last executing test programs: 9.293060075s ago: executing program 4 (id=3514): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x53, 0x20040000) connect$unix(r1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbf9, {0x2}, [@typed={0x8, 0x12d, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000040)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='=\x00'], 0x20) read$nci(r7, &(0x7f0000000200), 0x100) 8.367430533s ago: executing program 3 (id=3516): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000001a40)=ANY=[], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 8.232587131s ago: executing program 0 (id=3518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, 0x0, &(0x7f0000000080)=r1}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f000000b340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f000000d440)={0x0, 0x0, &(0x7f000000d400)={&(0x7f000000d3c0)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008015}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x200040cc) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0xe}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r12, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000c000000140003800400040008000200fd7f01000400010018000180140002006e657464657673696d3000"], 0x40}}, 0x0) sendmmsg$sock(r10, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r11, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001400090528ea35952dfd1f0337180000256fa942f03c8a6016fce71ad2de956550ca839a0dcc7f12661a5427ad059793df3c", @ANYRES32=0x0, @ANYBLOB="08000200e000000214000600780b00000300000005000000be000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3) unshare(0x22020400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r14, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) 7.255805902s ago: executing program 3 (id=3519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0, 0x9}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000680)={{r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {[0x9, 0x35, 0x1, 0x8000]}, 0xa, 0x0, 0x0}) write$tun(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000002c0)) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000d00)={0x1000000, 0x18, [0x5, 0xfffffffffc000000, 0x0, 0x8], &(0x7f0000000cc0)=[0x0, 0x0, 0x0]}) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000840}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000800) 6.001793788s ago: executing program 0 (id=3521): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendto$inet(r1, 0x0, 0x0, 0x2000076d, &(0x7f00000001c0)={0x2, 0xfeff, @broadcast}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b0028"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r8) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x194, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_ID={0x35, 0x3, "3d30d15c2350f3a263d74e2424374a42b99aafb51535d00fa24e3058f070f7ad9e96457dc6a350d5b25abf49b33e29e81f"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) tee(r4, r0, 0x7, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)='!', 0x1, 0x448c4, 0x0, 0xd) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000200)={r12, 0x10000, 0xfffffff9, 0x2, 0x71, 0x6, 0x1, 0x80, {0x0, @in6={{0xa, 0x4e22, 0x0, @remote, 0x8}}, 0xffff, 0x1, 0x2, 0x1, 0x5}}, &(0x7f00000002c0)=0xb0) 5.932853812s ago: executing program 4 (id=3523): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x3, 0x15e, [0x0, 0x200000000240, 0x20000000036e, 0x20000000039e], 0x0, 0x0, 0x0}, 0x1e1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001400)={@val={0x0, 0x9300}, @val={0x0, 0x1, 0xe, 0x6, 0x4, 0x129}, @eth={@random="91d993d5768f", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1a, 0x2c, 0x67, 0x0, 0x3, 0x11, 0x0, @private=0xa010101, @rand_addr=0x64010100}, {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x3}}}}}}}, 0x48) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000380)="120000001200e7ef00", 0x9, 0x20000090, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010160, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 5.861128991s ago: executing program 3 (id=3524): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.650475989s ago: executing program 1 (id=3526): socket(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 4.612420424s ago: executing program 3 (id=3527): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) shutdown(r3, 0x1) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x840) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x3953c2, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1405, 0x702, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x90, 0x6], 0x8}, 0x10) 4.563352417s ago: executing program 0 (id=3528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4032, 0xfffffffffffffedf, 0x40010122, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.52163957s ago: executing program 2 (id=3529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000280)={0x34, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000640)={"742657ba6aa9caafcad136e03acab66c", 0x0, 0x0, {0x7, 0x5}, {0x3, 0x40}, 0x9, [0x5, 0x5, 0x0, 0x1, 0x5, 0x50, 0x200, 0x3, 0xf, 0x8, 0x9, 0x7fff, 0x4, 0xc2f, 0x1, 0x1]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f00000009c0)={0x12b4, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0xc, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffe7c, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0xf8, 0x3, "aaa8f5ac2a747903e2b8b3cab0ecb4dab6a58525e495aeffcc5474e60a8eb21fc25b0817edb580402ab9f140ab8d154e395940a95823b3d590712b76bfb3fe8edaad18d5fa0284c1d817c131a2864c913a0aec5a99a45dd9d6d8b334309611d96e9f20ea9cd4168c90358d70acbff14743d34ba95e36b350dcea965f9f6fba19ce03fa0ca81bb1eb4cf2f01832446f8bd0c760a63de78260e0fe2e222a88a6a4ec75604da28ece1ddf2d6e9c4945d2e36ff9a5a8ca4cb93cbe6aab1b2c252475df80bf2e36d484b7904e1e53f8693b08c7b8e05cf7b680a0538ec1e01431079238203c9ea3a64ca674826c2337f2c2f4c7886309"}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0x19, 0x3, "881950f3e91734c3dc15fd1027c77cc8740a3f0310"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0xb4, 0x3, "e3c895796c8348d68e5bbb31a32b09087816eb4cd77b35d8282c154d67065cc82e22bb72449203c1cfde19f67a1d5840881946f052b6d07b32eb1dab9679de2dfa9019752725a0fbe3d76c651df9d0c43cb9fba10b564cb8b871a5accc988ae00667f639deed373ffcf8501628d06b6b3e5f3d8c565d1cdf92e96cb26b176428fb72181f15dfe069cd5c08a62fe3d1c0b30bf10b9314e37cc5434bfbfdf75fc431799740f571e59229ed5efcd2a42390"}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000000000)={0xfffffe00, 0x69b4, 0x9, @local, 'veth0_macvtap\x00'}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000740)=r2) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r7, &(0x7f0000000340)="78e6ab08951cdb2ccf5ca254eab346eae09aab88738bd08cf5356861122eaa16e7d791d808f524cfcb716847645e2db6e7aa2dca2d242f00ec11dd1602bf5ae8dbb1475631729a2717973c98c1436b514f972fe0f3e25f100d7befb85a4b01970936171ae1bd1aa013b45b91a133e322b1b4e43f69e2ccd21f7f135b8e47877116c54b4434e4942fe18fa86deb65fa6a2afc", 0x92, 0x800, &(0x7f0000000480)={0xa, 0x4e21, 0x400, @mcast2, 0x8001}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r6}, 0x8) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800e80000000073110900008000009500080000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000b"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 4.394733067s ago: executing program 4 (id=3530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'veth0_vlan\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x150, 0x150, 0x260, 0xf8010000, 0x358, 0x238, 0x238, 0x358, 0x238, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @empty, [0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x36a41ab9, 0x0, 0x0, 0x7], 0x0, [], 0x1, 0x2, 0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@empty, @mcast1, [], [], 'bridge_slave_0\x00', 'hsr0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000001e40)=ANY=[@ANYRES32=r2]) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000", @ANYRES32=r6], 0x4c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32, @ANYBLOB="0000000000000000b7030000ffff1b5a32fa00000d000000b70000000000009f397dd257ead2ff464538d60322e17ddd7a7b196ff0177ba361dc9313bebcbc980b82ec487ab8493fdb55fa22650975da784fd352061184578a1d6383d4bdb5c0a94913823eabf81b218744944acd57896304047001000000000000002751d16305000000954db7098650289b6dcca83cc28a367001f800"/166], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x8000001ffffffd) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6e8a) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'ipvlan0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x5, [{0x0, 0x401}, {0xffffffff, 0x3d}, {0x9, 0x3}, {0x8, 0x80000001}, {0x0, 0x4}]}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) 3.896705751s ago: executing program 1 (id=3531): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.644287179s ago: executing program 2 (id=3532): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e20, 0x3, 'nq\x00', 0x18, 0xfd1e, 0x40}, 0x2c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x20, &(0x7f00000018c0)={&(0x7f0000001780)=""/144, 0x90, 0x0, &(0x7f0000001840)=""/65, 0x41}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r2}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a80)={0xffffffffffffffff, 0x8, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x10, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000800000000000200000000", @ANYRES32=r5, @ANYBLOB="00000000090000000a1f0900000800001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x1, 0x3, 0x1, 0xfffffffd}, 0x10, r6, r2, 0xa, &(0x7f0000001ac0)=[0x1, r7, 0xffffffffffffffff, r8], &(0x7f0000001b00)=[{0x0, 0x1, 0x8, 0xc}, {0x1, 0x4, 0xc}, {0x0, 0x5, 0x6, 0xb}, {0x3, 0x1, 0xd, 0x8}, {0x2, 0x1, 0x2, 0x6}, {0x3, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x3, 0x5}, {0x2, 0x2, 0x6, 0xc}, {0x5, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x9, 0x3}]}, 0x94) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r11}, 0x8) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000007110040000000000fc441fbeeac9348f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x3e, &(0x7f0000000140)=0x1ff, 0x4) 3.39916291s ago: executing program 4 (id=3533): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a00000409"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.019295203s ago: executing program 1 (id=3534): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3c, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) preadv(r5, &(0x7f0000001600)=[{0x0}], 0x1, 0xa2e3, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) pread64(r6, &(0x7f0000000240)=""/95, 0x5f, 0x5) r8 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r8, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r9 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendfile(r9, r9, 0x0, 0x10001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.615699914s ago: executing program 1 (id=3535): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000600)}, 0x2004010) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6783bc330059b2b782a15c87d51216876b5358a472cb6a71759db27d3beb72", 0x1f}], 0x1, &(0x7f0000000680)=ANY=[], 0x150}, 0x40040) recvmsg(r8, 0x0, 0x10100) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000000)={r9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.48691402s ago: executing program 2 (id=3536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x28, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="21825c23"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5001}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5002}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5003}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000012fe1a6f60000005400018006000100020000000600000000000000140003007f0000010003000000000000000000000600040050040000070006007272532b3577a61e17433c00000c000700000000000400000008000800640000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5005}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5006}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5007}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="33f18a98b01cca45b028d33539b162cb07868d8c3cfe3cae", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000005400018006000100020000000600020006000000140003007f000001000000000000000000000000060004005008000007000600727200000c000700000000000400000008000800640000000800090020000000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5009}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/45, 0x2d, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x629, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xd, 0xffff}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x800) r8 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r8, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) 2.275970686s ago: executing program 0 (id=3537): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x80000600, 0x1}}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fb, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="654671ca4b48f31b5f810e5e09c898e9f6351887", 0x14}], 0x1, 0x0, 0x0, 0xd0}, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000540)={r4}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000005c0)={r7}) close(r6) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000003c0)={'vlan1\x00', @multicast}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvfrom$phonet(r8, 0x0, 0x0, 0x40000100, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYBLOB="00042abd7000fedbdf250800000006001c000300000005001200f70000000c000f00070000000000000008000b000000000006001d000800"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf05000500", 0x2c}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) 2.012889748s ago: executing program 3 (id=3538): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r5, 0x0, 0x0, 0x40000022, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000640)={r8}, &(0x7f0000000740)=0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d285f2c2dde2cb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x60}}, 0x8000) 2.00747103s ago: executing program 4 (id=3539): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket(0x2, 0x80805, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) syz_emit_ethernet(0xf4, &(0x7f00000009c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\b', @ANYRESOCT=r3, @ANYBLOB="7829eca9de9891203eea18280016be21fb1777a31659615d286ff72b61ee23d917c0a562eb690e0edae8640d240035af4f5c", @ANYRES64=r4, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa30000380240003800600010002000000060003"], 0x64}}, 0x24000050) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x16, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x69}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00174000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0xffd8) 1.872309136s ago: executing program 2 (id=3540): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) sendmsg(r0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x248}, 0x20008044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x2, 0x4, {0x0, 0x200}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x4, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x3, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x7}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$packet(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4890}, 0x800) 1.020126315s ago: executing program 4 (id=3541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 1.009043359s ago: executing program 0 (id=3542): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2ef6, 0xc, 0xb5ca, 0x3, 0xfffffc00, 0x38, 0xca1, 0xa75, 0xc}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r10}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 835.794761ms ago: executing program 3 (id=3543): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000006c0), 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0xfffd, 0x3a, 0x0, @private1, @mcast1}}}}}}}, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 776.079929ms ago: executing program 1 (id=3544): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060300000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72702c6e6574000000"], 0x50}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a8435001406fffe800000d500000000000000000000bbfe80000000000000000000001f08aa4fc3204165b1", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20000907803ff"], 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500065a0d2cffee5354800100fcffff"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20044040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000010c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f00000011c0)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="9cd72adda3422f626cfc9324d35b3c760400af8004003780040097804e91e949b4b1f261001606b516d732dfa05d73d397b7d4015294a94bf1df88256d1118bc3da60400208000000073f43d7663fc2a91a7432376a55c21ad9401000100000000008b8b"], 0x184}, 0x1, 0x0, 0x0, 0x20000080}, 0x2004000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r5, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0x8000}], 0x1, 0x9dec67345735b285, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001080)=0xffffffffffffffff, 0xffffffe3) 704.037438ms ago: executing program 2 (id=3545): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x894, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3bf0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x9, 0x3, 0xa088, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000280)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x0, 