last executing test programs: 1m12.007894326s ago: executing program 4 (id=5400): syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x5452, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'team_slave_1\x00', @remote}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000140)="bad330fbc9b55400040000ea0756a85d88a82dcb86dd", 0x16, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8}, 0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xa, 0xb, &(0x7f0000000500)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1m11.797220189s ago: executing program 4 (id=5401): socket(0x80000000000000a, 0x2, 0x0) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000540)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000540)) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000580)={0x2, 0x3}) (async) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000580)={0x2, 0x3}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r8) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080080}, 0x20008080) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1dc, r6, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fa008de2aeabdf662893a0702cb1a6def8f5a8f3b45c6038"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "499d97b81d75d5334df65b6e40afd16bd9c73fa9680f9c34"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5b5de8418a5ad8a5d34b7f009a21bccbef3b6307dbf2c1af"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e998f21dd32089125a96e674d2d81ae173afa4d3bdad346f"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "41471c58ee17ce724c2a01d450f5cbfc7e25e9d0221f9613"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3ef1650a4e16bff74e69eee32a22d4a6cd01e7b4faaaa933"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4e8d0541d18d31f4f0d3572d1e852aecfc4b991c28705716"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "71f8a5a5021f32f86533663d84805db4037410788f03ce95"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000010) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r12 = socket$igmp6(0xa, 0x3, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000fc0)=@newtaction={0x1d0, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x1bc, 0x1, [@m_ife={0x50, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0xffffffff, 0x20000000, 0x0, 0x5b9}, 0x1}}]}, {0xa, 0x6, "d96d01cf659f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_mpls={0xa0, 0x115, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb71d0}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x4, 0x10000000, 0x1, 0x881}, 0x4}}]}, {0x45, 0x6, "e1cf0b88964b569136ca47416924c5ccafd6fe6258a4b65ca33c693ca655e3ebc21c9878b0116b1378dfc57305bb0fb4570e7688472d55f4612204cfc35862e341"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x2, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1d0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) 1m11.406461875s ago: executing program 4 (id=5403): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f00000004c0)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b80)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x0, 0x7, 0x3ff, 0xffff, 0x80]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "d697e6", 0x8, 0x2c, 0x80, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[@dstopts={0x88}]}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "d697e6", 0x8, 0x2c, 0x80, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[@dstopts={0x88}]}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2, 0x4, 0x3, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xff, "39e00ab2b348139fadda04cf750fe12708b6f07d46185fe1b6ca79eb4e9fe28dbd595756e3dc93fd4a50e706392b879765cd510ae76d1bf57876d30c82bd2bafb419563a19900c82e6840d31e3d14336a126f805f88fe5c2399b7d4e0c3f339546d4a341787b8c7918ef4ec21a649434e4dd954231c82c2a9205bd0aba4be7427193d87de8690e3fc08d04394ef7eecdf5582c86e590077903afed305c059a85107daf0e2193b4c2049f32e16662565ea5a9346dc82eca6c3e25e416c3d0df0b623b5ced3a9df0942514970f368971d724048b5e921d0578b07b10b65a0a8ea5ccc483ebaaac6e78b358a2dd79dbdaff16c0d0fd27e52f95fd3a3030831c03"}, &(0x7f0000000440)=0x107) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000480)=r8, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7914d063c4d89dab204348f53d6efbe9ffff", @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf252500000008002f0016c300000a0001007770616e3100000005002b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0xf276c9c96f67553e}, 0x400) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7914d063c4d89dab204348f53d6efbe9ffff", @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf252500000008002f0016c300000a0001007770616e3100000005002b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0xf276c9c96f67553e}, 0x400) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="00042bbd7000fbffffff0b45b4dcbb69691bbd3fb0a7c3ef100000000500110004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x10, 