last executing test programs: 3m52.45745265s ago: executing program 2 (id=1686): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "c9bae94572726b2d", "4c502b3961ae7dacec77d5362bc897ab", "bd18e953", "091000c56a001700"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="11008108090f9becdbaa39da96d70f57cb703c6278994cb92e264831371900000069bd6efb25025ef60d002700020400bf056e4aee0acb6ed9796f", 0x3b}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) 3m52.255909072s ago: executing program 2 (id=1690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) close(0x3) 3m51.732286119s ago: executing program 2 (id=1698): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0xd, 0xf, &(0x7f00000015c0)=ANY=[@ANYBLOB="ec0000000000000003fb0000000000000000002d349e5b53f1a0d1ba22cbc0909e0d935f5af152eb6dc51a0a429dd2da83be648a88d3781c1720381d0673b51ab11b4cd76e7b74f87b491b39fc", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000ac00000010c0ed000900000095000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000500000001000000000000000000000000000000004e98cf000000"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r4, @ANYBLOB="048000000000000000003fa9326100000000000087ff174dfe2758cb3c2ae67307012494449c9698904e3ec97f4b5fa6be7fbdfd5d9cc525091f9459da107a230fdf59e5d4ac5b5f49888601dc11bf010b66e70ad583d677002fa9ccbf6fbe8d11837704343be5233e09588743283d1a51facdf9e1c0d05ebf00de4cc27ac13837782bc3aa67f1db8899817bf849709fc0753d4d4af638e2cbf85480e6d9dc3fd1118fd3576f7c04478d87a97e2dd80ad3ad1f095c66d904e2bbd7a410d43ba661f4dcc3efd5d4ca24509cc44a42", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="03000000040000000400"/28], 0x50) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000340)={&(0x7f00000000c0)=0x55dc000, 0x0, &(0x7f0000000300), &(0x7f0000000140)}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={@local, @dev={0xac, 0x14, 0x14, 0x24}, 0x10, 0x1a}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'erspan0\x00', {0x4}, 0x1}) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r12, 0x10e, 0x8, &(0x7f0000000680)=""/203, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_gstrings={0x1b, 0x7}}) sendmsg(r0, &(0x7f0000001680)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000000380)=[{&(0x7f00000016c0)="fcc8d8867b6141ee3674d4ff69cb72aa970f9a1866d2a0c88acce2e9c9529bbd768470dc0483e923b451c9a5eafb2030a87367cad5b494911555b3364c7774821ecbc75ba1d41ada33022a500fd894f4b22e9b624f3ea9", 0x57}, {&(0x7f0000000240)="16ccb640977726e4d5464af9d9f158d27d66c73026a170d26348423b8a4fb4ef8f06a1a72dfd995a4c2df8add8cb606a8635bec263f4d79ffbcf47144faa5ea622aae9f4899c443f3a7e7633c96fe077b4a41ddd2aa86c80e7fc64304c3c59483b875c9ca01a81bfc1328aeee8d98dec4851884505a2619052f7cece4e886ab769f412adf2d211344a2d108b84a23a82bf251e7d4303a8d6de37def0a744b35c8c8cc15f71bb6c62f0de", 0xaa}, {&(0x7f0000000180)="73e1046e29084539a9364fed9bc8baaa6d110d02337ee9fb67fae86aa3954174507df0b8051e26ec5b20258a97862757aaac9b898509059db5a2de73499facd31f99ffa1f2bc38f9aa24d9064949808535cd74acbebac0bcbefb168a951eefa06fa7882a761028533fac0746df7079678131b43003cddb3c76277769", 0x7c}, {&(0x7f00000004c0)="cb033b12ea72bd5c10a79456383890dde774cb4f4aab8b790945f9ec3705e64fa7f3d335ec328688a9bba1d57665fe1ed5774b139d7033b0314ca7d39b73f8c382988b98b955dfc084a92e4011110377b65d833ac4b15de38b0766e60654e785233151324b866600d91e0f4860159339c8c35b693f3047f55d42359acd0ee2bff6e4f91dc5c5616f4fb967763b", 0x8d}, {&(0x7f0000000580)="5ac13cbeeb9efe28492d0cc5672f9ad808c82e7243f6971b8dd2e9a93f4b689656186ef74d568882007658223a87cf7981db5d660589ef26777b70417f716be731e2f3bb193437d58ff673fc5f81aa8b6fbbaaa27416892c6a54cd962ff167bfb82b3c8971f3c8abe6c9c41ce34a635a9d1bd3fb5a1afeed0ce5e98e423e4c5e1ee058ef4936ea32de2e735bb1da0dabb71a76f69f5983206dbc73944f8743907b849eea02a2731dffd09f771bc05ed70f2d49c97965a15a51a21f0a1cdeae821337871b9f5afd0dbe1e037b6d09bfdb4216c70a708373c0d763a761b54e68363082d773dc357af09d1e5d49c7d6495ca8a93a0f0e5c0e729dc9c21d97323f2ffc4f2c35a42262018ad07829a9c53a04bee7ae841074e304caaabe5ebd36fde8607280976755a489ed9f0734d64fd7ec38909b2e1d6cd4cb85a94d3659197777be3438e9f3c7e960e1e3de61208e32e85a13e762e5227a717ec6466098273c54f880c9acd5f2ff8594643c373ac532dc0f351bf48e9019b50606ef4eb46a72ba0549b75d8064209ba3aec35cd8e1eb207eb7e0f9e1056fe3dc030779a4fb5b93e1858f23b55a1940de69d2fe296e77e400220cc86112cbc75dabd8e6568c3ac65941e279cc4740ded0781988a1e66b7a864e4a718d5db60db452743cb4fee6a6500e6612b5fcfc7d06d150de679c9d0f2a04b7c3a662bd24ac3ef3d4aec5f41ed4f4bcd880410c40be459d5e908ff5c1c787e8e58a84e3e7abb9118a3aac3cf161422272356d576f0b3091c5b2a4bb2119b1a5cc1ecd567da8fce7674a6a899fb093fada5f6561310eba441a443cd96d5bb752feaf54363819495a19ad3b738daa97d2d300e34ac49e8b8bad9032ff441d27f30ca36d0d8c587d0e7c83a25b88f57e2c694b16131a2b5f292ad583e4f39663b0bce6708a981714ef43ce43c91d027173fa2e19dbffda4f0066fb4f86ca4f8b2703393f868494ac0002ef912d2f0f3cab7ebc29beb19121c8bc31b9e6d7e12d3c3d94ca354cc3b9075bc7ee448a5bdf3e93a8778f953b28ad2616c1aa9ec1c705066b391c6a3979659f66ab2d1894c8eeba661980bdf44cb50e950d9d034c1dbd363d219b5de2dd4fba3c3f1208f94fa3883f8891a105af347f94fa887f08284c92f6a82e2fd2b29246131bdbeca4f125820198bef39b0645ae3d94c73249eaa308366dd7fffbd0d7db4c846cd5bd87ecf7211156c109927203dfe83f3274581be247e4e8156f5de948e48d1b5fb79ebf5a6247f7fb2b5fb2e4cb5a8e931990ac4ad51fe298c4789682444dfaa228cf4ca383d0d06c7cf67510d2002c2330ead3581ca98a5ac520b0988d37a47f4b1938fdf639c41ae8d1e43ac7226d3d642a31390fd6dec5b7816f7c26a373ec21998abda1b466d8fb8716e03db30ec2423bd92099175b6b9843a1522272558b2450eaba60857afbd40c778f0ddd8f2d3ba19150cc32e1dd69cc320c9acfd3f6442e97897d7dff6bd6fb66f1a0a8b9995743c131e5f69546f47aebe87e7ba1d88e6e3a028ef32634002391fae3b12b05f05bb5cbe5bfbd6a318edbf47332b39b2605c3244943ae9544982e676b4245335da56d777b05f9027a1b1dadaf1bd9a17497cb50509f53f34600229bed9faf35115d6add28b8c5a0f713c7fc4e55f93f27136a0baf3750f0530893dbbf1dbb555a7bcdfcf8ba08eab5d60f224b458ed6ba03bdd43c676d29e550ce40ca8d7bc1a73e26dc6b04c51d98f74d67dc22ab62bb91947c5023f10a25e0ab45ff0b970a4fd155712d2c4c7eecebcae42406d01134b5350739741636ba98a99ca1a83ca5174c5324f9e7090fa8d40e67213b0d9f6ae7204e798be372fe328864c581a7b524816c2b54b2cac325de572edfe432147895d669a9748cd16ea2a102aa281962a09474a63cab5d5fae66c2f7a510cabfcedf151ce5657db1b6e79d70011136ffb8e43b0045e5a1907394526ba77d4a3e83002dadff0da7ffb1ae9ab1a8379be1c9c129c1f97fcf26a6d84736b6c88c532637df6c76e6ac61a63dc1059115874229cb1ca17987364bc02be3e05f2bf279dd4672ef0e4e7b127d28d9ee0b8b77022ed6e505b8247cdc86ce99b2cee6ed335f6699882362fff17d4bdb19c16bb6c4f368dc699b32bbb583bb63ef93faadc0d99c74d941fe98c87462fb9ce5502a01fb080d52b1c3cedb566a3137d4452887be504a4a5dbe01f2e08c0ed6898f7871ca9b202f2458519bf36eaeaf07396dc84eae3e0de0bb8bc54a3bbe94e1eea7745051b5708004df251410f4c37400b43eb28a4fd52cb6a6326b26f6d0d5353d05605f2fe24ec743e77ee9f3373fd4087b2e506db97e4551788cd985f3136016a281443112a395539b799c97182c49102a5004c4b8b51fb4cf4938d32ae7e1cd7cafdc02c42c3350ddf08231353744b1ae48edef65e4271c7be4ef934e22a45f501e4abeeef40751f52d9ad5880ae42cec99fa2636a40c18c2dda96a86527d1bfe90ca44c141e903f60544482a6ebbaaded85d738ba0ec220fbe1696230d4e4f073ba7986d934ae94e9e848447e27326e504b9dc49b91eecb42c25aafcc44f07cfc6e42cb54e23dc9ae92ef4eaf935f234035e1771521563767c9fb3aeba9f43bc9aa31f6b3a2c3978b1151fe29bb200dc2a8559efe5963a99bebead966cb1a5cc8a06af49bc36c54e06798e170be2d4a8ec80aea96e32394119074db8b8e6892cfc9a7bc26c49087656e30765d846758f3858adda873067c23d1b9f414146abb0bfc5ab0063137e63360c2f783ab2a19c5bc5f8e82aa9e507c58df232466e43699284ee354b85b88f0f375b3acc6de3e3504cf8befc9b0602a4c84b7dc0a6c6f6aec3bb20b67433be9b24e0214eded041356f36bba8ed4aaa34c649d940f6fed4a9f4ffed12d737e33aa1f7f54e00c72d4eae96a6bb0e5c667677738fd35a7655bbeabe956e36fb7382c5d779e2b1826736606d50184d1559e5c548b555aff9e59cdfc7b2a30ecbe631e08f46a9685f1d580f7c606ad2f5aedaacb10533c5b3fce437d80ab2b4729104eff581db9439631cd5500d08be28a6db145018a684549e430db0d201bfcd2db0c7b755f226afd7da3ba85b7df70f53b21578e9547fbac5e0eec92edf66557cd232de1442f5845e3b0e9ad7b70a45ea892cdd04ae78b702fc8ba746af6d9063f0b8c432074ee972b9ff3d6d7a9cfe4469952a6f9ae30f6527825f9c534f37809f3be178c6d0d116fb727c713f6a437df66e4ec8031c5b801e383362eef9cb3a2c65fc811df1a447c1985ae3152f531cd3cef01a9aae50e6770c9d8bae0c048a014c007e7400461050e22163a286f8d81ded4b2af6fdb013317a22af391b441a9e2ef0b771008ed243106b689fc61e89fdc7039c95f8709bc4f07c10aa532193335ef394785aabb8b5c18192299f689eb7afebbad1e364ff47498a9e31e45812d5cfff494d98b857fc5a7e03e864364acd647672f436e2497bfaa7e288b76fc068d2f8149b545be44b3addaec51a00133a80c94bc5e7c20f65eb57560d7d584b641744e8e78220a483aa341678e9afa96b3d717d19917be60d35c1a9b68312542770fb02b50f7247bed55de6ccba12759c3e7d23be728190dba772df84becd7a8926e7897aa4b8b74516215e0cd40090c81e9843ef615b36cbafcda569cdbf62532f08bd877d91a0336fcb9926b50fa8534dc9c1253af7f4d30c02d7d7d54494fcfd0e9909c73fe6826835ca9d84c578e1e80730ad70d437c642fd7e40d6aa592bf4bd529c5d26bf495b97371f07b9980ba7eec7eeeeb067a27456efc82512eb648f28cd6b544a9a60b599a2ec463e3ed81e8555f9467e5437c40d2212b34b672a5caa1fda54533b58f85b11b57d65496c1ad72bda4f50401c2344906237ac05023001a4e0fe4adee4b5f85f1436243460b42fea6d3b2063b2337c36d546175f71229263a3c8695521b5913fa1c5d6c56aa0594f8270d5533687033d4d2137e4a77a52bf1843d1bc9e767e2aeac9a857a7662b950231a6b442ed5dd0cb9d37f0498d509f92d9d41536091d4841671228f87d9ea3a097e3b923920b1ee85d35aee434c59091f651f267507d42421b523b024bc511b564485d1fb6cb24c368bff1dddd6a242252b796d0202613ad93f27d271c0f5700ed439dcbe6e645442391bae50c2663c735ff0049c3d7f975c1fd2fd8afb91fcb1c677c158264d3be3061dc6cc8d6f6558719c164a32dace8303c482f2df940184bf0172bd4090664d71199a860ae4f85850706019eb66e2fcbd663b4eeead28844fe92276f5429446d49f9035ffd7d8325931dbe3037659a0b91e4c4e794879a8612e450c99819f610863f9762b4f5a4de55208d1336c8584d34716470c618a6da5236a7f6cd8ca743140c6feb4f121722d6295e7603d6ba7b46a32dba0a69300dbfe14af8b3d3cb54bc3998f38054b313dfa18e8179d8d9fbd3d2ed6257830313872d99da2f01001096dc61e9d53fb66e1b8d734014d7f8c3f9870f75215a867d8982459ec58fe16df546ad30d996d5928e760d967f0cfa54cce407afcd4b9ebe2ad30c4c9bafcfba55fa2de749c2e70a02e9e44a4c015783a842c574f9846629bfdf0362216d83938a683dec80969d3e0a3973c30c280d1e6f1c4097289d3e35ecaa7a588e7e9342b63af2ddbb5527d2df5e47c111407082ac211888b5f7c30179cbe2cc534918e673bb416e076fdcedc16addabda4e975c59f35a6e8d8e44f51e7143d2a39900045337a16615a616f1b937eca056e1c3cb7775c09fd6bd4e3886885ddbadd91dd1dbb8c5c01eae329963e197dc385499a21926daf24302c48866152991bec6f910df7b4d402170c6d5cf26a3180419caa9673d438d7fd7715d225e7ad111e07430b443146015b4335a92c08c62e707f7f395eec44bd37a2eb84cb10919b5686a3003b019cd3f5f42efb19123898eddcb21f65846f2f9ff272f6821a0af6f106a167486202f981bd61dbf8f002976cf007610b1844c448183e1dcd6205908514b9fd9542866faefd23d35366e5251034091728feaacfc87728e4ef4e0ab94cf71d15f19e9ee7f0a7eddc2de6e10783b79552ea3e93aaf1fbacc05ed3fe6b13e25a8f5025409be13144bfb1f10fa40d364d66807258b399dea1583e1a641c99a4f0cc57ad5be1c59e2e25645b8944048e5aeb59fa05a48b835447eb3aa2ff52e641fe2b0898fe8e8e119a8f3295f5a16142e8244ec1358c84b190c771d70a5ab5cdfb6d628939f96f9478780d57ea7cb5cbbd3e2fe1fc946c1f33cddb93f36b35cb42d2ee2449f868e0e59da3382f18f633e02f01271504372ca1c4b6b538a8fed61fe57421b32b06d42bddb61b58767d3649e84fc42891f9860a0052ec6b9573cf6bcbde15ee319131158ea6da06603a51884e003f6b298adfc104282090120be968b9f76346fe4917478333f2dacec531914248de372e5343ebcc6418f7dfbce04bd6b9069d14d5ec50678b04c0ebf5c95c536997ca6fc4900f675789e78d3151b115ae4e1e16070c973caa3b881391dfc2ddd038ab5e05b5cad39110cdd592e5869f60ea7c924a6f6af5b5f857e8d8bbe133c1e161e2cddff8becc5ccf95a1b676623ab01b96fb90550f81773526977d4547776fe50eecf80d0e55c8257c49c377399a21ccdfcdf25d5d3b9f194d05575da07212547640ef423826cf149eba043b94f3134e1171942f0bf636f6c5438559e41e5c1f2a40d8fa037ad7395fb9788a7b2e511f6bd792b202d", 0x1000}], 0x5}, 0x10) 3m51.060154859s ago: executing program 2 (id=1703): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) epoll_create(0x10001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0xaf) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x890c, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000380)={0x1d, 0x4, 0x42, 0x200320a, @vifc_lcl_ifindex, @remote}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 3m50.061520454s ago: executing program 2 (id=1717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80a1}, 0x40000) 3m49.944821567s ago: executing program 2 (id=1721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = getuid() ioctl$TUNSETOWNER(r5, 0x400454cc, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x6, 0xfff, 0x5, 0x4008, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000900)=0x0) r13 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000c80)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000000a00)=0xe8) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r15, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c9433f09d7f931801d76df7977d00fcffffff00"/144]}, 0x108) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r17 = openat$cgroup_pressure(r16, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r17, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r18 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000980)='cgroup.threads\x00', 0x2, 0x0) r19 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={r2, 0x0, 0x25, 0x1, @void}, 0x10) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) sendmsg$netlink(r0, &(0x7f0000000c40)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000240)={0x18, 0x42, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x28, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x18}, {&(0x7f0000000500)={0xf4, 0x23, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x8, 0x159, 0x0, 0x1, [@nested={0x4, 0x32}]}, @nested={0xda, 0x115, 0x0, 0x1, [@typed={0xc, 0x8a, 0x0, 0x0, @u64=0xa}, @nested={0x4, 0x143}, @generic="1ee180dfc8d7a15603cea96b0e4a7e41318007b981101bbd64bacc5dcb53a09102d86859ed", @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@private2}, @generic="a2c84ae869b696aa57fc2ecde941bc9f31e7698f513d53d12886b7c2243a8f", @generic="43c471e8d830ae2756d9645d0d2641c9fbd9a2bd30e91a63e803e07274d8dd2ae73cf7fb37408849f3adbe23b0abb45bb4cb87ba428206b3e0090d210cd55d1cddadc2bc5c6e"]}]}, 0xf4}, {&(0x7f0000000600)={0x2dc, 0x20, 0x4, 0x70bd27, 0x25dfdbfc, "", [@generic="dd36", @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private2}, @nested={0xc, 0xbe, 0x0, 0x1, [@nested={0x4, 0xbf}, @nested={0x4, 0xfd}]}, @generic="f8d317a4d225a78955028e336ec39117c1c51ac5844967470999f69e51f395af2f011414c70c1bed3d808ff11295996f01cf386a5b73ab7bfc1ac4eebbdda9da99a5a121d39d37cb117fd976dd4dff667ed9ad025a892e61fca40ea9d632a3aa21289d6997971799229d2182df06b6b84bf024654d03796178fc5480ed97c8a7fe3f77282352e9d5b841b45be61c90bebdc6a57198dd4b3f7245c5f4eb0be5467292d99e44d2d5a18e", @typed={0xdb, 0x12, 0x0, 0x0, @binary="242929ddbada2a6d342a57cd80407cd74d963f51322006fbd4fefe9f4aeb6909c7f213cd346b33c65000f91b777d50ab209e246ce07be0a92d9cfee968eaac56b0121d969f59825a15414d84b11fec832063dfb43076cf132e41f882f74a9993cf2f71cc65c4c27c0d8be3b67e8ebb482fde0313bd254295957e15d54de294f48fe4bd43404f385d20df18b0324f4024dd83c73961d4914b87304a6c9b7e097bc0a081069201bdc7293ded52bc35e09df845a16f4b516009a7f135e268d4c74d41583fde59861ca397da8821bb1d6bb4f57497aabe7963"}, @nested={0x2a, 0x110, 0x0, 0x1, [@generic="f74b063e19bf8ca7076111cac5b4cfc38318c513929d0997cc68fe3b191965ff630f", @typed={0x4, 0x12e}]}, @generic="b555b5777e7c492d5747841ef2ac5e6d9c15bd22a7de54eeaeb6cd04e00329998a25083c7cd22e9cd74f6df20b4121f70c38734741ff191cdaba1c9c3804aad75a273e41ab7c4323553228da43d6b80637a2fe0e4d5aca0722e68b3fdf1c72d21c81ceefb1064bd5361015fd49ee17f5fa281526a199fd14c112a8982243e3168252886e43882bf4033b4931281d833f512f234af58494c670805941feb36c81b929053f4e3a66eaa2539e562136f67c9bd3692f95c06d4a99b13d06dc575a2678df607071b16eac35402bd6304e02c768157e912cb49798d59806a5979839a962eb3f2bc158de6c5a4b68beb3c5a601630015", @typed={0x4, 0xc6}]}, 0x2dc}], 0x3, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r10}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r15, r17, r3, r4, r18, r0, r3, r0, r2, r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r19, r0, r2, r20, r0, r0]}}], 0xe0, 0x20040011}, 0x40) r21 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r21, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r22}, 0xc) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m34.619239038s ago: executing program 32 (id=1721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = getuid() ioctl$TUNSETOWNER(r5, 0x400454cc, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x6, 0xfff, 0x5, 0x4008, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000900)=0x0) r13 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000c80)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000000a00)=0xe8) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r15, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c9433f09d7f931801d76df7977d00fcffffff00"/144]}, 0x108) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r17 = openat$cgroup_pressure(r16, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r17, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r18 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000980)='cgroup.threads\x00', 0x2, 0x0) r19 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={r2, 0x0, 0x25, 0x1, @void}, 0x10) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) sendmsg$netlink(r0, &(0x7f0000000c40)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000240)={0x18, 0x42, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x28, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x18}, {&(0x7f0000000500)={0xf4, 0x23, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x8, 0x159, 0x0, 0x1, [@nested={0x4, 0x32}]}, @nested={0xda, 0x115, 0x0, 0x1, [@typed={0xc, 0x8a, 0x0, 0x0, @u64=0xa}, @nested={0x4, 0x143}, @generic="1ee180dfc8d7a15603cea96b0e4a7e41318007b981101bbd64bacc5dcb53a09102d86859ed", @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@private2}, @generic="a2c84ae869b696aa57fc2ecde941bc9f31e7698f513d53d12886b7c2243a8f", @generic="43c471e8d830ae2756d9645d0d2641c9fbd9a2bd30e91a63e803e07274d8dd2ae73cf7fb37408849f3adbe23b0abb45bb4cb87ba428206b3e0090d210cd55d1cddadc2bc5c6e"]}]}, 0xf4}, {&(0x7f0000000600)={0x2dc, 0x20, 0x4, 0x70bd27, 0x25dfdbfc, "", [@generic="dd36", @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private2}, @nested={0xc, 0xbe, 0x0, 0x1, [@nested={0x4, 0xbf}, @nested={0x4, 0xfd}]}, @generic="f8d317a4d225a78955028e336ec39117c1c51ac5844967470999f69e51f395af2f011414c70c1bed3d808ff11295996f01cf386a5b73ab7bfc1ac4eebbdda9da99a5a121d39d37cb117fd976dd4dff667ed9ad025a892e61fca40ea9d632a3aa21289d6997971799229d2182df06b6b84bf024654d03796178fc5480ed97c8a7fe3f77282352e9d5b841b45be61c90bebdc6a57198dd4b3f7245c5f4eb0be5467292d99e44d2d5a18e", @typed={0xdb, 0x12, 0x0, 0x0, @binary="242929ddbada2a6d342a57cd80407cd74d963f51322006fbd4fefe9f4aeb6909c7f213cd346b33c65000f91b777d50ab209e246ce07be0a92d9cfee968eaac56b0121d969f59825a15414d84b11fec832063dfb43076cf132e41f882f74a9993cf2f71cc65c4c27c0d8be3b67e8ebb482fde0313bd254295957e15d54de294f48fe4bd43404f385d20df18b0324f4024dd83c73961d4914b87304a6c9b7e097bc0a081069201bdc7293ded52bc35e09df845a16f4b516009a7f135e268d4c74d41583fde59861ca397da8821bb1d6bb4f57497aabe7963"}, @nested={0x2a, 0x110, 0x0, 0x1, [@generic="f74b063e19bf8ca7076111cac5b4cfc38318c513929d0997cc68fe3b191965ff630f", @typed={0x4, 0x12e}]}, @generic="b555b5777e7c492d5747841ef2ac5e6d9c15bd22a7de54eeaeb6cd04e00329998a25083c7cd22e9cd74f6df20b4121f70c38734741ff191cdaba1c9c3804aad75a273e41ab7c4323553228da43d6b80637a2fe0e4d5aca0722e68b3fdf1c72d21c81ceefb1064bd5361015fd49ee17f5fa281526a199fd14c112a8982243e3168252886e43882bf4033b4931281d833f512f234af58494c670805941feb36c81b929053f4e3a66eaa2539e562136f67c9bd3692f95c06d4a99b13d06dc575a2678df607071b16eac35402bd6304e02c768157e912cb49798d59806a5979839a962eb3f2bc158de6c5a4b68beb3c5a601630015", @typed={0x4, 0xc6}]}, 0x2dc}], 0x3, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r10}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r15, r17, r3, r4, r18, r0, r3, r0, r2, r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r19, r0, r2, r20, r0, r0]}}], 0xe0, 0x20040011}, 0x40) r21 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r21, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r22}, 0xc) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m46.276412291s ago: executing program 0 (id=2515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getuid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x11c, 0x40, 0x800, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xfc, 0x1, 0x0, 0x1, [@nested={0xf6, 0x10, 0x0, 0x1, [@generic="bb905fffd034799cd39f4551ad03c4bf6e5c0604e8007e84205722c141d4998d8c2d294d42fdb609654ba314fa2f761e7c59514ef129627426ec94621d0179bfed473a22241163e06d76b3026a9e595afa381d1b09c722d4bf9340fdf608026dbcb5ab3544a9d4c26613eef3cdec3ac1221f5e2ac9092941d9d2baca7c1d519859a161126b0ddc8532dff30bdd4293eeb3606edba14003dbc0f2b9901a69270dae58c2ad79ea53992d842e927480585b1bc1c8487905a5ad79beca6244a6db3bc2ea77ae3f65de1fb7e07c4d3dbf1f9c8d3e9b2af089984c0827bed0f32516a4fee56ed3971bda5f885a52acc88f65bd2a67"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid=r1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_sock_diag(0x10, 0x3, 0x4) 2m46.127794157s ago: executing program 0 (id=2517): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfdb5}}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3938700}, &(0x7f0000000b00)={0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff7f000001}, 0x80, r8}) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r4, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}}, 0x24000806) 2m45.769746045s ago: executing program 0 (id=2525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) unshare(0x2c060000) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000002c0)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x5a13, 0x2, 0x2, 0x6, 0x1fd}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x900, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f00000000c0)=0xffffff01, 0x4) 2m44.632642177s ago: executing program 0 (id=2544): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x6, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff7, 0xd}}]}}]}, 0x38}}, 0x20004801) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x4008800) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xec5, 0x6f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 2m43.163263604s ago: executing program 0 (id=2549): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1) ppoll(&(0x7f00000001c0)=[{r0, 0x490}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {}, {}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xe244}, {r0, 0xc8}], 0x9, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0xa45]}, 0x8) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m42.191597733s ago: executing program 0 (id=2558): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffff8}]}}]}, 0x40}}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 2m26.843740953s ago: executing program 33 (id=2558): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffff8}]}}]}, 0x40}}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 3.891929571s ago: executing program 3 (id=3823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001200010025bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080035000002040008001d"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x5, 0xb) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x20004010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x7, 0x4) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)="22879d4a76", 0x5}, {&(0x7f0000000200)="ea1060", 0x3}], 