0x80000000, 0x3}}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcdb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r6, @ANYBLOB="20002cbddbdf2517000000440001801400020076657468315f746f5f7465616d00000008000100702a4064b34be6bbd0d3345501d4d41285095ea731edca5b97494cf3bacaa2d4b568a83c7300000000000000081d6e000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="140002006970766c616e3000000000000000000020000180140002006970766c616e3100000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0c0001800800030001000000500001801400020070696d367265673000000000000000001400020064756d6d793000000000000000", @ANYRES32=r8, @ANYBLOB="1400020070696d367265673000000000000000000800030002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 332.940768ms ago: executing program 0 (id=3546): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e20, 0x3, 'nq\x00', 0x18, 0xfd1e, 0x40}, 0x2c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x20, &(0x7f00000018c0)={&(0x7f0000001780)=""/144, 0x90, 0x0, &(0x7f0000001840)=""/65, 0x41}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r2}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a80)={0xffffffffffffffff, 0x8, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x10, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000800000000000200000000", @ANYRES32=r5, @ANYBLOB="00000000090000000a1f0900000800001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x1, 0x3, 0x1, 0xfffffffd}, 0x10, r6, r2, 0xa, &(0x7f0000001ac0)=[0x1, r7, 0xffffffffffffffff, r8], &(0x7f0000001b00)=[{0x0, 0x1, 0x8, 0xc}, {0x1, 0x4, 0xc}, {0x0, 0x5, 0x6, 0xb}, {0x3, 0x1, 0xd, 0x8}, {0x2, 0x1, 0x2, 0x6}, {0x3, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x3, 0x5}, {0x2, 0x2, 0x6, 0xc}, {0x5, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x9, 0x3}]}, 0x94) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r11}, 0x8) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000007110040000000000fc441fbeeac9348f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x3e, &(0x7f0000000140)=0x1ff, 0x4) 165.820141ms ago: executing program 1 (id=3547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x49, 0x4, 0x2, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) unshare(0x22020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) ppoll(&(0x7f0000000280)=[{r2, 0x4b0}], 0x1, 0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0), &(0x7f0000000300)=@tcp, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf213700000008000300", @ANYRES32=r3, @ANYBLOB="08002600cc150000080027000100000008002201060200000500180106000000080026006c090000050018012100000008009f0000000000080057000100000005001901040000000800270001000000080022012d0300000800a00006000000050018012800000008009f000100000008005700000000000800270001000000080027000200000008002600dc1c00000800570009050000080027000100000008009f0003000000080026006c0900000800a100ec0f00000800a0000300000005001801250000000800a000ff030000080057009a000000"], 0xf4}, 0x1, 0x0, 0x0, 0x44000054}, 0x20004084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000010", @ANYRES16=r4, @ANYBLOB="010029bd700000000000020000000c009900410000025f000000040087000800270001000000"], 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, 0x0, 0x142) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 0s ago: executing program 2 (id=3548): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) unshare(0x2c020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000380), &(0x7f00000000c0)=r2}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x8, 0x0, 0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x70}}, 0x484) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180)=0xcb3, 0x4) unshare(0x28000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0xb5, 0x40, 0x0, @multicast}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r7, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r8, 0x913e0000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, &(0x7f0000000240)=""/83, &(0x7f00000002c0)=0x53) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): .1977': attribute type 6 has an invalid length. [ 382.383405][T14230] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 382.605643][T14232] bond13: (slave veth31): Enslaving as an active interface with an up link [ 383.015555][T14254] batman_adv: batadv0: Interface deactivated: macvlan14 [ 383.055437][T14257] netlink: 'syz.4.1990': attribute type 7 has an invalid length. [ 383.055464][T14257] netlink: 'syz.4.1990': attribute type 8 has an invalid length. [ 383.135524][T14260] netlink: 'syz.2.1991': attribute type 2 has an invalid length. [ 383.135553][T14260] netlink: 'syz.2.1991': attribute type 2 has an invalid length. [ 383.256661][T14265] netlink: 'syz.1.1992': attribute type 6 has an invalid length. [ 383.632422][T14282] netlink: 'syz.1.1997': attribute type 6 has an invalid length. [ 383.886510][T14287] syzkaller1: entered promiscuous mode [ 383.886529][T14287] syzkaller1: entered allmulticast mode [ 384.146109][T14296] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 384.250466][T14302] bond11: (slave veth31): Enslaving as an active interface with an up link [ 384.283349][T14301] batman_adv: batadv0: Adding interface: macvlan11 [ 384.283369][T14301] batman_adv: batadv0: The MTU of interface macvlan11 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.283408][T14301] batman_adv: batadv0: Interface activated: macvlan11 [ 385.626148][T14337] netlink: 'syz.2.2020': attribute type 1 has an invalid length. [ 385.793142][T14348] netlink: 'syz.1.2022': attribute type 6 has an invalid length. [ 385.916999][T14341] bond16: (slave veth31): Enslaving as an active interface with an up link [ 385.949758][ T154] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.949811][ T154] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.949841][ T154] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.949862][ T154] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.197289][T14360] netlink: 'syz.1.2026': attribute type 6 has an invalid length. [ 386.422625][T14364] batman_adv: batadv0: Interface deactivated: macvlan11 [ 386.462025][T14368] ip6gre1: entered promiscuous mode [ 386.462052][T14368] ip6gre1: entered allmulticast mode [ 386.479717][ T38] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.479766][ T38] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.479799][ T38] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.479829][ T38] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.382091][T14404] bond12: (slave veth33): Enslaving as an active interface with an up link [ 388.159222][T14421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2048'. [ 388.160356][T14421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2048'. [ 388.266576][T14423] bond0: entered promiscuous mode [ 388.266603][T14423] veth3: entered promiscuous mode [ 388.271514][T14423] dummy0: entered promiscuous mode [ 388.335677][T14423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.345432][T14423] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 388.345458][T14423] hsr0: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 388.388524][T14423] bond0: left promiscuous mode [ 388.388552][T14423] veth3: left promiscuous mode [ 388.405645][T14423] dummy0: left promiscuous mode [ 388.493620][T14431] validate_nla: 2 callbacks suppressed [ 388.493643][T14431] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 388.741446][T14435] bond17: (slave veth33): Enslaving as an active interface with an up link [ 389.121325][T14451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2059'. [ 389.121354][T14451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2059'. [ 389.526873][T14461] netlink: 'syz.2.2062': attribute type 1 has an invalid length. [ 389.732984][T14463] bond18: (slave veth35): Enslaving as an active interface with an up link [ 390.100586][T14476] bond0: entered promiscuous mode [ 390.100613][T14476] veth23: entered promiscuous mode [ 390.115701][T14476] dummy0: entered promiscuous mode [ 390.181497][T14476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.215068][T14476] bond0: left promiscuous mode [ 390.215093][T14476] veth23: left promiscuous mode [ 390.216254][T14476] dummy0: left promiscuous mode [ 390.268139][T14485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 390.328944][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2069'. [ 390.328974][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2069'. [ 390.344410][T14488] xt_hashlimit: size too large, truncated to 1048576 [ 391.088624][T14510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2077'. [ 391.088651][T14510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2077'. [ 391.554162][T14525] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2084'. [ 391.625090][T14530] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 391.806464][T14536] bond14: (slave veth33): Enslaving as an active interface with an up link [ 391.828020][T14539] xt_hashlimit: size too large, truncated to 1048576 [ 392.857348][T14570] netlink: 'syz.3.2096': attribute type 2 has an invalid length. [ 393.314720][T14594] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 393.436223][T14596] bond18: (slave veth31): Enslaving as an active interface with an up link [ 393.504272][T14604] netlink: 'syz.4.2105': attribute type 1 has an invalid length. [ 393.614136][T14610] netlink: 'syz.1.2106': attribute type 6 has an invalid length. [ 393.715073][T14609] bond11: (slave veth17): Enslaving as an active interface with an up link [ 393.924029][T14614] __nla_validate_parse: 7 callbacks suppressed [ 393.924052][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'. [ 393.924068][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'. [ 394.095674][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2111'. [ 394.135629][T14626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2111'. [ 394.499931][T14633] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2113'. [ 394.830191][T14649] netlink: 'syz.4.2119': attribute type 6 has an invalid length. [ 394.976091][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 394.976119][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 395.191877][T14661] netlink: 'syz.4.2122': attribute type 1 has an invalid length. [ 395.215178][T14656] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2121'. [ 395.665651][T14664] bond12: (slave veth19): Enslaving as an active interface with an up link [ 395.695330][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 395.728093][T14679] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 395.921630][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 396.048608][T14692] tls_set_device_offload_rx: netdev not found [ 396.295339][T14699] netlink: 'syz.0.2132': attribute type 1 has an invalid length. [ 396.433237][T14706] bond19: (slave veth33): Enslaving as an active interface with an up link [ 396.449622][T14709] bridge0: port 4(veth0) entered blocking state [ 396.449751][T14709] bridge0: port 4(veth0) entered disabled state [ 396.449946][T14709] veth0: entered allmulticast mode [ 396.482595][T14709] veth0: entered promiscuous mode [ 397.141071][T14734] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 397.253591][T14740] ipt_ECN: cannot use operation on non-tcp rule [ 399.284779][T14807] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 399.352512][T14810] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 399.360863][T14807] bond15: (slave veth35): Enslaving as an active interface with an up link [ 399.513713][T14817] __nla_validate_parse: 4 callbacks suppressed [ 399.513736][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 399.546412][T14817] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 399.584827][T14817] ipt_ECN: cannot use operation on non-tcp rule [ 399.627157][T14814] bond13: (slave veth35): Enslaving as an active interface with an up link [ 399.771188][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2158'. [ 400.055263][T14832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2160'. [ 400.055291][T14832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2160'. [ 400.649016][T14852] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2165'. [ 401.042188][ T5899] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.042835][ T1362] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.042873][ T1362] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.042909][ T1362] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.128382][T14877] netlink: 'syz.2.2172': attribute type 6 has an invalid length. [ 401.332447][T14879] netlink: 'syz.1.2174': attribute type 1 has an invalid length. [ 401.588377][T14882] bond14: (slave veth37): Enslaving as an active interface with an up link [ 401.798336][T14898] netlink: 'syz.4.2177': attribute type 6 has an invalid length. [ 402.195155][T14905] ieee802154 phy1 wpan1: encryption failed: -126 [ 402.565059][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 402.565085][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 402.610862][ T1362] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.610915][ T1362] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.610952][ T1362] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.610986][ T1362] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.921537][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2190'. [ 402.921566][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2190'. [ 403.008941][T14934] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 403.148122][T14937] bond16: (slave veth37): Enslaving as an active interface with an up link [ 403.618796][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'. [ 404.831002][T14987] netlink: 'syz.3.2209': attribute type 1 has an invalid length. [ 404.965065][T14987] bond17: (slave veth39): Enslaving as an active interface with an up link [ 405.117996][T14996] __nla_validate_parse: 3 callbacks suppressed [ 405.118022][T14996] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2211'. [ 405.323669][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'. [ 405.350752][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'. [ 405.360033][ T1362] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.360110][ T1362] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.360144][ T1362] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.360215][ T1362] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.391800][T15004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2214'. [ 405.391825][T15004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2214'. [ 405.495117][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 405.495148][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 405.621586][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 405.622300][T15011] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 405.766305][T15010] ipt_ECN: cannot use operation on non-tcp rule [ 406.384451][T15031] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2224'. [ 406.384652][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2224'. [ 406.443596][T15034] netlink: 'syz.4.2225': attribute type 6 has an invalid length. [ 406.775921][T15043] netlink: 'syz.3.2228': attribute type 3 has an invalid length. [ 406.775956][T15043] netlink: 'syz.3.2228': attribute type 7 has an invalid length. [ 406.874277][T15050] netlink: 'syz.4.2229': attribute type 6 has an invalid length. [ 407.629540][ T5899] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.629616][ T5899] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.629650][ T5899] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.629685][ T5899] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.099537][ T1362] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.099589][ T1362] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.099622][ T1362] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.099656][ T1362] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.326327][T15100] netlink: 'syz.3.2244': attribute type 6 has an invalid length. [ 408.677097][T15112] block nbd0: shutting down sockets [ 409.848822][T15152] netlink: 'syz.1.2259': attribute type 6 has an invalid length. [ 410.132337][T15159] __nla_validate_parse: 17 callbacks suppressed [ 410.132361][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 410.133771][T15159] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 410.252297][T15161] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2264'. [ 410.298638][T15165] ipt_ECN: cannot use operation on non-tcp rule [ 410.701209][T15177] veth1_to_bond: entered allmulticast mode [ 410.726650][T15177] veth1_to_bond: left allmulticast mode [ 410.840189][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2268'. [ 410.840217][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2268'. [ 410.960538][T15189] batman_adv: batadv0: Adding interface: macvlan15 [ 410.960557][T15189] batman_adv: batadv0: The MTU of interface macvlan15 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.960589][T15189] batman_adv: batadv0: Interface activated: macvlan15 [ 411.347814][T15198] batman_adv: batadv0: Adding interface: macvlan12 [ 411.347837][T15198] batman_adv: batadv0: The MTU of interface macvlan12 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.347872][T15198] batman_adv: batadv0: Interface activated: macvlan12 [ 411.813914][T15215] syzkaller1: entered promiscuous mode [ 411.813940][T15215] syzkaller1: entered allmulticast mode [ 