? bpf_test_init+0x113/0x150 [ 805.789274][T25047] ? xdp_convert_md_to_buff+0x5b/0x330 [ 805.789301][T25047] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 805.789342][T25047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 805.789372][T25047] ? __fget_files+0x2a/0x420 [ 805.789404][T25047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 805.789430][T25047] bpf_prog_test_run+0x2c5/0x340 [ 805.789459][T25047] __sys_bpf+0xa22/0xd90 [ 805.789491][T25047] ? __pfx___sys_bpf+0x10/0x10 [ 805.789527][T25047] ? __fget_files+0x2a/0x420 [ 805.789582][T25047] ? ksys_write+0x242/0x270 [ 805.789614][T25047] ? __pfx_ksys_write+0x10/0x10 [ 805.789652][T25047] __x64_sys_bpf+0xba/0xd0 [ 805.789677][T25047] do_syscall_64+0x166/0x520 [ 805.789705][T25047] ? trace_irq_disable+0x3b/0x140 [ 805.789725][T25047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.789747][T25047] ? clear_bhb_loop+0x70/0xc0 [ 805.789772][T25047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.789794][T25047] RIP: 0033:0x7f2efe99e159 [ 805.789814][T25047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.789830][T25047] RSP: 002b:00007f2eff7df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 805.789854][T25047] RAX: ffffffffffffffda RBX: 00007f2efec25fa0 RCX: 00007f2efe99e159 [ 805.789869][T25047] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 805.789884][T25047] RBP: 00007f2eff7df090 R08: 0000000000000000 R09: 0000000000000000 [ 805.789898][T25047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 805.789911][T25047] R13: 00007f2efec26038 R14: 00007f2efec25fa0 R15: 00007ffde4fac218 [ 805.789946][T25047] [ 806.116867][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4691'. [ 806.211659][T25057] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.4692'. [ 806.441458][T25064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4693'. [ 806.453063][T25065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4693'. [ 806.679915][T25054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.697547][T25054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.748264][T25064] vlan2: entered promiscuous mode [ 806.748309][T25064] gretap0: entered promiscuous mode [ 806.794856][T25065] vlan2: entered promiscuous mode [ 806.904166][T25054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.904239][T25054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.940413][T25057] lo speed is unknown, defaulting to 1000 [ 807.237079][T25054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.237142][T25054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.368808][T25076] netlink: 'syz.7.4696': attribute type 1 has an invalid length. [ 807.733668][T25078] veth7: entered allmulticast mode [ 807.747184][T25078] bond2: (slave veth7): Enslaving as an active interface with a down link [ 807.914157][T25054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.914229][T25054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.963997][T25075] bond2: (slave veth0_to_bond): making interface the new active one [ 807.979439][T25075] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 808.377364][ T8661] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.377429][ T8661] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.565725][ T1015] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.565781][ T1015] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.575627][ T8661] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.575665][ T8661] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.635798][ T8661] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.635859][ T8661] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.755424][ T32] INFO: task syz.2.3839:216 ** replaying previous printk message ** [ 808.755424][ T32] INFO: task syz.2.3839:21645 blocked for more than 143 seconds. [ 808.755653][ T32] Not tainted syzkaller #0 [ 808.755751][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.755810][ T32] task:syz.2.3839 state:D stack:27200 pid:21645 tgid:21641 ppid:17410 task_flags:0x400140 flags:0x00080002 [ 808.756011][ T32] Call Trace: [ 808.756046][ T32] [ 808.756108][ T32] __schedule+0x17d4/0x5820 [ 808.756270][ T32] ? __pfx___schedule+0x10/0x10 [ 808.756374][ T32] ? schedule+0x90/0x2b0 [ 808.756442][ T32] schedule+0x164/0x2b0 [ 808.756562][ T32] schedule_preempt_disabled+0x13/0x30 [ 808.756637][ T32] __mutex_lock+0x7c1/0x1550 [ 808.756703][ T32] ? __mutex_lock+0x5d4/0x1550 [ 808.756766][ T32] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 808.756931][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 808.756998][ T32] ? net_generic+0x1e/0x240 [ 808.757091][ T32] ? net_generic+0x1e/0x240 [ 808.757160][ T32] ? net_generic+0x1e/0x240 [ 808.757223][ T32] ? net_generic+0x1e/0x240 [ 808.757321][ T32] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 808.757396][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 808.757515][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 808.757621][ T32] ? bpf_lsm_capable+0x9/0x20 [ 808.757683][ T32] ? security_capable+0x7e/0x2c0 [ 808.757778][ T32] genl_rcv_msg+0x614/0x7a0 [ 808.757879][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 808.757946][ T32] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 808.758013][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 808.758109][ T32] netlink_rcv_skb+0x226/0x4a0 [ 808.758179][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 808.758244][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 808.758370][ T32] ? down_read+0x2be/0x330 [ 808.758467][ T32] genl_rcv+0x28/0x40 [ 808.758565][ T32] netlink_unicast+0x7bd/0x940 [ 808.758670][ T32] netlink_sendmsg+0x813/0xb40 [ 808.758767][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.758866][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 808.758932][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.758997][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 808.759060][ T32] ____sys_sendmsg+0x54e/0x850 [ 808.759151][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.759252][ T32] ? import_iovec+0x73/0xa0 [ 808.759350][ T32] ___sys_sendmsg+0x2a5/0x360 [ 808.759418][ T32] ? __lock_acquire+0x6df/0x2e50 [ 808.759512][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.759611][ T32] ? futex_wait+0x2a2/0x390 [ 808.759811][ T32] ? __fget_files+0x2a/0x420 [ 808.759881][ T32] ? __fget_files+0x3a2/0x420 [ 808.760004][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 808.760078][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 808.760210][ T32] do_syscall_64+0x166/0x520 [ 808.760270][ T32] ? trace_irq_disable+0x3b/0x140 [ 808.760336][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.760404][ T32] ? clear_bhb_loop+0x70/0xc0 [ 808.760494][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.760568][ T32] RIP: 0033:0x7f557079e159 [ 808.760632][ T32] RSP: 002b:00007f557162b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.760731][ T32] RAX: ffffffffffffffda RBX: 00007f5570a26090 RCX: 00007f557079e159 [ 808.760794][ T32] RDX: 0000000004000880 RSI: 0000200000000100 RDI: 0000000000000007 [ 808.760856][ T32] RBP: 00007f5570835024 R08: 0000000000000000 R09: 0000000000000000 [ 808.760896][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.760958][ T32] R13: 00007f5570a26128 R14: 00007f5570a26090 R15: 00007ffe9d56ea58 [ 808.761062][ T32] [ 808.761217][ T32] [ 808.761217][ T32] Showing all locks held in the system: [ 808.761254][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 808.761317][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 808.761643][ T32] locks held by klogd/4972: 1, last CPU#0: [ 808.761707][ T32] #0: ffff8880b8639620 (bh_lock){+.-.}-{3:3}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 808.761910][ T32] locks held by udevd/4983: 1, last CPU#0: [ 808.761971][ T32] #0: ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 808.762239][ T32] locks held by getty/5373: 2, on CPU#1: [ 808.762301][ T32] #0: ffff88807fcbb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 808.762595][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 808.762862][ T32] locks held by kworker/1:24/7210: 3, last CPU#1: [ 808.762927][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.763156][ T32] #1: ffffc90004577c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.763384][ T32] #2: ffff888027731250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 808.763714][ T32] locks held by kworker/u8:28/8665: 2, on CPU#0: [ 808.763776][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.764008][ T32] #1: ffffc90003d3fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.764266][ T32] locks held by syz-executor/19406: 1, last CPU#1: [ 808.764329][ T32] #0: ffff8880334182e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 808.764638][ T32] locks held by syz.4.3779/21438: 2, on CPU#0: [ 808.764694][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 808.764925][ T32] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 808.765156][ T32] locks held by syz.2.3839/21645: 2, on CPU#0: [ 808.765219][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 808.767115][ T32] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 808.767249][ T32] locks held by syz.6.4062/22517: 3, on CPU#0: [ 808.767284][ T32] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 808.767408][ T32] #1: ffff888050eb66e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 808.767515][ T32] #2: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 808.767710][ T32] locks held by syz.7.4700/25090: 1, last CPU#1: [ 808.767744][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 808.767868][ T32] locks held by syz.5.4701/25093: 2, last CPU#0: [ 808.767902][ T32] #0: ffffffff8f588480 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_object_activate+0x364/0x420 [ 808.768070][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 808.768196][ T32] locks held by modprobe/25097: 2, last CPU#0: [ 808.768230][ T32] #0: ffff888021ee36b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 808.768353][ T32] #1: ffffffff8eeabbb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 808.768489][ T32] [ 808.768495][ T32] ============================================= [ 808.768495][ T32] [ 808.768531][ T32] NMI backtrace for cpu 1 [ 808.768549][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 808.768570][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.768581][ T32] Call Trace: [ 808.768589][ T32] [ 808.768598][ T32] dump_stack_lvl+0xe8/0x150 [ 808.768626][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 808.768673][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 808.768710][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 808.768733][ T32] sys_info+0x135/0x170 [ 808.768751][ T32] watchdog+0xfd7/0x1030 [ 808.768777][ T32] ? watchdog+0x1c7/0x1030 [ 808.768801][ T32] kthread+0x38b/0x480 [ 808.768820][ T32] ? __pfx_watchdog+0x10/0x10 [ 808.768837][ T32] ? __pfx_kthread+0x10/0x10 [ 808.768856][ T32] ret_from_fork+0x514/0xb70 [ 808.768887][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 808.768914][ T32] ? __switch_to+0xc89/0x1420 [ 808.768941][ T32] ? __pfx_kthread+0x10/0x10 [ 808.768961][ T32] ret_from_fork_asm+0x1a/0x30 [ 808.769002][ T32] [ 808.769084][ T32] Sending NMI from CPU 1 to CPUs 0: [ 808.769135][ C0] NMI backtrace for cpu 0 [ 808.769151][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 808.769174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.769185][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 808.769319][ C0] Code: e8 ae 83 56 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 4b c6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 808.769337][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 808.769355][ C0] RAX: 1ffffffff35a5600 RBX: 00000000000003fd RCX: 0000000000000000 [ 808.769370][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 808.769383][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 808.769396][ C0] R10: dffffc0000000000 R11: ffffffff85712fa0 R12: dffffc0000000000 [ 808.769411][ C0] R13: 0000000000000000 R14: ffffffff9ad2b020 R15: 0000000000000000 [ 808.769423][ C0] FS: 0000000000000000(0000) GS:ffff888124ce0000(0000) knlGS:0000000000000000 [ 808.769441][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.769456][ C0] CR2: 0000200000013038 CR3: 000000007e480000 CR4: 00000000003526f0 [ 808.769476][ C0] Call Trace: [ 808.769484][ C0] [ 808.769494][ C0] wait_for_lsr+0x184/0x2f0 [ 808.769523][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 808.769548][ C0] serial8250_console_write+0xaa1/0x1200 [ 808.769579][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 808.769607][ C0] ? rcu_is_watching+0x16/0xb0 [ 808.769637][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 808.769667][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 808.769690][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 808.769717][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 808.769742][ C0] nbcon_kthread_func+0x679/0x880 [ 808.769766][ C0] ? nbcon_kthread_func+0x163/0x880 [ 808.769783][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 808.769807][ C0] ? __kthread_parkme+0x71/0x1f0 [ 808.769834][ C0] ? __kthread_parkme+0x199/0x1f0 [ 808.769863][ C0] kthread+0x38b/0x480 [ 808.769881][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 808.769900][ C0] ? __pfx_kthread+0x10/0x10 [ 808.769918][ C0] ret_from_fork+0x514/0xb70 [ 808.769948][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 808.769977][ C0] ? __switch_to+0xc89/0x1420 [ 808.770004][ C0] ? __pfx_kthread+0x10/0x10 [ 808.770031][ C0] ret_from_fork_asm+0x1a/0x30 [ 808.770067][ C0] [ 808.770136][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 809.796391][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 809.805519][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.815575][ T32] Call Trace: [ 809.818860][ T32] [ 809.821796][ T32] vpanic+0x56d/0xa60 [ 809.825793][ T32] ? __pfx___schedule+0x10/0x10 [ 809.830650][ T32] ? __pfx_vpanic+0x10/0x10 [ 809.835168][ T32] panic+0xc5/0xd0 [ 809.838899][ T32] ? __pfx_panic+0x10/0x10 [ 809.843326][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 809.848789][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 809.854164][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 809.860323][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 809.866485][ T32] watchdog+0x1030/0x1030 [ 809.870831][ T32] ? watchdog+0x1c7/0x1030 [ 809.875252][ T32] kthread+0x38b/0x480 [ 809.879323][ T32] ? __pfx_watchdog+0x10/0x10 [ 809.884000][ T32] ? __pfx_kthread+0x10/0x10 [ 809.888592][ T32] ret_from_fork+0x514/0xb70 [ 809.893195][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 809.898315][ T32] ? __switch_to+0xc89/0x1420 [ 809.903005][ T32] ? __pfx_kthread+0x10/0x10 [ 809.907604][ T32] ret_from_fork_asm+0x1a/0x30 [ 809.912389][ T32] [ 809.915696][ T32] Kernel Offset: disabled [ 809.920016][ T32] Rebooting in 86400 seconds..