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000190000022abd7000fbdbdf251d01070008000e00", @ANYRES32=0xee01, @ANYBLOB="05000d000800000008000a00", @ANYRES32=r6, @ANYBLOB="247b739c1d657975ebf504"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20044080) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.828379202s ago: executing program 3 (id=3825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)={0x44, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) r6 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f6}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x401, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r10) sendmsg$TIPC_CMD_SET_NETID(r10, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3ff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r14, &(0x7f00000005c0)="4ae7253ec5eaaf4108971f234958cc10ca4402a4f2f827c393c1d08ea101e88ef14b6d0420b86512c18f3a6d3569eb7f5cda6804732cb9c07b0eb73381eb71d12561fd525189e6b418c0c80d7b2c76d8423bef24dd80cb71026e4407e0ff4b766aff35371a4bebbe982a8d2ff96f5d5c13ed3392232b79bd46c0036aaf6b5220ddd6da036c76574038efbd4a4dabcc69847115748ba416c7a7d9ece5372b0423eb04776bb79eb20ad307e19dc82315cf22c405a9abefd0f951da2afb56d74f90ca40deefe25cf755703d670bd0921729b0f157b240e0e3edb45473b14f32b33379d986639ee9b8494df0a89964a1afb1f08a06fb7c345f908ac9e46f57422d4ad05aba166044b5aac4fd140699cfbe36d9d237e84e451fc8ff1573a1ea02464a7aebb5606ad4f14494b2c253d5dea1de274d179147311aa99d8266c8458c7eb7fc0cba77da5fc85506e11b2291b055c4b70f8d64788a822459cd114e09b2d1e70c7284f13a2b86b13b15760ac367de286353cf12478b1b92b8ad7ec823a67b001059bfb848a8a34138d77757623a520c6a746da34e639962a9b4c6bb44c2161e220dc74e1168bb2e1a59ba09c7cdb7a2fff02b747b9048e357978d658e0213c61953a0fc655c4220e09613e574d9f6696b193bb3c6c88b44c5b3999835495b4d7bb0780133704894469b418b02d6a95a11e65cc415a14a7af2f8dfcea35265f3e424caa8fc248e0d342091dc59baf504adfa86ec22e662acfafa1a238115802f9bb135ff02a85f521f1af75624bd609576916f8a30e71c5f0c6eb9f4d7ed487b7e10f6dd55dc0183f714081c6a98ee556c5fd8688204fe55b6b2a5d4272876a0abdd4e534f27cc8abc79f05aa7d5c39b2c0e1677e961ee19730ba3170cabf5d073d057f0caad9edc21f31bb3310f25d8db785d32e402691f50ef0bf943d30c786d67c7be2c3518b12271c241e8ba9b59591232a4cfdddabe9d5f619a08134422a2352745c0664ee10ee4c687d4eb5e27b34ce5c427de1a89e0e400c350c7f9d33f451ca72a1e08c43482fee74301b2dfbe902403a64937f06d328078b607fa955e89521463c7ac1d81d496a8f2b92187b8eace7598cd1ee0e75f1be8b3a94bbf458be969491a3cd3e96106ebb5993f3021f36475dfe69513a792cb4788d7f0d96ffdf50d74e831694fb4081e95869f3906840c7211b56d8c4ddc845f5e97e2bfb0277538ac38aec353cab83fa3e55e5072e2c69c986ff0cba02f1adb5ded1f3d86e26f814bdba683cb355f79f5ad8a1c1e8b629f21e5563b5f87bb6140b0c722e495f03892ad586f016b129ca99898c488fbcc3f49af5a727e33bfccf4b9a2a7cbde036cd0568f15d313692402e73ba77672476fd1dcf9078f8cade92d50ec6e8072052e6dcb1f5260583b63fda3d36447ade86a0ac380b178fa3e42a95a20d5ed86df366b6178514a283c48466eaafa8589fecea5abab03b40e3924ab057f3bdb59e633d2daedfe77fa4490c2a912b6d8803fb031d45f028683f93b3411e6bae199f498e6287adcafe91ece1e313102c0cbc20aafbe6323622f82ab70fa7a845dd12d0897a0c2a2acdfb8dd19539c8fb93613981f0ee4a8bd6eee3a542414fa02a8e2c945f8c20fe597853f98bd8296cff66d9f69683bb2f2842936673e29082d1568b77c23684e5067a325fa2e063381bdfd733c91030e22a63f39c5203844a1d64e1b66153916eb6f8e67a1b755cfb6e255edcebf6f0221762a76d0f7b7ae78cd62121c70b91afaaa40dff85228c7e7dda5ea30d6ea70426c517e360a1b40cb0e6c15a02274a2233a3c27fd45b37ae81f2baf14462015b0abc2445b8a904c2fadcfbf34f38cb9e87a950e0f092c3288c11d0e12ed64cee278be9557bc7c52fbf42869ce39989385846a3d3de7f1a54b059d9be11e19e80e3062d4d618c6908b12e025d15bdce4f8f8d775649282326e2c47c5d5b681a901c8c76b866513e21ba39f5cb25be1ce0ac459a4d4935436ed671ec2afda0b69a2b1df0e168997f193c404e2889ad28a66faa2bfbd0777308d3987796ce9afb62ad4c702bdddedb65af6f6a9abeb5457d8dbe5e31e2471ab276773e78b57e0d946064beb54c1f4dcb12564a1c874423b3780f020235b14d63ada6d83f773ac18a1b50c808fc0740d5cd81637988846ebdb5408fa17cfcea43b984db5c4fa95f3d6e30630e1a0ec7f59eb8cfc05a35bf3291ad0c52c963206be771ca19b2dfb1b459564c35efb78aca58def8ad93240c5261edbbc382b20c400e45f332c4feb118dc4c714975ebddf2c2a3c09fd5a6f63104a78a94380124c1a89e185d07c5f91f3311c827ae4cd5e8b556019a0c2b4f8a446598a15991beb625b53d031125d685104ff8eb5bb4e35d0e2ff04eb2ab6bb53c080fd3f488c57bd56ceb4a0ebbe34b9e9a613b9378bd501bb411f192e8b5b95e2b1e156596da7ed6e8f15b8909311c5c7153a07331e74530a30b8df4d66c671cc45e4a9d758c4d31fc5cd09032735bf61b7575f4d6341eba291e9a760c1fc8045db07af95f3f6ca5a4b52c89b9768911b8ece1b4f136f7b8ab4b4cafe108063654aa8e7376fa262afd85abb75a57c6a5490a0bde345aad4218a39125548f5c686745d1587c2608a4a782061c3a28231789c12c6546becd36cf9ff56a0f10e4cc9ebc5594bd8a5ff57d9504f1d6f200ed38fd333d3cd42faea4915795c35470b893f2b8ca616551fa96372070591977062dbb14692eb16e08bc4220acaa5e3edbc413d76a761993b6d7de1220412c5ebb595561606d8176a9e7ba0107dd0b62c915e0ba63c6afa01488117d59bd78d235d4e3846693b884a8cca42719a5e9ed61f6beace5c690cdb71cce093ebb7097851da5c6d40c9ec88d7014d68db8e8d2f6220755fd77df17b731cfed35617ebd0474798e49c4c4eedc004f73d1cf3704377feadf28cfa3bd7ef723f0babd85786ae519f6adc1321c8c650a1cefeb0dcfd5a75b4fcd1ba7f8542a582acbe6deaabd306041d8a941f39a08210a9a7ae7ed73a72b3e194f8a7852121bef9eb94c8f153f9cc6546ca31908b53def3ab10993bde98bb6a66da8cb9178be44374787bdd704c9e270552bce30f333ca547cab7b54b1e13dc6756ebfa40bef071f5db33a7b5d0d99b33868dc377777b3b92672310635ed8d72953f2a14b244b1d6f0ec3e74913d9ef739af550616222da8a937cd37ce763d161559ee39e5dfc54cf03b0a2d5ae21a51c9139eedb76b70a4aa70ac9f84f1aa4f9988742578ba23926104877d576daaceaac7eacbd92362c5eb1adcd82289df2514339bd7cd6bd87d12eb83759b206e010004d4508a7528c72724a23cc92fa76c3a0e6408d945aa5f533703eb5b2d4015f13a522172b4ce26dbaed2f86dab59a11805e7984f34aab4010409966088e03f50474323ad5ecbd0a6bf72d3bfce103d5e82ce069e50f5398277aedcc7f559fb011aead44509d3a8b6a3e0151cd6225e965dd075b2f950048cafc2f525de56747532a58f43f1591630327fd927a2a2574d885e49dc8c698abb375f7a03792aca46b4edcea619ea852b71a4d2775a07f05c9ba9eb3d469276b2203deaf2d2ef5bd78352aa8c168c6fab2f06de41324c806b6cca76cbd98bc1d1092c05f4f65217d110325bdf89b1f09dc3dd9d6e01c1716e5aec72ed468d104ecd50a1bba6f072eda8ec688be4857e66f", 0xa47) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r13, r15, 0xaf5, 0x0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fbdbdf25020000000a0009000180c2000002000008000300", @ANYRES32=r12, @ANYBLOB="bb3d93f72408e016ea6dd0320400ad2d4fd218f96255a62943b36abcc470a84693dc3d2d89ca6f95a524f4b60b47739b703d1b6d42385f9567a91784aff0ed3f6531c62a882d2e688be22236d16d6b040792b4d0f1684c"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x4048080) 2.96831511s ago: executing program 5 (id=3834): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x2000000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r6, 0x29, 0x1, 0x5, 0x5e4f, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x7, 0x40, 0xfffffff0, 0x10001}}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="010000000800"}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000010c0)=0x8, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r3, 0x80000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x2000000) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000180)}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r6, 0x29, 0x1, 0x5, 0x5e4f, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x7, 0x40, 0xfffffff0, 0x10001}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="010000000800"}) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000010c0)=0x8, 0x4) (async) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r3, 0x80000000) (async) 2.793291806s ago: executing program 6 (id=3836): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000002020702500000000002020207b1af8ff00000000bfa1000000c1000007010000f8cc5affffffb702000008004000b70300000002008385000000cb0000009500000000000000f9c770f7728a66ab55713e6836c6332d8bf9bf74b49242051dad412b730aed710408bdde9ee9eaa14262df65b4bafdb81a44befc78ea3d978bc1c475d993dfb46646279002bb450d4ae56ce357ad9c049a1dacc1be8c558051542632a25377ca3385da505e2bebd2448490a21c46ae966bba6f14f9a3ad4763e81cc671a64c1d0201000000821111b05f9df363a329aa53bb719fdd11"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000002020702500000000002020207b1af8ff00000000bfa1000000c1000007010000f8cc5affffffb702000008004000b70300000002008385000000cb0000009500000000000000f9c770f7728a66ab55713e6836c6332d8bf9bf74b49242051dad412b730aed710408bdde9ee9eaa14262df65b4bafdb81a44befc78ea3d978bc1c475d993dfb46646279002bb450d4ae56ce357ad9c049a1dacc1be8c558051542632a25377ca3385da505e2bebd2448490a21c46ae966bba6f14f9a3ad4763e81cc671a64c1d0201000000821111b05f9df363a329aa53bb719fdd11"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.747875727s ago: executing program 4 (id=3837): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) poll(&(0x7f0000000000), 0x0, 0x2) (async) poll(&(0x7f0000000000), 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) unshare(0x6a040000) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x800, 0x2}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x800, 0x2}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0xe, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000fe800000000000000000000000000013fe880000000000070000000000000001000100004e230005000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d43c000000fe8000000000000000000000000000bb000000000000000001000000000000000600000000000000ffff0000000000001c250800000000000200000000000000feffffffffffffff0000000000000000ffffffffffffffffc1000000000000001f00000000000000feffffffffffffff09000000fcffffff000000002abd7000053500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000240), &(0x7f0000000200)='%pi6 \x00'}, 0x20) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="9167", 0x2}, {&(0x7f0000000080)="63bd918aa5629eb0adc1521ac725ef20e8dc64744bc3ebb8381eae0636c3b07d287ce8ca3e095900d31c42dd9ae0457595dc69c487ee8f6297ac71100582869619e72d21a7885159143a4d53aacc7c4252dcb14df17f5cedacfa50fe2398792c8c88cec9fbb86bd05885bc7fa4902176630211", 0x73}, {&(0x7f0000019580)="3227790523f08d1b7a1b166f4fdf3f62006cb09d506962064f961b5c3a5a9422ffefe24df3727840abb4ebfe0b66c522e6e2646becdff66c158cac0e8fd289ac924b6373a02bd8150e204ed056727f0eab985ddffa64278ef38054602d33ab643302c599", 0x64}, {&(0x7f0000000380)="5283dc4ab6333247f4fb72ac465bea5fca0f82d8ca0f9cc5e34cd8931d1475a4b6", 0x21}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b40)="8b", 0x1}, {&(0x7f0000000340)}, {&(0x7f0000001f40)="168c4db6a133d6c746da97f1781770974f105de70c192981e53b9ec3ec9273b81b4001a035ec1947612580cdcb20c983d8021c5d1bffc9e410bb33aee14a61652c29a74bd0b67b36f2a4f92872d4943cf0e2437dc98101ecc349d61aff36eabf45222d0847f6dce5871ccd6eedf4091729bfab93a62af2ceb187ed5e9ebe2b4b1df7122b37d1030d9b6bae70ab45275035f3ce2e445361cadde8ab88abec4bcdea113c77730b1519c601cbf93a9ebfed9ae7ae055794496ee3ab173ce4d7518eae4237254192e8b469fee5901d717ccdf47a93e29b1fb9f2d6009b2df9dff43ebd370409bd598431057211c91ecd45efd544d9634a8a8a2a25036583b349a7703e576cc33c3c655544a7a7bb8de9b3f1f5c2e1c496d1db2eac98515127163c388aababb68165f55a8511b3fe77b99fc293cf62213ce24b3f91cdf125384fd01cfea0bdc485cc4027a6d3565e658016e6c2b8a470745873a8cf6b750c77d8116614ae0a818d7f39e41882a712ba4ff7803acd", 0x172}, {0x0}], 0x4}}], 0x2, 0x48800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x10143, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000019600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000019640)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd700008000100a4d6683c2700cd9437d15de3795c2228cf5ddaaeaa3cc095e78f36bcb0a602e0cf1cc7852d7da5229b7afc99f197f2e3bc6a2f8d74b6317fac2c8367567f4aaccadb70f257b234ca5f0ada450fb0b5854b97a8f9ddbdb3c15fee4d7408e0350f284a92e82c73d8e86f9ae2f50741f401fb0ea6ca201f444ca7a98304279a511ca47476a532bd0e593d6700d41527545602e02b6a42fd1c284fb990d330a324890bc6334b25f25f3aaa0e000289314ef6c53d6746c840826f9543ad6322d6290000000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="01d95f5825205f8fdd000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 2.732123281s ago: executing program 5 (id=3838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd60", 0x13}, {&(0x7f00000001c0)="b700001811005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf", 0xf}, {&(0x7f0000000200)="a3d605a93b0400000000000000", 0xd}], 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001046a0fdff15a85d7050000000000010004000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a0000000500010002"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYRES64=r1], 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000240)) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfffffdc1, 0x880, 0x0, 0xfffffffffffffef0) 2.637588597s ago: executing program 6 (id=3839): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ce\x00'}, 0x58) close(0x3) getpeername(r0, &(0x7f0000000000)=@qipcrtr, &(0x7f00000000c0)=0x80) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$caif_stream(0x25, 0x1, 0x1) connect$caif(r4, &(0x7f0000000040)=@util={0x25, "b98d0f20b8751a55eaf47663849703bf"}, 0x15) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) read(r0, &(0x7f0000000240)=""/236, 0xec) 2.558029755s ago: executing program 3 (id=3841): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001b00)=ANY=[], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x4}, {0xf, 0x1ffe4}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r5, 0x0, 0x18, &(0x7f0000000000)=""/4105, &(0x7f00000010c0)=0x1009) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x22126, 0xffffffffffffffff, 0xffffffff}, 0x50) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r7, 0x29, 0xcf, &(0x7f00000001c0)=0x2, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4}, 0x20) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010000000000ba5db2c3be00d3df7b000000001a0000000000000000000000051f160000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x29, 0x0, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250300000008000500070000005400018006000200d200000014000300ac14140c0000000000000000000000000600020040000000080009002b0000000600020000000000080009005d000000060004004e2000000a0006006c626c637200000008000500"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) 2.319679063s ago: executing program 5 (id=3843): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="2ec7c90ac583b369b887d3fc1efe1415669d29906a779dd5610c34bb412b700fcfb953226b69e782530aa4870a99605ff628693489feaf665e4e55383098854368a30045e0fd164c84547cb24d1b3ad04daf15f9ee1230a0175fc26dc1a5607ab3887510a4166727d33dbf55", 0x6c}, {&(0x7f00000000c0)="3657fbff325340f15abe14212d45d012020a7f687076374484cd27a4a231d57d7e6d6176b1a798c1cf496a9c27beeeda0038a45e68641a", 0x37}, {&(0x7f0000000100)="e7f07aa8169f94f026ecae4878224429d32fe737a80d33b03995b83f2e85fc1aa11569062415313eb404b69e88c732e159438094bc005af4fe434d34bb9a1fa8609738a2bf1c650ea31846bd4bd10b806d68b9ed32655c9cbeb1f55938a4eca812d953064e9e2d4b8f11d603585c99a42c05ce6127c2d63ec288727b39705e58e91942306844df6a6d58d410ca55deeef6791e7529b0042c79f7e233523d816a9a614b0a2c9c6c0d653e708db48c88758d0d9a2534274728bdfb5599a8be16a11243185696ac3954f808efd0", 0xcc}, {&(0x7f0000000200)="c74272333b6a2c34b5910c8b3bc15b8c328058f0171da70aad3499bb5a017d8e522eb0ae42e8de6e4e325c9222d14a16554df7157a68108360aad1daa6b8f82af0b646b5c54b82e52ad460da6b2fe4bcf560fd6a0e1e8439ac796017419c979c0137eade8c8803909f9e01575b03f9730e7a5a151ddc1c6549db4f04929ab02f4ee9", 0x82}, {&(0x7f00000002c0)="02ac0158e38ca80759d09e430104082edbe65c68da02c682bd29d27ab82a73fe17852d1d850a7b3d7e52a1de7184f9830290cb028073f4a7daa8be1f36c824afa14899e8c84288fe7a9fab728b8fc6ec972b541898d6b373da211bc5196c4d838c99ca34d76f03f3401e440f49892b9939498de5524d66cc377d2023d5ce8443c7a67cf3a71b7358b73f6f8c6bc97ccc9cca235c1fc6958aea28b9db87b888", 0x9f}], 0x5, &(0x7f0000000400)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x17}}], 0x90}, 0x0) (async) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="2ec7c90ac583b369b887d3fc1efe1415669d29906a779dd5610c34bb412b700fcfb953226b69e782530aa4870a99605ff628693489feaf665e4e55383098854368a30045e0fd164c84547cb24d1b3ad04daf15f9ee1230a0175fc26dc1a5607ab3887510a4166727d33dbf55", 0x6c}, {&(0x7f00000000c0)="3657fbff325340f15abe14212d45d012020a7f687076374484cd27a4a231d57d7e6d6176b1a798c1cf496a9c27beeeda0038a45e68641a", 0x37}, {&(0x7f0000000100)="e7f07aa8169f94f026ecae4878224429d32fe737a80d33b03995b83f2e85fc1aa11569062415313eb404b69e88c732e159438094bc005af4fe434d34bb9a1fa8609738a2bf1c650ea31846bd4bd10b806d68b9ed32655c9cbeb1f55938a4eca812d953064e9e2d4b8f11d603585c99a42c05ce6127c2d63ec288727b39705e58e91942306844df6a6d58d410ca55deeef6791e7529b0042c79f7e233523d816a9a614b0a2c9c6c0d653e708db48c88758d0d9a2534274728bdfb5599a8be16a11243185696ac3954f808efd0", 0xcc}, {&(0x7f0000000200)="c74272333b6a2c34b5910c8b3bc15b8c328058f0171da70aad3499bb5a017d8e522eb0ae42e8de6e4e325c9222d14a16554df7157a68108360aad1daa6b8f82af0b646b5c54b82e52ad460da6b2fe4bcf560fd6a0e1e8439ac796017419c979c0137eade8c8803909f9e01575b03f9730e7a5a151ddc1c6549db4f04929ab02f4ee9", 0x82}, {&(0x7f00000002c0)="02ac0158e38ca80759d09e430104082edbe65c68da02c682bd29d27ab82a73fe17852d1d850a7b3d7e52a1de7184f9830290cb028073f4a7daa8be1f36c824afa14899e8c84288fe7a9fab728b8fc6ec972b541898d6b373da211bc5196c4d838c99ca34d76f03f3401e440f49892b9939498de5524d66cc377d2023d5ce8443c7a67cf3a71b7358b73f6f8c6bc97ccc9cca235c1fc6958aea28b9db87b888", 0x9f}], 0x5, &(0x7f0000000400)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x17}}], 0x90}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe4ce}, @in6={0xa, 0x4e24, 0x80000001, @empty, 0x7}, @in6={0xa, 0x4e22, 0x10000, @private1, 0x300}, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x8}], 0x80) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe4ce}, @in6={0xa, 0x4e24, 0x80000001, @empty, 0x7}, @in6={0xa, 0x4e22, 0x10000, @private1, 0x300}, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x8}], 0x80) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000580)={0x1d, @empty, 0x4e20, 0x2, 'fo\x00', 0x4, 0x4, 0x57}, 0x2c) bpf$ENABLE_STATS(0x20, &(0x7f00000005c0), 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000600)={0x0, 0x8}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000680)={r2, 0xf6b4, 0x4, [0x0, 0x8b76, 0x7, 0xffff]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'ip6erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'veth1_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'veth1_to_batadv\x00'}) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000740)=0x404, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000880)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@broadcast, 0x4e23, 0xc, 0x4e20, 0x2, 0xa, 0x80, 0x80, 0x32, r3, r5}, {0x6, 0x4, 0x8, 0x242129ce, 0x9, 0xf77b, 0x6, 0x9}, {0x5, 0x2584, 0x9, 0x3}, 0x2, 0x6e6bb9, 0x0, 0x0, 0x3, 0x1}, {{@in6=@private1, 0x4d3, 0xe}, 0x2, @in6=@remote, 0x34ff, 0x1, 0x0, 0x9, 0xf, 0x6, 0x2bfd}}, 0xe8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000009c0)={0x3, 'gre0\x00', {0x80000001}, 0x9}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000009c0)={0x3, 'gre0\x00', {0x80000001}, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000a40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "8eb6b0da19369a"}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000001a40)={r7, 0x4}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002a40)={r2, 0x5}, &(0x7f0000002a80)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002a40)={r2, 0x5}, &(0x7f0000002a80)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002ac0)={0x2, 0x80, 0x209, 0x81, 0x0, 0x2, 0x6, 0x3ff, r8}, 0x20) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002b00)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, 0xc) pipe(&(0x7f0000002b40)) (async) pipe(&(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000002b80)={0xffffffffffffffff, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}, 0x10) (async) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000002b80)={0xffffffffffffffff, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000002bc0)={0x2, 'veth0_to_bridge\x00', 0x4}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000002cc0)={r2, 0xac, &(0x7f0000002c00)=[@in6={0xa, 0x4e23, 0x10000, @mcast2, 0x80}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x4}, @in6={0xa, 0x4e22, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000002d00)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000002d40)=r11, 0x4) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000002d40)=r11, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000002dc0)={'veth0_to_team\x00', &(0x7f0000002d80)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000002e00)=0x81, 0x4) setsockopt$inet_mreq(r9, 0x0, 0x0, &(0x7f0000002e40)={@multicast2, @private=0xa010100}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000002e80)={r11, 0x8, 0x1, 0x76c, 0x1, 0x7}, &(0x7f0000002ec0)=0x14) 2.093498303s ago: executing program 3 (id=3844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xfff0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x43}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x20000000) 1.983927983s ago: executing program 5 (id=3846): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000880)="ffa8", 0x2}], 0x1}, 0x40810) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x8, 0x1, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0xe07, 0x87e}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000180100002020782000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000850000001100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36e2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg(r5, &(0x7f0000000480)={&(0x7f0000000400)=@nfc_llcp={0x27, r6, 0xffffffffffffffff, 0x2, 0x1, 0x8, "de13f41dec49907a35e16b33ac1435b38084e5a39ac8bb403155200fd30804970efdd1260c4be576319107bd19d18dc6a917639d77bc7fbe425704842a6287", 0x1ff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000680)="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", 0xfb}, {&(0x7f00000001c0)="ac335789fd92db561df0339133def285cc23e59bd0728ffa3ad819", 0x1b}], 0x2, &(0x7f00000008c0)=[{0x40, 0x10b, 0x401, "eb02c53394d6f1a29deb1910495bb4b8f941ac24aa48d485998f6b264b0719ade1f4f269da445c5d24972b9d"}, {0xc8, 0x10d, 0x1, "806a2b910c60259aad4c91bbcadaec6b2f48646c906ca892803327ac37a40facb8b2c0352da96bdeaa1cacd2cdfee56a939c9f4a65854ae25d285e2366f3f9532cdadfe302488c078b273ba1626f6e5e411d12724c32351ba8adc3c3fed453c03678d98b545d6e8e8f3dec2683865cebae2925c7cd425138dd7e26cd3b4c709b84392d29e008fd7a3964920b47789252c9c8e5a6aec547fa4c6b1f94d27d14d921cbff9f7c0490d3a678268c4468b1607256116a"}, {0x18, 0x10d, 0xff, "ba7fa4698174"}, {0x88, 0x84, 0x2, "c41a57c9c15e7c09824d6563b84bb44fb78806db72fb5146314e0cd0aa1ae82b78d8c831675d578e6b7977405494c9d98f2b4d816ca30ac58c786ca92fdf456268d61a433e75106543c0927adfe154b0871caa9e0f901d86d0c0ba5045a7ac507dfaa3644e812b95d1a381f6cf9a5a5757d677fbef325681"}, {0x48, 0x20e, 0x80, "fb3f20ef3f83e6c788222f4af86542163c28503463d0f907e9a3e245be0718bb03d34a1a69375bfdfd396042ef2425c1c75b7697"}, {0x68, 0x29, 0x3, "ee85e38bc33a89c48f26fccdb10f78d96f1b9daf17dffceeff4997a52d3813dc81ea43b8a6a1086268ab3609c8c2b8bda282e4afca85a99cfa50fd67789c8de4b18170ec5b0fa1549c08ded97ec95f0e27da3b6f8027bdf1"}], 0x258}, 0x4000000) readv(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000300)={'mangle\x00', 0x0, [0x6, 0x4a3, 0x7fff, 0x4, 0xc]}, &(0x7f0000000240)=0x54) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea9", 0x3c}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x40800) 1.863198536s ago: executing program 3 (id=3847): socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xdc1a01, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xdc1a01, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000040)) 1.751679828s ago: executing program 3 (id=3848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x218, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@remote, @loopback, [0xff000000, 0xff, 0xff000000, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000], 'veth1_to_team\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2f, 0x2d, 0xcbd914d931c710, 0x12}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2d0900001600010062c1aa3b7045fee900000000000000000a000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048090) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0x20, &(0x7f0000001140)={&(0x7f0000001000)=""/90, 0x5a, 0x0, &(0x7f0000001080)=""/179, 0xb3}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x9e09de68d32c759b, 0x0, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1b, 0x1a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd4e2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x53, &(0x7f00000004c0)=""/83, 0x41100, 0x15, '\x00', r8, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x4, 0x10001, 0x1ff}, 0x10, r9, r10, 0xa, 0x0, &(0x7f00000011c0)=[{0x2, 0x3, 0xa}, {0x2, 0x3, 0xb, 0x8}, {0x3, 0x1, 0x8, 0x4}, {0x1, 0x1, 0x9}, {0x4, 0x3, 0x7, 0xb}, {0x1, 0x3, 0x2, 0x8}, {0x4, 0x3, 0x1}, {0x0, 0x5, 0xf, 0x9}, {0x1, 0x2, 0x9, 0x1}, {0x2, 0x1, 0xd, 0x2}], 0x10, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000077deff00850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x21, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r12, &(0x7f0000000040)='\x00\x00', 0x2, 0x4800, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x6d0, 0x2d8, 0x128, 0x3c8, 0x3c8, 0x2d8, 0x600, 0x600, 0x600, 0x600, 0x600, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0xffffffff], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x84}, 0x0, 0x100, 0x128, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x2}}, @common=@inet=@ipcomp={{0x30}, {[0x4d3, 0x4d3], 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x1}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@srh={{0x30}, {0x67, 0x64, 0xb, 0x2, 0x56d, 0x10, 0x181}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x730) 1.559972044s ago: executing program 6 (id=3849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000680001002dbd7000fdffff7f00000100000000000c00000001000000150000000008000006000100018000000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x44048019}, 0x4000080) 1.482649522s ago: executing program 6 (id=3850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="50000000020601020000000000000000000000000400078011000300686173683a69702c6d61726b000000cee92888000a00000005000400000000000900020073797a310000000005000100070000006f0d4c252e48b193eb57d48ef9c5d177e0eec8bfc07bc62607b4a415730b39650c11b1791e128742ed26a7746fbcb608a3577ca078e208a2de5015998d5e18bbc97657b6"], 0x50}}, 0x20041000) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000500)={0x4, 0xfffffffffffffffc}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001200)={0xbb4, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x18d, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x6d, 0xf, [@fast_bss_trans={0x37, 0x67, {0x2, 0x1, "ceb9d47f9f6d062f32135c84f003b3b1", "5b3f256f86dc6037c5952a6171531b505e1d5f4977a0478bc4c26300a9e12d2e", "921155fb617cb0303d66b60de1213c0c66b541ee702523ff26f131a3ee89daab", [{0x3, 0x13, "290322353d73b33475ef9ece40f5ace579a443"}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xd8, 0x80, [@chsw_timing={0x68, 0x4, {0xd67, 0xffff}}, @ssid={0x0, 0x16, @random="0640d08fef310a50927c5be6d575858779a8ad31ccfa"}, @mesh_chsw={0x76, 0x6, {0x1, 0x3, 0x5}}, @fast_bss_trans={0x37, 0x73, {0x8, 0x1, "4dfe2bb17dddd14d280fa33ae1a58021", "3079ac36defb41b92c9d2c6d94c303039ea46995d99be8e033bf8402b700a9a4", "c9815788cf297914a9760fe3eeada375bed1aacc3d12f02bdccec8ab9046a14c", [{0x1, 0x1f, "c5092d95820edcfa8859ace90f8772f3e4775d4321d631cb4e14189ee23636"}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x9}}, @dsss={0x3, 0x1, 0xb7}, @peer_mgmt={0x75, 0x14, {0x1, 0x1, @void, @void, @val="bc43de67a178634d1f867c4d3a183aa3"}}, @mic={0x8c, 0x18, {0x1ae, "d92b603b404b", @long="f7466cbdd915cf002319c417306c27f3"}}]}, @NL80211_ATTR_BEACON_TAIL={0x96, 0xf, [@sec_chan_ofs={0x3e, 0x1}, @supported_rates, @sec_chan_ofs={0x3e, 0x1, 0x1}, @measure_req={0x26, 0x69, {0x1a, 0x3, 0x8, "840564661ef0d86a04d56043c67461967a65325dfc851c438bd21920e37a0ebe43e92b64ebd1e53400545dab0a81c3687f945589e0f7fbae79cb71122c259ed1c9b71632c75623bf5ea84ce0695e60a83cbd6cadad25a21ca9a3f8371660e3ce279522b1c69a"}}, @gcr_ga={0xbd, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x4a}, 0x3, 0x6, @broadcast, 0x3, 0x2}}]}, @NL80211_ATTR_BEACON_HEAD={0x5f5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @random="75a046646b65", {0x9, 0xff6}}, 0x9, @random=0x2, 0x8000, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x5, 0x1}, {0x9, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0x0, 0x40}}, @void, @val={0x5, 0xa6, {0x7, 0xc1, 0x0, "9f82f3b1c0ef0533db991bcafdfcab7cbc332c97adb447750621db427729775c9939179c446d454d6a6819843702ed3d347a7235f12bd8758642e841b751940fe40a91df6f47fd18d4126c4aa782e067b68513b37a635f3ca8ad7efbe62982bf89903b98930417b5bce1043eec7e54a3e370d8c762acb491b64444da7a718fbd355f4a64e2bafe48377a6ef3117acf49dc587fdd3a0515d04e88e26605e2ed1db5f21f"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x2, 0x28, 0x6}}, @void, @void, @void, @void, [{0xdd, 0xc4, "5e2c73e8e1ca75ab21c8fc9efe5a0c57f8e9f492551f531f3abd963435af0918c05e315d7dd7900d8222f914055a5fff5fc3eef364c96078634e7b2864c6898b38bda9f2f06b74eab1d4c0ec06fbb14a1cd0e09515d9e02315c83f2dd51f94d84ef13d757eae9baa45543e498e9eb9566d0b391a1ff8089ca3f8fa7ce071e26127eb7e62db9eb8392bc85d5db6d8931fffb0b8a3a20c210ebc13eea087005d1569304d720cadd0ec89a122c4cdce652d655b9249992557b3d7c8b2a61788f43e9691695b"}, {0xdd, 0xab, "74b377bdf586ca67affaf1c44628a317a0ea27670d6825d610d70dacee9886267198351265347bc6088e44551d42e449ffd43b914c58f1fccad4fc797d5b7e255b4ce4f3c13424d1211b39c7f7a6964b639074f37943b1364d396706561a419f3aa4217428150eeaca4a8766804f59c3baf19b6c176273de3c62ae9fda117642bc7c3a1a1aaa5778497b3ef0858b0c3571e75c507c1f33935efe6345e6b6f11c574d8d24d967ecbcd94594"}, {0xdd, 0x10, "9832d3ad329172c401d4ab824681c05c"}, {0xdd, 0xfa, "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"}, {0xdd, 0xba, "6ea5b4f6a74796cd2401336f703ae58abc809d0f69606ba510fe890f5116f4bee9329a347bf8360f9314a8de63f4023a30441dcf786da896c59be6e158f664b9efbb3112a927d4a5eefc03d314340d419679a3c91fe46759e8c214c177f7b43e8e367e124bdf7872e125a7526db3641ff019c6307178cd1d5c9d84bcd082a1eb31c649f64d5c2ec6c9254b1814099f5b163a07bdd32bb416ed03000a2495affcdb73bad1e6143b2ead16d20dd636501e30e86c2a202ee41a1bbd"}, {0xdd, 0xd6, "d033a73ef103251cbd6a0741392eb2d7622ead5f8418e10d7361e67000400dba20d09c64ed22b292bd9284a3c90a103ee5cd689b6549cc2d5e3eff0e79c3f24d4810dca544b577890dd769733b50039df741164329965063beaa0aac6163e10f4a4b5ccc78fcd729840ac31e5a79c700d7a201f45b19f785f81769a2f1120c244aaaf3568891aaf451d495539ee17b2100d4fcecc36863a31cecd5799a7e4a54d490157a5667dbd0fe6ad9aa3a6a38c5ca6cfc27eff289415fc142fff0a90640ce038526f7510503e9aa90b64db705a2dbd5b1d7ee32"}, {0xdd, 0x6d, "91d45c910065055d967c5ae75f6f43ba301603c4fc94e3c56bac4e24623d93806241d64fcbe2cfe9055b284d6b446f3d2e6c35a73f767144310d68931b9b86152162edfdbbeeb80c21b5dd53a59d7f9b6c2650e9bb7b2d57c3cfa4be174267f503f95dbfdaf938bafe15ea9d1e"}, {0xdd, 0x82, "a2ec8fdcd2a58d6f609047954e0dae14870809e2bc95ef660cc659eaa5bd595832e076bca106562d89de329a17f9358957b2b2f4d168edd226a4b94c95fdf3d3d043f42d390502bf51b304ad9d766c4eda449acfd5586cdd8143a1a1ba0fab3aea10d6ac0aee843a5e4d961866d03b3ca47bd83349bc4fba89552ec1246d82786e55"}]}}, @NL80211_ATTR_BEACON_HEAD={0x22e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@broadcast, {0x9, 0x4}, @value=@ver_80211n={0x0, 0x80b, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x7, @random=0x1, 0x4, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1ff}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x95, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0xcf, 0x61}}, @void, [{0xdd, 0x82, "b720874d139cf7f8ba25268343b84e80ead37350adf4c46c38f21dce55459671398e1939cf962bc593ef8f554600c2d652fb4993f2bb7db048b9a96699e2104768b3f357a5365fbd5beebc1b4741d30e0d185010d1028189d56ca4f83ae5721b4eaab8e82a2819845dd9827dbe84be5243504b3ef8942bead556790dde4df2341084"}, {0xdd, 0xba, "b92fedc6f480c767ce11d8c1bf07ebcec4075207d9c5bc8988387c879e1b2d8fd4c31f4f545433f84ab51e26e6d7a67c89a2c3a59c227fb9e5fa00db129c9a35e4007c699a387cc7997265e96d281ca7cf7f319de64180ec7a09c6fd264da019d3f2bff10f4b4f9de1908c9c32f7b2e9f66eace397b39fbac16aba56b63dc94cd0255f286d61e5fe1e62ba8e5daef6aea3e48c46c8d33b0b4bc1303d7fc2da5c734eaf12f54b750135bb53123fe547c3adc9c5dd8c2518acf8b2"}, {0xdd, 0x9a, "e91cba9675ca4546ac7d36ddd63e806db6b3a8593a0d5ad25a0bf68cdba2e365842e9114a42243e517dfe24bbb1f253d2ef34777be31ea2e14be213a5df19c00a005c84dc3ec0e43d8f17b33a39a031d7f2511ce8372b590672c47d6faae07d0bb0d8094311053e328d5b50a5998e19b392dccbcc9c1d1cea8ff471123cda49a726fa9766d6ffa53b82d72fe4c78a314a9d1a32b59eff9475775"}]}}]}, 0xbb4}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd70040000000500070002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000004c0)=0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000180)={0x0, &(0x7f0000000580)}) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000007c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60}]}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0x7, 0x4) 1.385574543s ago: executing program 5 (id=3851): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000300)=0x2, 0x4) writev(0xffffffffffffffff, &(0x7f0000003500), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x842943, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x90, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000811) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010028bd700000dcdf250700000008000300", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8881}, 0x890) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="310300007c5d2889000009005a317c784e3bd7ff2aa3823699ea0000"], 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="0666", 0x0, 0x2, 0x0, 0x80000000}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc00", 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xe, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0x6, 0x7, 0xff, 0x2, 0x7e38, 0x4, 0x88000000, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x100, 0x7, 0x2, 0xb, 0x64c}}, &(0x7f0000000180)=0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.331513161s ago: executing program 4 (id=3852): socketpair(0x6, 0x3, 0x7, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x138, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x101, 0xa9, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x84}, 0x40080) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400, 0x3820}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_IKEY={0x8, 0x4, 0xf87}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f0000000000)="9cf838c48588e5878cffffdbe94a0c73fc532317e73acbbbdd286ecba7537fcc75570b25fe0f4842d8980634685480a644d9af0ed21682f5997d447eb88cd18e35a045882033648f961b10a464b66e63185952c677cfc12982eb392ef03ab433fd3b44076a17a1be918be8adab28c225d49c116a04bd09a8688fbbdef5eb7ca7754a50f9934026d9d3ce3b8b95e59303eef7a1e6f0293dcc60a5ea522f6a5c419165a1c4d4e0964400cc858b37dabc126051ce8d8d6f8485da101336a2853ed7aa1ea3e225b8ff7b38b92d1b69346d2179494e8209d92ab06933b8"}, 0x20) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf4, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 64) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r10, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb93", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e853818a3e80b2fd38f5e782b6b42c95104fd111ddce1505140ac49ae419e6264054d2cc0853c21ee312b754d0701db", 0x7a}, {&(0x7f00000003c0)="5238e95e63ee39039afbdcc3623762630b41620ad9c3ba2e00e019dd2a6d12b41daf39e8a94ebfb013cd351ea18c923617691c1ff8a55cafd19518d9ba95411af2f1bfa8d10cde6696d503887396d47677c9c8d2197e677aca63c919ba13cd532d707f0cc3c03813e4b03eb3bee052f4410191b5c81e4aff290bce080945cc24f16b3da715a177e3b1c5dafc5d15a50802013c63f017086b240b1e50875cf19e5fd0d1536d00510e64a5b59840872f76d1fc28de642110d1706588a9c0062b77494b9694de0ddca71fe6561f3c6500a792c25148622cef830dc029c43c817c3a01ad50", 0xe3}, {&(0x7f0000000500)="23355c484a99f50fe80290dad71777c07547ba6775a98ce83fd6c7031048db3f6cc0829e59806f8b94c170faf06472d63b65d24f52ef895f5bfb0b98cebbd1a6d72b1b", 0x43}, {&(0x7f0000000600)="9e1d7cffeebcc56f4a1cd2cebf23c21f5951c799bf8c8d62efca81f675745d0f6114880da308a45e71eb6d09080cd8a7a6afc5912915b9a1575c0ba983d07725aa072d2ad688e93c6073c1", 0x4b}, {&(0x7f0000000780)="1c5f4bb563d6ef2ffbb46cb2b02454214c50a988a9cd0d8b4ec20810aca4b2efa0acccf7f1ae615e5a985b570424d4421f111a30122bedb13152a3959b7caf873e0846e5744ee93fd80558d6dad07296391225706724c9f8b6f7fd1f816cb091f9d30d12a020b173b105ac383f1af7be39825720221707da95194aae3a2e497a650091", 0x83}, {&(0x7f0000000840)="55b2f45a82e979ee13cfa93f385d876f372e49b02d643c72db8e0e97739ef4a3", 0x20}], 0x6}}], 0x3, 0x2090) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xe8a, 0x42}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}]}, 0x30}}, 0x40000) (rerun: 64) 1.118877824s ago: executing program 4 (id=3853): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100000000044562b780f616d85e2ff6318df03d288d3d2e913f232d5bf295b053b18", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c0002800800040008000000060003008100000006000e0002000000"], 0x4c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='9\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, 0x0, 0xffffffffffffffff}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, 0x0, 0xffffffffffffffff}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmsg$alg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="78d8f9ff7f000000ba1fd718ec9c0ff309c20c2eed0000008b8e1a000000f0000800"/43, 0x2b}, {&(0x7f0000000080)="5c8c4417e7a0b72b728a6dc796687e0825efef9fdcc9650a52ce6a37843531e051bfa638bd9038a4435b37ef", 0x2c}, {&(0x7f0000000500)="ba8195b9b4f8acf200b97d62022eef0db621166c2494f0c40413b10c7010f89fb8a7616625cb341a889be89673fd16fe274fa5c7e54378bae50bfab4152fda3c40c42ded7741823cf5898fded1ac1bc82b9868cebd58", 0x56}], 0x3, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x200040c0}, 0x24044804) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)='8', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000059ce000000000100008a026c2214796913bdaf6a31a6916eac0002000000"], 0x10}}], 0x2, 0x20000000) (async) sendmmsg(r5, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)='8', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000059ce000000000100008a026c2214796913bdaf6a31a6916eac0002000000"], 0x10}}], 0x2, 0x20000000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, 0x0, 0x0) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f00000000c0)=""/30, &(0x7f0000000100)=0x1e) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfdfd}) (async) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9, 0x0, 0xfdfd}) 1.061710417s ago: executing program 6 (id=3854): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x3fb, 0x214, 0x70bd2b, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaadf00004000000800490000380000000000069078ac1e0001ac1414148907a2ffffffff86060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="508000ff90780000"], 0x0) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x2e6a, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da", 0x2}], 0x1}, 0x20000001) recvmmsg(r2, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1}, 0xffffffff}], 0x1, 0x40010003, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1}}, {{0x0, 0x1}, {0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1}}], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x44840, 0x0) write$ppp(r6, &(0x7f0000000240)="d648e2397bf7e92002b5e9b8645055d49bbcbb9b05eccb6d0e1a47a24f32b599a286fed9f212e1b9a7af18e0b62921e91f0675b9cf84741675c1bdb74b0bcdde7719b7b91a4d07cbc8c2b7558c1de5015b6e68242e6f2fecd230d4aaae916c4f78d029fa08521a7684a7f174f5b4", 0x6e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, r5, 0x5, 0x0, @void}, 0x10) 889.461159ms ago: executing program 1 (id=3856): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@newchain={0xb4, 0x64, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0xb}, {0x5, 0xfff3}, {0x6, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @TCA_CHAIN={0x8, 0xb, 0x58}, @filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_INDEV={0x14, 0x2, 'bond_slave_0\x00'}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}, @TCA_CHAIN={0x8, 0xb, 0x9ed6}]}, 0xb4}}, 0x10000000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@mcast1, 0x0, r1}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000002200)={0x24, 0x8001, 0xa, 0x7, 0x0, 0x82}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r1}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0x0, [0x6, 0x0, 0x1, 0x6, 0x2, 0xc846], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0xa8) close(0x3) 854.679767ms ago: executing program 6 (id=3857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000500)={0x40000000}) write$cgroup_int(r4, &(0x7f0000000080)=0x4, 0xfffffe7d) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x170, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0xbc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x80867ee1f111c26c}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x64}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) 763.943411ms ago: executing program 1 (id=3858): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x2, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000940)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES32], 0x40}, 0x20000000) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x11, 0x1, 0x80000000, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000480)={r3, 0x0, 0x25, 0x1, @val=@kprobe_multi=@addrs={0x0, 0x3, 0x0, &(0x7f0000000180)=[0x9, 0x0, 0x1000], 0x6}}, 0x30) 675.23297ms ago: executing program 1 (id=3859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002002b00000008000a000000000008001800ac1414aa080019"], 0x58}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={r4, 0xfffffffffffffffc, 0x8000000000000001, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc}, {0xb, 0x8}}}, 0x24}}, 0x20040000) 520.728105ms ago: executing program 1 (id=3860): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1413, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffeb9, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x202}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) 399.850037ms ago: executing program 1 (id=3861): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9ff67ccacc00000013b5f177f8e26442fb00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r1, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 367.287271ms ago: executing program 1 (id=3862): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x8f0, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000036c0)=@newtaction={0x480, 0x30, 0x8, 0x70bd27, 0x25dfdbff, {}, [{0x468, 0x1, [@m_police={0x434, 0x20, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x3, 0x3, 0x0, 0x5, 0x6, 0x2, 0x5, 0x0, 0x3, 0x36, 0x6, 0x5, 0x2, 0x100, 0x3, 0x3ff, 0x7, 0x7, 0x80000000, 0x1, 0x1000, 0x2, 0x1, 0x4, 0xfffffbff, 0xc3, 0x9, 0x0, 0x3, 0x4, 0x15bd, 0x1, 0x9, 0xcdf1, 0x81, 0x4, 0x52, 0x1, 0xe27, 0x7, 0x1, 0x7, 0x9, 0x2, 0x8, 0x3, 0xaa7b, 0xc, 0x2, 0xffffffff, 0x9, 0x0, 0x1, 0x6, 0x7fff, 0x5, 0x2, 0x10, 0x7f, 0x4, 0x302, 0x1, 0x6, 0x3, 0x2, 0x3, 0x9, 0x2, 0x81, 0xf, 0x1, 0x964f, 0x9, 0x6, 0x1, 0x8, 0x2, 0x5f4a, 0x69, 0x3, 0x9, 0x1, 0x7fffffff, 0x4, 0x3, 0x9, 0x1, 0x6, 0x8ff, 0xffffffff, 0x4, 0x8000, 0x369, 0x9, 0x10, 0x8, 0xffffffff, 0x5, 0x1, 0x6, 0x3, 0x8, 0x3, 0x1, 0x200, 0xffffffff, 0xfffffffa, 0x7fffffff, 0x7, 0x7, 0x0, 0x1000, 0x0, 0x6, 0x10, 0xbd2e, 0x8, 0x0, 0x8, 0x2409b62, 0x7, 0x10000, 0xfffffffc, 0x0, 0x51, 0x2b8, 0x4, 0xffff0001, 0x803, 0x4, 0x1, 0x1, 0x8, 0x2, 0x5, 0x6, 0xfffffff7, 0x1ff, 0x4cdf, 0x9, 0x9, 0x4, 0xfffffffa, 0x2, 0x8, 0x4, 0xc, 0x1, 0x5, 0x6, 0x8, 0xadc, 0x5, 0x1, 0x1, 0x1, 0x23f7, 0x5, 0x7, 0x7fff, 0x1e81, 0xc6, 0x8, 0x9, 0x0, 0x100, 0x6, 0x6, 0x9, 0x2, 0x2, 0x0, 0x10001, 0x800, 0x2, 0x4, 0x9, 0xff, 0x3, 0x7, 0x9, 0x4, 0x8, 0xfbca, 0x800, 0x8, 0xfffffc01, 0x100, 0x8, 0x2, 0x9, 0x4, 0x7, 0x2, 0x2, 0x6, 0x7f, 0x17e8c347, 0xfffffff0, 0x9, 0x6, 0x3, 0x81, 0x9, 0x5, 0x8001, 0x3ff, 0x4, 0xc1ab, 0x10, 0x10000, 0x3, 0x6, 0x7, 0x736, 0x10000, 0xc, 0x800, 0x81, 0x4, 0x7, 0x4f, 0xe2e, 0x2, 0x305f3304, 0x4f2, 0x4, 0x1, 0x0, 0x3, 0x40, 0xe6, 0x7, 0x5, 0xfde7, 0xfffffffe, 0x2, 0xfffffffc, 0x5, 0x4f3, 0x7, 0x7, 0xe85, 0x3, 0x3fd6, 0x6, 0x4, 0x90, 0xffffffff, 0x40000000, 0x0, 0xfffffff9, 0x1ff, 0xb, 0x10]}], [], []]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x4}]}, 0x480}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) 182.400241ms ago: executing program 4 (id=3863): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000300000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 67.636103ms ago: executing program 4 (id=3864): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000240)='|') r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xa, 0x148, 0x0, 0x60, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x100, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x7, 0x1, 0x0, {0x8}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x12) 67.311815ms ago: executing program 5 (id=3865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3c, 0x1000, 0x3e, 0xa2f}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) socket$kcm(0x2, 0xa, 0x2) 0s ago: executing program 4 (id=3866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x10000, @remote, 0x7}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/137, 0x89, 0x0, &(0x7f0000000300)=""/200, 0xc8}, &(0x7f0000000440)=0x40) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0xfffffff7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x5e, 0x888) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept4$phonet_pipe(r3, 0x0, 0x0, 0x80800) listen(r0, 0x0) getsockopt(r4, 0x9, 0xd8, &(0x7f0000000180)=""/139, &(0x7f0000000040)=0x8b) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x96, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000600600fe80000000000000000000000000001dfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="8002"], 0x0) kernel console output (not intermixed with test programs): 08': attribute type 21 has an invalid length. [ 288.256052][T15197] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 288.284571][T15192] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2512'. [ 288.304467][T15172] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 288.315998][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2512'. [ 288.326438][T15172] bond8 (unregistering): Released all slaves [ 288.340265][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2512'. [ 288.419503][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 288.513988][T15212] ÿ: renamed from bond_slave_0 [ 288.759197][ T5926] IPVS: starting estimator thread 0... [ 288.859922][T15238] IPVS: using max 30 ests per chain, 72000 per kthread [ 289.278047][T15274] Cannot find del_set index 4 as target [ 289.404148][T15281] netlink: ct family unspecified [ 289.414159][T15281] nbd: must specify a size in bytes for the device [ 289.675477][T15292] syzkaller0: entered promiscuous mode [ 289.681130][T15292] syzkaller0: entered allmulticast mode [ 291.421663][T15339] __nla_validate_parse: 13 callbacks suppressed [ 291.421682][T15339] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2551'. [ 291.440127][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2550'. [ 