0x7, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x34, 0xc0, 0x1, 0x0, [{@multicast2, 0x1ff}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3ff}, {@local, 0x2}, {@multicast2, 0xbd}, {@dev={0xac, 0x14, 0x14, 0x42}}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x10, 0x7, 0x3, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x34, 0xc0, 0x1, 0x0, [{@multicast2, 0x1ff}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3ff}, {@local, 0x2}, {@multicast2, 0xbd}, {@dev={0xac, 0x14, 0x14, 0x42}}]}]}}}}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r14, 0x29, 0x19, 0x0, 0xfcd8) (async) setsockopt$sock_attach_bpf(r14, 0x29, 0x19, 0x0, 0xfcd8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe00000000850000000a000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) r17 = syz_genetlink_get_family_id$batadv(0x0, r13) getuid() (async) r18 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=r16, @ANYRES32, @ANYRES8, @ANYRESHEX=r18, @ANYRES32=r17, @ANYRESOCT=r18, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed850aa50c621b2b5c4cd4a6a4a131026e78f96f02072b14230ab9c2c7faed60"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=r16, @ANYRES32, @ANYRES8, @ANYRESHEX=r18, @ANYRES32=r17, @ANYRESOCT=r18, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed850aa50c621b2b5c4cd4a6a4a131026e78f96f02072b14230ab9c2c7faed60"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) sendmsg$nl_xfrm(r6, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc0000001b00000128bd7000fcdbdf25ac1414aa000000000000000000000000640101010000000000000000000000004e2300074e210101020080a02b000000", @ANYRES32=r12, @ANYRESOCT=r18, @ANYBLOB="00000000000000000b0000000000000006000000000000000300000000000000040000000000000003000000000000000100000008000000fbffffefffffffff010000800000000009000000000000000000000000000000060000000000000002000000b86b6e00020003020000000007000000000000001c000400feff4e234e230000ff0200000000000000000000000000018e"], 0xdc}, 0x1, 0x0, 0x0, 0x24048814}, 0xc000) 1m11.177981357s ago: executing program 4 (id=5407): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) close(r3) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001900010028bd7000fcdbdf250a00140000000004000400000c00168005000900010000000800ffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000002c0), 0xffffd6c0, r8}, 0x38) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES8=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r10, 0xffffffffffffffff, 0x6, 0x0, @val=@perf_event={0x8}}, 0x18) sendmmsg$inet(r9, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="af4fcbc69fc8236193a5db71d82ff30ad092e969dff4bc0b0fa752cf3ed6e756c7f331f97aed1b89911d0cec7550f213e6a9196fcdcefd4c562141ef3cefe4b0f75f8586d98f8edc0113a54b4d2983bd7ef97f6478d2dd4921d5438d9517c2452ae54dc4d3e07310769420b1565fab3f29d44d7a667689cbbd2a119dba5b9ea31708fbaf5bb1c7d35ebf2c32f2cef0d0d63b45b8441da5d3754ceae1c80779ffae1f6085bdcd9f2554a00a86cd2d03ffba1fbdacd09527f06ab8fac7145c0f6d9cdf7a736ffd50f0a86cfdc1602a5cfdafd1", 0xd2}, {&(0x7f0000000540)="ba1519b7ae0145070a9522721a395841720fd5481bc2cbd8f13aaa9066a24214af82ba1466de0a1b52bceecaaa882b66f916a85af471ca422935c42f77b319e7d595558b74e1b014", 0x48}, {&(0x7f0000000700)="1e9bdb919930b63490b5092febd4ff5a7fdfebce145cf8edd142d88e92908746fe920060d936ca0b89f1a56fa4b26d0657c57a665369d2ce8909af5d00d8d7eb6407c762ebac337367d400cc47fd1d9a15533e4958ec0d45bd6ce376ace04c0b5cb07312b1cae72e32fdcaf7e6aa26737e748d2a83009703ef0a756140a832d841fdec50624cddcbe8a4a7baaf2a2b5a5831156a1ab7b6dfe6ef3c81fd2975cabfd8923d3156e4", 0xa7}], 0x3}}, {{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000000900)="3a822d6f0306bc598a25d9f98ce3df61857b8863db2274a7b8cc10389f81f436e16239cb3b05bb224865dadc4b1088ed0ce5c9ede116bbde6ce136dbc720c81f4ddefa4d131949410763c93a8329413526b61ec377c0f28319ae320ead44c2256a14c3c29f6fea826ce6dfcdbd", 0x6d}, {&(0x7f0000000980)="3c977216b675039a1d3cb992fe27ba25eb95bb5c4801fb54160ea8c5a2dda4a5874012f67276c6bafea3", 0x2a}, {&(0x7f0000000b00)="29f675ffa18cba1f080ba7cd8d254832b44b1ed22625d4802a6f30400852734d069e9048ce651a4d92c0abebcc5bd8923b07f246b696b4951f2e0fdb69b6d1785b29a4ace7d72f095974e3bc9f86e39b061d514f4f9e05729a89f4a7b13b1c254ffbb24eefc41900b92861d05c7e930f965711ef90d2c27936dfbc689520880ec48d3849c6a86e69f19ef7af7f56b1d7ad3a87a250c939c1bf3647bd9daf27ed663594c44cda9f", 0xa7}, {&(0x7f0000000c00)="7b46e46eb2c6ae4d7dd8c492d688b3033c53c84cbe501602594847e03766de6e7b9bb07e843b7f0c1598b481b797bf9f77622efce832da2d9aa2774ea7d10089c47ac3dce46c1e7d5652d1c42ebf011fee3fa11cfa5a4e977234607e62597e80db88350adb9e389f5127e723129f", 0x6e}, {&(0x7f00000010c0)="e3c4a0df7c3e06f46da0791a6be8b68550d4f836190a46f85c40ff", 0x1b}, {&(0x7f0000001100)="06c57e0e567fe507d1a94376dc1049c4ff5055d0265ead626f2915b8a3855c64d1339dbc73a59d1a4ba97cdc00478adbcfa78d976c13e10feccd62807799d4f75b19303818f0e1dad130036704", 