411.948441][T15222] netlink: 'syz.2.2284': attribute type 6 has an invalid length. [ 412.179763][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'. [ 412.179805][T15226] netlink: 'syz.1.2285': attribute type 11 has an invalid length. [ 412.192606][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'. [ 412.192639][T15226] netlink: 'syz.1.2285': attribute type 11 has an invalid length. [ 412.200073][ T1013] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.200131][ T50] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.200212][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.220544][ T1362] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.286594][T15228] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 412.286620][T15228] netlink: 'syz.2.2286': attribute type 7 has an invalid length. [ 412.286634][T15228] netlink: 'syz.2.2286': attribute type 8 has an invalid length. [ 412.286648][T15228] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 412.286661][T15228] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2286'. [ 412.595904][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 412.595933][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 412.728873][ T1362] IPVS: starting estimator thread 0... [ 412.809472][T15252] IPVS: using max 22 ests per chain, 52800 per kthread [ 413.050290][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2296'. [ 413.076354][T15262] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 413.155924][T15268] ipt_ECN: cannot use operation on non-tcp rule [ 413.169764][T15269] netlink: 'syz.1.2297': attribute type 6 has an invalid length. [ 413.596659][T15280] netlink: 'syz.3.2301': attribute type 1 has an invalid length. [ 413.905864][T15284] bond18: (slave veth41): Enslaving as an active interface with an up link [ 413.931563][T15277] batman_adv: batadv0: Adding interface: macvlan16 [ 413.931584][T15277] batman_adv: batadv0: The MTU of interface macvlan16 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.931620][T15277] batman_adv: batadv0: Interface activated: macvlan16 [ 415.425205][T15351] validate_nla: 2 callbacks suppressed [ 415.425227][T15351] netlink: 'syz.1.2316': attribute type 6 has an invalid length. [ 415.598369][T15355] __nla_validate_parse: 1 callbacks suppressed [ 415.598393][T15355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2321'. [ 415.598413][T15355] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2321'. [ 415.863265][T15364] netlink: 'syz.3.2323': attribute type 6 has an invalid length. [ 415.985618][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'. [ 415.986440][T15371] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 416.082634][T15371] ipt_ECN: cannot use operation on non-tcp rule [ 416.775708][T15396] syzkaller1: entered promiscuous mode [ 416.775733][T15396] syzkaller1: entered allmulticast mode [ 417.677004][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 417.695020][T15419] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 417.836528][T15431] ipt_ECN: cannot use operation on non-tcp rule [ 418.038481][T15438] 8021q: VLANs not supported on syzkaller0 [ 418.243268][T15443] netlink: 'syz.3.2351': attribute type 1 has an invalid length. [ 418.403440][T15448] bond19: (slave veth43): Enslaving as an active interface with an up link [ 418.627026][T15462] syzkaller1: entered promiscuous mode [ 418.627045][T15462] syzkaller1: entered allmulticast mode [ 418.799682][T15466] ip_tables: iptables: counters copy to user failed while replacing table [ 420.115591][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'. [ 420.116394][T15494] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 420.143746][T15492] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2366'. [ 420.259830][T15505] ipt_ECN: cannot use operation on non-tcp rule [ 420.417677][T15493] batman_adv: batadv0: Interface deactivated: macvlan12 [ 420.517394][T15499] batman_adv: batadv0: Adding interface: macvlan17 [ 420.517418][T15499] batman_adv: batadv0: The MTU of interface macvlan17 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.517455][T15499] batman_adv: batadv0: Interface activated: macvlan17 [ 420.531946][ T1362] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.532013][ T1362] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.532045][ T1362] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.532076][ T1362] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.732086][T15555] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 421.815634][T15555] bond13: (slave veth21): Enslaving as an active interface with an up link [ 422.310856][T15577] netlink: 'syz.3.2389': attribute type 6 has an invalid length. [ 422.554862][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2391'. [ 422.645032][T15581] 8021q: adding VLAN 0 to HW filter on device bond19 [ 422.669754][T15586] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 422.693809][T15586] bond19: (slave wlan1): Enslaving as an active interface with an up link [ 422.737482][T15587] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2393'. [ 423.011234][T15604] netlink: 'syz.2.2397': attribute type 6 has an invalid length. [ 423.129218][T15606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2398'. [ 423.353276][T15612] xt_hashlimit: size too large, truncated to 1048576 [ 423.736884][T15623] netlink: 'syz.3.2404': attribute type 1 has an invalid length. [ 423.747610][T15620] netlink: 'syz.2.2403': attribute type 5 has an invalid length. [ 423.912334][T15634] netlink: 'syz.0.2408': attribute type 1 has an invalid length. [ 423.978073][T15626] bond20: (slave veth45): Enslaving as an active interface with an up link [ 424.257533][T15637] bond20: (slave veth35): Enslaving as an active interface with an up link [ 424.273043][T15640] tipc: New replicast peer: 172.20.20.187 [ 424.277494][T15640] tipc: Enabled bearer , priority 10 [ 424.415363][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'. [ 424.700914][T15665] xt_hashlimit: size too large, truncated to 1048576 [ 424.890016][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 425.732869][T15700] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 425.917039][T15705] bond15: (slave veth39): Enslaving as an active interface with an up link [ 425.952433][T15706] batman_adv: batadv0: Adding interface: syzkaller0 [ 425.952455][T15706] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.952490][T15706] batman_adv: batadv0: Interface activated: syzkaller0 [ 426.001723][ T38] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.002135][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.002174][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.002208][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.180480][T15692] scsi_nl_rcv_msg: discarding partial skb [ 426.648350][T15720] netlink: 'syz.0.2431': attribute type 4 has an invalid length. [ 426.705691][T15720] netlink: 'syz.0.2431': attribute type 4 has an invalid length. [ 427.126420][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.126447][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.415158][T15745] batman_adv: batadv0: Adding interface: macvlan18 [ 427.415179][T15745] batman_adv: batadv0: The MTU of interface macvlan18 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.415228][T15745] batman_adv: batadv0: Interface activated: macvlan18 [ 428.912298][T15792] netlink: 'syz.2.2453': attribute type 7 has an invalid length. [ 428.912344][T15792] netlink: 'syz.2.2453': attribute type 8 has an invalid length. [ 429.017192][T15779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.727093][T15821] netlink: 'syz.0.2457': attribute type 6 has an invalid length. [ 430.148529][T15832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2463'. [ 430.148632][T15832] netlink: 'syz.0.2463': attribute type 1 has an invalid length. [ 430.207812][T15834] netlink: 'syz.1.2464': attribute type 7 has an invalid length. [ 430.207838][T15834] netlink: 'syz.1.2464': attribute type 8 has an invalid length. [ 430.652657][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 430.652685][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 430.933931][T15862] netlink: 'syz.4.2473': attribute type 6 has an invalid length. [ 431.158904][T15866] batman_adv: batadv0: Adding interface: macvlan13 [ 431.159845][T15866] batman_adv: batadv0: The MTU of interface macvlan13 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.159887][T15866] batman_adv: batadv0: Interface activated: macvlan13 [ 431.220408][T15870] netlink: 'syz.0.2475': attribute type 1 has an invalid length. [ 431.609696][T15868] bond21: (slave veth37): Enslaving as an active interface with an up link [ 431.648708][T15877] syzkaller1: entered promiscuous mode [ 431.648728][T15877] syzkaller1: entered allmulticast mode [ 431.756994][T15882] netlink: 'syz.2.2479': attribute type 1 has an invalid length. [ 431.945611][T15884] bond20: (slave veth37): Enslaving as an active interface with an up link [ 432.765358][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'. [ 433.306732][T15938] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 433.454827][T15936] batman_adv: batadv0: Adding interface: macvlan14 [ 433.454847][T15936] batman_adv: batadv0: The MTU of interface macvlan14 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.454886][T15936] batman_adv: batadv0: Interface activated: macvlan14 [ 433.552897][T15941] bond22: (slave veth39): Enslaving as an active interface with an up link [ 433.560300][T15946] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2493'. [ 435.872269][T15928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.213221][T16000] netlink: 'syz.4.2506': attribute type 6 has an invalid length. [ 436.639894][T16014] netlink: 'syz.1.2509': attribute type 6 has an invalid length. [ 436.942634][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'. [ 436.948640][T16022] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 437.034861][T16028] netlink: 'syz.1.2512': attribute type 6 has an invalid length. [ 437.037880][T16027] ipt_ECN: cannot use operation on non-tcp rule [ 438.206588][T16057] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2519'. [ 438.320760][T16064] netlink: 'syz.0.2520': attribute type 6 has an invalid length. [ 438.547000][T16075] netlink: 'syz.2.2522': attribute type 6 has an invalid length. [ 439.138187][T16092] netlink: 'syz.3.2526': attribute type 6 has an invalid length. [ 439.182855][T16094] xt_hashlimit: size too large, truncated to 1048576 [ 439.748743][T16109] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2532'. [ 439.942235][T16118] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 440.010167][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2536'. [ 440.283904][T16124] bond16: (slave veth41): Enslaving as an active interface with an up link [ 440.472447][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.887761][T16155] xt_hashlimit: size too large, truncated to 1048576 [ 441.163321][T16165] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2545'. [ 441.200855][T16165] syzkaller1: entered promiscuous mode [ 441.200881][T16165] syzkaller1: entered allmulticast mode [ 441.246972][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2546'. [ 441.354356][T16173] netlink: 'syz.0.2546': attribute type 10 has an invalid length. [ 441.354382][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2546'. [ 441.357722][T16167] 8021q: adding VLAN 0 to HW filter on device bond23 [ 441.407841][T16168] bond23: (slave dummy0): Enslaving as an active interface with an up link [ 441.423846][T16173] dummy0: entered promiscuous mode [ 441.440815][T16173] bond23: (slave dummy0): Releasing backup interface [ 441.543208][T16174] batman_adv: batadv0: Adding interface: macvlan19 [ 441.543229][T16174] batman_adv: batadv0: The MTU of interface macvlan19 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.543269][T16174] batman_adv: batadv0: Interface activated: macvlan19 [ 442.813701][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 442.860305][T16218] netlink: 'syz.1.2558': attribute type 6 has an invalid length. [ 442.983483][T16222] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2560'. [ 443.522899][T16231] netlink: 'syz.3.2562': attribute type 6 has an invalid length. [ 444.017690][T16244] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2567'. [ 444.160424][T16261] netlink: 'syz.1.2571': attribute type 11 has an invalid length. [ 444.762822][T16286] netlink: 'syz.1.2579': attribute type 6 has an invalid length. [ 445.416525][T16299] batman_adv: batadv0: Adding interface: macvlan20 [ 445.416549][T16299] batman_adv: batadv0: The MTU of interface macvlan20 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.416589][T16299] batman_adv: batadv0: Interface activated: macvlan20 [ 445.472764][T16303] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2584'. [ 445.532089][T16303] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.570355][T16307] netlink: 'syz.4.2585': attribute type 6 has an invalid length. [ 445.774224][T16303] veth1_vlan: left promiscuous mode [ 445.786884][T16303] veth0_vlan: left promiscuous mode [ 445.800158][T16303] veth0_vlan: entered promiscuous mode [ 445.808234][T16303] veth1_vlan: entered promiscuous mode [ 445.846362][T16303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.848204][T16303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.856472][T16315] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 445.872391][T16303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.875865][T16303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.890093][T16303] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 445.902413][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.902528][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.907675][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.907787][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.266197][T16315] bond14: entered promiscuous mode [ 446.268091][T16315] 8021q: adding VLAN 0 to HW filter on device bond14 [ 446.333607][T16317] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 446.333639][T16317] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 446.333657][T16317] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 446.338394][T16325] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2590'. [ 446.451662][T16337] netlink: 'syz.1.2593': attribute type 6 has an invalid length. [ 446.640128][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.640227][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.640267][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.640304][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.093552][T16352] netlink: 'syz.3.2598': attribute type 7 has an invalid length. [ 447.093577][T16352] netlink: 'syz.3.2598': attribute type 8 has an invalid length. [ 448.218802][T16373] netlink: 'syz.0.2604': attribute type 6 has an invalid length. [ 448.406514][T16384] tipc: Enabled bearer , priority 0 [ 448.480781][T16384] syzkaller0: entered promiscuous mode [ 448.480812][T16384] syzkaller0: entered allmulticast mode [ 448.481360][T16384] tipc: Resetting bearer [ 448.509036][T16385] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2606'. [ 448.652479][T16382] tipc: Resetting bearer [ 451.619429][T16382] tipc: Disabling bearer [ 451.647535][T16395] netlink: 'syz.0.2610': attribute type 7 has an invalid length. [ 451.647560][T16395] netlink: 'syz.0.2610': attribute type 8 has an invalid length. [ 451.666321][ T30] tipc: Node number set to 3758096386 [ 452.413076][T16420] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2615'. [ 453.023138][T16438] netlink: 'syz.1.2619': attribute type 6 has an invalid length. [ 453.054713][T16439] netlink: 'syz.4.2620': attribute type 6 has an invalid length. [ 453.390526][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2621'. [ 456.284722][T16446] netlink: 'syz.4.2622': attribute type 7 has an invalid length. [ 456.284747][T16446] netlink: 'syz.4.2622': attribute type 8 has an invalid length. [ 456.286255][T16447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2621'. [ 457.026902][T16490] netlink: 'syz.0.2632': attribute type 6 has an invalid length. [ 458.137218][T16497] netlink: 'syz.3.2635': attribute type 4 has an invalid length. [ 458.482268][T16525] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2641'. [ 458.637953][T16521] batman_adv: batadv0: Adding interface: macvlan21 [ 458.637974][T16521] batman_adv: batadv0: The MTU of interface macvlan21 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.638011][T16521] batman_adv: batadv0: Interface activated: macvlan21 [ 458.656162][T16518] syzkaller1: entered promiscuous mode [ 458.656185][T16518] syzkaller1: entered allmulticast mode [ 459.521860][T16554] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2650'. [ 460.351781][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2656'. [ 460.358464][T16580] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 460.358496][T16580] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 460.584057][T16585] netlink: 'syz.4.2657': attribute type 1 has an invalid length. [ 460.654506][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 460.700564][T16585] 8021q: adding VLAN 0 to HW filter on device bond15 [ 460.706646][T16586] netlink: 'syz.3.2658': attribute type 1 has an invalid length. [ 460.707150][T16583] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2658'. [ 460.752085][T16594] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 