291.451425][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 291.468230][T15343] batadv1: entered promiscuous mode [ 291.475033][T15343] batadv1: entered allmulticast mode [ 291.503056][T15343] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 292.063868][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'. [ 292.073489][T15370] ksmbd: Daemon and kernel module version mismatch. ksmbd: 136, kernel module: 1. User-space ksmbd should terminate. [ 292.416728][T15378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 292.718730][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2565'. [ 292.793241][T15400] block nbd0: reconnected socket [ 292.795538][T15401] bridge0: left allmulticast mode [ 292.808615][T15400] nbd: socks must be embedded in a SOCK_ITEM attr [ 292.816935][ T5844] block nbd0: Receive control failed (result -32) [ 292.838105][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2563'. [ 293.299403][T15415] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2570'. [ 293.684460][T15428] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2574'. [ 293.728080][T15429] validate_nla: 4 callbacks suppressed [ 293.728099][T15429] netlink: 'syz.5.2575': attribute type 13 has an invalid length. [ 293.743160][T15429] netlink: 'syz.5.2575': attribute type 17 has an invalid length. [ 293.875242][T15429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.884334][T15429] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.897356][T15429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.932234][T15437] tipc: Resetting bearer [ 293.958930][T10829] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.968810][T10829] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.977770][T10829] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.988457][T10829] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.998971][T10829] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.008998][T10829] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.037140][T10829] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.045766][T10829] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.125454][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 294.242837][T15449] netlink: 'syz.4.2580': attribute type 6 has an invalid length. [ 294.461562][T15463] netlink: 'syz.3.2588': attribute type 13 has an invalid length. [ 294.874917][T15498] netlink: 'syz.5.2597': attribute type 2 has an invalid length. [ 294.883254][T15498] netlink: 'syz.5.2597': attribute type 1 has an invalid length. [ 295.298610][T15520] bond8: option min_links: invalid value (18446744073709551612) [ 295.306563][T15520] bond8: option min_links: allowed values 0 - 2147483647 [ 295.316511][T15520] bond8 (unregistering): Released all slaves [ 295.487942][T15531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.758216][T15549] netlink: 'syz.5.2616': attribute type 1 has an invalid length. [ 295.778302][T15549] netlink: 'syz.5.2616': attribute type 18 has an invalid length. [ 295.879910][T15560] netlink: 'syz.5.2619': attribute type 1 has an invalid length. [ 296.335303][T15576] lo speed is unknown, defaulting to 1000 [ 296.365566][T15588] netlink: 'syz.4.2627': attribute type 1 has an invalid length. [ 296.402140][T15587] vxcan5: entered promiscuous mode [ 296.434520][T15588] bond10: entered promiscuous mode [ 296.440478][T15588] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.467691][T15578] lo speed is unknown, defaulting to 1000 [ 296.601266][T15599] __nla_validate_parse: 10 callbacks suppressed [ 296.601285][T15599] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2630'. [ 297.009258][T15608] lo speed is unknown, defaulting to 1000 [ 297.336143][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 298.347585][T15627] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2636'. [ 298.439312][T15625] lo speed is unknown, defaulting to 1000 [ 298.867690][T15638] tipc: Enabling of bearer rejected, failed to enable media [ 298.902639][T15638] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 298.947600][T15638] syzkaller0: entered promiscuous mode [ 298.955351][T15638] syzkaller0: entered allmulticast mode [ 298.995677][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2641'. [ 299.124465][T15643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2642'. [ 299.209900][T15647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2642'. [ 299.223964][T12993] block nbd64: NBD_DISCONNECT [ 299.261277][T15647] nbd: device at index 64 is going down [ 300.221345][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2647'. [ 300.476920][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2650'. [ 300.938960][T15694] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2656'. [ 301.009142][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2658'. [ 301.214034][T15713] xt_hashlimit: size too large, truncated to 1048576 [ 301.239327][T15718] pimreg: tun_chr_ioctl cmd 1074025677 [ 301.245531][T15718] pimreg: linktype set to 774 [ 301.454588][T15729] netlink: 'syz.4.2665': attribute type 10 has an invalid length. [ 301.476648][T15729] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.843415][T15759] netlink: 'syz.4.2675': attribute type 10 has an invalid length. [ 301.854483][T15759] __nla_validate_parse: 2 callbacks suppressed [ 301.854497][T15759] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2675'. [ 301.997960][T15766] netlink: 'syz.5.2677': attribute type 1 has an invalid length. [ 302.080971][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 302.132831][T15778] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 302.141837][T15766] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2677'. [ 302.145298][T15778] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 302.202131][T15766] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 302.227301][ T30] audit: type=1800 audit(1772416499.118:6): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2680" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2781 res=0 errno=0 [ 302.276426][T15766] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 302.348844][T15778] macvlan2: entered promiscuous mode [ 302.362292][T15778] macvlan2: entered allmulticast mode [ 302.372928][T15778] bond2: entered promiscuous mode [ 302.378694][T15778] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.443713][T15778] bond2: left promiscuous mode [ 302.848611][T15820] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2691'. [ 302.876278][T15820] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 302.917500][T15824] lo speed is unknown, defaulting to 1000 [ 302.951068][T15829] netlink: 'syz.1.2694': attribute type 21 has an invalid length. [ 302.967032][T15829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2694'. [ 303.005250][T15832] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 303.027927][T15832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2695'. [ 303.095308][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2696'. [ 303.340186][T15846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2699'. [ 303.360240][T15846] veth1_to_team: entered promiscuous mode [ 303.366085][T15846] veth1_to_team: entered allmulticast mode [ 303.664454][T15857] bridge7: entered promiscuous mode [ 303.689701][T15857] bridge7: entered allmulticast mode [ 304.095284][T15884] lo speed is unknown, defaulting to 1000 [ 304.212538][T15887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2712'. [ 304.232872][T15887] netlink: 'syz.4.2712': attribute type 7 has an invalid length. [ 304.252679][T15887] netlink: 'syz.4.2712': attribute type 8 has an invalid length. [ 304.260573][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2712'. [ 304.270460][T15885] bond9: (slave bond_slave_1): Device is not our slave [ 304.277560][T15885] bond9: option active_slave: invalid value (bond_slave_1) [ 304.292274][T15885] bond9 (unregistering): Released all slaves [ 304.330098][T15887] gretap0: entered promiscuous mode [ 304.337704][T15887] gretap0: left promiscuous mode [ 305.449146][T15921] bond9: option xmit_hash_policy: invalid value (10) [ 305.457615][T15921] bond9 (unregistering): Released all slaves [ 306.662395][T15949] xt_hashlimit: size too large, truncated to 1048576 [ 307.692676][T15902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.923506][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.938904][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.947580][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.961493][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.969207][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.037908][T15986] __nla_validate_parse: 1 callbacks suppressed [ 308.037922][T15986] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2737'. [ 308.042719][T15984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2736'. [ 308.070676][T15986] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 308.078511][T15986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2737'. [ 308.087772][T15978] lo speed is unknown, defaulting to 1000 [ 308.244601][T15992] netlink: 'syz.3.2738': attribute type 1 has an invalid length. [ 308.290519][T15992] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 308.418423][T16004] netlink: 'syz.5.2740': attribute type 9 has an invalid length. [ 308.455938][T16004] netlink: 'syz.5.2740': attribute type 11 has an invalid length. [ 308.484766][T16004] netlink: 'syz.5.2740': attribute type 12 has an invalid length. [ 308.510362][T16004] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2740'. [ 308.560199][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2740'. [ 308.639083][T16019] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2747'. [ 308.837725][T16030] netlink: 876 bytes leftover after parsing attributes in process `syz.1.2748'. [ 308.872938][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 308.889278][T16038] sctp: [Deprecated]: syz.1.2748 (pid 16038) Use of int in max_burst socket option deprecated. [ 308.889278][T16038] Use struct sctp_assoc_value instead [ 308.940420][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 308.959893][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 308.970600][T16040] netlink: 'syz.4.2754': attribute type 8 has an invalid length. [ 308.978650][T16040] netlink: 'syz.4.2754': attribute type 9 has an invalid length. [ 308.994134][T16040] netlink: 'syz.4.2754': attribute type 10 has an invalid length. [ 309.003092][T16040] netlink: 'syz.4.2754': attribute type 11 has an invalid length. [ 309.062841][T16046] netlink: 'syz.4.2755': attribute type 8 has an invalid length. [ 309.236464][T15978] chnl_net:caif_netlink_parms(): no params data found [ 309.331631][T16063] !©9: entered promiscuous mode [ 309.337481][T15978] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.345080][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.352527][T15978] bridge_slave_0: entered allmulticast mode [ 309.360848][T15978] bridge_slave_0: entered promiscuous mode [ 309.369002][T15978] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.376267][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.383613][T15978] bridge_slave_1: entered allmulticast mode [ 309.391227][T15978] bridge_slave_1: entered promiscuous mode [ 309.420531][T15978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.445792][T15978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.476795][T15978] team0: Port device team_slave_0 added [ 309.485810][T15978] team0: Port device team_slave_1 added [ 309.519184][T15978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.526298][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.552364][T15978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.564965][T15978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.582159][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.611152][T15978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.702500][T15978] hsr_slave_0: entered promiscuous mode [ 309.709305][T15978] hsr_slave_1: entered promiscuous mode [ 309.716247][T15978] debugfs: 'hsr0' already exists in 'hsr' [ 309.722778][T15978] Cannot create hsr debugfs directory [ 310.049759][ T5844] Bluetooth: hci6: command tx timeout [ 312.130550][ T5844] Bluetooth: hci6: command tx timeout [ 312.237627][T16056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.252109][T15978] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.322574][T15978] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 312.389133][T15978] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 312.411608][T15978] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 312.412263][T16096] IPVS: length: 35 != 24 [ 312.479843][T16096] ip6gre1: entered promiscuous mode [ 312.490472][T16096] ip6gre1: entered allmulticast mode [ 312.715886][T15978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.791168][T15978] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.877436][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.884695][T13245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.903490][T16123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.930919][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.938084][T13250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.103676][T16136] bridge5: entered promiscuous mode [ 313.108974][T16136] bridge5: entered allmulticast mode [ 313.173630][T16139] __nla_validate_parse: 7 callbacks suppressed [ 313.173645][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2782'. [ 313.228673][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 313.237831][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2781'. [ 313.249892][T16146] validate_nla: 1 callbacks suppressed [ 313.249908][T16146] netlink: 'syz.3.2781': attribute type 18 has an invalid length. [ 313.328603][T16146] xt_hashlimit: size too large, truncated to 1048576 [ 313.413838][T13245] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.430022][T13245] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.439909][ T8274] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.571053][T16157] lo speed is unknown, defaulting to 1000 [ 313.578856][T15978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.756105][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 313.769812][ T8274] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.031773][T16167] lo speed is unknown, defaulting to 1000 [ 314.046686][T16165] lo speed is unknown, defaulting to 1000 [ 314.133207][ T8274] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.212653][ T5844] Bluetooth: hci6: command tx timeout [ 314.435775][T15978] veth0_vlan: entered promiscuous mode [ 314.483675][T15978] veth1_vlan: entered promiscuous mode [ 314.561540][T15978] veth0_macvtap: entered promiscuous mode [ 314.577727][T15978] veth1_macvtap: entered promiscuous mode [ 314.623031][T15978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.643444][T15978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.683551][T16203] nbd: must specify a device to reconfigure [ 314.719139][T10829] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.751179][T10829] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.836674][T10466] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.860605][T10466] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.150021][T13250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.160064][T13250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.172199][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2801'. [ 315.293075][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 315.474372][T16227] Bluetooth: MGMT ver 1.23 [ 315.729894][T10829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.743720][T16224] pim6reg1: entered promiscuous mode [ 315.758142][T10829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.761007][T16224] pim6reg1: entered allmulticast mode [ 315.779737][T10466] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.791640][T10466] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.884191][T10466] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.903816][T10466] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.036219][T16234] bridge0: entered allmulticast mode [ 316.066502][T16240] ieee802154 phy0 wpan0: encryption failed: -126 [ 316.102951][T16241] ieee802154 phy0 wpan0: encryption failed: -126 [ 316.289895][ T5844] Bluetooth: hci6: command tx timeout [ 316.298831][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2807'. [ 316.357028][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2807'. [ 316.387046][T16251] nbd: illegal input index -1113835520 [ 316.402152][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2807'. [ 316.431592][T16251] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 316.715422][T16270] xt_CONNSECMARK: invalid mode: 65 [ 316.786114][T16247] lo speed is unknown, defaulting to 1000 [ 316.935530][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 316.943828][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.950274][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.124939][T16278] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.132668][T16278] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.270369][T16278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.284434][T16278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.395594][T16282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2814'. [ 317.409733][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.448733][T10829] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.465097][T10829] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.476222][T10829] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.485530][T10829] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.709335][T16302] netlink: 'syz.3.2821': attribute type 5 has an invalid length. [ 317.771571][T16302] geneve3: entered promiscuous mode [ 317.788504][T16302] geneve3: entered allmulticast mode [ 317.810050][T10466] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 317.831984][T10466] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 317.849889][T10466] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 317.858008][T10466] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 318.175965][T16323] netlink: 'syz.3.2828': attribute type 39 has an invalid length. [ 318.236340][T16323] __nla_validate_parse: 3 callbacks suppressed [ 318.236355][T16323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2828'. [ 318.251905][T16323] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2828'. [ 318.260946][T16323] netlink: 'syz.3.2828': attribute type 5 has an invalid length. [ 318.268754][T16323] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2828'. [ 318.300985][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2829'. [ 318.457259][T16323] vlan0: entered allmulticast mode [ 318.684509][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2830'. [ 318.774599][T16336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2831'. [ 318.924948][T16336] netlink: 'syz.3.2831': attribute type 101 has an invalid length. [ 318.933139][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2831'. [ 319.218665][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2836'. [ 319.408927][T16357] IPVS: Scheduler module ip_vs_sip not found [ 319.442585][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.452435][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.460152][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.467908][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.477006][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.490328][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 319.566609][T16362] lo speed is unknown, defaulting to 1000 [ 319.899106][T16372] team0 (unregistering): Port device team_slave_0 removed [ 319.926330][T16372] team0 (unregistering): Port device team_slave_1 removed [ 320.253547][T16389] 8021q: VLANs not supported on lo [ 320.812609][T16362] chnl_net:caif_netlink_parms(): no params data found [ 320.961591][T16362] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.968883][T16362] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.976472][T16362] bridge_slave_0: entered allmulticast mode [ 320.984004][T16362] bridge_slave_0: entered promiscuous mode [ 320.992731][T16362] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.999977][T16362] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.007149][T16362] bridge_slave_1: entered allmulticast mode [ 321.014847][T16362] bridge_slave_1: entered promiscuous mode [ 321.058070][T16362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.070692][T16362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.105644][T16362] team0: Port device team_slave_0 added [ 321.116800][T16362] team0: Port device team_slave_1 added [ 321.200596][T16362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.207685][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.299603][T16362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.331622][T16362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.338589][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.425752][T16362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.523256][T16434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2857'. [ 321.572025][ T5832] Bluetooth: hci7: command tx timeout [ 321.592747][T16428] ªªªªª9i©LﶩLÁ: renamed from lo [ 321.693509][T16362] hsr_slave_0: entered promiscuous mode [ 321.704399][T16362] hsr_slave_1: entered promiscuous mode [ 321.720667][T16362] debugfs: 'hsr0' already exists in 'hsr' [ 321.734213][T16362] Cannot create hsr debugfs directory [ 321.879299][T16444] openvswitch: netlink: Message has 2 unknown bytes. [ 321.886134][T16444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.139595][T16440] lo speed is unknown, defaulting to 1000 [ 322.509109][T16459] ipvlan3: entered promiscuous mode [ 322.528040][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2863'. [ 322.814017][T16362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.860307][T16362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.890737][T16468] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 322.898542][T16362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.922765][T16362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.084605][T16466] lo speed is unknown, defaulting to 1000 [ 323.232527][T16362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.271963][T16362] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.295290][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.302516][T13250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.351825][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.358968][T13250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.651947][ T5832] Bluetooth: hci7: command tx timeout [ 323.799516][T16362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.881308][T16362] veth0_vlan: entered promiscuous mode [ 323.912060][T16362] veth1_vlan: entered promiscuous mode [ 323.997835][T16362] veth0_macvtap: entered promiscuous mode [ 324.024851][T16362] veth1_macvtap: entered promiscuous mode [ 324.129352][T16362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.182214][T16362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.252697][T10466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.267239][T10466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.306960][T10466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.339959][T10466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.530738][T10466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.542062][T10466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.632393][T10829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.648006][T10829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.927242][T16500] __nla_validate_parse: 