0x4d}, {&(0x7f0000001180)="dc9808c01298354232e71553e37a574029902deda746653d69eccca68b16f5826405fdfd488bdc8c1b7bb0160e545586e980669b21cab409d763e96b545112869ed844d5222c3877010014f16f065f639e7d12b7507784c737e01a5b93e3d027646e14c6d513f1e8790f598482982051e3c7a2d7317f37c6975a358d68432a602465583abed10e89f54d0eb17106c34201f24acd9e3ea789d394ce02df5daeed4d20587b36b795f242a012aa", 0xac}, {&(0x7f0000001540)="699048e3aae3d092567fc0dc050daad1eccac8ce6c08b387d00ea6a70db8bf26bc4cee0165873c40a8c550ee2ffc32a59e", 0x31}], 0x9}}], 0x3, 0x2000c044) sendto$inet(r9, &(0x7f0000000c80)="e8", 0x6211, 0x12000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) 1m10.558252119s ago: executing program 4 (id=5412): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1m6.026119211s ago: executing program 4 (id=5441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0xa}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x120040, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000380)=@hci, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000400)=""/6}, {&(0x7f0000000540)=""/246}, {&(0x7f0000000440)=""/48}, {&(0x7f00000004c0)}, {&(0x7f0000000640)=""/249}, {&(0x7f0000000740)=""/101}, {&(0x7f00000007c0)=""/206}, {&(0x7f00000008c0)=""/196}, {&(0x7f00000009c0)=""/247}], 0x1, 0x0, 0x0, 0x200000}, 0x11f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f60) 1m2.546709726s ago: executing program 3 (id=5453): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4001}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m2.347809641s ago: executing program 3 (id=5454): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) splice(r1, 0xfffffffffffffffe, r2, 0x0, 0x8, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r0}) close(0x4) 1m2.189403184s ago: executing program 3 (id=5455): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x9, 0x5, 0x6, 0x542, 0xa}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6, 0xb, 0x1, 0x761}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047440, &(0x7f0000001200)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="189cd80200000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000002000000851000000100000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x9, 0x5, 0x6, 0x542, 0xa}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6, 0xb, 0x1, 0x761}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r3, 0x40047440, &(0x7f0000001200)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="189cd80200000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000002000000851000000100000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) 1m1.648208006s ago: executing program 3 (id=5458): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x3a0af83a) r2 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)={0xb0000001}) listen(r1, 0x20) shutdown(r1, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x3c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff7}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x24000885) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000800)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) 1m1.414542655s ago: executing program 3 (id=5461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) (rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340)) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) 1m1.241426025s ago: executing program 3 (id=5462): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5", 0x19}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x2}, 0xe}], 0x2, 0x2021, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x10, 0x0, 0x0, {0x806c6da39b247517, 0xfa}}, 0x14}}, 0x0) 50.829633995s ago: executing program 32 (id=5441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0xa}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x120040, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000380)=@hci, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000400)=""/6}, {&(0x7f0000000540)=""/246}, {&(0x7f0000000440)=""/48}, {&(0x7f00000004c0)}, {&(0x7f0000000640)=""/249}, {&(0x7f0000000740)=""/101}, {&(0x7f00000007c0)=""/206}, {&(0x7f00000008c0)=""/196}, {&(0x7f00000009c0)=""/247}], 0x1, 0x0, 0x0, 0x200000}, 0x11f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f60) 45.699311369s ago: executing program 33 (id=5462): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5", 0x19}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x2}, 0xe}], 0x2, 0x2021, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x10, 0x0, 0x0, {0x806c6da39b247517, 0xfa}}, 0x14}}, 0x0) 7.054256311s ago: executing program 2 (id=5715): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @random="71dddfe43465", 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0xa, 0x801, 0x84) (async) r5 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @multicast}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r8 = accept4(r5, 0x0, 0x0, 0x80000) recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) (async) recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040280) (async) unshare(0x62040280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) 6.789957501s ago: executing program 2 (id=5716): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000004000000200000000900000000000000d66d490bec3ad4482d3a9647fa621e56ba00271b812550d3a95b27079051139288d3f85497432084bb6c206a53a916b4c960679bcc119b42c50c8bdd788f", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x8f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) poll(&(0x7f00000022c0), 0x58, 0x8) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x12, 0x800) bind$x25(r5, &(0x7f0000000180), 0x12) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000940)="18", 0x1}, {&(0x7f00000008c0)="1248cfa017827dc4420a5a2dc594cdfbff", 0x11}], 0x2}}], 0x1, 0x40000) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x69, 0x8, 0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x5, 0x0, 0x1c}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xc8ba, 0x7, 0x9, 'syz1\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) shutdown(r4, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0}, 0x40c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f070000b70362ed8d6851450085000000004f0030"], &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000b060104000000000000000006000002050001000700000024000780080009400000ffff1800018014000240030000000000000000000000000000010900020073797a3100000000a7"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004804) 6.364510694s ago: executing program 6 (id=5719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0x6, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x2}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) getsockopt$inet_buf(r4, 0x0, 0xad082ad432a1d735, &(0x7f0000000240)=""/211, &(0x7f0000000180)=0xd3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRESOCT=r0, @ANYRESOCT=r5], &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 5.622202686s ago: executing program 2 (id=5730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x700, 0x1, 0x4615}]}}]}, 0x48}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 5.31387144s ago: executing program 6 (id=5734): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000300)={@val={0x6f01, 0x800}, @val={0x1, 0x1, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x80, 0x300, 0x0, 0x18}}}}}, 0x36) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1a, 0x11, 0x1, @remote, @local, {[], {0x3, 0xe22, 0x1a, 0x0, @opaque="ff3b7cdc441f9f3ed48ca296c6dcd74229ae"}}}}}}, 0x0) 5.227728759s ago: executing program 2 (id=5736): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a400000000060"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x400c5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00001700000000000c001a8008"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x11, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x119, 0xfffffffe, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0xc}, 0xc) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x282}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) 5.073327038s ago: executing program 6 (id=5738): r0 = socket(0x1d, 0x3, 0x3ff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0xe}, {0xd, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}}, 0x884) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x803, 0x77) (async) setsockopt(r3, 0xc41, 0xdf, &(0x7f0000001100)="6a6be98bdac30affd205cdab26b0b43f5d9b0369dd060347078fb9a64e3f53fc72f3b93dfd2aa5d73a56cba270b84dc7a4f30d00fb7ff4e7296a7be39997e0fdabf08ec4ae49d2d79f14d0edd147185b6a07095334d6b38c4b6d15f10c79536fb337a7a21126ec9c6bf2526b0c55a22711dcc7e3a950deb5873873cbda3ef1d8a7c77dbf082fee95542f272b2917af2a9358a1ec443f099f397556cb31ac42b75dd9d423b23f31c74bade656cdc235", 0xaf) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5421, &(0x7f0000000580)=0x6) (async) write(r6, &(0x7f00000005c0)="0a00dc99ea47", 0x6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x4000) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$bt_hci(r8, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000200)={r6}) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x4044894}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000001080)=0xffffffffffffffff, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000f5180001002cbd7000000000000a001400fe04ff0600000000"], 0x1c}}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffe0, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100000, 0x100000, 0xfffffffd, 0x1, 0x5, 0xf}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x7, 0x7, 0xf1}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@loopback, @multicast1, 0x0}, &(0x7f0000000240)=0xc) (async) r12 = socket(0x10, 0x3, 0x9) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[], 0x200}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008000000000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b703000000000000005509010000000000950000000000000009610800000100fcffffff186900000d0000000000000070f13173c51adc51f629d072f734a601000000181100009beb00b9f7a8ce17c29d36b621def96a2ed2748158276748d198f570d828aa69b47ee4b73e01e7c1c2dee2457f7cb2b2c3361c78e1a9706f66f9959cc5dbb8461378086f3112f951d79ce679cd635b365c7612a66400ce21881e40d47d4fd663e49c742541805b6bd7c1487c9e0d472f9557f49b9014b1b7393090ccfc4b56da407ec8095bb18669819ec464efbe660cfd6af16376c9891ae6ceed2b8737d85d19f6e873c6371837ca5383c799ef29651ed5d8b0f99e0f883c53fff3bf1ee37350100000000000e649d2b19d09aca039605c6b9f7207323249623c14ebceab934de83a5a91d50bb9a25c6fa65a15009af7bb6b06dd4d259f1f372a40d7a52bc01e6c90c65e405789c720517a0127e01319ad29a6b6ca2ac8d26d08cba642d02508746a98068de66bb09a5cafe68b2954b718c47b6a945793184db03b62851f0a68081f134d40b6a3a9a72427065ff3173e9c70452247902c81fd481eb5b5d4ce24af217cf686c9969b982d5edda27721350582cfa7d1f5e855a57f1dcade321e3bed26c6c13bc63095135853c38443e28b21eecc14ece329fb882ebf1eb52f51bc3b1a0de7cb9e0bbdfd5a9634c44211646aa3f8b4ab4e48e93b042881aa077c88e1f26ed33ae5558f0b4c36e7cc14723bb2a3749e55e02e8e96a21118bda435891ca0db5c2a9f988308d1eef925dd103dda0aa268d113072385a892918eea507bb75bbb02d6eb3ea8a458e18ed2fa930990eb6a17a8fc9e8de5495ac2d013421d3d1ad7185c6531238cd6b1fa82772a0dafc092922c318d4a3a2ca9a6915793", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x6, 0xb9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x10, 0x6}, 0x94) 4.953148725s ago: executing program 2 (id=5739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c) (async) read(r1, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='bgxoup\x00'}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x0, 0x7, {{0x20, 0x4, 0x2, 0x0, 0x80, 0x66, 0x0, 0x25, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x94, [@loopback]}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0x0, [{@empty}]}, @timestamp_addr={0x44, 0x34, 0x62, 0x1, 0x9, [{@rand_addr=0x64010100, 0x4}, {@loopback, 0xefb}, {@rand_addr=0x64010101, 0xfffffe01}, {@loopback, 0x9}, {@multicast2, 0x2}, {@broadcast, 0xd9}]}, @timestamp_prespec={0x44, 0x24, 0x5a, 0x3, 0x0, [{@private=0xa010100, 0x9}, {@local, 0x1}, {@multicast2, 0x9}, {@private=0xa010101, 0x6}]}, @noop]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000780)={@loopback, 0x2b, r4}) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x12}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x42}}], 0x60}, 0x0) (async) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) close(r6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) (async, rerun: 32) bind$netrom(r3, &(0x7f0000000140)={{0x3, @bcast, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f00000000c0)={0x1, 0x2}) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f00000022c0)={0x0, 0x3}, 0x8) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) r9 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r9, 0x61d1, 0x0) 4.878517451s ago: executing program 6 (id=5740): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002cdb0a52027d938dc32b3dae85856cbb617b6e51ee14ee3c7199c26583ae597aaad6be76ec25131ccd525bb3f57541198353ea31a1ab0a1d3f18024ebd24b8b03f295b8c07ac8d3571606962304a04f8daf3d54c61c024bd716521f932ae85954f6125822fd630c3355a43"], &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="a0", 0x0, 0x1, 0x2000000}, 0x50) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) (async, rerun: 64) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (rerun: 64) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r5, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) (async) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x50, &(0x7f0000000040), 0x4) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x60}}, 0x8000) (async, rerun: 64) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000680)) (async, rerun: 64) sendto(r2, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) (async, rerun: 64) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) (rerun: 64) pselect6(0x40, &(0x7f0000000000)={0x7, 0x6, 0x3, 0x200000000000, 0x1, 0xa2, 0x1}, &(0x7f0000000200)={0x1f, 0x0, 0x5, 0x2128, 0x1, 0x0, 0x7, 0x4}, 0x0, 0x0, 0x0) 4.70587639s ago: executing program 2 (id=5743): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0xa, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x120040, 0x4) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)}, 0x1f60) 4.043319559s ago: executing program 5 (id=5751): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x4000880) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x1ff, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x0, 0x3ff}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 