460.752163][T16594] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 460.797365][T16585] bond15: (slave geneve2): making interface the new active one [ 460.810185][T16585] bond15: (slave geneve2): Enslaving as an active interface with an up link [ 460.825062][T16595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2660'. [ 460.873047][ T5904] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.873641][ T5904] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.874859][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.874900][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.893142][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 461.135616][T16604] batman_adv: batadv0: Adding interface: macvlan15 [ 461.135639][T16604] batman_adv: batadv0: The MTU of interface macvlan15 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.135680][T16604] batman_adv: batadv0: Interface activated: macvlan15 [ 461.193334][T16607] batman_adv: batadv0: Adding interface: macvlan22 [ 461.193357][T16607] batman_adv: batadv0: The MTU of interface macvlan22 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.193926][T16607] batman_adv: batadv0: Interface activated: macvlan22 [ 461.393715][T16618] netlink: 'syz.4.2667': attribute type 6 has an invalid length. [ 462.097492][T16636] geneve3: entered promiscuous mode [ 462.109502][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.109553][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.109590][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.109625][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.707626][T16655] netlink: 'syz.3.2680': attribute type 6 has an invalid length. [ 463.223176][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2682'. [ 463.820282][T16679] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 464.129378][T16686] batman_adv: batadv0: Adding interface: macvlan16 [ 464.129397][T16686] batman_adv: batadv0: The MTU of interface macvlan16 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.129452][T16686] batman_adv: batadv0: Interface activated: macvlan16 [ 466.294776][T16664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.586872][T16704] netlink: 'syz.4.2691': attribute type 6 has an invalid length. [ 467.244130][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 467.291893][T16713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2698'. [ 467.746929][T16730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2703'. [ 467.746963][T16730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2703'. [ 467.746979][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'. [ 467.810319][T16734] batman_adv: batadv0: Adding interface: macvlan23 [ 467.810341][T16734] batman_adv: batadv0: The MTU of interface macvlan23 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.810384][T16734] batman_adv: batadv0: Interface activated: macvlan23 [ 468.057910][T16742] syzkaller0: entered promiscuous mode [ 468.057928][T16742] syzkaller0: entered allmulticast mode [ 468.190491][T16746] netlink: 'syz.2.2708': attribute type 6 has an invalid length. [ 468.601660][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'. [ 468.669664][T16764] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 468.669704][T16764] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 468.804346][T16768] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 469.116988][T16779] netlink: 'syz.3.2719': attribute type 6 has an invalid length. [ 469.615973][T16789] syzkaller0: entered promiscuous mode [ 469.615991][T16789] syzkaller0: entered allmulticast mode [ 469.717182][T16794] netlink: 'syz.3.2725': attribute type 1 has an invalid length. [ 469.736556][T16786] batman_adv: batadv0: Adding interface: macvlan24 [ 469.736578][T16786] batman_adv: batadv0: The MTU of interface macvlan24 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.736618][T16786] batman_adv: batadv0: Interface activated: macvlan24 [ 470.199821][T16812] TC_ACT_REPEAT abuse ? [ 470.244504][T16799] netlink: 'syz.2.2727': attribute type 4 has an invalid length. [ 470.576022][T16822] netlink: 'syz.1.2732': attribute type 6 has an invalid length. [ 470.967134][T16826] netlink: 'syz.1.2735': attribute type 7 has an invalid length. [ 470.967161][T16826] netlink: 'syz.1.2735': attribute type 8 has an invalid length. [ 471.214978][T16837] syzkaller0: entered promiscuous mode [ 471.215006][T16837] syzkaller0: entered allmulticast mode [ 471.234565][T16837] tipc: Enabled bearer , priority 0 [ 471.246805][T16835] tipc: Resetting bearer [ 471.309353][T16835] tipc: Disabling bearer [ 471.863738][T16863] netlink: 'syz.2.2745': attribute type 1 has an invalid length. [ 471.993005][T16866] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 472.030734][T16866] batman_adv: batadv0: Interface deactivated: macvlan13 [ 472.059569][T16866] batman_adv: batadv0: Interface deactivated: macvlan14 [ 472.066951][T16866] batman_adv: batadv0: Interface deactivated: macvlan15 [ 472.113126][T16866] batman_adv: batadv0: Interface deactivated: macvlan16 [ 472.230253][ T1362] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.230295][ T1362] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.230366][ T1362] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.230392][ T1362] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.230956][ T1362] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.230984][ T1362] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.231048][ T1362] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.231074][ T1362] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.260795][T16851] netlink: 'syz.1.2743': attribute type 4 has an invalid length. [ 473.211836][T16908] netlink: 'syz.3.2757': attribute type 1 has an invalid length. [ 473.261824][T16908] 8021q: adding VLAN 0 to HW filter on device bond21 [ 473.292402][T16915] batman_adv: batadv0: Adding interface: macvlan25 [ 473.292421][T16915] batman_adv: batadv0: The MTU of interface macvlan25 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.292457][T16915] batman_adv: batadv0: Interface activated: macvlan25 [ 473.449627][T16917] bond21: (slave veth49): Enslaving as an active interface with a down link [ 473.454332][T16918] veth0: left allmulticast mode [ 473.454361][T16918] veth0: left promiscuous mode [ 473.459092][T16918] bridge0: port 4(veth0) entered disabled state [ 473.551579][T16917] netlink: 'syz.3.2757': attribute type 10 has an invalid length. [ 473.551608][T16917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2757'. [ 473.670003][T16908] bond21: (slave dummy0): making interface the new active one [ 473.674294][T16908] bond21: (slave dummy0): Enslaving as an active interface with an up link [ 473.675168][T16917] dummy0: entered promiscuous mode [ 473.685145][T16917] bond21: (slave dummy0): Releasing active interface [ 473.715061][T16934] netlink: 'syz.4.2762': attribute type 1 has an invalid length. [ 474.053275][T16946] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 474.087235][T16946] 8021q: adding VLAN 0 to HW filter on device bond21 [ 474.136267][T16946] bond21: (slave geneve2): making interface the new active one [ 474.147275][T16946] bond21: (slave geneve2): Enslaving as an active interface with an up link [ 474.179685][ T1362] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.179771][ T1362] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.179807][ T1362] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.179842][ T1362] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.360652][T16959] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 474.508895][T16965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.853717][T16977] syzkaller0: entered promiscuous mode [ 474.853744][T16977] syzkaller0: entered allmulticast mode [ 474.940818][T16982] batman_adv: batadv0: Adding interface: macvlan26 [ 474.940842][T16982] batman_adv: batadv0: The MTU of interface macvlan26 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.940882][T16982] batman_adv: batadv0: Interface activated: macvlan26 [ 475.037621][T16984] syzkaller0: entered promiscuous mode [ 475.037641][T16984] syzkaller0: entered allmulticast mode [ 475.747568][T16996] erspan0: left allmulticast mode [ 475.747590][T16996] erspan0: left promiscuous mode [ 475.747781][T16996] bridge2: port 1(erspan0) entered disabled state [ 475.777880][T16996] bond3: (slave .`): Releasing active interface [ 475.794234][T16996] .`: (slave team0): Releasing backup interface [ 475.795282][T16996] bridge_slave_0: left promiscuous mode [ 475.795439][T16996] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.804434][T16996] bridge_slave_1: left allmulticast mode [ 475.804461][T16996] bridge_slave_1: left promiscuous mode [ 475.804658][T16996] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.838272][T16996] .`: (slave bond_slave_0): Releasing backup interface [ 475.848246][T16996] .`: (slave bond_slave_1): Releasing backup interface [ 475.860113][T16996] team0: Port device team_slave_1 removed [ 475.862961][T16996] bond2: (slave veth3): Releasing backup interface [ 475.866380][T16996] vlan2: left allmulticast mode [ 475.866406][T16996] geneve0: left allmulticast mode [ 475.866426][T16996] vlan2: left promiscuous mode [ 475.866438][T16996] geneve0: left promiscuous mode [ 475.866973][T16996] bridge0: port 3(vlan2) entered disabled state [ 475.885123][T16996] bond4: (slave veth5): Releasing backup interface [ 475.916496][T16996] bond5: (slave veth7): Releasing backup interface [ 475.927283][T16996] bond6: (slave veth9): Releasing backup interface [ 475.937931][T16996] bond8: (slave veth11): Releasing backup interface [ 475.948568][T16996] bond9: (slave veth13): Releasing backup interface [ 475.958699][T16996] bond10: (slave veth15): Releasing backup interface [ 475.969011][T16996] bond11: (slave veth17): Releasing backup interface [ 475.980081][T16996] bond12: (slave veth19): Releasing backup interface [ 475.984011][T16996] bond13: (slave veth21): Releasing backup interface [ 476.011927][T16996] bond15: (slave geneve2): Releasing active interface [ 476.049547][ T1362] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.049623][ T1362] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.049658][ T1362] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.049692][ T1362] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.205415][T17004] netlink: 'syz.0.2782': attribute type 1 has an invalid length. [ 476.325541][T17010] syzkaller0: entered promiscuous mode [ 476.325568][T17010] syzkaller0: entered allmulticast mode [ 476.412488][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 476.424584][T16998] netlink: 'syz.1.2781': attribute type 4 has an invalid length. [ 477.211935][T17032] syzkaller0: entered promiscuous mode [ 477.211962][T17032] syzkaller0: entered allmulticast mode [ 477.330613][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2792'. [ 477.339832][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 477.385771][T17045] batman_adv: batadv0: Adding interface: macvlan17 [ 477.385791][T17045] batman_adv: batadv0: The MTU of interface macvlan17 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.385832][T17045] batman_adv: batadv0: Interface activated: macvlan17 [ 477.795650][T17061] netlink: 'syz.2.2797': attribute type 6 has an invalid length. [ 478.598086][T17082] batman_adv: batadv0: Interface activated: syzkaller0 [ 478.611308][ T1013] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.611365][ T1013] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.611405][ T1013] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.611442][ T1013] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.745652][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2808'. [ 478.768921][T17091] netlink: 'syz.2.2807': attribute type 4 has an invalid length. [ 478.768950][T17091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2807'. [ 478.988187][T17097] netlink: 'syz.3.2810': attribute type 6 has an invalid length. [ 479.554468][T17113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2814'. [ 479.842446][T17118] syzkaller0: entered promiscuous mode [ 479.842472][T17118] syzkaller0: entered allmulticast mode [ 480.040068][T17105] netlink: 'syz.4.2811': attribute type 4 has an invalid length. [ 480.047854][T17127] netlink: 'syz.1.2818': attribute type 5 has an invalid length. [ 480.049871][T17127] netlink: 'syz.1.2818': attribute type 11 has an invalid length. [ 480.402781][T17129] syzkaller0: entered promiscuous mode [ 480.402809][T17129] syzkaller0: entered allmulticast mode [ 480.406070][T17129] tipc: Enabled bearer , priority 0 [ 480.407961][T17128] tipc: Resetting bearer [ 480.477393][T17128] tipc: Disabling bearer [ 480.522560][T17142] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 480.522593][T17142] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 480.695100][T17146] syzkaller0: entered promiscuous mode [ 480.695126][T17146] syzkaller0: entered allmulticast mode [ 480.917029][T17157] netlink: 'syz.3.2826': attribute type 6 has an invalid length. [ 481.816409][T17177] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.2833'. [ 481.846186][T17178] syzkaller0: left promiscuous mode [ 481.846212][T17178] syzkaller0: left allmulticast mode [ 482.093096][T17185] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2836'. [ 482.311491][T17172] netlink: 'syz.0.2832': attribute type 4 has an invalid length. [ 482.318114][T17196] batman_adv: batadv0: Adding interface: macvlan18 [ 482.318135][T17196] batman_adv: batadv0: The MTU of interface macvlan18 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.318192][T17196] batman_adv: batadv0: Interface activated: macvlan18 [ 482.524352][T17200] netlink: 'syz.4.2839': attribute type 6 has an invalid length. [ 483.224848][T17216] netlink: 'syz.2.2841': attribute type 6 has an invalid length. [ 483.294109][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 483.296091][T17219] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 483.411332][T17222] ipt_ECN: cannot use operation on non-tcp rule [ 483.551958][T17217] batman_adv: batadv0: Adding interface: macvlan19 [ 483.551978][T17217] batman_adv: batadv0: The MTU of interface macvlan19 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.553089][T17217] batman_adv: batadv0: Interface activated: macvlan19 [ 483.677518][T17227] netlink: 'syz.2.2846': attribute type 1 has an invalid length. [ 483.776422][T17227] bridge3: entered promiscuous mode [ 483.786385][T17227] bond22: (slave bridge3): making interface the new active one [ 483.794093][T17227] bond22: (slave bridge3): Enslaving as an active interface with an up link [ 483.862644][T17227] bridge4: entered promiscuous mode [ 483.878209][T17227] bond22: (slave bridge4): Enslaving as a backup interface with an up link [ 484.162890][T17240] syzkaller0: entered promiscuous mode [ 484.162917][T17240] syzkaller0: entered allmulticast mode [ 484.515083][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2855'. [ 484.653078][T17258] 8021q: adding VLAN 0 to HW filter on device bond25 [ 484.674730][T17258] bond25 (unregistering): Released all slaves [ 484.729840][T17261] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 484.729920][T17261] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 484.905265][T17270] syzkaller0: entered promiscuous mode [ 484.905408][T17270] syzkaller0: entered allmulticast mode [ 484.917572][T17270] 0: reclassify loop, rule prio 0, protocol 800 [ 485.122279][T17276] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 485.159010][T17274] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2860'. [ 485.527354][T17297] netlink: 'syz.0.2866': attribute type 6 has an invalid length. [ 485.610800][T17290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.619075][T17302] syzkaller0: entered promiscuous mode [ 485.619103][T17302] syzkaller0: entered allmulticast mode [ 486.216379][T17327] syzkaller0: entered promiscuous mode [ 486.216406][T17327] syzkaller0: entered allmulticast mode [ 486.351445][T17325] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2875'. [ 486.874652][T17352] netlink: 'syz.2.2881': attribute type 6 has an invalid length. [ 487.258411][T17356] syzkaller0: entered promiscuous mode [ 487.258439][T17356] syzkaller0: entered allmulticast mode [ 487.343601][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 487.351172][T17361] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 487.491675][T17369] ipt_ECN: cannot use operation on non-tcp rule [ 487.501244][T17370] xt_IDLETIMER: timeout value is zero [ 488.080200][T17387] netlink: 'syz.3.2890': attribute type 1 has an invalid length. [ 489.385759][T17394] bond22: (slave veth51): Enslaving as an active interface with an up link [ 490.974795][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 490.991218][T17450] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 491.030945][T17451] syzkaller0: entered promiscuous mode [ 491.030970][T17451] syzkaller0: entered allmulticast mode [ 491.060416][T17451] tipc: Enabled bearer , priority 0 [ 491.084129][T17451] tipc: Resetting bearer [ 491.132129][T17455] ipt_ECN: cannot use operation on non-tcp rule [ 491.204014][T17449] tipc: Resetting bearer [ 491.399051][T17449] tipc: Disabling bearer [ 491.443669][T17458] GUP no longer grows the stack in syz.0.2903 (17458): 200000003000-20000000a000 (200000001000) [ 491.443707][T17458] CPU: 1 UID: 0 PID: 17458 Comm: syz.0.2903 Not tainted syzkaller #0 PREEMPT(full) [ 491.443731][T17458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.443745][T17458] Call Trace: [ 491.443816][T17458] [ 491.443870][T17458] dump_stack_lvl+0xe8/0x150 [ 491.444011][T17458] __get_user_pages+0x23b6/0x2750 [ 491.444078][T17458] ? lock_acquire+0x115/0x350 [ 491.444161][T17458] ? __gup_longterm_locked+0xc3b/0x15c0 [ 491.444198][T17458] __gup_longterm_locked+0xd52/0x15c0 [ 491.444229][T17458] ? lock_acquire+0x115/0x350 [ 491.444268][T17458] gup_fast_fallback+0x1d92/0x20e0 [ 491.444293][T17458] ? lockdep_hardirqs_on+0x7b/0x110 [ 491.444429][T17458] ? __pfx_gup_fast_fallback+0x10/0x10 [ 491.444459][T17458] ? is_valid_gup_args+0x11f/0x200 [ 491.444489][T17458] ? get_user_pages_fast+0x4d/0xb0 [ 491.444517][T17458] __iov_iter_get_pages_alloc+0x378/0xa40 [ 491.444616][T17458] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 491.444658][T17458] iov_iter_get_pages2+0x5e/0xa0 [ 491.444690][T17458] __se_sys_vmsplice+0x7b5/0x1660 [ 491.444747][T17458] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 491.444785][T17458] ? __pfx_futex_wake+0x10/0x10 [ 491.444839][T17458] ? __sys_bpf+0xa9f/0xd90 [ 491.444908][T17458] ? 