1 callbacks suppressed [ 324.927260][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 325.249736][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.566257][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.579984][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.587821][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.596731][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.612400][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.660626][T13244] wlan1: Trigger new scan to find an IBSS to join [ 325.730483][ T5832] Bluetooth: hci7: command tx timeout [ 325.753612][T16512] lo speed is unknown, defaulting to 1000 [ 325.793853][ T5823] syz_tun (unregistering): left promiscuous mode [ 325.843431][ T5823] team0: Port device syz_tun removed [ 325.913490][T16519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2875'. [ 326.064118][T16526] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2877'. [ 326.106973][T16528] sctp: [Deprecated]: syz.5.2879 (pid 16528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.106973][T16528] Use struct sctp_sack_info instead [ 326.238360][T16535] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2882'. [ 326.252491][T16537] openvswitch: netlink: Message has -2 unknown bytes. [ 326.260726][T16537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.353584][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2884'. [ 326.402098][T16539] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2884'. [ 326.404017][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 326.565460][T16552] ªªªªª6: renamed from bridge_slave_0 [ 326.822997][T16512] chnl_net:caif_netlink_parms(): no params data found [ 326.970772][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.978422][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.986140][T16512] bridge_slave_0: entered allmulticast mode [ 326.994207][T16512] bridge_slave_0: entered promiscuous mode [ 327.003468][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.010991][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.018680][T16512] bridge_slave_1: entered allmulticast mode [ 327.026722][T16512] bridge_slave_1: entered promiscuous mode [ 327.092000][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.104783][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.143341][T16512] team0: Port device team_slave_0 added [ 327.152394][T16512] team0: Port device team_slave_1 added [ 327.222184][T16583] lo speed is unknown, defaulting to 1000 [ 327.263486][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.275515][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.302329][T16595] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 327.311595][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.323691][T16594] tipc: Enabling of bearer rejected, failed to enable media [ 327.348256][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.365119][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.438945][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.646850][T16512] hsr_slave_0: entered promiscuous mode [ 327.650820][ T5832] Bluetooth: hci3: command tx timeout [ 327.683916][T16512] hsr_slave_1: entered promiscuous mode [ 327.719425][T16512] debugfs: 'hsr0' already exists in 'hsr' [ 327.751834][T16512] Cannot create hsr debugfs directory [ 327.810118][ T5832] Bluetooth: hci7: command tx timeout [ 328.194872][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'. [ 328.324669][T16512] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 328.361134][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 328.376944][T16634] netlink: 'syz.6.2910': attribute type 29 has an invalid length. [ 328.386193][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2910'. [ 328.440855][T16512] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 328.609304][T16512] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 328.693367][T13250] wlan1: Trigger new scan to find an IBSS to join [ 328.717007][T16512] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 329.029392][T16512] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.054045][T16512] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.070519][T16512] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.121591][T16512] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.258828][T16512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.286675][T16512] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.312362][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.319528][T13245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.334286][T10829] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.341459][T10829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.730606][ T5832] Bluetooth: hci3: command tx timeout [ 329.827794][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.913585][T16512] veth0_vlan: entered promiscuous mode [ 329.943644][T16512] veth1_vlan: entered promiscuous mode [ 329.976924][T16695] __nla_validate_parse: 2 callbacks suppressed [ 329.976940][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2926'. [ 330.057949][T16512] veth0_macvtap: entered promiscuous mode [ 330.130292][T16512] veth1_macvtap: entered promiscuous mode [ 330.166879][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.186231][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.208978][T13245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.225120][T16702] netlink: 'syz.5.2929': attribute type 1 has an invalid length. [ 330.235697][T13245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.253825][T13245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.268985][T16702] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 330.273719][T13245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.319313][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 330.381595][T16710] vlan2: entered allmulticast mode [ 330.386849][T16710] veth1_to_hsr: entered allmulticast mode [ 330.437550][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2931'. [ 330.444886][T10466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.474847][T10466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.570732][T16724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2934'. [ 330.586774][T10829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.600952][T10829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.690719][T16726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2935'. [ 330.783160][T16731] lo speed is unknown, defaulting to 1000 [ 330.790585][T16735] ksmbd: Unknown IPC event: 8, ignore. [ 330.796328][T16734] ksmbd: Unknown IPC event: 8, ignore. [ 330.844839][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'. [ 330.871494][T16744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.887109][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2871'. [ 330.918757][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2871'. [ 331.522008][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 331.560697][T16770] syz_tun: entered promiscuous mode [ 331.576618][T16770] macvtap1: entered promiscuous mode [ 331.596888][T16770] macvtap1: entered allmulticast mode [ 331.607119][T16770] syz_tun: entered allmulticast mode [ 331.650905][T13250] wlan1: Creating new IBSS network, BSSID 1e:39:3a:81:5b:e5 [ 331.821286][ T5832] Bluetooth: hci3: command tx timeout [ 332.027533][T16790] syzkaller1: entered promiscuous mode [ 332.061958][T16790] syzkaller1: entered allmulticast mode [ 332.317880][T16806] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2957'. [ 332.385635][T16810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.551035][T16818] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 332.632232][T16824] x_tables: duplicate underflow at hook 2 [ 332.931020][T16846] netlink: 'syz.5.2969': attribute type 1 has an invalid length. [ 332.938878][T16846] NCSI netlink: No device for ifindex 0 [ 333.164777][T16864] syz_tun: entered allmulticast mode [ 333.184985][T16864] netlink: 'syz.1.2976': attribute type 4 has an invalid length. [ 333.198276][T16863] syz_tun: left allmulticast mode [ 333.309534][T16875] netlink: 'syz.1.2979': attribute type 8 has an invalid length. [ 333.567892][T16889] bond11: entered promiscuous mode [ 333.594979][T16889] 8021q: adding VLAN 0 to HW filter on device bond11 [ 333.650370][T16896] lo speed is unknown, defaulting to 1000 [ 333.666802][T16902] netlink: 'syz.1.2985': attribute type 12 has an invalid length. [ 333.719970][ T8272] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 333.752951][T16886] lo speed is unknown, defaulting to 1000 [ 333.779823][T13245] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 333.869503][T16902] bond1: option resend_igmp: invalid value (2878) [ 333.876239][T16902] bond1: option resend_igmp: allowed values 0 - 255 [ 333.890874][ T5832] Bluetooth: hci3: command tx timeout [ 333.990011][T16902] bond1 (unregistering): Released all slaves [ 334.410027][ T8272] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 334.710489][T16920] nbd2: detected capacity change from 0 to 127 [ 334.733265][ T5832] block nbd2: Receive control failed (result -32) [ 334.742478][T10545] block nbd2: Dead connection, failed to find a fallback [ 334.760746][T10545] block nbd2: shutting down sockets [ 334.766335][T10545] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.777531][T10545] Buffer I/O error on dev nbd2, logical block 0, async page read [ 334.785425][T10545] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.795109][T10545] Buffer I/O error on dev nbd2, logical block 1, async page read [ 334.802939][T10545] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.812640][T10545] Buffer I/O error on dev nbd2, logical block 2, async page read [ 334.820506][T10545] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.830324][T10545] Buffer I/O error on dev nbd2, logical block 3, async page read [ 334.838110][T10545] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.862438][T10545] Buffer I/O error on dev nbd2, logical block 0, async page read [ 334.874371][T10545] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.895197][T10545] Buffer I/O error on dev nbd2, logical block 1, async page read [ 334.922181][T13250] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 334.942136][T10545] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.953617][T13250] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 334.972908][T10545] Buffer I/O error on dev nbd2, logical block 2, async page read [ 334.992139][T10545] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.002381][T10545] Buffer I/O error on dev nbd2, logical block 3, async page read [ 335.030684][T10545] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.050532][T10545] Buffer I/O error on dev nbd2, logical block 0, async page read [ 335.058311][T10545] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 335.119767][T10545] Buffer I/O error on dev nbd2, logical block 1, async page read [ 335.141034][T10545] ldm_validate_partition_table(): Disk read failed. [ 335.177306][T10545] Dev nbd2: unable to read RDB block 0 [ 335.218514][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.238155][T10545] nbd2: unable to read partition table [ 335.244553][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.258692][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.266666][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.274685][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.288386][T10545] ldm_validate_partition_table(): Disk read failed. [ 335.307498][T10545] Dev nbd2: unable to read RDB block 0 [ 335.323423][T10545] nbd2: unable to read partition table [ 335.383061][T16936] __nla_validate_parse: 9 callbacks suppressed [ 335.383075][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2995'. [ 335.388381][T16930] lo speed is unknown, defaulting to 1000 [ 335.478850][ T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 336.494005][T16953] lo speed is unknown, defaulting to 1000 [ 336.665230][T16971] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3002'. [ 336.964016][T16979] tipc: Started in network mode [ 336.970175][T16979] tipc: Node identity ff, cluster identity 4711 [ 336.994709][T16979] tipc: Enabling of bearer rejected, failed to enable media [ 337.198410][T16930] chnl_net:caif_netlink_parms(): no params data found [ 337.329962][ T5844] Bluetooth: hci1: command tx timeout [ 337.472261][T16930] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.490875][T16930] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.498129][T16930] bridge_slave_0: entered allmulticast mode [ 337.506868][T16930] bridge_slave_0: entered promiscuous mode [ 337.515746][T16930] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.523094][T16930] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.531607][T16930] bridge_slave_1: entered allmulticast mode [ 337.539114][T16930] bridge_slave_1: entered promiscuous mode [ 337.595507][T16930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.644373][T16930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.672359][T17002] netlink: 'syz.3.3011': attribute type 4 has an invalid length. [ 337.724393][T17006] netlink: 'syz.3.3011': attribute type 4 has an invalid length. [ 337.771510][T16930] team0: Port device team_slave_0 added [ 337.783199][T17002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.805167][T16930] team0: Port device team_slave_1 added [ 337.812662][T17002] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3011'. [ 337.838186][T17002] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 337.868167][T16930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.876075][T16930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.905338][T16930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.918821][T16930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.958910][T16930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.988134][T16930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.080703][T16930] hsr_slave_0: entered promiscuous mode [ 338.087432][T16930] hsr_slave_1: entered promiscuous mode [ 338.094022][T16930] debugfs: 'hsr0' already exists in 'hsr' [ 338.100113][T16930] Cannot create hsr debugfs directory [ 338.319027][T17024] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3017'. [ 338.411630][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3019'. [ 338.777699][T17041] bridge_slave_0: left allmulticast mode [ 338.784610][T17041] bridge_slave_0: left promiscuous mode [ 338.790608][T17041] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.805942][T17041] bridge_slave_1: left allmulticast mode [ 338.824889][T17041] bridge_slave_1: left promiscuous mode [ 338.848300][T17044] delete_channel: no stack [ 338.864099][T17041] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.894525][T17041] bond0: (slave bond_slave_0): Releasing backup interface [ 338.906619][T17041] bond0: (slave bond_slave_1): Releasing backup interface [ 338.928643][T17041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.946427][T17041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.955215][T17041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.009829][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 339.050371][T17044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3023'. [ 339.383987][T16930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.399511][T17065] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3030'. [ 339.409690][ T5844] Bluetooth: hci1: command tx timeout [ 339.424599][T16930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.449738][T17065] netlink: 'syz.3.3030': attribute type 9 has an invalid length. [ 339.457486][T17065] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3030'. [ 339.466669][T17065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3030'. [ 339.500522][T16930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.548328][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 339.575328][T16930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.588457][T17068] netlink: 'syz.3.3030': attribute type 7 has an invalid length. [ 339.798731][T17084] tipc: Started in network mode [ 339.804618][T17084] tipc: Node identity 76e72ec0aaa8, cluster identity 4711 [ 339.815731][T17084] tipc: Enabled bearer , priority 0 [ 339.843213][T17084] syzkaller0: entered promiscuous mode [ 339.848791][T17084] syzkaller0: entered allmulticast mode [ 339.912600][T17084] tipc: Resetting bearer [ 339.919335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.927623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.984167][T16930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.025005][T16930] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.050699][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.057870][T13245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.063296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.073213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.138458][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.145610][T13244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.190282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.198397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.329731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.337895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.443816][T17083] tipc: Resetting bearer [ 340.488862][T17083] tipc: Disabling bearer [ 340.518167][T17117] __nla_validate_parse: 3 callbacks suppressed [ 340.518188][T17117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3044'. [ 340.562481][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3043'. [ 340.747864][T17123] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3045'. [ 340.751808][T16930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.758529][T17123] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3045'. [ 340.964407][T17135] lo speed is unknown, defaulting to 1000 [ 340.978881][T17137] tipc: Enabled bearer , priority 0 [ 340.997704][T17138] syzkaller0: entered promiscuous mode [ 341.012933][T17138] syzkaller0: entered allmulticast mode [ 341.130060][T17138] tipc: Resetting bearer [ 341.206015][T17138] tipc: Disabling bearer [ 341.228036][T17141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3048'. [ 341.249693][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.334883][T16930] veth0_vlan: entered promiscuous mode [ 341.373512][T16930] veth1_vlan: entered promiscuous mode [ 341.466599][T16930] veth0_macvtap: entered promiscuous mode [ 341.490082][ T5844] Bluetooth: hci1: command tx timeout [ 341.516915][T16930] veth1_macvtap: entered promiscuous mode [ 341.560331][T16930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.574402][T16930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.616478][T17154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3054'. [ 341.619216][T13244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.687763][T13244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.708255][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3054'. [ 341.738992][T13244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.778644][T17154] batadv1: entered promiscuous mode [ 341.786803][T17154] batadv1: entered allmulticast mode [ 341.805643][T17154] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 341.814384][T17162] netlink: 'syz.6.3056': attribute type 1 has an invalid length. [ 341.842062][T13244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.938998][T17166] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 341.952866][T17166] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 342.006233][T13244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.020876][T13244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.047214][T17162] bond1: (slave gretap1): making interface the new active one [ 342.061443][T17162] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 342.070308][T17168] batadv_slave_0: entered promiscuous mode [ 342.156345][T17167] batadv_slave_0: left promiscuous mode [ 342.163958][T13244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.173368][T13244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.185013][T17176] netlink: 'syz.5.3060': attribute type 5 has an invalid length. [ 342.458197][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2992'. [ 342.548767][T17185] lo speed is unknown, defaulting to 1000 [ 342.586961][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3062'. [ 342.693364][T17204] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 342.735954][T17203] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 342.740824][T17187] lo speed is unknown, defaulting to 1000 [ 342.786745][T17192] lo speed is unknown, defaulting to 1000 [ 343.569758][ T5844] Bluetooth: hci1: command tx timeout [ 344.357320][T17214] lo speed is unknown, defaulting to 1000 [ 345.187338][T17238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3073'. [ 345.713941][T17259] netlink: 'syz.3.3078': attribute type 10 has an invalid length. [ 345.742284][T17259] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 345.762254][T17260] netlink: 'syz.3.3078': attribute type 10 has an invalid length. [ 345.790761][T17260] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 345.866769][T17264] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 345.900132][T17264] mac80211_hwsim hwsim52 wlan1: left promiscuous mode [ 346.140586][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 346.162648][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3083'. [ 346.172523][T17275] netlink: 'syz.3.3083': attribute type 14 has an invalid length. [ 346.180787][T17275] netlink: 'syz.3.3083': attribute type 13 has an invalid length. [ 346.199099][T17277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3084'. [ 346.347572][T17279] tipc: Started in network mode [ 346.363295][T17279] tipc: Node identity , cluster identity 4711 [ 346.470408][T17283] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 347.126888][T17304] ipt_ECN: cannot use operation on non-tcp rule [ 347.215037][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3093'. [ 347.404210][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3095'. [ 347.486701][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3097'. [ 347.623422][ T5844] block nbd3: Receive control failed (result -32) [ 347.645805][T17317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3098'. [ 347.662476][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 347.931368][T17324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.965424][T17324] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.018263][T17324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.465263][T17351] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 348.477074][ T10] IPVS: starting estimator thread 0... [ 348.512955][T17349] pimreg: tun_chr_ioctl cmd 1074025677 [ 348.529100][T17349] pimreg: linktype set to 774 [ 348.569800][T17353] IPVS: using max 29 ests per chain, 69600 per kthread [ 348.628583][T17355] netlink: 'syz.3.3109': attribute type 4 has an invalid length. [ 349.284485][T17389] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.650766][T17403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3123'. [ 349.706676][T17404] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 