3.867027027s ago: executing program 5 (id=5752): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="120000000000000029000000360000003400000000000000180000000000000009000000000000008700000000000000"], 0x30}}], 0x1, 0x4c0c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x96, 0x1, 0x3, 0x10, @empty, @empty, 0x80, 0x0, 0xa9, 0x7924}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01f92abd7000fdffff01000000060006004e20000014000200776731000000000000000000000000a0cb879a47f5bc644c0e693fa6f031c74a1553b6e901b9ff2f042fb54200e5f55ecbcc0f29d6227cf537b151bf74d3da7d677f7a92e3379f876169327512877841c4b7f65b3c6fa6f75bce541b8b31369737ad28f0d514facf2b4d26ca8f8cc7ef2571910f8d0415073303bba8e51e153d8536fd5512eb4216bc4779321d15f4da09dbb9b54a61b9de2bdaac895e85906737178acfef0d6b45310000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2}, {0x28, 0x0, 0x81, 0x1}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0xfc, 0x23, 0xffffffff}]}) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f00000002c0)={'bond0\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ac14142e0000000000000000000000000000000000000000020080802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0200000000000000000000000000010000000000000000000000000000000100030000000000000aff09000a0101010000000000000000000000007f000001000000000000000000000000ac141439000000000000000000000000ac14142c0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x4020800) 3.864618327s ago: executing program 6 (id=5755): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0xa0, 0x30}, {0xfffffffe, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x1, 0x800000000001}, {0x6, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='host1x_cdma_push_gather\x00', r4}, 0x18) (async) unshare(0x6a040000) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async) close(r6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) 3.634012759s ago: executing program 5 (id=5756): syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000080000000000000000000000000000000000000950000000000000017030000100000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 3.59742514s ago: executing program 6 (id=5757): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400010600000000000000002b"], 0x14}}, 0x0) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='mm_vmscan_throttled\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e900"], 0x14}], 0x1}, 0x0) 3.465278528s ago: executing program 5 (id=5760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0xa4, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc085}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc6c, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x20000004, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x31, 0x3, 0x1a, 0x84, 0xf7, 0x7fffffff, 0x3, 0xfffffffc}}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0xc6c}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000d06050000000000000000000500000005000100070000e810000300686133683a6e65742c6e6574000000000500010007000000000000000c00"/72], 0x48}, 0x1, 0x0, 0x0, 0x10c1}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@void, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) recvmmsg(r5, 0x0, 0x0, 0x20, 0x0) 3.158221775s ago: executing program 5 (id=5761): r0 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123dee2dd2b184b256482322de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040) 2.979312048s ago: executing program 1 (id=5762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0xe4, r1, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_VENDOR_DATA={0xba, 0xc5, "59b608b85f7db71e1135939f4d442747781593b84585f12deefe02f652cbf4b574f94587dc1db14b6782a69799ea876927722ac2806217d6a6f37a6cda95fa3f1f15cc2462b5568ec614cf798b2b3b78a655a9798442dc1d6ec8b7e0801c0f4b0997a783671f4a11fc939df2640e894d93dab074c5f36062b6cb49d105b2e9122d004b2f280a99997bf48dd8b4511736195eda65b4054cd8ac22e85e22940a2e72cfca8cbca2846c555faf1c7d1ab2300b162e5e7384"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0xe4}, 0x1, 0x0, 0x0, 0x841}, 0x0) 2.79850129s ago: executing program 5 (id=5763): r0 = socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 2.769621709s ago: executing program 1 (id=5764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}, [@RTA_UID={0xffffffffffffffaa, 0x19, 0xffffffffffffffff}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}}, 0x0) 2.449503593s ago: executing program 1 (id=5766): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) socket$rds(0x15, 0x5, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, r4, 0x41e90000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r7, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x6b3c0fe, '\x00', 0x0, r7, 0x1, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r7, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x2e, 0x61]}}, &(0x7f0000002300)=""/4089, 