0xffffffffff600000 [ 491.444982][T17458] do_syscall_64+0x166/0x520 [ 491.445025][T17458] ? trace_irq_disable+0x3b/0x140 [ 491.445046][T17458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.445092][T17458] ? clear_bhb_loop+0x70/0xc0 [ 491.445121][T17458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.445142][T17458] RIP: 0033:0x7fd65cb9e159 [ 491.445171][T17458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.445189][T17458] RSP: 002b:00007fd65da83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 491.445243][T17458] RAX: ffffffffffffffda RBX: 00007fd65ce25fa0 RCX: 00007fd65cb9e159 [ 491.445258][T17458] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 491.445272][T17458] RBP: 00007fd65cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 491.445285][T17458] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 491.445298][T17458] R13: 00007fd65ce26038 R14: 00007fd65ce25fa0 R15: 00007ffd963b9818 [ 491.445336][T17458] [ 491.864607][T17477] netlink: 'syz.2.2907': attribute type 6 has an invalid length. [ 492.321069][T17489] syzkaller0: left promiscuous mode [ 492.321096][T17489] syzkaller0: left allmulticast mode [ 492.444750][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 492.463007][T17488] tipc: Enabled bearer , priority 0 [ 492.599415][T17488] syzkaller0: entered promiscuous mode [ 492.599444][T17488] syzkaller0: entered allmulticast mode [ 492.600114][T17488] tipc: Resetting bearer [ 492.736279][T17487] tipc: Resetting bearer [ 493.873178][T17534] xt_IDLETIMER: timeout value is zero [ 496.109464][T17487] tipc: Disabling bearer [ 496.137531][T17524] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 496.352326][T17548] netlink: 'syz.1.2924': attribute type 1 has an invalid length. [ 496.459131][T17544] syzkaller0: entered promiscuous mode [ 496.459162][T17544] syzkaller0: entered allmulticast mode [ 496.484207][T17548] macvtap0: entered allmulticast mode [ 496.513343][T17556] macvtap1: entered allmulticast mode [ 496.570955][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 496.628537][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 499.578603][T17548] bond17: (slave bridge2): making interface the new active one [ 499.588040][T17548] bond17: (slave bridge2): Enslaving as an active interface with an up link [ 499.636984][T17558] macvtap0: entered promiscuous mode [ 499.637343][T17558] macvtap0: entered allmulticast mode [ 499.637361][T17558] dummy0: entered allmulticast mode [ 499.685836][T17559] dummy0: left allmulticast mode [ 499.688073][T17559] macvtap0: left promiscuous mode [ 499.688097][T17559] macvtap0: left allmulticast mode [ 500.031402][T17583] netlink: 'syz.3.2930': attribute type 2 has an invalid length. [ 500.031429][T17583] netlink: 'syz.3.2930': attribute type 2 has an invalid length. [ 500.926981][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2937'. [ 500.944098][ T5627] block nbd0: Receive control failed (result -1) [ 501.395082][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 501.410935][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2942'. [ 501.446988][ T5627] block nbd1: Receive control failed (result -1) [ 501.917156][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.189975][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 502.430317][T17651] tc_dump_action: action bad kind [ 502.970236][T17660] syzkaller0: entered promiscuous mode [ 502.970264][T17660] syzkaller0: entered allmulticast mode [ 502.987946][T17660] tipc: Enabled bearer , priority 0 [ 503.014843][T17660] tipc: Resetting bearer [ 503.026668][T17659] tipc: Resetting bearer [ 503.168547][T17659] tipc: Disabling bearer [ 503.254996][T17643] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 503.377723][T17676] netlink: 'syz.3.2951': attribute type 1 has an invalid length. [ 503.462945][T17676] 8021q: adding VLAN 0 to HW filter on device bond23 [ 503.563966][T17681] bond23: (slave veth53): Enslaving as an active interface with a down link [ 503.568630][T17671] syzkaller0: entered promiscuous mode [ 503.568657][T17671] syzkaller0: entered allmulticast mode [ 503.578676][T17675] tipc: Started in network mode [ 503.578714][T17675] tipc: Node identity 325c448fad57, cluster identity 4711 [ 503.592069][T17675] tipc: Enabled bearer , priority 0 [ 503.594058][T17678] syzkaller0: entered promiscuous mode [ 503.594078][T17678] syzkaller0: entered allmulticast mode [ 503.684801][T17676] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 503.700381][T17676] bond23: (slave batadv1): making interface the new active one [ 503.704787][T17676] batadv1: entered promiscuous mode [ 503.705335][T17676] bond23: (slave batadv1): Enslaving as an active interface with an up link [ 503.745971][T17675] tipc: Resetting bearer [ 503.886025][T17670] tipc: Resetting bearer [ 503.962834][T17670] tipc: Disabling bearer [ 504.025214][T17676] bond23 (unregistering): (slave veth53): Releasing active interface [ 504.051739][T17676] bond23 (unregistering): (slave batadv1): Releasing active interface [ 504.053752][T17676] batadv1: left promiscuous mode [ 504.065376][T17676] bond23 (unregistering): Released all slaves [ 504.357176][T17711] gretap0: entered promiscuous mode [ 504.413098][T17715] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2958'. [ 504.516306][T17711] 8021q: adding VLAN 0 to HW filter on device .` [ 504.529604][T17711] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.602723][T17715] netlink: zone id is out of range [ 504.602741][T17715] netlink: zone id is out of range [ 504.602750][T17715] netlink: zone id is out of range [ 504.602758][T17715] netlink: zone id is out of range [ 504.602766][T17715] netlink: zone id is out of range [ 504.602775][T17715] netlink: zone id is out of range [ 504.602783][T17715] netlink: zone id is out of range [ 504.602792][T17715] netlink: zone id is out of range [ 504.602824][T17715] netlink: zone id is out of range [ 505.060619][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 505.065325][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 505.908819][T17732] syzkaller1: entered promiscuous mode [ 505.908845][T17732] syzkaller1: entered allmulticast mode [ 506.447026][T17755] syzkaller0: entered promiscuous mode [ 506.447053][T17755] syzkaller0: entered allmulticast mode [ 506.715334][T17764] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2970'. [ 508.146284][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'. [ 508.284791][T17792] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 508.521520][T17831] netlink: 'syz.4.2992': attribute type 6 has an invalid length. [ 509.853611][T17855] syzkaller0: entered promiscuous mode [ 509.853640][T17855] syzkaller0: entered allmulticast mode [ 509.856494][T17855] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3000'. [ 509.961052][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 510.024629][T17865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3004'. [ 510.045951][T17867] netlink: 'syz.3.3005': attribute type 8 has an invalid length. [ 510.334800][T17874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3006'. [ 510.961486][T17889] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.965830][T17889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.056703][T17889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.065529][T17889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.093392][T17889] veth1_vlan: left promiscuous mode [ 511.095218][T17889] veth0_vlan: left promiscuous mode [ 511.097287][T17889] veth0_vlan: entered promiscuous mode [ 511.106307][T17889] veth1_vlan: entered promiscuous mode [ 511.142902][T17889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.147913][T17889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.153838][T17889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.172853][T17889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.188145][T17889] 8021q: adding VLAN 0 to HW filter on device eth0 [ 511.191406][T17889] 8021q: adding VLAN 0 to HW filter on device eth1 [ 511.192710][T17889] 8021q: adding VLAN 0 to HW filter on device eth2 [ 511.195041][T17889] 8021q: adding VLAN 0 to HW filter on device eth3 [ 511.197317][T17889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 511.207697][T17889] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.214214][T17889] batman_adv: batadv0: Interface activated: macvlan2 [ 511.218052][T17889] batman_adv: batadv0: Interface activated: macvlan3 [ 511.224808][T17889] batman_adv: batadv0: Interface activated: macvlan4 [ 511.225741][T17889] net_ratelimit: 5 callbacks suppressed [ 511.225835][T17889] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 511.230955][ T5347] s`z1: Port: 1 Link ACTIVE [ 511.295203][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.295341][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.303930][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.304041][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.357781][ T50] bridge0: port 3(vlan2) entered blocking state [ 511.357904][ T50] bridge0: port 3(vlan2) entered forwarding state [ 511.460735][ T5899] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.521618][ T5899] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.745320][T17905] ipvlan2: entered promiscuous mode [ 511.770249][T17905] team0: Device ipvlan2 failed to register rx_handler [ 511.879948][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.880000][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.063286][T17920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3021'. [ 513.304030][T17952] batman_adv: batadv0: Adding interface: macvlan20 [ 513.304053][T17952] batman_adv: batadv0: The MTU of interface macvlan20 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.304093][T17952] batman_adv: batadv0: Interface activated: macvlan20 [ 513.480811][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 513.557783][T17965] netlink: 'syz.4.3028': attribute type 6 has an invalid length. [ 513.696061][T17963] openvswitch: netlink: Multiple metadata blocks provided [ 514.295943][T17982] netlink: 'syz.1.3034': attribute type 21 has an invalid length. [ 514.295975][T17982] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.308888][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 514.493922][T17973] syzkaller0: entered promiscuous mode [ 514.493965][T17973] syzkaller0: entered allmulticast mode [ 514.513527][ T154] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.513678][ T154] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.513805][ T154] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.513848][ T154] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.518201][T17989] netlink: 'syz.4.3035': attribute type 6 has an invalid length. [ 514.518226][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 514.747470][T17993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3036'. [ 514.873784][T18003] netlink: 'syz.0.3038': attribute type 6 has an invalid length. [ 515.104079][T18009] netlink: 'syz.0.3040': attribute type 6 has an invalid length. [ 515.388849][T18017] netlink: 'syz.0.3041': attribute type 10 has an invalid length. [ 515.403995][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.417895][T18017] team0: Port device netdevsim1 added [ 515.758693][T18029] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 515.778925][T18034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3047'. [ 515.836279][T18029] 8021q: adding VLAN 0 to HW filter on device bond18 [ 515.897087][T18035] bond18: (slave dummy0): making interface the new active one [ 515.907096][T18035] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 515.922141][T18029] : renamed from dummy0 (while UP) [ 516.105544][T18040] lo: entered allmulticast mode [ 516.116749][T18039] lo: left allmulticast mode [ 516.203370][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.203398][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.305805][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3049'. [ 516.313216][T18051] netlink: 'syz.3.3051': attribute type 6 has an invalid length. [ 516.356796][T18042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.808254][T18061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3055'. [ 517.379975][T18078] bridge0: port 3(vlan2) entered disabled state [ 517.380262][T18078] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.380839][T18078] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.584752][T18078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.612255][T18078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.750951][T18086] openvswitch: netlink: Missing valid actions attribute. [ 517.796930][T18086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3060'. [ 517.902779][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3062'. [ 517.934610][T18093] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 518.064061][T18100] ipt_ECN: cannot use operation on non-tcp rule [ 518.701597][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3064'. [ 518.963197][T18111] netlink: 'syz.4.3065': attribute type 6 has an invalid length. [ 519.121520][T18078] batman_adv: batadv0: Interface deactivated: macvlan2 [ 519.147118][T18078] batman_adv: batadv0: Interface deactivated: macvlan3 [ 519.175935][T18078] batman_adv: batadv0: Interface deactivated: macvlan4 [ 519.194209][T18078] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 519.195416][T18078] ip6gre1: left allmulticast mode [ 519.221043][T18078] batman_adv: batadv0: Interface deactivated: macvlan15 [ 519.242946][T18078] batman_adv: batadv0: Interface deactivated: macvlan16 [ 519.263148][T18078] batman_adv: batadv0: Interface deactivated: macvlan17 [ 519.306802][T18078] batman_adv: batadv0: Interface deactivated: macvlan18 [ 519.331438][T18078] batman_adv: batadv0: Interface deactivated: macvlan19 [ 519.345947][T18078] batman_adv: batadv0: Interface deactivated: macvlan20 [ 519.363948][T18078] batman_adv: batadv0: Interface deactivated: macvlan21 [ 519.384173][T18078] batman_adv: batadv0: Interface deactivated: macvlan22 [ 519.402895][T18078] batman_adv: batadv0: Interface deactivated: macvlan23 [ 519.421432][T18078] batman_adv: batadv0: Interface deactivated: macvlan24 [ 519.440903][T18078] batman_adv: batadv0: Interface deactivated: macvlan25 [ 519.469437][T18078] batman_adv: batadv0: Interface deactivated: macvlan26 [ 519.471886][T18078] macvtap0: left allmulticast mode [ 519.471993][T18078] macvtap1: left allmulticast mode [ 519.519532][ T154] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.519648][ T154] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.519690][ T154] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.519712][ T154] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.519743][ T154] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.519773][ T154] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.519802][ T154] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.519822][ T154] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.523693][ T6216] s`z1: Port: 1 Link DOWN [ 519.555557][T18091] bond0: (slave veth11): Releasing backup interface [ 519.646400][T18118] netlink: 'syz.1.3067': attribute type 1 has an invalid length. [ 519.661697][T18092] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.662181][T18092] dummy0: left promiscuous mode [ 519.665388][T18092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.718931][T18092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.729930][T18092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.748398][T18092] veth1_vlan: left promiscuous mode [ 519.755579][T18092] veth0_vlan: left promiscuous mode [ 519.757344][T18092] veth0_vlan: entered promiscuous mode [ 519.770849][T18092] veth1_vlan: entered promiscuous mode [ 519.812880][T18092] 8021q: adding VLAN 0 to HW filter on device eth0 [ 519.814351][T18092] 8021q: adding VLAN 0 to HW filter on device eth1 [ 519.815977][T18092] 8021q: adding VLAN 0 to HW filter on device eth2 [ 519.817315][T18092] 8021q: adding VLAN 0 to HW filter on device eth3 [ 519.826287][T18092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.837188][T18092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.844578][T18092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.848397][T18092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.852831][T18092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 519.854813][T18092] 8021q: adding VLAN 0 to