349.936720][T17421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3127'. [ 350.019374][T17420] lo speed is unknown, defaulting to 1000 [ 350.253635][T17428] lo speed is unknown, defaulting to 1000 [ 350.527511][T17431] wg1: entered promiscuous mode [ 350.548782][T17431] wg1: entered allmulticast mode [ 350.720165][T17437] SET target dimension over the limit! [ 350.804677][T17439] tipc: Enabling of bearer rejected, failed to enable media [ 350.896201][T17447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3135'. [ 351.011881][T17447] erspan0: entered promiscuous mode [ 351.030622][T17447] gretap0: entered promiscuous mode [ 351.064984][T17449] lo speed is unknown, defaulting to 1000 [ 351.213747][T17462] netlink: 'syz.3.3137': attribute type 12 has an invalid length. [ 351.659225][T17482] ip6t_srh: unknown srh invflags 4000 [ 351.727816][T17472] __nla_validate_parse: 1 callbacks suppressed [ 351.727833][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3141'. [ 351.770685][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3141'. [ 351.850017][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3143'. [ 351.858994][T17482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3143'. [ 351.890084][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3143'. [ 352.369353][T17510] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3147'. [ 352.480466][T17512] netlink: 'syz.3.3149': attribute type 16 has an invalid length. [ 352.489344][T17512] netlink: 'syz.3.3149': attribute type 17 has an invalid length. [ 352.514024][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.523536][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.778682][T17515] lo speed is unknown, defaulting to 1000 [ 352.784981][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3150'. [ 353.002340][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3152'. [ 353.036851][T17525] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3152'. [ 353.177395][T17530] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3154'. [ 353.868492][T17565] netlink: 'syz.5.3161': attribute type 30 has an invalid length. [ 354.672392][T17591] lo speed is unknown, defaulting to 1000 [ 355.164291][T17614] IPVS: length: 230 != 24 [ 355.170796][T17614] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 355.553887][T17625] team1: entered promiscuous mode [ 355.560277][T17625] team1: entered allmulticast mode [ 355.565779][T17625] 8021q: adding VLAN 0 to HW filter on device team1 [ 355.616067][T17630] team2: entered promiscuous mode [ 355.623820][T17630] team2: entered allmulticast mode [ 355.629286][T17630] 8021q: adding VLAN 0 to HW filter on device team2 [ 355.861207][T17633] netlink: 'syz.5.3179': attribute type 5 has an invalid length. [ 356.027950][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.052176][T17645] bridge_slave_1: left allmulticast mode [ 356.068369][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.088290][T17645] bridge_slave_1: left promiscuous mode [ 356.096609][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.109463][T17645] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.147930][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.157759][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.165587][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.173477][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.182239][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.193531][T17645] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 356.203518][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.212025][T17642] xt_HMARK: proto mask must be zero with L3 mode [ 356.515447][T17656] tipc: Started in network mode [ 356.524883][T17656] tipc: Node identity e6f7f9aa0f55, cluster identity 4711 [ 356.537309][T17656] tipc: Enabled bearer , priority 0 [ 356.615405][T17656] syzkaller0: entered promiscuous mode [ 356.627387][T17656] syzkaller0: entered allmulticast mode [ 356.638835][T17659] tipc: Resetting bearer [ 356.717829][T17655] tipc: Resetting bearer [ 356.779495][T17670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.812789][T17655] tipc: Disabling bearer [ 356.845333][T17671] netlink: 'syz.3.3190': attribute type 31 has an invalid length. [ 356.910463][T17675] __nla_validate_parse: 13 callbacks suppressed [ 356.910489][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3191'. [ 356.969107][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3192'. [ 357.496862][T17694] xt_ecn: cannot match TCP bits for non-tcp packets [ 357.500514][T17696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3196'. [ 357.554797][T17694] netlink: 'syz.5.3197': attribute type 19 has an invalid length. [ 357.572855][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'. [ 357.605333][T17694] netlink: 'syz.5.3197': attribute type 19 has an invalid length. [ 357.641430][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'. [ 357.728116][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3198'. [ 357.884643][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3200'. [ 357.926776][T17710] IPv6: sit1: Disabled Multicast RS [ 358.022646][T17717] netlink: 'syz.3.3203': attribute type 32 has an invalid length. [ 358.057349][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3203'. [ 358.104009][T17717] bond1: option coupled_control: invalid value (12) [ 358.120570][T17717] bond1 (unregistering): Released all slaves [ 358.186702][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.194547][T17724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.204894][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.223208][T17724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.653076][T17736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3210'. [ 358.918557][T10545] udevd[10545]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.214637][T17777] netlink: 'syz.6.3218': attribute type 21 has an invalid length. [ 359.487966][T17785] netlink: 'syz.6.3220': attribute type 61 has an invalid length. [ 359.529676][T17785] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3220'. [ 359.568085][T17790] netlink: 'syz.4.3221': attribute type 3 has an invalid length. [ 359.621806][T17789] syzkaller0: entered promiscuous mode [ 359.627353][T17789] syzkaller0: entered allmulticast mode [ 359.776827][T17799] batadv_slave_0: entered promiscuous mode [ 359.789476][T17798] batadv_slave_0: left promiscuous mode [ 360.015993][T17803] lo speed is unknown, defaulting to 1000 [ 360.863899][T17841] lo speed is unknown, defaulting to 1000 [ 362.023810][T17893] xt_ecn: cannot match TCP bits for non-tcp packets [ 362.039122][T17892] netlink: 'syz.4.3253': attribute type 1 has an invalid length. [ 362.095440][T17893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.115530][T17896] netlink: 'syz.3.3254': attribute type 10 has an invalid length. [ 362.119418][T17897] netlink: 'syz.4.3253': attribute type 1 has an invalid length. [ 362.233238][T17893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.281066][T17905] bond7: entered promiscuous mode [ 362.286646][T17905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.390840][T17893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.591627][T17893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.629270][T17923] __nla_validate_parse: 18 callbacks suppressed [ 362.629303][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 362.832447][T13250] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.865635][T10808] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.897689][T10808] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.926054][T10808] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.063782][T17945] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3267'. [ 363.107277][T17940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.116284][T17940] bond0: (slave bond1): Enslaving as an active interface with an up link [ 363.140101][T17945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.156868][T17945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.168870][T17945] bond0 (unregistering): (slave bond1): Releasing backup interface [ 363.183949][T17945] bond0 (unregistering): Released all slaves [ 363.206061][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3268'. [ 363.262541][T17946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3268'. [ 363.438307][T17960] FAULT_INJECTION: forcing a failure. [ 363.438307][T17960] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 363.462290][T17960] CPU: 0 UID: 0 PID: 17960 Comm: syz.4.3272 Not tainted syzkaller #0 PREEMPT(full) [ 363.462315][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.462334][T17960] Call Trace: [ 363.462341][T17960] [ 363.462350][T17960] dump_stack_lvl+0xe8/0x150 [ 363.462447][T17960] should_fail_ex+0x412/0x560 [ 363.462586][T17960] _copy_from_user+0x2d/0xb0 [ 363.462663][T17960] ___sys_sendmsg+0x1c6/0x360 [ 363.462755][T17960] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.462814][T17960] ? __fget_files+0x2a/0x420 [ 363.462860][T17960] ? __fget_files+0x3a0/0x420 [ 363.462894][T17960] __x64_sys_sendmsg+0x1bd/0x2a0 [ 363.462924][T17960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.462959][T17960] ? __pfx_ksys_write+0x10/0x10 [ 363.462995][T17960] do_syscall_64+0x14d/0xf80 [ 363.463089][T17960] ? trace_irq_disable+0x3b/0x150 [ 363.463141][T17960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.463193][T17960] ? clear_bhb_loop+0x40/0x90 [ 363.463216][T17960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.463234][T17960] RIP: 0033:0x7f34f419c799 [ 363.463258][T17960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.463275][T17960] RSP: 002b:00007f34f50c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.463294][T17960] RAX: ffffffffffffffda RBX: 00007f34f4415fa0 RCX: 00007f34f419c799 [ 363.463307][T17960] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 363.463318][T17960] RBP: 00007f34f50c0090 R08: 0000000000000000 R09: 0000000000000000 [ 363.463329][T17960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.463340][T17960] R13: 00007f34f4416038 R14: 00007f34f4415fa0 R15: 00007ffde7294058 [ 363.463368][T17960] [ 363.654541][T13244] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 363.686063][T17964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3273'. [ 363.884378][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3277'. [ 364.150452][T17998] vti0: entered promiscuous mode [ 364.155445][T17998] vti0: entered allmulticast mode [ 364.185363][T18001] FAULT_INJECTION: forcing a failure. [ 364.185363][T18001] name failslab, interval 1, probability 0, space 0, times 1 [ 364.206193][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3286'. [ 364.215774][T18001] CPU: 1 UID: 0 PID: 18001 Comm: syz.5.3287 Not tainted syzkaller #0 PREEMPT(full) [ 364.215797][T18001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.215808][T18001] Call Trace: [ 364.215815][T18001] [ 364.215823][T18001] dump_stack_lvl+0xe8/0x150 [ 364.215853][T18001] should_fail_ex+0x412/0x560 [ 364.215879][T18001] should_failslab+0xa8/0x100 [ 364.215935][T18001] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 364.215965][T18001] ? __alloc_skb+0x186/0x7d0 [ 364.216060][T18001] ? __alloc_skb+0x1d0/0x7d0 [ 364.216081][T18001] ? __local_bh_enable_ip+0xd0/0x130 [ 364.216127][T18001] __alloc_skb+0x1d0/0x7d0 [ 364.216155][T18001] netlink_sendmsg+0x5d4/0xb40 [ 364.216232][T18001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.216259][T18001] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.216355][T18001] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.216392][T18001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.216414][T18001] ____sys_sendmsg+0xa68/0xad0 [ 364.216449][T18001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.216484][T18001] ? import_iovec+0x73/0xa0 [ 364.216524][T18001] ___sys_sendmsg+0x2a5/0x360 [ 364.216556][T18001] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.216614][T18001] ? __fget_files+0x2a/0x420 [ 364.216639][T18001] ? __fget_files+0x3a0/0x420 [ 364.216674][T18001] __x64_sys_sendmsg+0x1bd/0x2a0 [ 364.216703][T18001] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.216749][T18001] ? __pfx_ksys_write+0x10/0x10 [ 364.216779][T18001] do_syscall_64+0x14d/0xf80 [ 364.216811][T18001] ? trace_irq_disable+0x3b/0x150 [ 364.216837][T18001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.216889][T18001] ? clear_bhb_loop+0x40/0x90 [ 364.216913][T18001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.216933][T18001] RIP: 0033:0x7fab2599c799 [ 364.216951][T18001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.216975][T18001] RSP: 002b:00007fab26847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.216997][T18001] RAX: ffffffffffffffda RBX: 00007fab25c15fa0 RCX: 00007fab2599c799 [ 364.217011][T18001] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 364.217024][T18001] RBP: 00007fab26847090 R08: 0000000000000000 R09: 0000000000000000 [ 364.217035][T18001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.217047][T18001] R13: 00007fab25c16038 R14: 00007fab25c15fa0 R15: 00007ffd9f69eba8 [ 364.217078][T18001] [ 364.463165][T18004] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 364.534254][T18015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'. [ 364.677129][T18020] netlink: 'syz.6.3291': attribute type 1 has an invalid length. [ 364.705737][T18020] netlink: 'syz.6.3291': attribute type 11 has an invalid length. [ 364.714876][T18020] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3291'. [ 364.914976][T18025] IPVS: Scheduler module ip_vs_sip not found [ 364.929816][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 365.008308][T18038] netlink: 'syz.3.3298': attribute type 2 has an invalid length. [ 365.018758][T18038] netlink: 'syz.3.3298': attribute type 8 has an invalid length. [ 365.026855][T18038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3298'. [ 365.027432][T18034] bond8 (unregistering): Released all slaves [ 365.120644][T18046] FAULT_INJECTION: forcing a failure. [ 365.120644][T18046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.158582][T18046] CPU: 0 UID: 0 PID: 18046 Comm: syz.6.3300 Not tainted syzkaller #0 PREEMPT(full) [ 365.158607][T18046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.158618][T18046] Call Trace: [ 365.158625][T18046] [ 365.158633][T18046] dump_stack_lvl+0xe8/0x150 [ 365.158664][T18046] should_fail_ex+0x412/0x560 [ 365.158690][T18046] _copy_from_iter+0x1d3/0x1670 [ 365.158717][T18046] ? rcu_is_watching+0x15/0xb0 [ 365.158780][T18046] ? __pfx__copy_from_iter+0x10/0x10 [ 365.158811][T18046] ? netlink_sendmsg+0x650/0xb40 [ 365.158834][T18046] ? skb_put+0x11b/0x210 [ 365.158862][T18046] netlink_sendmsg+0x6c0/0xb40 [ 365.158893][T18046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.158919][T18046] ? aa_sock_msg_perm+0xf1/0x1b0 [ 365.158943][T18046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.158963][T18046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.158986][T18046] ____sys_sendmsg+0xa68/0xad0 [ 365.159020][T18046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.159055][T18046] ? import_iovec+0x73/0xa0 [ 365.159083][T18046] ___sys_sendmsg+0x2a5/0x360 [ 365.159115][T18046] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.159173][T18046] ? __fget_files+0x2a/0x420 [ 365.159198][T18046] ? __fget_files+0x3a0/0x420 [ 365.159232][T18046] __x64_sys_sendmsg+0x1bd/0x2a0 [ 365.159261][T18046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.159302][T18046] ? __pfx_ksys_write+0x10/0x10 [ 365.159331][T18046] do_syscall_64+0x14d/0xf80 [ 365.159356][T18046] ? trace_irq_disable+0x3b/0x150 [ 365.159382][T18046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.159400][T18046] ? clear_bhb_loop+0x40/0x90 [ 365.159423][T18046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.159441][T18046] RIP: 0033:0x7f104839c799 [ 365.159458][T18046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.159474][T18046] RSP: 002b:00007f10492d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.159493][T18046] RAX: ffffffffffffffda RBX: 00007f1048615fa0 RCX: 00007f104839c799 [ 365.159507][T18046] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 365.159518][T18046] RBP: 00007f10492d4090 R08: 0000000000000000 R09: 0000000000000000 [ 365.159532][T18046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.159543][T18046] R13: 00007f1048616038 R14: 00007f1048615fa0 R15: 00007ffed2cbf178 [ 365.159571][T18046] [ 365.623160][T18053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.667468][T18058] syzkaller0: entered promiscuous mode [ 365.675669][T18058] syzkaller0: entered allmulticast mode [ 365.720745][T18053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.755405][T18058] ip6gretap1: entered allmulticast mode [ 365.767720][T18069] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 365.832930][T18053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.974334][T18053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.156895][T10808] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.237077][T18096] FAULT_INJECTION: forcing a failure. [ 366.237077][T18096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.239016][T13250] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.252228][T18096] CPU: 0 UID: 0 PID: 18096 Comm: syz.6.3314 Not tainted syzkaller #0 PREEMPT(full) [ 366.252290][T18096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.252326][T18096] Call Trace: [ 366.252338][T18096] [ 366.252362][T18096] dump_stack_lvl+0xe8/0x150 [ 366.252443][T18096] should_fail_ex+0x412/0x560 [ 366.252507][T18096] _copy_from_iter+0x1d3/0x1670 [ 366.252577][T18096] ? rcu_is_watching+0x15/0xb0 [ 366.252657][T18096] ? __pfx__copy_from_iter+0x10/0x10 [ 366.252739][T18096] ? netlink_sendmsg+0x650/0xb40 [ 366.252799][T18096] ? skb_put+0x11b/0x210 [ 366.252879][T18096] netlink_sendmsg+0x6c0/0xb40 [ 366.252963][T18096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.253030][T18096] ? aa_sock_msg_perm+0xf1/0x1b0 [ 366.253098][T18096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.253155][T18096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.253209][T18096] ____sys_sendmsg+0xa68/0xad0 [ 366.253302][T18096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.253391][T18096] ? import_iovec+0x73/0xa0 [ 366.253461][T18096] ___sys_sendmsg+0x2a5/0x360 [ 366.253579][T18096] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.253745][T18096] ? __fget_files+0x2a/0x420 [ 366.253808][T18096] ? __fget_files+0x3a0/0x420 [ 366.253891][T18096] __x64_sys_sendmsg+0x1bd/0x2a0 [ 366.253964][T18096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.254052][T18096] ? __pfx_ksys_write+0x10/0x10 [ 366.254124][T18096] do_syscall_64+0x14d/0xf80 [ 366.254185][T18096] ? trace_irq_disable+0x3b/0x150 [ 366.254245][T18096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.254290][T18096] ? clear_bhb_loop+0x40/0x90 [ 366.254344][T18096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.254394][T18096] RIP: 0033:0x7f104839c799 [ 366.254447][T18096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.254484][T18096] RSP: 002b:00007f10492d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.254531][T18096] RAX: ffffffffffffffda RBX: 00007f1048615fa0 RCX: 00007f104839c799 [ 366.254566][T18096] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 366.254594][T18096] RBP: 00007f10492d4090 R08: 0000000000000000 R09: 0000000000000000 [ 366.254627][T18096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.254653][T18096] R13: 00007f1048616038 R14: 00007f1048615fa0 R15: 00007ffed2cbf178 [ 366.254713][T18096] [ 366.510449][T18100] FAULT_INJECTION: forcing a failure. [ 366.510449][T18100] name failslab, interval 1, probability 0, space 0, times 0 [ 366.526251][T18100] CPU: 0 UID: 0 PID: 18100 Comm: syz.3.3313 Not tainted syzkaller #0 PREEMPT(full) [ 366.526274][T18100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.526285][T18100] Call Trace: [ 366.526292][T18100] [ 366.526299][T18100] dump_stack_lvl+0xe8/0x150 [ 366.526326][T18100] should_fail_ex+0x412/0x560 [ 366.526353][T18100] should_failslab+0xa8/0x100 [ 366.526377][T18100] __kmalloc_node_noprof+0xf0/0x7c0 [ 366.526398][T18100] ? qdisc_alloc+0x92/0x9e0 [ 366.526496][T18100] qdisc_alloc+0x92/0x9e0 [ 366.526526][T18100] qdisc_create_dflt+0x8e/0x510 [ 366.526553][T18100] dev_activate+0x378/0x1150 [ 366.526587][T18100] __dev_open+0x67a/0x830 [ 366.526662][T18100] ? __pfx___dev_open+0x10/0x10 [ 366.526681][T18100] ? __dev_change_flags+0x1b0/0x690 [ 366.526730][T18100] ? __local_bh_enable_ip+0xd0/0x130 [ 366.526756][T18100] __dev_change_flags+0x1f7/0x690 [ 366.526781][T18100] ? __mutex_lock+0x5ac/0x1300 [ 366.526842][T18100] ? __pfx___dev_change_flags+0x10/0x10 [ 366.526871][T18100] ? __pfx___mutex_lock+0x10/0x10 [ 366.526901][T18100] netif_change_flags+0x88/0x1a0 [ 366.526933][T18100] dev_change_flags+0x130/0x260 [ 366.526986][T18100] devinet_ioctl+0x9f2/0x1b30 [ 366.527059][T18100] ? __pfx_devinet_ioctl+0x10/0x10 [ 366.527085][T18100] ? get_user_ifreq+0x12b/0x180 [ 366.527106][T18100] inet_ioctl+0x42a/0x560 [ 366.527134][T18100] ? __pfx_inet_ioctl+0x10/0x10 [ 366.527179][T18100] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 366.527215][T18100] ? packet_ioctl+0x254/0x350 [ 366.527277][T18100] sock_do_ioctl+0x101/0x320 [ 366.527299][T18100] ? __pfx_sock_do_ioctl+0x10/0x10 [ 366.527316][T18100] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 366.527358][T18100] sock_ioctl+0x5c6/0x7f0 [ 366.527379][T18100] ? __pfx_sock_ioctl+0x10/0x10 [ 366.527398][T18100] ? __fget_files+0x2a/0x420 [ 366.527423][T18100] ? __fget_files+0x3a0/0x420 [ 366.527447][T18100] ? __fget_files+0x2a/0x420 [ 366.527476][T18100] ? bpf_lsm_file_ioctl+0x9/0x20 [ 366.527498][T18100] ? __pfx_sock_ioctl+0x10/0x10 [ 366.527517][T18100] __se_sys_ioctl+0xfc/0x170 [ 366.527540][T18100] do_syscall_64+0x14d/0xf80 [ 366.527565][T18100] ? trace_irq_disable+0x3b/0x150 [ 366.527590][T18100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.527609][T18100] ? clear_bhb_loop+0x40/0x90 [ 366.527631][T18100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.527649][T18100] RIP: 0033:0x7fc92ed9c799 [ 366.527666][T18100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.527682][T18100] RSP: 002b:00007fc92fbf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.527701][T18100] RAX: ffffffffffffffda RBX: 00007fc92f016090 RCX: 00007fc92ed9c799 [ 366.527714][T18100] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 366.527726][T18100] RBP: 00007fc92fbf0090 R08: 0000000000000000 R09: 0000000000000000 [ 366.527736][T18100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.527747][T18100] R13: 00007fc92f016128 R14: 00007fc92f016090 R15: 00007ffe41f80b28 [ 366.527777][T18100] [ 366.527835][T18100] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 366.928077][T13250] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.968235][T13245] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.033989][T18108] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 367.157048][T18115] bond2: option all_slaves_active: invalid value (13) [ 367.184366][T18118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.191743][T18118] IPv6: NLM_F_CREATE should be set when creating new route [ 367.199007][T18118] IPv6: NLM_F_CREATE should be set when creating new route [ 367.209120][T18115] bond2 (unregistering): Released all slaves [ 367.340068][T18129] FAULT_INJECTION: forcing a failure. [ 367.340068][T18129] name failslab, interval 1, probability 0, space 0, times 0 [ 367.353076][T18129] CPU: 1 UID: 0 PID: 18129 Comm: syz.5.3326 Not tainted syzkaller #0 PREEMPT(full) [ 367.353098][T18129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.353111][T18129] Call Trace: [ 367.353118][T18129] [ 367.353133][T18129] dump_stack_lvl+0xe8/0x150 [ 367.353164][T18129] should_fail_ex+0x412/0x560 [ 367.353191][T18129] should_failslab+0xa8/0x100 [ 367.353214][T18129] ? skb_clone+0x212/0x3a0 [ 367.353242][T18129] kmem_cache_alloc_noprof+0x87/0x650 [ 367.353271][T18129] ? __netlink_lookup+0xc6/0x8b0 [ 367.353302][T18129] skb_clone+0x212/0x3a0 [ 367.353333][T18129] __netlink_deliver_tap+0x404/0x850 [ 367.353372][T18129] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.353397][T18129] netlink_deliver_tap+0x19c/0x1b0 [ 367.353421][T18129] netlink_unicast+0x7e3/0x9b0 [ 367.353471][T18129] ? __pfx_netlink_unicast+0x10/0x10 [ 367.353497][T18129] ? netlink_sendmsg+0x650/0xb40 [ 367.353523][T18129] ? skb_put+0x11b/0x210 [ 367.353560][T18129] netlink_sendmsg+0x813/0xb40 [ 367.353598][T18129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.353630][T18129] ? aa_sock_msg_perm+0xf1/0x1b0 [ 367.353658][T18129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.353684][T18129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.353710][T18129] ____sys_sendmsg+0xa68/0xad0 [ 367.353752][T18129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.353793][T18129] ? import_iovec+0x73/0xa0 [ 367.353827][T18129] ___sys_sendmsg+0x2a5/0x360 [ 367.353866][T18129] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.353935][T18129] ? __fget_files+0x2a/0x420 [ 367.353965][T18129] ? __fget_files+0x3a0/0x420 [ 367.354007][T18129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 367.354044][T18129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.354091][T18129] ? __pfx_ksys_write+0x10/0x10 [ 367.354132][T18129] do_syscall_64+0x14d/0xf80 [ 367.354161][T18129] ? trace_irq_disable+0x3b/0x150 [ 367.354190][T18129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.354210][T18129] ? clear_bhb_loop+0x40/0x90 [ 367.354235][T18129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.354255][T18129] RIP: 0033:0x7fab2599c799 [ 367.354274][T18129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.354291][T18129] RSP: 002b:00007fab26847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.354314][T18129] RAX: ffffffffffffffda RBX: 00007fab25c15fa0 RCX: 00007fab2599c799 [ 367.354330][T18129] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 367.354343][T18129] RBP: 00007fab26847090 R08: 0000000000000000 R09: 0000000000000000 [ 367.354356][T18129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.354369][T18129] R13: 00007fab25c16038 R14: 00007fab25c15fa0 R15: 00007ffd9f69eba8 [ 367.354403][T18129] [ 367.354874][T18129] tipc: Enabling of bearer rejected, failed to enable media [ 367.703968][T18138] __nla_validate_parse: 3 callbacks suppressed [ 367.703985][T18138] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3327'. [ 367.721811][T18133] syzkaller1: entered promiscuous mode [ 367.727308][T18133] syzkaller1: entered allmulticast mode [ 367.763317][T18138] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3327'. [ 367.790042][T18135] xt_CT: No such helper "syz1" [ 367.804143][T18138] netlink: 'syz.4.3327': attribute type 5 has an invalid length. [ 367.832961][T18138] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3327'. [ 367.963783][T18145] smc: net device wlan0 applied user defined pnetid SYZ0 [ 368.007879][T18142] netlink: 'syz.4.3327': attribute type 10 has an invalid length. [ 368.008363][T18148] bond8: entered promiscuous mode [ 368.452627][T18173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3334'. [ 368.610892][T18175] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.620753][T18175] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.638993][T18184] netlink: 'syz.1.3335': attribute type 16 has an invalid length. [ 368.654067][T18184] netlink: 'syz.1.3335': attribute type 17 has an invalid length. [ 368.746751][T18184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.782982][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3338'. [ 368.797113][T18180] team0 (unregistering): Port device team_slave_0 removed [ 368.809298][T18180] team0 (unregistering): Port device team_slave_1 removed [ 368.898570][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'. [ 368.915336][T18192] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 368.924425][T18192] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 369.024763][T18204] netlink: 'syz.1.3342': attribute type 21 has an invalid length. [ 369.033060][T18204] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3342'. [ 369.263424][T18219] tipc: Enabling of bearer rejected, failed to enable media [ 369.372965][T18225] syzkaller1: entered promiscuous mode [ 369.378568][T18225] syzkaller1: entered allmulticast mode [ 369.386902][T18225] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 369.395603][ T10] IPVS: starting estimator thread 0... [ 369.459422][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3352'. [ 369.471956][T18231] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 369.521966][T18226] IPVS: using max 32 ests per chain, 76800 per kthread [ 370.003594][T18268] 8021q: VLANs not supported on ip_vti0 [ 370.161855][T18278] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3366'. [ 370.211961][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3367'. [ 370.227070][T18280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.335734][T18285] netlink: 'syz.5.3369': attribute type 1 has an invalid length. [ 370.346875][T18285] netlink: 'syz.5.3369': attribute type 2 has an invalid length. [ 370.360576][T18285] syzkaller0: entered promiscuous mode [ 370.366202][T18285] syzkaller0: entered allmulticast mode [ 370.557638][T18293] lo speed is unknown, defaulting to 1000 [ 371.165078][T18316] netlink: 'syz.1.3376': attribute type 1 has an invalid length. [ 371.617041][T18335] netlink: 'syz.1.3382': attribute type 29 has an invalid length. [ 371.627961][T18335] netlink: 'syz.1.3382': attribute type 29 has an invalid length. [ 371.790038][T18348] Bluetooth: MGMT ver 1.23 [ 372.295975][T18379] Cannot find del_set index 49151 as target [ 372.313661][T18379] tc_dump_action: action bad kind [ 372.610187][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.762831][T18397] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.770468][T18397] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.908114][T18397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.921302][T18397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.080619][T18413] netlink: 'syz.1.3407': attribute type 2 has an invalid length. [ 373.101234][T18413] __nla_validate_parse: 13 callbacks suppressed [ 373.101251][T18413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3407'. [ 373.192218][T13244] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.205367][T13244] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.224082][T13244] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.234718][T13244] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.447186][T18425] tipc: Enabling of bearer rejected, failed to enable media [ 373.567325][T18438] FAULT_INJECTION: forcing a failure. [ 373.567325][T18438] name failslab, interval 1, probability 0, space 0, times 0 [ 373.583179][T18438] CPU: 1 UID: 0 PID: 18438 Comm: syz.4.3412 Not tainted syzkaller #0 PREEMPT(full) [ 373.583203][T18438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.583216][T18438] Call Trace: [ 373.583223][T18438] [ 373.583230][T18438] dump_stack_lvl+0xe8/0x150 [ 373.583261][T18438] should_fail_ex+0x412/0x560 [ 373.583288][T18438] should_failslab+0xa8/0x100 [ 373.583313][T18438] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 373.583344][T18438] ? __alloc_skb+0x1d0/0x7d0 [ 373.583367][T18438] ? __local_bh_enable_ip+0xd0/0x130 [ 373.583396][T18438] __alloc_skb+0x1d0/0x7d0 [ 373.583424][T18438] rtmsg_ifinfo_build_skb+0x84/0x260 [ 373.583530][T18438] rtmsg_ifinfo+0x8c/0x1a0 [ 373.583555][T18438] __dev_notify_flags+0xf2/0x310 [ 373.583584][T18438] ? __pfx___dev_notify_flags+0x10/0x10 [ 373.583609][T18438] ? __dev_change_flags+0x4c6/0x690 [ 373.583647][T18438] ? __pfx___dev_change_flags+0x10/0x10 [ 373.583677][T18438] ? __pfx___mutex_lock+0x10/0x10 [ 373.583708][T18438] netif_change_flags+0xe8/0x1a0 [ 373.583739][T18438] dev_change_flags+0x130/0x260 [ 373.583769][T18438] devinet_ioctl+0x9f2/0x1b30 [ 373.583802][T18438] ? __pfx_devinet_ioctl+0x10/0x10 [ 373.583828][T18438] ? get_user_ifreq+0x12b/0x180 [ 373.583848][T18438] inet_ioctl+0x42a/0x560 [ 373.583876][T18438] ? __pfx_inet_ioctl+0x10/0x10 [ 373.583922][T18438] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 373.583945][T18438] ? packet_ioctl+0x254/0x350 [ 373.583970][T18438] sock_do_ioctl+0x101/0x320 [ 373.583992][T18438] ? __pfx_sock_do_ioctl+0x10/0x10 [ 373.584010][T18438] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 373.584052][T18438] sock_ioctl+0x5c6/0x7f0 [ 373.584073][T18438] ? __pfx_sock_ioctl+0x10/0x10 [ 373.584093][T18438] ? __fget_files+0x2a/0x420 [ 373.584118][T18438] ? __fget_files+0x3a0/0x420 [ 373.584142][T18438] ? __fget_files+0x2a/0x420 [ 373.584171][T18438] ? bpf_lsm_file_ioctl+0x9/0x20 [ 373.584193][T18438] ? __pfx_sock_ioctl+0x10/0x10 [ 373.584211][T18438] __se_sys_ioctl+0xfc/0x170 [ 373.584234][T18438] do_syscall_64+0x14d/0xf80 [ 373.584260][T18438] ? trace_irq_disable+0x3b/0x150 [ 373.584286][T18438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.584306][T18438] ? clear_bhb_loop+0x40/0x90 [ 373.584328][T18438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.584346][T18438] RIP: 0033:0x7f34f419c799 [ 373.584364][T18438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.584380][T18438] RSP: 002b:00007f34f509f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.584399][T18438] RAX: ffffffffffffffda RBX: 00007f34f4416090 RCX: 00007f34f419c799 [ 373.584413][T18438] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 373.584425][T18438] RBP: 00007f34f509f090 R08: 0000000000000000 R09: 0000000000000000 [ 373.584436][T18438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.584447][T18438] R13: 00007f34f4416128 R14: 00007f34f4416090 R15: 00007ffde7294058 [ 373.584477][T18438] [ 374.101539][T18449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.108927][T18449] IPv6: NLM_F_CREATE should be set when creating new route [ 374.243642][T18455] syzkaller0: entered promiscuous mode [ 374.264108][T18455] syzkaller0: entered allmulticast mode [ 374.332408][T18462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3422'. [ 374.397073][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3423'. [ 374.531277][T18471] netlink: 'syz.6.3424': attribute type 3 has an invalid length. [ 374.568459][T18471] block nbd6: NBD_DISCONNECT [ 374.927341][T18495] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3431'. [ 375.090481][T18503] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 375.379325][T18472] lec:lec_atm_close: lec0: Shut down! [ 375.399427][T18525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3436'. [ 375.429849][T18525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'. [ 375.584770][T18531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3437'. [ 375.778380][T18547] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3442'. [ 375.939909][T18557] xt_hashlimit: size too large, truncated to 1048576 [ 375.964195][T18557] xt_hashlimit: overflow, try lower: 0/0 [ 375.983295][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3445'. [ 376.027872][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3444'. [ 376.058315][T18562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.279906][ T6012] lec:lec_start_xmit: lec0:No lecd attached [ 376.307544][T18565] lo speed is unknown, defaulting to 1000 [ 376.321316][T18575] netlink: 'syz.3.3449': attribute type 30 has an invalid length. [ 376.339235][T18575] netlink: 'syz.3.3449': attribute type 30 has an invalid length. [ 376.342745][T10490] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.368572][T10490] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.382832][T10490] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.402578][T10490] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.861270][T18599] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 376.878978][T18599] team0: Port device dummy0 added [ 376.893574][T18599] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 376.905415][T18599] team0: Port device dummy0 removed [ 376.915909][T18599] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 377.242659][T18607] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 377.258867][T18607] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 377.540578][T18618] tipc: Enabled bearer , priority 0 [ 377.652546][T18618] syzkaller0: entered promiscuous mode [ 377.659120][T18618] syzkaller0: entered allmulticast mode [ 377.674690][T18618] tipc: Resetting bearer [ 377.736266][T18616] tipc: Resetting bearer [ 378.371292][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 378.388737][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.395269][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.047582][T18616] tipc: Disabling bearer [ 379.061778][T18624] dvmrp0: entered allmulticast mode [ 379.067878][T18626] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 379.078111][ T6012] tipc: Node number set to 3919772074 [ 379.239430][T18638] veth0: entered promiscuous mode [ 379.248388][T18637] __nla_validate_parse: 2 callbacks suppressed [ 379.248402][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3463'. [ 379.312608][T18637] veth0 (unregistering): left promiscuous mode [ 380.102455][T18647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3467'. [ 380.264933][T18657] lo speed is unknown, defaulting to 1000 [ 380.358084][T18671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3474'. [ 380.401453][T18671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3474'. [ 380.413815][T18671] netlink: 292 bytes leftover after parsing attributes in process `syz.5.3474'. [ 380.457183][T18653] openvswitch: netlink: Key 19 has unexpected len 6 expected 4 [ 380.492338][T18645] lo speed is unknown, defaulting to 1000 [ 380.596570][T18669] lo speed is unknown, defaulting to 1000 [ 380.644486][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 380.681323][T18685] tipc: Enabling of bearer rejected, failed to enable media [ 380.848664][T18692] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 380.862373][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'. [ 380.934424][T18697] netlink: 'syz.1.3480': attribute type 10 has an invalid length. [ 380.961647][T18697] netlink: 'syz.1.3480': attribute type 10 has an invalid length. [ 380.989412][T18699] netlink: 'syz.5.3482': attribute type 10 has an invalid length. [ 381.043514][T18704] tipc: Enabling of bearer rejected, failed to enable media [ 381.055976][T18702] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3481'. [ 381.061674][T18699] wlan1: mtu greater than device maximum [ 381.093096][T18702] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3481'. [ 381.119653][T18699] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 381.149793][T18702] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3481'. [ 381.315367][T18708] batman_adv: batadv0: Adding interface: ipvlan2 [ 381.322678][T18708] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.349854][T18708] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 381.400650][T18708] batman_adv: batadv0: Adding interface: ipvlan3 [ 381.439664][T18708] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.469658][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 381.479919][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.512941][T18708] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 381.623175][T18708] batman_adv: batadv0: Adding interface: ipvlan4 [ 381.629877][T18708] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.675161][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 381.705567][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.716916][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 381.735994][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.747384][T18708] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 381.775359][T18708] batman_adv: batadv0: Adding interface: ipvlan5 [ 381.782167][T18708] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.942460][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 381.952849][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.963116][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 381.980757][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.998461][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 382.010181][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.020487][T18708] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active [ 382.045614][T18708] batman_adv: batadv0: Adding interface: ipvlan6 [ 382.059224][T18708] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.089859][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 382.100298][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.127009][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 382.138493][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.169110][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 382.199430][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.209639][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 382.209752][ C1] lec:lec_tx_timeout: lec0 [ 382.212600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.233202][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 382.246383][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.256491][T18708] batman_adv: batadv0: Not using interface ipvlan6 (retrying later): interface not active [ 383.720744][T18780] netlink: 'syz.5.3504': attribute type 1 has an invalid length. [ 383.923133][T18765] lec:lec_atm_close: lec0: Shut down! [ 384.323771][T18809] x_tables: duplicate underflow at hook 2 [ 384.366134][T18811] __nla_validate_parse: 36 callbacks suppressed [ 384.366152][T18811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3514'. [ 384.385336][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3513'. [ 384.577909][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3517'. [ 384.652053][T18824] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3517'. [ 384.816728][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3523'. [ 384.826002][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 384.886581][T18841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.893951][T18841] IPv6: NLM_F_CREATE should be set when creating new route [ 384.941504][T18844] bridge2: port 1(veth3) entered blocking state [ 384.958133][T18844] bridge2: port 1(veth3) entered disabled state [ 384.968262][T18844] veth3: entered allmulticast mode [ 384.987503][T18844] veth3: entered promiscuous mode [ 385.016349][T18842] bridge2: port 2(veth0_to_bond) entered blocking state [ 385.043652][T18842] bridge2: port 2(veth0_to_bond) entered disabled state [ 385.063445][T18842] veth0_to_bond: entered allmulticast mode [ 385.092083][T18842] veth0_to_bond: entered promiscuous mode [ 385.185515][T18852] bridge2: port 3(veth5) entered blocking state [ 385.193752][T18852] bridge2: port 3(veth5) entered disabled state [ 385.219858][T18852] veth5: entered allmulticast mode [ 385.236614][T18852] veth5: entered promiscuous mode [ 385.568509][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 385.587114][T18770] Bluetooth: hci5: command 0x0405 tx timeout [ 385.594363][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3533'. [ 385.805250][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'. [ 385.844197][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'. [ 385.957120][T18895] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 386.239816][T18910] syzkaller0: entered promiscuous mode [ 386.245926][T18910] syzkaller0: entered allmulticast mode [ 386.471556][T18922] 0: reclassify loop, rule prio 0, protocol 700 [ 388.619729][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 389.367582][T19016] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 389.428307][T19025] __nla_validate_parse: 10 callbacks suppressed [ 389.428324][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3564'. [ 389.586222][T19031] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3568'. [ 389.612796][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3568'. [ 389.649604][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 389.657983][ C1] lec:lec_tx_timeout: lec0 [ 389.662699][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 389.787147][T19038] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3569'. [ 390.025255][T19049] lo speed is unknown, defaulting to 1000 [ 390.579893][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3581'. [ 390.601634][T19078] netlink: 292 bytes leftover after parsing attributes in process `syz.6.3581'. [ 390.738659][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'. [ 390.975800][ T30] audit: type=1800 audit(1772416587.858:7): pid=19101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3586" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=707 res=0 errno=0 [ 390.982875][T19099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3585'. [ 391.096253][T19103] macsec1: entered promiscuous mode [ 391.226757][T19099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3585'. [ 391.299249][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3572'. [ 391.377918][T19117] nbd: must specify at least one socket [ 392.098808][ T5836] IPVS: starting estimator thread 0... [ 392.138454][T19167] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 392.167541][T19167] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 392.206287][T19168] IPVS: using max 37 ests per chain, 88800 per kthread [ 392.440618][T19186] lo speed is unknown, defaulting to 1000 [ 392.552475][T19199] FAULT_INJECTION: forcing a failure. [ 392.552475][T19199] name failslab, interval 1, probability 0, space 0, times 0 [ 392.579873][T19199] CPU: 1 UID: 0 PID: 19199 Comm: syz.5.3614 Not tainted syzkaller #0 PREEMPT(full) [ 392.579902][T19199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.579916][T19199] Call Trace: [ 392.579925][T19199] [ 392.579933][T19199] dump_stack_lvl+0xe8/0x150 [ 392.579970][T19199] should_fail_ex+0x412/0x560 [ 392.580002][T19199] should_failslab+0xa8/0x100 [ 392.580031][T19199] __kmalloc_noprof+0xe8/0x760 [ 392.580054][T19199] ? fib6_info_alloc+0x30/0xf0 [ 392.580194][T19199] fib6_info_alloc+0x30/0xf0 [ 392.580217][T19199] ip6_route_info_create+0x142/0x860 [ 392.580258][T19199] ip6_route_add+0x49/0x1b0 [ 392.580284][T19199] addrconf_add_mroute+0x2d1/0x370 [ 392.580331][T19199] ? ipv6_find_idev+0x10a/0x1c0 [ 392.580349][T19199] ? addrconf_add_mroute+0xdc/0x370 [ 392.580370][T19199] ? __pfx_addrconf_add_mroute+0x10/0x10 [ 392.580421][T19199] ? ipv6_mc_up+0x3da/0x580 [ 392.580474][T19199] addrconf_init_auto_addrs+0x4d7/0xa50 [ 392.580502][T19199] addrconf_notify+0xb1e/0x1050 [ 392.580531][T19199] notifier_call_chain+0x1be/0x400 [ 392.580580][T19199] __dev_notify_flags+0x1a9/0x310 [ 392.580610][T19199] ? __pfx___dev_notify_flags+0x10/0x10 [ 392.580634][T19199] ? __dev_change_flags+0x4c6/0x690 [ 392.580665][T19199] ? __pfx___dev_change_flags+0x10/0x10 [ 392.580694][T19199] ? __pfx___mutex_lock+0x10/0x10 [ 392.580726][T19199] netif_change_flags+0xe8/0x1a0 [ 392.580757][T19199] dev_change_flags+0x130/0x260 [ 