HW filter on device bond6 [ 519.858473][T18092] 8021q: adding VLAN 0 to HW filter on device bond7 [ 519.872718][T18092] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 519.971806][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.971926][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.971968][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.199592][T18130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3071'. [ 520.467683][T18118] 8021q: adding VLAN 0 to HW filter on device bond19 [ 520.493368][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.493626][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.523548][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.523653][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.567465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 520.721086][ T154] bridge0: port 3(vlan2) entered blocking state [ 520.721188][ T154] bridge0: port 3(vlan2) entered forwarding state [ 520.804904][T18119] bond19: (slave gretap1): making interface the new active one [ 520.817663][T18119] bond19: (slave gretap1): Enslaving as an active interface with an up link [ 520.821132][ T38] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.871816][T18128] vxcan0: entered allmulticast mode [ 521.054183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 521.055302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 521.271533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 521.455964][T18161] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 521.481634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 521.626632][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 521.643253][T18168] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 521.771117][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'. [ 521.861915][T18180] ipt_ECN: cannot use operation on non-tcp rule [ 521.925646][T18183] netlink: 'syz.2.3076': attribute type 6 has an invalid length. [ 523.038408][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3081'. [ 523.122508][T18194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3080'. [ 523.204127][T18198] netlink: 564 bytes leftover after parsing attributes in process `syz.4.3082'. [ 523.553534][T18207] batman_adv: batadv0: Adding interface: macvlan27 [ 523.553556][T18207] batman_adv: batadv0: The MTU of interface macvlan27 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.553598][T18207] batman_adv: batadv0: Interface activated: macvlan27 [ 524.079100][T18210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3086'. [ 524.155561][T18214] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3087'. [ 525.354638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 525.567095][T18245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3095'. [ 525.653004][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3095'. [ 526.428035][T18258] netlink: 'syz.1.3098': attribute type 1 has an invalid length. [ 526.428061][T18258] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3098'. [ 526.660975][T18267] siw: device registration error -23 [ 527.060376][T18280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3103'. [ 527.377650][T18286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3104'. [ 527.850575][T18295] netlink: 'syz.0.3106': attribute type 6 has an invalid length. [ 528.484302][T18300] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3107'. [ 531.402749][T18337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3114'. [ 531.424013][T18337] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 531.781436][T18350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3117'. [ 531.846650][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 531.846681][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 531.891096][T18346] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.891820][T18346] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.372200][T18356] netlink: 'syz.2.3118': attribute type 6 has an invalid length. [ 532.687033][T18358] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3119'. [ 533.228140][T18369] netlink: 'syz.2.3121': attribute type 6 has an invalid length. [ 533.493424][T18371] netlink: 'syz.2.3122': attribute type 1 has an invalid length. [ 534.059787][ T38] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.059841][ T38] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.059878][ T38] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.059912][ T38] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.259338][T18379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'. [ 534.470223][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 534.473702][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 534.514879][T18388] netlink: 'syz.1.3125': attribute type 2 has an invalid length. [ 534.532670][T18388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3125'. [ 534.536593][T18387] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 534.661178][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 534.751710][T18396] netlink: 'syz.4.3128': attribute type 4 has an invalid length. [ 535.154388][T18404] netlink: 564 bytes leftover after parsing attributes in process `syz.1.3131'. [ 535.850562][T18420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3136'. [ 536.127983][T18425] C: renamed from veth1_to_team [ 536.194963][T18425] netlink: 'syz.0.3137': attribute type 1 has an invalid length. [ 536.195028][T18425] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3137'. [ 536.195090][T18425] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 537.615427][T18447] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 537.951158][T18441] bond25: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 538.047127][T18441] bond25 (unregistering): Released all slaves [ 538.218510][T18453] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3142'. [ 538.337804][T18453] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3142'. [ 538.632998][T18457] bond24: option primary_reselect: invalid value (6) [ 538.658559][T18457] bond24 (unregistering): Released all slaves [ 539.323963][T18461] 8021q: adding VLAN 0 to HW filter on device .` [ 539.343714][T18461] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.347696][T18468] netlink: 'syz.0.3145': attribute type 6 has an invalid length. [ 540.107231][T18461] veth1_vlan: left promiscuous mode [ 540.118693][T18461] veth0_vlan: left promiscuous mode [ 540.136290][T18461] veth0_vlan: entered promiscuous mode [ 540.141224][T18461] veth1_vlan: entered promiscuous mode [ 540.185549][T18461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.198399][T18461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.217706][T18461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.229160][T18461] 8021q: adding VLAN 0 to HW filter on device eth0 [ 540.231020][T18461] 8021q: adding VLAN 0 to HW filter on device eth1 [ 540.232242][T18461] 8021q: adding VLAN 0 to HW filter on device eth2 [ 540.233424][T18461] 8021q: adding VLAN 0 to HW filter on device eth3 [ 540.235371][T18461] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.280023][T18461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.281166][T18461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.282127][T18461] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.284208][T18461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.286399][T18461] 8021q: adding VLAN 0 to HW filter on device bond8 [ 540.328825][T18461] 8021q: adding VLAN 0 to HW filter on device bond9 [ 540.397258][T18461] 8021q: adding VLAN 0 to HW filter on device bond10 [ 540.411398][T18461] 8021q: adding VLAN 0 to HW filter on device bond11 [ 540.415741][T18461] 8021q: adding VLAN 0 to HW filter on device bond12 [ 540.435651][T18461] 8021q: adding VLAN 0 to HW filter on device bond13 [ 540.448658][T18461] 8021q: adding VLAN 0 to HW filter on device bond14 [ 540.461569][T18461] 8021q: adding VLAN 0 to HW filter on device bond15 [ 540.466097][T18461] 8021q: adding VLAN 0 to HW filter on device bond16 [ 540.485975][T18461] 8021q: adding VLAN 0 to HW filter on device bond17 [ 540.499118][T18461] 8021q: adding VLAN 0 to HW filter on device bond18 [ 540.510567][T18461] 8021q: adding VLAN 0 to HW filter on device bond19 [ 540.514058][T18461] 8021q: adding VLAN 0 to HW filter on device bond20 [ 540.544996][T18461] 8021q: adding VLAN 0 to HW filter on device bond22 [ 540.548859][T18461] 8021q: adding VLAN 0 to HW filter on device bond23 [ 540.568119][T18461] 8021q: adding VLAN 0 to HW filter on device bond24 [ 540.578689][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3144'. [ 540.613009][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.613272][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.698300][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.698441][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.785390][ T5904] bridge0: port 3(vlan2) entered blocking state [ 540.785509][ T5904] bridge0: port 3(vlan2) entered forwarding state [ 540.854707][T18472] syzkaller0: left promiscuous mode [ 540.854736][T18472] syzkaller0: left allmulticast mode [ 540.902922][ T5899] bond10: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 540.923964][ T5899] bond10: (slave veth19): making interface the new active one [ 540.983725][ T5899] bond10: active interface up! [ 541.103666][ T5904] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 541.295095][T18496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3150'. [ 541.316027][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 541.464662][T18492] batman_adv: batadv0: Adding interface: macvlan22 [ 541.464688][T18492] batman_adv: batadv0: The MTU of interface macvlan22 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.464727][T18492] batman_adv: batadv0: Interface activated: macvlan22 [ 541.538836][T18500] netlink: 'syz.4.3152': attribute type 7 has an invalid length. [ 541.538863][T18500] netlink: 'syz.4.3152': attribute type 3 has an invalid length. [ 541.538876][T18500] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3152'. [ 541.652376][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 541.655196][T18504] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 541.689544][T18505] netlink: 'syz.4.3152': attribute type 1 has an invalid length. [ 541.689570][T18505] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3152'. [ 541.891403][T18508] ipt_ECN: cannot use operation on non-tcp rule [ 543.554876][T18540] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3161'. [ 543.705226][T18540] block nbd0: reconnected socket [ 544.041924][ T5627] block nbd0: Receive control failed (result -32) [ 544.352592][T18545] nbd3: detected capacity change from 0 to 63 [ 544.364746][T18545] block nbd3: NBD_DISCONNECT [ 544.368449][T18545] block nbd3: Disconnected due to user request. [ 544.382519][T18545] block nbd3: shutting down sockets [ 544.397454][ C1] blk_print_req_error: 90 callbacks suppressed [ 544.397479][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.397562][ C1] buffer_io_error: 138 callbacks suppressed [ 544.397575][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 544.397602][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 544.397664][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 544.397718][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 544.397769][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 544.398110][ T1971] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 544.398140][ T1971] Buffer I/O error on dev nbd3, logical block 0, async page read [ 544.398158][ T1971] Buffer I/O error on dev nbd3, logical block 1, async page read [ 544.398173][ T1971] Buffer I/O error on dev nbd3, logical block 2, async page read [ 544.398189][ T1971] Buffer I/O error on dev nbd3, logical block 3, async page read [ 544.398879][ T1971] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 544.398907][ T1971] Buffer I/O error on dev nbd3, logical block 0, async page read [ 544.398933][ T1971] Buffer I/O error on dev nbd3, logical block 1, async page read [ 544.399109][ T1971] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 544.404035][ T1971] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 544.406860][ T1971] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.420082][ T1971] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.420222][ T1971] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.420343][ T1971] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.421168][T18417] ldm_validate_partition_table(): Disk read failed. [ 544.427655][T18417] Dev nbd3: unable to read RDB block 0 [ 544.434223][T18417] nbd3: unable to read partition table [ 544.503070][T18417] ldm_validate_partition_table(): Disk read failed. [ 544.508310][T18417] Dev nbd3: unable to read RDB block 0 [ 544.521536][T18417] nbd3: unable to read partition table [ 544.866751][T18556] netlink: 'syz.3.3163': attribute type 1 has an invalid length. [ 544.871213][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 544.981345][T18559] netlink: 328 bytes leftover after parsing attributes in process `syz.3.3163'. [ 544.981410][T18559] netlink: 'syz.3.3163': attribute type 9 has an invalid length. [ 544.981425][T18559] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3163'. [ 544.981439][T18559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3163'. [ 544.992774][T18565] sock: sock_timestamping_bind_phc: sock not bind to device [ 545.112055][T18556] 8021q: adding VLAN 0 to HW filter on device bond23 [ 545.592243][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 545.828968][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 545.854768][T18584] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 546.064357][T18593] ipt_ECN: cannot use operation on non-tcp rule [ 548.158433][T18633] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3185'. [ 548.183869][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 548.185872][T18636] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 548.387136][T18636] ipt_ECN: cannot use operation on non-tcp rule [ 549.335603][T18659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.340431][T18659] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.354425][T18659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.015753][T18659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.024139][T18659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.048930][T18659] veth1_vlan: left promiscuous mode [ 550.053787][T18659] veth0_vlan: left promiscuous mode [ 550.058576][T18659] veth0_vlan: entered promiscuous mode [ 550.063672][T18659] veth1_vlan: entered promiscuous mode [ 550.174768][T18659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 550.187758][T18655] netlink: 'syz.3.3193': attribute type 10 has an invalid length. [ 550.206912][T18659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.223757][T18659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.229132][T18659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.267592][T18659] 8021q: adding VLAN 0 to HW filter on device eth0 [ 550.279643][T18659] 8021q: adding VLAN 0 to HW filter on device eth1 [ 550.280853][T18659] 8021q: adding VLAN 0 to HW filter on device eth2 [ 550.282005][T18659] 8021q: adding VLAN 0 to HW filter on device eth3 [ 550.283808][T18659] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.321909][T18659] 8021q: adding VLAN 0 to HW filter on device bond6 [ 550.326539][T18659] batman_adv: batadv0: Interface activated: macvlan2 [ 550.328403][T18659] batman_adv: batadv0: Interface activated: macvlan3 [ 550.353000][T18659] batman_adv: batadv0: Interface activated: macvlan4 [ 550.353407][T18659] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 550.390601][ T6215] s`z1: Port: 1 Link ACTIVE [ 550.394510][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.394627][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.398680][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.398806][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.506927][ T13] bridge0: port 3(vlan2) entered blocking state [ 550.507046][ T13] bridge0: port 3(vlan2) entered forwarding state [ 550.541649][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.559836][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.560062][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.560231][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.052364][T18681] batman_adv: batadv0: Adding interface: macvlan28 [ 551.052385][T18681] batman_adv: batadv0: The MTU of interface macvlan28 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.052427][T18681] batman_adv: batadv0: Interface activated: macvlan28 [ 551.610213][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'. [ 551.610248][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'. [ 551.875488][T18697] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3202'. [ 552.140624][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 552.147439][T18712] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 552.302407][T18721] ipt_ECN: cannot use operation on non-tcp rule [ 552.472220][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 553.653140][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3213'. [ 553.674928][T18736] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 553.760369][T18740] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3212'. [ 553.882372][T18736] ipt_ECN: cannot use operation on non-tcp rule [ 554.215892][T18757] netlink: 'syz.2.3217': attribute type 6 has an invalid length. [ 554.403984][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 554.582622][T18763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 554.933941][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 554.963719][T18770] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 555.215131][T18779] ipt_ECN: cannot use operation on non-tcp rule [ 555.705945][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 555.729663][T18793] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 555.889672][T18789] ipt_ECN: cannot use operation on non-tcp rule [ 556.184756][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.185015][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.185218][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.226242][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.226481][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.228420][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.256475][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.256775][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.256995][T18798] Dead loop on virtual device geneve0 (net 36), fix it urgently! [ 556.990868][T18811] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3235'. [ 557.035676][T18813] netlink: 'syz.0.3234': attribute type 6 has an invalid length. [ 557.485341][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 557.485370][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 559.083213][T18848] batman_adv: batadv0: Adding interface: macvlan29 [ 559.098094][T18848] batman_adv: batadv0: The MTU of interface macvlan29 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.098215][T18848] batman_adv: batadv0: Interface activated: macvlan29 [ 560.360085][T18899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3262'. [ 560.567466][T18912] netlink: 'syz.4.3263': attribute type 6 has an invalid length. [ 562.156225][T18946] gretap0: left promiscuous mode [ 562.331710][T18946] 8021q: adding VLAN 0 to HW filter on device .` [ 562.333319][T18946] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.461113][T18946] veth1_vlan: left promiscuous mode [ 562.462600][T18946] veth0_vlan: left promiscuous mode [ 562.464939][T18946] veth0_vlan: entered promiscuous mode [ 562.479229][T18946] veth1_vlan: entered promiscuous mode [ 562.491516][T18946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.492976][T18946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.494147][T18946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.495335][T18946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.497165][T18946] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 562.498219][T18946] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 562.503384][T18946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 562.506222][T18946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.516077][T18946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.527446][T18946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.534243][T18946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.541656][T18946] 8021q: adding VLAN 0 to HW filter on device bond5 [ 562.547262][T18946] 8021q: adding VLAN 0 to HW filter on device bond6 [ 562.550737][T18946] geneve0: entered promiscuous mode [ 562.554585][T18946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 562.569116][T18946] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.577156][T18946] bridge0: entered promiscuous mode [ 562.577415][T18946] macvlan7: left promiscuous mode [ 562.580653][T18946] 8021q: adding VLAN 0 to HW filter on device bond9 [ 562.584441][T18946] 8021q: adding VLAN 0 to HW filter on device bond10 [ 562.597069][T18946] 8021q: adding VLAN 0 to HW filter on device bond11 [ 562.601795][T18946] 8021q: adding VLAN 0 to HW filter on device bond12 [ 562.605883][T18946] 8021q: adding VLAN 0 to HW filter on device bond13 [ 562.608174][T18946] gretap0: entered promiscuous mode [ 562.618748][T18946] bond14: left promiscuous mode [ 562.621847][T18946] 8021q: adding VLAN 0 to HW filter on device bond14 [ 562.625646][T18946] 8021q: adding VLAN 0 to HW filter on device bond15 [ 562.792641][ T5627] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 563.120363][ T5899] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 563.120404][ T5899] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.168015][T18970] netlink: 'syz.1.3280': attribute type 6 has an invalid length. [ 563.178754][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3281'. [ 563.769697][ T5894] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 563.769767][ T5894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.791975][ T5899] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 563.792015][ T5899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.800345][ T5894] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 563.800379][ T5894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.855940][T18985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3287'. [ 563.878940][T18987] xt_hashlimit: size too large, truncated to 1048576 [ 563.997973][T18988] batman_adv: batadv0: Adding interface: macvlan30 [ 563.998037][T18988] batman_adv: batadv0: The MTU of interface macvlan30 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.998135][T18988] batman_adv: batadv0: Interface activated: macvlan30 [ 564.168838][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 564.188056][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 564.203324][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 564.525030][T19002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3292'. [ 564.802170][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3296'. [ 565.081706][T19022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'. [ 565.267512][T19024] bond20: (slave veth43): Enslaving as an active interface with an up link [ 565.485752][T19027] batman_adv: batadv0: Adding interface: macvlan23 [ 565.485774][T19027] batman_adv: batadv0: The MTU of interface macvlan23 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.485817][T19027] batman_adv: batadv0: Interface activated: macvlan23 [ 565.679444][T19039] netlink: 'syz.2.3303': attribute type 4 has an invalid length. [ 565.695913][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 565.827995][T19043] bond24: (slave veth45): Enslaving as an active interface with an up link [ 565.872355][T19045] RDS: rds_bind could not find a transport for ::ffff:172.20.20.57, load rds_tcp or rds_rdma? [ 566.352074][T19053] batman_adv: batadv0: Adding interface: macvlan24 [ 566.352096][T19053] batman_adv: batadv0: The MTU of interface macvlan24 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.352135][T19053] batman_adv: batadv0: Interface activated: macvlan24 [ 566.550036][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 567.400876][T19080] netlink: 'syz.3.3314': attribute type 6 has an invalid length. [ 570.365806][T19134] netlink: 'syz.3.3330': attribute type 6 has an invalid length. [ 570.903511][T19140] netlink: 'syz.0.3333': attribute type 32 has an invalid length. [ 570.903538][T19140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3333'. [ 571.235964][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'. [ 573.433734][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 573.433803][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 573.505945][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055cd5400: rx timeout, send abort [ 573.706426][T19193] xt_hashlimit: size too large, truncated to 1048576 [ 574.006010][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055cd5400: abort rx timeout. Force session deactivation [ 574.008759][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055cd6400: rx timeout, send abort [ 574.185841][T19179] bridge0: port 3(vlan2) entered disabled state [ 574.186063][T19179] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.186774][T19179] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.508819][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055cd6400: abort rx timeout. Force session deactivation [ 575.201554][T19179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.265664][T19179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.267302][T19179] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 576.304756][T19179] batman_adv: batadv0: Interface deactivated: macvlan17 [ 576.321979][T19179] batman_adv: batadv0: Interface deactivated: macvlan18 [ 576.326311][T19179] batman_adv: batadv0: Interface deactivated: macvlan19 [ 576.359420][T19179] batman_adv: batadv0: Interface deactivated: macvlan20 [ 576.404493][T19179] batman_adv: batadv0: Interface deactivated: macvlan22 [ 576.418644][T19179] batman_adv: batadv0: Interface deactivated: macvlan23 [ 576.470311][T19179] batman_adv: batadv0: Interface deactivated: macvlan24 [ 576.480206][ T50] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.480271][ T50] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.480433][ T50] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.480498][ T50] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.480597][ T50] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.480691][ T50] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.480792][ T50] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.480858][ T50] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.734567][T19218] net_ratelimit: 1506 callbacks suppressed [ 576.734592][T19218] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 577.099405][T19234] syzkaller0: left promiscuous mode [ 577.099473][T19234] syzkaller0: left allmulticast mode [ 577.840585][T19252] xt_hashlimit: size too large, truncated to 1048576 [ 579.128227][T19270] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 579.178796][T19270] bridge3: left promiscuous mode [ 579.185494][T19270] bridge4: left promiscuous mode [ 580.587462][T19301] netlink: 'syz.3.3377': attribute type 6 has an invalid length. [ 581.497004][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 581.554947][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 581.657962][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 581.812176][T19310] ovs-system: entered promiscuous mode [ 581.846521][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3383'. [ 582.886575][T19331] xt_hashlimit: size too large, truncated to 1048576 [ 582.902989][T19335] netlink: 'syz.0.3390': attribute type 6 has an invalid length. [ 585.156060][T19384] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 586.233017][T19407] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3404'. [ 586.541510][T19417] xt_hashlimit: size too large, truncated to 1048576 [ 588.480832][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 588.896352][T19462] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3417'. [ 589.554065][T19476] xt_hashlimit: size too large, truncated to 1048576 [ 590.271287][T19486] batman_adv: batadv0: Adding interface: macvlan31 [ 590.271355][T19486] batman_adv: batadv0: The MTU of interface macvlan31 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.271457][T19486] batman_adv: batadv0: Interface activated: macvlan31 [ 590.992044][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3428'. [ 591.034237][T19501] 8021q: adding VLAN 0 to HW filter on device bond25 [ 591.078440][T19501] macvlan2: entered promiscuous mode [ 591.078466][T19501] macvlan2: entered allmulticast mode [ 591.092368][T19501] bond25: entered promiscuous mode [ 591.093517][T19501] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 591.098995][T19501] bond25: left promiscuous mode [ 591.178828][T19508] netlink: 'syz.4.3427': attribute type 4 has an invalid length. [ 591.238005][T19513] netlink: 'syz.4.3427': attribute type 4 has an invalid length. [ 591.354853][T19512] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3430'. [ 591.653653][T19524] syzkaller0: entered promiscuous mode [ 591.653680][T19524] syzkaller0: entered allmulticast mode [ 591.685022][T19524] batman_adv: batadv0: Interface activated: syzkaller0 [ 591.699584][ T1362] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.699635][ T1362] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.699673][ T1362] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.728039][ T1362] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.124638][T19532] xt_hashlimit: size too large, truncated to 1048576 [ 592.418087][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 592.696888][T19542] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 592.696956][T19542] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 592.747578][T19547] syzkaller0: entered promiscuous mode [ 592.747642][T19547] syzkaller0: entered allmulticast mode [ 593.143130][T19558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3441'. [ 593.362201][T19559] batman_adv: batadv0: Adding interface: macvlan32 [ 593.362221][T19559] batman_adv: batadv0: The MTU of interface macvlan32 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.362266][T19559] batman_adv: batadv0: Interface activated: macvlan32 [ 593.840771][T19572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.355944][T19578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3446'. [ 594.497179][T19578] 8021q: adding VLAN 0 to HW filter on device bond21 [ 594.513499][T19583] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3447'. [ 594.616064][T19582] 8021q: adding VLAN 0 to HW filter on device bond21 [ 594.650909][T19582] bond21: (slave wireguard0): The slave device specified does not support setting the MAC address [ 594.651932][T19582] bond21: (slave wireguard0): Error -95 calling set_mac_address [ 594.922178][T19584] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 594.954905][T19584] bond21: (slave wlan1): Enslaving as an active interface with an up link [ 595.342926][T19598] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.345337][T19598] dummy0: left promiscuous mode [ 595.682609][ T154] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 595.884119][T19605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.989610][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 596.056203][T19598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.057336][T19598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.058401][T19598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.093795][T19598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 596.098259][T19598] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 596.163240][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.163362][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.166119][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.166242][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.289934][ T5897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.290202][ T5897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.290301][ T5897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.290395][ T5897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.417812][T19641] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3461'. [ 598.618650][T19675] syzkaller0: entered promiscuous mode [ 598.618678][T19675] syzkaller0: entered allmulticast mode [ 599.410808][T19689] netlink: 'syz.0.3468': attribute type 10 has an invalid length. [ 599.472809][T19691] netlink: 'syz.2.3469': attribute type 1 has an invalid length. [ 599.615366][T19689] team0 (unregistering): Port device team_slave_0 removed [ 599.660623][T19689] team0 (unregistering): Port device team_slave_1 removed [ 599.720475][T19689] team0 (unregistering): Port device netdevsim1 removed [ 599.861638][T19691] 8021q: adding VLAN 0 to HW filter on device bond26 [ 600.496176][T19723] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3476'. [ 601.174339][T19742] syzkaller0: entered promiscuous mode [ 601.174364][T19742] syzkaller0: entered allmulticast mode [ 601.851662][T19759] syzkaller0: entered promiscuous mode [ 601.851688][T19759] syzkaller0: entered allmulticast mode [ 602.984371][T19785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.775353][T19807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.251698][T19846] batman_adv: batadv0: Adding interface: macvlan25 [ 607.251722][T19846] batman_adv: batadv0: The MTU of interface macvlan25 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.251763][T19846] batman_adv: batadv0: Interface activated: macvlan25 [ 607.501863][T19858] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 608.408820][T19886] tipc: Enabled bearer , priority 0 [ 608.486957][T19886] tipc: Resetting bearer [ 608.963479][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3511'. [ 608.963504][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3511'. [ 609.253365][T19890] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 609.536778][T19890] batman_adv: batadv0: Interface deactivated: macvlan25 [ 609.688404][ T25] tipc: Node number set to 2035774871 [ 609.822585][T19865] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.824256][T19865] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.824352][T19865] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.824449][T19865] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.019541][T19913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.365681][T19948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3521'. [ 612.365711][T19948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3521'. [ 612.522268][T19948] tipc: New replicast peer: 255.255.255.255 [ 612.523074][T19948] tipc: Enabled