392.580788][T19199] devinet_ioctl+0x9f2/0x1b30 [ 392.580821][T19199] ? __pfx_devinet_ioctl+0x10/0x10 [ 392.580845][T19199] ? get_user_ifreq+0x12b/0x180 [ 392.580866][T19199] inet_ioctl+0x42a/0x560 [ 392.580895][T19199] ? __pfx_inet_ioctl+0x10/0x10 [ 392.580940][T19199] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 392.580963][T19199] ? packet_ioctl+0x254/0x350 [ 392.580988][T19199] sock_do_ioctl+0x101/0x320 [ 392.581010][T19199] ? __pfx_sock_do_ioctl+0x10/0x10 [ 392.581027][T19199] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 392.581068][T19199] sock_ioctl+0x5c6/0x7f0 [ 392.581089][T19199] ? __pfx_sock_ioctl+0x10/0x10 [ 392.581108][T19199] ? __fget_files+0x2a/0x420 [ 392.581134][T19199] ? __fget_files+0x3a0/0x420 [ 392.581158][T19199] ? __fget_files+0x2a/0x420 [ 392.581187][T19199] ? bpf_lsm_file_ioctl+0x9/0x20 [ 392.581210][T19199] ? __pfx_sock_ioctl+0x10/0x10 [ 392.581229][T19199] __se_sys_ioctl+0xfc/0x170 [ 392.581251][T19199] do_syscall_64+0x14d/0xf80 [ 392.581275][T19199] ? trace_irq_disable+0x3b/0x150 [ 392.581301][T19199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.581320][T19199] ? clear_bhb_loop+0x40/0x90 [ 392.581343][T19199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.581361][T19199] RIP: 0033:0x7fab2599c799 [ 392.581379][T19199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.581394][T19199] RSP: 002b:00007fab26826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.581414][T19199] RAX: ffffffffffffffda RBX: 00007fab25c16090 RCX: 00007fab2599c799 [ 392.581427][T19199] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 392.581439][T19199] RBP: 00007fab26826090 R08: 0000000000000000 R09: 0000000000000000 [ 392.581451][T19199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.581462][T19199] R13: 00007fab25c16128 R14: 00007fab25c16090 R15: 00007ffd9f69eba8 [ 392.581490][T19199] [ 392.830348][T19191] netlink: 'syz.4.3612': attribute type 8 has an invalid length. [ 393.544244][T19220] syzkaller1: entered promiscuous mode [ 393.550147][T19220] syzkaller1: entered allmulticast mode [ 393.893980][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 394.164282][T19262] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 394.669596][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 394.677657][ C1] lec:lec_tx_timeout: lec0 [ 394.682274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.721689][T19277] __nla_validate_parse: 11 callbacks suppressed [ 394.721704][T19277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3633'. [ 399.489809][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 399.689600][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 399.697708][ C1] lec:lec_tx_timeout: lec0 [ 399.702306][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 404.709619][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 404.717775][ C1] lec:lec_tx_timeout: lec0 [ 404.722356][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 409.729644][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 409.737690][ C1] lec:lec_tx_timeout: lec0 [ 409.742408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 414.749653][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 414.757720][ C1] lec:lec_tx_timeout: lec0 [ 414.762295][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.769631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 419.777751][ C1] lec:lec_tx_timeout: lec0 [ 419.782312][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.789604][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.797627][ C1] lec:lec_tx_timeout: lec0 [ 424.802209][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 429.809677][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 429.817752][ C1] lec:lec_tx_timeout: lec0 [ 429.822405][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 431.649836][T18770] Bluetooth: hci6: command 0x0406 tx timeout [ 434.690049][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.829578][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 434.837748][ C1] lec:lec_tx_timeout: lec0 [ 434.849811][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 434.918331][T19310] vlan2: entered promiscuous mode [ 434.931665][T19310] vlan2: entered allmulticast mode [ 434.937978][T19310] hsr_slave_1: entered allmulticast mode [ 435.120000][T19324] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3646'. [ 435.553620][T19364] lo speed is unknown, defaulting to 1000 [ 435.702785][T19374] netlink: 'syz.5.3659': attribute type 2 has an invalid length. [ 435.747399][T19374] hmac(sha224: entered promiscuous mode [ 435.791135][T19376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3658'. [ 435.845560][T19376] netlink: 'syz.6.3658': attribute type 61 has an invalid length. [ 435.853572][T19376] netlink: 'syz.6.3658': attribute type 62 has an invalid length. [ 435.870224][T19378] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3660'. [ 435.894521][T19378] netlink: 'syz.5.3660': attribute type 1 has an invalid length. [ 435.927938][T19378] wg1: left promiscuous mode [ 435.938659][T19378] bond1: left promiscuous mode [ 435.955624][T19378] bridge5: left promiscuous mode [ 435.966870][T19378] syzkaller0: left promiscuous mode [ 435.978385][T19378] bond7: left promiscuous mode [ 435.984008][T19378] bond8: left promiscuous mode [ 436.096100][T19384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3662'. [ 436.214910][T19387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3663'. [ 436.282332][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3663'. [ 436.291625][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3663'. [ 436.317977][T19387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.957890][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3683'. [ 437.976357][T19462] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3683'. [ 438.088368][T19464] netlink: 'syz.4.3684': attribute type 6 has an invalid length. [ 438.149603][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3685'. [ 438.171413][T19468] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 438.245137][T19475] netlink: 'syz.4.3688': attribute type 3 has an invalid length. [ 438.443556][T19486] netlink: 'syz.1.3693': attribute type 25 has an invalid length. [ 438.451547][T19487] ipvlan2: entered allmulticast mode [ 438.451568][T19487] veth0_vlan: entered allmulticast mode [ 438.519667][T19486] netlink: 'syz.1.3693': attribute type 21 has an invalid length. [ 438.527603][T19486] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.706489][T19498] lo speed is unknown, defaulting to 1000 [ 438.780014][T19511] batadv_slave_1: entered promiscuous mode [ 439.404548][T19511] siw: device registration error -23 [ 439.417865][T19509] batadv_slave_1: left promiscuous mode [ 439.677867][T19543] tls_set_device_offload: netdev not found [ 439.753173][T19548] macsec1: entered promiscuous mode [ 439.758509][T19548] macsec1: entered allmulticast mode [ 439.814365][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.820837][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.477419][T19575] __nla_validate_parse: 6 callbacks suppressed [ 440.477506][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 440.559687][T19575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3714'. [ 440.584379][T19565] lo speed is unknown, defaulting to 1000 [ 441.089571][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6240 ms [ 441.097658][ C1] lec:lec_tx_timeout: lec0 [ 441.102686][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 441.377055][T19593] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 441.401922][T19593] bond3 (unregistering): Released all slaves [ 441.430081][T19600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.592021][T19607] xt_hashlimit: size too large, truncated to 1048576 [ 441.660511][T19609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3726'. [ 441.670784][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 441.790774][T19613] veth5: entered promiscuous mode [ 441.902876][T18770] Bluetooth: hci7: command 0x0406 tx timeout [ 442.261738][T19641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3730'. [ 442.916063][T19677] netlink: 'syz.6.3739': attribute type 6 has an invalid length. [ 442.945453][T19677] tap0: tun_chr_ioctl cmd 1074025681 [ 443.147833][T19693] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3744'. [ 443.335675][T19701] 8021q: VLANs not supported on nlmon0 [ 443.487960][T19706] netlink: 'syz.5.3747': attribute type 2 has an invalid length. [ 443.515911][T19706] netlink: 'syz.5.3747': attribute type 8 has an invalid length. [ 443.571194][T19706] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3747'. [ 443.606131][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3747'. [ 443.729200][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3751'. [ 443.913134][T19729] bond2 (unregistering): Released all slaves [ 443.985442][T19740] syz_tun: entered allmulticast mode [ 444.046374][T19749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3759'. [ 444.082392][T19745] tipc: Enabled bearer , priority 10 [ 444.166838][T19749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.465301][T19777] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 444.541968][T19780] nbd: socks must be embedded in a SOCK_ITEM attr [ 444.565922][T19780] block nbd4: shutting down sockets [ 444.634726][T19793] vlan0: entered promiscuous mode [ 444.693337][T19793] bond2: option resend_igmp: invalid value (2878) [ 444.706414][T19793] bond2: option resend_igmp: allowed values 0 - 255 [ 444.722279][T19793] bond2 (unregistering): Released all slaves [ 444.776952][T19738] syz_tun: left allmulticast mode [ 445.199717][ T8278] tipc: Node number set to 4278190080 [ 446.849548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 446.857622][ C1] lec:lec_tx_timeout: lec0 [ 446.862297][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.473093][T19780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.638413][T19838] tipc: Enabling of bearer rejected, failed to enable media [ 447.681681][T19846] tipc: Enabling of bearer rejected, failed to enable media [ 447.822140][T19858] lo speed is unknown, defaulting to 1000 [ 447.904845][T19873] syzkaller0: left allmulticast mode [ 448.110895][T19885] __nla_validate_parse: 1 callbacks suppressed [ 448.110912][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3789'. [ 448.139709][T19887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3791'. [ 448.148872][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3789'. [ 448.490603][T19897] syzkaller1: entered promiscuous mode [ 448.499602][T19897] syzkaller1: entered allmulticast mode [ 448.508643][T19899] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3794'. [ 448.559417][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3794'. [ 449.330407][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 449.573963][T19939] netlink: 'syz.4.3806': attribute type 2 has an invalid length. [ 449.584082][T19940] netlink: 'syz.4.3806': attribute type 2 has an invalid length. [ 449.728201][T19939] !: entered promiscuous mode [ 449.827970][T19950] bond_slave_0: entered allmulticast mode [ 449.961557][T19969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3813'. [ 450.085023][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3814'. [ 450.095116][T19976] netlink: 'syz.6.3814': attribute type 20 has an invalid length. [ 450.103171][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3814'. [ 450.123820][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3814'. [ 450.126743][T13250] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.140469][T19976] netlink: 'syz.6.3814': attribute type 20 has an invalid length. [ 450.166035][T13250] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.200755][T13250] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.238629][T13250] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.416157][T19993] syzkaller0: entered promiscuous mode [ 450.422231][T19993] syzkaller0: entered allmulticast mode [ 450.964405][T20020] netlink: 'syz.5.3827': attribute type 1 has an invalid length. [ 450.972910][T20016] xfrm0: entered promiscuous mode [ 450.978036][ T30] audit: type=1107 audit(1772416647.858:8): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 451.000826][T20016] xfrm0: entered allmulticast mode [ 451.104465][T20027] No such timeout policy "syz1" [ 451.882920][T20071] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 451.916954][T20072] lo speed is unknown, defaulting to 1000 [ 451.920353][T20076] syzkaller1: entered promiscuous mode [ 451.957676][T20076] syzkaller1: entered allmulticast mode [ 452.129617][T18770] Bluetooth: hci3: command 0x0406 tx timeout [ 452.196157][T20095] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 452.204740][T20092] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 452.241584][T20092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.609526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 452.617614][ C1] lec:lec_tx_timeout: lec0 [ 452.622626][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 452.840503][T20120] lo speed is unknown, defaulting to 1000 [ 453.127295][T20127] __nla_validate_parse: 7 callbacks suppressed [ 453.127314][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3850'. [ 453.193397][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3850'. [ 453.348233][T20129] lo speed is unknown, defaulting to 1000 [ 453.624448][T20145] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 453.767949][T20156] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3857'. [ 453.870447][T20158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3859'. [ 453.935086][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3859'. [ 454.013900][T20163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3860'. [ 454.392731][T20170] lo speed is unknown, defaulting to 1000 [ 454.540184][ T31] INFO: task syz.0.2558:15373 blocked for more than 143 seconds. [ 454.548211][ T31] Not tainted syzkaller #0 [ 454.562729][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.590748][ T31] task:syz.0.2558 state:D stack:27144 pid:15373 tgid:15371 ppid:5822 task_flags:0x400040 flags:0x00080002 [ 454.620855][ T31] Call Trace: [ 454.624504][ T31] [ 454.641950][ T31] __schedule+0x1585/0x5340 [ 454.650890][ T31] ? __pfx___schedule+0x10/0x10 [ 454.657539][ T31] ? schedule+0x90/0x360 [ 454.662300][ T31] schedule+0x164/0x360 [ 454.666497][ T31] schedule_preempt_disabled+0x13/0x30 [ 454.672420][ T31] __mutex_lock+0x7fe/0x1300 [ 454.677056][ T31] ? __mutex_lock+0x5ac/0x1300 [ 454.682148][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 454.688357][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 454.702165][ T31] ? __nlmsg_put+0xef/0x1b0 [ 454.709316][ T31] ? genlmsg_put+0x137/0x2e0 [ 454.714554][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 454.720688][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 454.726149][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 454.733026][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 454.738984][ T31] ? __asan_memcpy+0x40/0x70 [ 454.743912][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 454.750279][ T31] genl_rcv_msg+0x61c/0x7a0 [ 454.754941][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.760382][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 454.770156][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 454.775297][ T31] netlink_rcv_skb+0x232/0x4b0 [ 454.780718][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.785923][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.791657][ T31] ? down_read+0x272/0x2e0 [ 454.796244][ T31] ? genl_rcv+0xd/0x40 [ 454.800736][ T31] genl_rcv+0x28/0x40 [ 454.804846][ T31] netlink_unicast+0x80f/0x9b0 [ 454.810048][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 454.815442][ T31] ? netlink_sendmsg+0x650/0xb40 [ 454.821562][ T31] ? skb_put+0x11b/0x210 [ 454.825932][ T31] netlink_sendmsg+0x813/0xb40 [ 454.831192][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.836618][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.842891][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.848324][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.854142][ T31] ____sys_sendmsg+0xa68/0xad0 [ 454.859108][ T31] ? futex_unqueue+0x211/0x240 [ 454.865307][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.871020][ T31] ? import_iovec+0x73/0xa0 [ 454.875719][ T31] ___sys_sendmsg+0x2a5/0x360 [ 454.880745][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.886191][ T31] ? futex_wait+0x29a/0x380 [ 454.891165][ T31] ? __fget_files+0x2a/0x420 [ 454.897905][ T31] ? __fget_files+0x3a0/0x420 [ 454.902995][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 454.908175][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.915028][ T31] ? rcu_is_watching+0x15/0xb0 [ 454.920222][ T31] do_syscall_64+0x14d/0xf80 [ 454.924913][ T31] ? trace_irq_disable+0x3b/0x150 [ 454.930707][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.936930][ T31] ? clear_bhb_loop+0x40/0x90 [ 454.942378][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.948397][ T31] RIP: 0033:0x7f44f7d9c799 [ 454.953933][ T31] RSP: 002b:00007f44f8bd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.964785][ T31] RAX: ffffffffffffffda RBX: 00007f44f8015fa0 RCX: 00007f44f7d9c799 [ 454.973432][ T31] RDX: 0000000004000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 454.989634][ T31] RBP: 00007f44f7e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 454.998091][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.006522][ T31] R13: 00007f44f8016038 R14: 00007f44f8015fa0 R15: 00007fff8aa496d8 [ 455.015101][ T31] [ 455.018304][ T31] [ 455.018304][ T31] Showing all locks held in the system: [ 455.049931][ T31] 2 locks held by ksoftirqd/1/23: [ 455.055066][ T31] 1 lock held by khungtaskd/31: [ 455.064738][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 455.114793][ T31] 2 locks held by getty/5583: [ 455.119859][ T31] #0: ffff888036eb80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 455.150234][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 455.160796][ T31] 2 locks held by syz.2.1721/12383: [ 455.166106][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 455.177302][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 455.187954][ T31] 3 locks held by kworker/u8:48/13245: [ 455.193900][ T31] 2 locks held by syz.0.2558/15373: [ 455.199283][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 455.210029][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 455.220570][ T31] 2 locks held by syz.3.3848/20120: [ 455.243022][ T31] #0: ffffffff8fbbe170 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 455.253168][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 455.264321][ T31] 5 locks held by syz.1.3862/20170: [ 455.269761][ T31] #0: ffffffff8fbbe170 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 455.279268][ T31] #1: ffffffff8f924e90 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 455.289217][ T31] #2: ffffffff8f925050 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 455.299552][ T31] #3: ffff8880574b0fb0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 455.310590][ T31] #4: ffff8880574b12a8 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 455.320643][ T31] [ 455.322989][ T31] ============================================= [ 455.322989][ T31] [ 455.336470][ T31] NMI backtrace for cpu 1 [ 455.336486][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.336506][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.336517][ T31] Call Trace: [ 455.336524][ T31] [ 455.336532][ T31] dump_stack_lvl+0xe8/0x150 [ 455.336561][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 455.336631][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.336669][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 455.336692][ T31] sys_info+0x135/0x170 [ 455.336709][ T31] watchdog+0xfd9/0x1030 [ 455.336741][ T31] ? watchdog+0x21a/0x1030 [ 455.336775][ T31] kthread+0x388/0x470 [ 455.336793][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.336819][ T31] ? __pfx_kthread+0x10/0x10 [ 455.336837][ T31] ret_from_fork+0x51e/0xb90 [ 455.336864][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.336886][ T31] ? __switch_to+0xc7d/0x1450 [ 455.336924][ T31] ? __pfx_kthread+0x10/0x10 [ 455.336948][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.336990][ T31] [ 455.336996][ T31] Sending NMI from CPU 1 to CPUs 0: [ 455.447851][ C0] NMI backtrace for cpu 0 [ 455.447864][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 455.447882][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.447892][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 455.448006][ C0] RIP: 0010:wg_ratelimiter_gc_entries+0x62/0x450 [ 455.448028][ C0] Code: 85 ed 0f 84 e1 03 00 00 45 31 f6 48 bd 00 00 00 00 00 fc ff df 48 89 1c 24 48 c7 c7 c0 62 30 8f e8 13 37 3e 05 4c 89 74 24 18 <4a> 8d 04 f5 00 00 00 00 4c 8b 25 4f e8 ec 13 48 89 44 24 10 49 01 [ 455.448042][ C0] RSP: 0018:ffffc900000f7aa8 EFLAGS: 00000246 [ 455.448054][ C0] RAX: aec6b0771d0a9b00 RBX: ffffffff8f306400 RCX: 0000000000000001 [ 455.448065][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900000f7a20 [ 455.448075][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 455.448084][ C0] R10: dffffc0000000000 R11: fffff5200001ef44 R12: ffff88805ba7b888 [ 455.448095][ C0] R13: ffff88813fe1e218 R14: 0000000000001712 R15: ffffffffffffffa0 [ 455.448106][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 455.448118][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.448129][ C0] CR2: 00007fab25bea4b8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 455.448143][ C0] Call Trace: [ 455.448149][ C0] [ 455.448157][ C0] ? process_scheduled_works+0xa25/0x1830 [ 455.448180][ C0] process_scheduled_works+0xb02/0x1830 [ 455.448214][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.448237][ C0] ? assign_work+0x3d5/0x5e0 [ 455.448258][ C0] worker_thread+0xa50/0xfc0 [ 455.448292][ C0] kthread+0x388/0x470 [ 455.448307][ C0] ? __pfx_worker_thread+0x10/0x10 [ 455.448325][ C0] ? __pfx_kthread+0x10/0x10 [ 455.448340][ C0] ret_from_fork+0x51e/0xb90 [ 455.448361][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 455.448380][ C0] ? __switch_to+0xc7d/0x1450 [ 455.448398][ C0] ? __pfx_kthread+0x10/0x10 [ 455.448413][ C0] ret_from_fork_asm+0x1a/0x30 [ 455.448450][ C0] [ 455.684930][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 455.691828][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.700960][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.711029][ T31] Call Trace: [ 455.714327][ T31] [ 455.717284][ T31] vpanic+0x56c/0xa60 [ 455.721295][ T31] ? __pfx___schedule+0x10/0x10 [ 455.726186][ T31] ? __pfx_vpanic+0x10/0x10 [ 455.730766][ T31] ? __pfx_console_unlock+0x10/0x10 [ 455.736010][ T31] panic+0xc5/0xd0 [ 455.739764][ T31] ? __pfx_panic+0x10/0x10 [ 455.744207][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 455.749631][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 455.755820][ T31] watchdog+0x1023/0x1030 [ 455.760196][ T31] ? watchdog+0x21a/0x1030 [ 455.764662][ T31] kthread+0x388/0x470 [ 455.768756][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.773466][ T31] ? __pfx_kthread+0x10/0x10 [ 455.778084][ T31] ret_from_fork+0x51e/0xb90 [ 455.782707][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.787850][ T31] ? __switch_to+0xc7d/0x1450 [ 455.792548][ T31] ? __pfx_kthread+0x10/0x10 [ 455.797152][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.801961][ T31] [ 455.805574][ T31] Kernel Offset: disabled [ 455.809901][ T31] Rebooting in 86400 seconds..