bearer , priority 10 [ 612.746701][T19968] warn_alloc: 1 callbacks suppressed [ 612.746725][T19968] syz.2.3525: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 612.746795][T19968] CPU: 1 UID: 0 PID: 19968 Comm: syz.2.3525 Not tainted syzkaller #0 PREEMPT(full) [ 612.746818][T19968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.746830][T19968] Call Trace: [ 612.746840][T19968] [ 612.746849][T19968] dump_stack_lvl+0xe8/0x150 [ 612.746894][T19968] warn_alloc+0x24d/0x270 [ 612.746918][T19968] ? kasan_save_track+0x4f/0x80 [ 612.746975][T19968] ? kasan_save_track+0x3e/0x80 [ 612.746999][T19968] ? __pfx_warn_alloc+0x10/0x10 [ 612.747019][T19968] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 612.747157][T19968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.747211][T19968] __vmalloc_node_range_noprof+0x127/0x1540 [ 612.747263][T19968] ? rcu_is_watching+0x16/0xb0 [ 612.747311][T19968] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 612.747340][T19968] ? __kmalloc_cache_noprof+0x321/0x600 [ 612.747363][T19968] ? __kmalloc_cache_noprof+0x14d/0x600 [ 612.747382][T19968] ? xskq_create+0x56/0x220 [ 612.747471][T19968] xskq_create+0x148/0x220 [ 612.747493][T19968] ? xsk_init_queue+0x8a/0xe0 [ 612.747548][T19968] xsk_init_queue+0x8a/0xe0 [ 612.747583][T19968] xsk_setsockopt+0x52a/0x960 [ 612.747618][T19968] ? __pfx_xsk_setsockopt+0x10/0x10 [ 612.747649][T19968] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.747767][T19968] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 612.747815][T19968] ? __pfx_xsk_setsockopt+0x10/0x10 [ 612.747850][T19968] do_sock_setsockopt+0x17c/0x1b0 [ 612.747883][T19968] __x64_sys_setsockopt+0x13d/0x1b0 [ 612.747916][T19968] do_syscall_64+0x166/0x520 [ 612.747943][T19968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.747964][T19968] ? clear_bhb_loop+0x70/0xc0 [ 612.747992][T19968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.748013][T19968] RIP: 0033:0x7f6dc2b9e159 [ 612.748035][T19968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.748053][T19968] RSP: 002b:00007f6dc3a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.748077][T19968] RAX: ffffffffffffffda RBX: 00007f6dc2e25fa0 RCX: 00007f6dc2b9e159 [ 612.748093][T19968] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 612.748106][T19968] RBP: 00007f6dc2c3506b R08: 0000000000000004 R09: 0000000000000000 [ 612.748120][T19968] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.748134][T19968] R13: 00007f6dc2e26038 R14: 00007f6dc2e25fa0 R15: 00007fffcb583148 [ 612.748170][T19968] [ 612.748446][T19968] Mem-Info: [ 612.748467][T19968] active_anon:6032 inactive_anon:0 isolated_anon:0 [ 612.748467][T19968] active_file:0 inactive_file:43571 isolated_file:0 [ 612.748467][T19968] unevictable:0 dirty:233 writeback:0 [ 612.748467][T19968] slab_reclaimable:11473 slab_unreclaimable:117603 [ 612.748467][T19968] mapped:31723 shmem:522 pagetables:1230 [ 612.748467][T19968] sec_pagetables:0 bounce:0 [ 612.748467][T19968] kernel_misc_reclaimable:0 [ 612.748467][T19968] free:1303828 free_pcp:11717 free_cma:0 [ 612.748525][T19968] Node 0 active_anon:24128kB inactive_anon:0kB active_file:0kB inactive_file:174080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126892kB dirty:932kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17012kB pagetables:4772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 612.748583][T19968] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 612.748634][T19968] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.748694][T19968] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 612.748735][T19968] Node 0 DMA32 free:1257020kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24204kB inactive_anon:0kB active_file:0kB inactive_file:174080kB unevictable:0kB writepending:932kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:42840kB local_pcp:22188kB free_cma:0kB [ 612.748796][T19968] lowmem_reserve[]: 0 0 0 0 0 [ 612.748834][T19968] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.748889][T19968] lowmem_reserve[]: 0 0 0 0 0 [ 612.748927][T19968] Node 1 Normal free:3942932kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4028kB local_pcp:0kB free_cma:0kB [ 612.748986][T19968] lowmem_reserve[]: 0 0 0 0 0 [ 612.749023][T19968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 612.795060][T19968] Node 0 DMA32: 2044*4kB (UME) 1079*8kB (UME) 654*16kB (UME) 204*32kB (UME) 109*64kB (UME) 54*128kB (UME) 35*256kB (UME) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (U) 291*4096kB (UM) = 1256776kB [ 612.795240][T19968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 612.795351][T19968] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3942932kB [ 612.795521][T19968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.795538][T19968] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.795555][T19968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.795571][T19968] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.795587][T19968] 44091 total pagecache pages [ 612.795595][T19968] 0 pages in swap cache [ 612.795603][T19968] Free swap = 124996kB [ 612.795611][T19968] Total swap = 124996kB [ 612.795619][T19968] 2097051 pages RAM [ 612.795627][T19968] 0 pages HighMem/MovableOnly [ 612.838630][T19968] 428782 pages reserved [ 612.838665][T19968] 0 pages cma reserved [ 613.404003][T19968] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 613.687174][ T6242] tipc: Node number set to 2668315791 [ 614.120595][T19987] veth0: entered promiscuous mode [ 614.126571][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3526'. [ 614.126653][T19987] veth0: left promiscuous mode [ 614.201980][T19986] netlink: 'syz.4.3530': attribute type 23 has an invalid length. [ 614.249056][T19988] openvswitch: netlink: Multiple metadata blocks provided [ 615.794058][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3536'. [ 615.870209][T20010] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3536'. [ 615.985020][T20013] syzkaller0: left promiscuous mode [ 615.985085][T20013] syzkaller0: left allmulticast mode [ 616.249033][ T1013] tipc: Subscription rejected, illegal request [ 616.267575][T20016] xt_hashlimit: size too large, truncated to 1048576 [ 616.289571][T20017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3538'. [ 616.442119][T20024] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 616.846988][T20012] syz_tun: entered promiscuous mode [ 616.847373][T20012] vlan0: entered promiscuous mode [ 617.306171][T20034] syzkaller0: entered promiscuous mode [ 617.306198][T20034] syzkaller0: entered allmulticast mode [ 617.490715][T20036] syzkaller0: entered promiscuous mode [ 617.490781][T20036] syzkaller0: entered allmulticast mode [ 618.133156][T20054] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3547'. [ 618.195911][T20057] siw: device registration error -23 [ 618.344882][T20038] ------------[ cut here ]------------ [ 618.344901][T20038] !chanctx_conf [ 618.344913][T20038] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#1: syz.3.3543/20038 [ 618.366678][T20038] Modules linked in: [ 618.372801][T20038] CPU: 1 UID: 0 PID: 20038 Comm: syz.3.3543 Not tainted syzkaller #0 PREEMPT(full) [ 618.382477][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.392813][T20038] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 618.399275][T20038] Code: 0c 43 f6 e9 b1 fe ff ff e8 35 61 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 27 61 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 19 61 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 618.419643][T20038] RSP: 0000:ffffc90005fd7318 EFLAGS: 00010283 [ 618.425970][T20038] RAX: ffffffff8b606997 RBX: ffffffff8b60660f RCX: 0000000000080000 [ 618.434230][T20038] RDX: ffffc90005b9a000 RSI: 000000000000cc89 RDI: 000000000000cc8a [ 618.442312][T20038] RBP: 00000000ffffffff R08: ffffffff8b60660f R09: 0000000000000000 [ 618.450508][T20038] R10: dffffc0000000000 R11: ffffed10053a7c1e R12: ffff88802a394ec0 [ 618.458534][T20038] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 618.466695][T20038] FS: 00007fc15ae926c0(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 618.476078][T20038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.482851][T20038] CR2: 0000001b33724220 CR3: 00000000352ec000 CR4: 00000000003526f0 [ 618.490920][T20038] Call Trace: [ 618.494242][T20038] [ 618.497231][T20038] mesh_plink_frame_tx+0x73d/0xc30 [ 618.502684][T20038] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 618.508441][T20038] ? mesh_plink_timer+0x400/0x850 [ 618.513632][T20038] mesh_plink_deactivate+0x18b/0x2f0 [ 618.519221][T20038] mesh_sta_cleanup+0x42/0x150 [ 618.524189][T20038] cleanup_single_sta+0x3ff/0x660 [ 618.529634][T20038] __sta_info_flush+0x5bb/0x700 [ 618.534662][T20038] ? __pfx___sta_info_flush+0x10/0x10 [ 618.540263][T20038] ieee80211_do_stop+0x3cd/0x2410 [ 618.545513][T20038] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 618.551168][T20038] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 618.557184][T20038] ieee80211_stop+0x1ab/0x200 [ 618.561983][T20038] ? __pfx_ieee80211_stop+0x10/0x10 [ 618.567322][T20038] __dev_close_many+0x366/0x6e0 [ 618.572351][T20038] ? __pfx___dev_close_many+0x10/0x10 [ 618.577772][T20038] netif_close_many+0x249/0x660 [ 618.582722][T20038] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 618.588578][T20038] ? __pfx_netif_close_many+0x10/0x10 [ 618.594217][T20038] ? __mutex_lock+0x1096/0x1550 [ 618.599525][T20038] ? __mutex_lock+0x5d4/0x1550 [ 618.604333][T20038] netif_close+0x160/0x220 [ 618.609055][T20038] ? __pfx_netif_close+0x10/0x10 [ 618.614308][T20038] ? __pfx___mutex_lock+0x10/0x10 [ 618.619520][T20038] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.624770][T20038] dev_close+0xf7/0x210 [ 618.629096][T20038] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 618.635506][T20038] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 618.641775][T20038] cfg80211_rfkill_set_block+0x2d/0x50 [ 618.647372][T20038] rfkill_set_block+0x19f/0x4d0 [ 618.652496][T20038] rfkill_fop_write+0x43b/0x560 [ 618.657421][T20038] ? common_file_perm+0x20e/0x2b0 [ 618.662528][T20038] ? __pfx_rfkill_fop_write+0x10/0x10 [ 618.667939][T20038] ? security_file_permission+0x10/0x260 [ 618.673763][T20038] ? rw_verify_area+0x203/0x4c0 [ 618.678663][T20038] ? __pfx_rfkill_fop_write+0x10/0x10 [ 618.684144][T20038] vfs_write+0x296/0xba0 [ 618.688490][T20038] ? __pfx_vfs_write+0x10/0x10 [ 618.693360][T20038] ? __fget_files+0x2a/0x420 [ 618.698094][T20038] ? __fget_files+0x2a/0x420 [ 618.702882][T20038] ? __fget_files+0x3a2/0x420 [ 618.707865][T20038] ? __fget_files+0x2a/0x420 [ 618.712576][T20038] ksys_write+0x150/0x270 [ 618.717325][T20038] ? __pfx_ksys_write+0x10/0x10 [ 618.722483][T20038] do_syscall_64+0x166/0x520 [ 618.727207][T20038] ? trace_irq_disable+0x3b/0x140 [ 618.732465][T20038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.738653][T20038] ? clear_bhb_loop+0x70/0xc0 [ 618.743471][T20038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.749811][T20038] RIP: 0033:0x7fc159f9e159 [ 618.754370][T20038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.774429][T20038] RSP: 002b:00007fc15ae92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 618.783283][T20038] RAX: ffffffffffffffda RBX: 00007fc15a225fa0 RCX: 00007fc159f9e159 [ 618.791605][T20038] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 618.799744][T20038] RBP: 00007fc15a03506b R08: 0000000000000000 R09: 0000000000000000 [ 618.807761][T20038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.815827][T20038] R13: 00007fc15a226038 R14: 00007fc15a225fa0 R15: 00007ffc1f769718 [ 618.824077][T20038] [ 618.827125][T20038] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 618.834518][T20038] CPU: 1 UID: 0 PID: 20038 Comm: syz.3.3543 Not tainted syzkaller #0 PREEMPT(full) [ 618.844176][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.854466][T20038] Call Trace: [ 618.858334][T20038] [ 618.861768][T20038] vpanic+0x56d/0xa60 [ 618.865827][T20038] ? __pfx__printk+0x10/0x10 [ 618.870466][T20038] ? __pfx_vpanic+0x10/0x10 [ 618.875001][T20038] ? is_bpf_text_address+0x292/0x2b0 [ 618.880328][T20038] ? is_bpf_text_address+0x26/0x2b0 [ 618.885753][T20038] panic+0xc5/0xd0 [ 618.889553][T20038] ? __pfx_panic+0x10/0x10 [ 618.894038][T20038] __warn+0x315/0x4c0 [ 618.898237][T20038] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 618.903652][T20038] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 618.909058][T20038] __report_bug+0x276/0x570 [ 618.913866][T20038] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 618.919456][T20038] ? __pfx___report_bug+0x10/0x10 [ 618.924865][T20038] ? __lock_acquire+0x747/0x2de0 [ 618.929854][T20038] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 618.935737][T20038] report_bug+0x16b/0x220 [ 618.940327][T20038] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 618.945749][T20038] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 618.951173][T20038] handle_bug+0x9c/0x200 [ 618.955644][T20038] exc_invalid_op+0x1a/0x50 [ 618.960207][T20038] asm_exc_invalid_op+0x1a/0x20 [ 618.965533][T20038] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 618.971816][T20038] Code: 0c 43 f6 e9 b1 fe ff ff e8 35 61 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 27 61 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 19 61 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 618.991909][T20038] RSP: 0000:ffffc90005fd7318 EFLAGS: 00010283 [ 618.998393][T20038] RAX: ffffffff8b606997 RBX: ffffffff8b60660f RCX: 0000000000080000 [ 619.006500][T20038] RDX: ffffc90005b9a000 RSI: 000000000000cc89 RDI: 000000000000cc8a [ 619.014788][T20038] RBP: 00000000ffffffff R08: ffffffff8b60660f R09: 0000000000000000 [ 619.023131][T20038] R10: dffffc0000000000 R11: ffffed10053a7c1e R12: ffff88802a394ec0 [ 619.031149][T20038] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 619.039337][T20038] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 619.044666][T20038] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 619.049979][T20038] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 619.055392][T20038] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 619.060806][T20038] mesh_plink_frame_tx+0x73d/0xc30 [ 619.066053][T20038] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 619.071832][T20038] ? mesh_plink_timer+0x400/0x850 [ 619.076914][T20038] mesh_plink_deactivate+0x18b/0x2f0 [ 619.082269][T20038] mesh_sta_cleanup+0x42/0x150 [ 619.087076][T20038] cleanup_single_sta+0x3ff/0x660 [ 619.092147][T20038] __sta_info_flush+0x5bb/0x700 [ 619.097127][T20038] ? __pfx___sta_info_flush+0x10/0x10 [ 619.102545][T20038] ieee80211_do_stop+0x3cd/0x2410 [ 619.107633][T20038] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 619.113274][T20038] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.119389][T20038] ieee80211_stop+0x1ab/0x200 [ 619.124101][T20038] ? __pfx_ieee80211_stop+0x10/0x10 [ 619.129609][T20038] __dev_close_many+0x366/0x6e0 [ 619.134499][T20038] ? __pfx___dev_close_many+0x10/0x10 [ 619.140201][T20038] netif_close_many+0x249/0x660 [ 619.145175][T20038] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.151032][T20038] ? __pfx_netif_close_many+0x10/0x10 [ 619.156528][T20038] ? __mutex_lock+0x1096/0x1550 [ 619.161505][T20038] ? __mutex_lock+0x5d4/0x1550 [ 619.166301][T20038] netif_close+0x160/0x220 [ 619.170838][T20038] ? __pfx_netif_close+0x10/0x10 [ 619.175894][T20038] ? __pfx___mutex_lock+0x10/0x10 [ 619.181213][T20038] ? do_raw_spin_lock+0x12b/0x2f0 [ 619.186586][T20038] dev_close+0xf7/0x210 [ 619.190794][T20038] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 619.196988][T20038] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 619.203176][T20038] cfg80211_rfkill_set_block+0x2d/0x50 [ 619.208695][T20038] rfkill_set_block+0x19f/0x4d0 [ 619.213687][T20038] rfkill_fop_write+0x43b/0x560 [ 619.218563][T20038] ? common_file_perm+0x20e/0x2b0 [ 619.223615][T20038] ? __pfx_rfkill_fop_write+0x10/0x10 [ 619.229013][T20038] ? security_file_permission+0x10/0x260 [ 619.234855][T20038] ? rw_verify_area+0x203/0x4c0 [ 619.239854][T20038] ? __pfx_rfkill_fop_write+0x10/0x10 [ 619.245339][T20038] vfs_write+0x296/0xba0 [ 619.249626][T20038] ? __pfx_vfs_write+0x10/0x10 [ 619.254424][T20038] ? __fget_files+0x2a/0x420 [ 619.259140][T20038] ? __fget_files+0x2a/0x420 [ 619.263761][T20038] ? __fget_files+0x3a2/0x420 [ 619.268486][T20038] ? __fget_files+0x2a/0x420 [ 619.273151][T20038] ksys_write+0x150/0x270 [ 619.277619][T20038] ? __pfx_ksys_write+0x10/0x10 [ 619.282616][T20038] do_syscall_64+0x166/0x520 [ 619.287421][T20038] ? trace_irq_disable+0x3b/0x140 [ 619.292478][T20038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.298575][T20038] ? clear_bhb_loop+0x70/0xc0 [ 619.303287][T20038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.309292][T20038] RIP: 0033:0x7fc159f9e159 [ 619.313734][T20038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.333877][T20038] RSP: 002b:00007fc15ae92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 619.342364][T20038] RAX: ffffffffffffffda RBX: 00007fc15a225fa0 RCX: 00007fc159f9e159 [ 619.350449][T20038] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 619.358623][T20038] RBP: 00007fc15a03506b R08: 0000000000000000 R09: 0000000000000000 [ 619.366794][T20038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.374782][T20038] R13: 00007fc15a226038 R14: 00007fc15a225fa0 R15: 00007ffc1f769718 [ 619.383304][T20038] [ 619.386590][T20038] Kernel Offset: disabled [ 619.390919][T20038] Rebooting in 86400 seconds..