0x1c, 0xff9, 0xa, 0x32e, 0x10000, @value=r7}, 0x28) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0aac0f000dac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) 2.342370936s ago: executing program 0 (id=5767): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) close(r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 2.125505782s ago: executing program 0 (id=5768): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000003680)=[{&(0x7f0000001400)="eb", 0x1}], 0x2000000000000138, 0xe) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x2a060400) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r3}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xffffffffffffffae, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5dd36fc9, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000003}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.128513398s ago: executing program 1 (id=5769): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x21, 0x3fc}, 0x3b, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000002fc59a0c000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0028bd7000fbdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="30002b8008000400ff7f0000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) 874.263324ms ago: executing program 1 (id=5770): r0 = socket$netlink(0x10, 0x3, 0x7) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000025000000560000002500000019000a000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000025000000560000002500000019000a000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 729.239928ms ago: executing program 1 (id=5771): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, 0x0) unshare(0x6a040000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) socket(0x8, 0x0, 0x8000) (async) r3 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d1, 0x0) 506.942725ms ago: executing program 0 (id=5772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa000000000000711008000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa000000000000711008000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2b, 0x80801, 0x1) (async) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xec, 0x80000001, 0x5, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x40, 0x0, 0x9}}) 398.673954ms ago: executing program 0 (id=5773): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 101.701889ms ago: executing program 0 (id=5774): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000540)=0x9010, 0x4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c896) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="9d47970a7102452893f3e57613", @ANYRES16=r6, @ANYBLOB="05000000e2b1710000008000000f000000080001007df9eb742d87355f191a26319b62617067eab9282bcece83", @ANYRES32=r7, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x20004000) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e1c, @remote}, 0x10) getpeername(r4, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x5, 0x7f}, &(0x7f0000000440)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={r8, 0x10000}, 0x8) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\t\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fcdbdf250100000014000700ff01000000000000000000000000000108000b00", @ANYRES32=r3, @ANYBLOB="1400070000000000000000000000ffffac14141f08000600ac1414bb"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2400c008) 0s ago: executing program 0 (id=5775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) close(0x3) r2 = socket(0xa, 0x3, 0xff) sendmsg$unix(r2, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="887d44981ba172268abe609eae7a2c918b4ab1c1919a3eb27e3f3e712caf29437c54ec16da9874e0", 0x28}], 0x20, 0x0, 0x0, 0x4040055}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="840b000000000000050200010104000000000738000000010c0606000900000000000000020000000000000001000000ffffffff"], 0x68) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xfff2, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x5, 0x8, 0x40}, 0x637, 0x1, 0x10, 0x7, 0x101, 0x8, 0x3, 0x14, 0x1, 0x10, {0x8, 0xfff, 0xad6e, 0x3, 0x0, 0x8f36}}}}]}, 0x78}}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {0x0, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xffffffff}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x13}]}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): _vti0 speed is unknown, defaulting to 1000 [ 646.950827][T23608] xfrm0 speed is unknown, defaulting to 1000 [ 647.595432][T23608] wg1 speed is unknown, defaulting to 1000 [ 647.604586][T23608] ip6_vti0 speed is unknown, defaulting to 1000 [ 647.704577][T23619] ¾x9ÿ: renamed from bridge_slave_0 [ 647.909845][T23621] netlink: 'syz.1.4549': attribute type 13 has an invalid length. [ 648.148710][T23621] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 648.159402][T23621] syzkaller0: entered promiscuous mode [ 648.170606][T23621] syzkaller0: entered allmulticast mode [ 648.394046][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4550'. [ 648.639653][T23629] netlink: zone id is out of range [ 648.665494][T23629] netlink: get zone limit has 4 unknown bytes [ 649.128018][T23642] IPVS: length: 153 != 24 [ 649.669712][T23662] netlink: 'syz.1.4561': attribute type 1 has an invalid length. [ 649.683682][T23662] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4561'. [ 649.853268][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4563'. [ 650.010571][T23674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4564'. [ 650.022970][T23674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4564'. [ 650.565433][T23692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4568'. [ 650.674405][T23698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4568'. [ 650.933811][T23714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4573'. [ 650.951936][T23714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.963691][T23714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.017804][T23714] bridge0: port 4(batadv0) entered disabled state [ 651.126927][T23723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4575'. [ 651.757459][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4580'. [ 651.814961][T23733] : entered promiscuous mode [ 651.827213][T23745] ip6tnl0: Caught tx_queue_len zero misconfig [ 652.133862][T23759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.315150][T23759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.528604][T23759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.656681][T23759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.885442][T18212] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.929820][T18212] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.980539][T18212] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.012825][ T6911] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.383673][T23802] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4597'. [ 653.562791][T23821] block nbd3: Unsupported socket: should be TCP or UNIX. [ 653.728618][T23832] bridge7: entered allmulticast mode [ 653.803154][T23833] xfrm0 speed is unknown, defaulting to 1000 [ 654.020087][T23833] wg1 speed is unknown, defaulting to 1000 [ 654.044859][T23833] ip6_vti0 speed is unknown, defaulting to 1000 [ 654.105616][T23850] netlink: 'syz.4.4605': attribute type 1 has an invalid length. [ 654.114286][T23850] netlink: 'syz.4.4605': attribute type 2 has an invalid length. [ 654.265283][T23859] Bluetooth: MGMT ver 1.23 [ 654.641728][T23875] netlink: 'syz.3.4610': attribute type 12 has an invalid length. [ 654.665833][T23881] netlink: 'syz.0.4614': attribute type 11 has an invalid length. [ 654.685614][T23881] netlink: 'syz.0.4614': attribute type 11 has an invalid length. [ 654.731039][T23875] netlink: 'syz.3.4610': attribute type 4 has an invalid length. [ 654.743796][T23881] __nla_validate_parse: 2 callbacks suppressed [ 654.743814][T23881] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4614'. [ 654.748102][T23888] netlink: 'syz.2.4616': attribute type 30 has an invalid length. [ 654.843864][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4616'. [ 654.853404][T23889] netlink: 'syz.2.4616': attribute type 1 has an invalid length. [ 654.898918][T23891] netlink: 'syz.0.4617': attribute type 5 has an invalid length. [ 655.086979][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4618'. [ 655.117816][T23899] tipc: Enabling of bearer rejected, failed to enable media [ 655.392967][T23909] FAULT_INJECTION: forcing a failure. [ 655.392967][T23909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.408636][T23909] CPU: 0 UID: 0 PID: 23909 Comm: syz.1.4622 Not tainted syzkaller #0 PREEMPT(full) [ 655.408662][T23909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.408673][T23909] Call Trace: [ 655.408681][T23909] [ 655.408690][T23909] dump_stack_lvl+0x189/0x250 [ 655.408720][T23909] ? __pfx____ratelimit+0x10/0x10 [ 655.408741][T23909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.408763][T23909] ? __pfx__printk+0x10/0x10 [ 655.408796][T23909] should_fail_ex+0x414/0x560 [ 655.408826][T23909] _copy_to_user+0x31/0xb0 [ 655.408852][T23909] simple_read_from_buffer+0xe1/0x170 [ 655.408883][T23909] proc_fail_nth_read+0x1b3/0x220 [ 655.408908][T23909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 655.408934][T23909] ? rw_verify_area+0x2a6/0x4d0 [ 655.408956][T23909] ? __lock_acquire+0xab9/0xd20 [ 655.408971][T23909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 655.408994][T23909] vfs_read+0x200/0xa30 [ 655.409016][T23909] ? fdget_pos+0x247/0x320 [ 655.409038][T23909] ? __pfx___mutex_lock+0x10/0x10 [ 655.409061][T23909] ? __pfx_vfs_read+0x10/0x10 [ 655.409086][T23909] ? __fget_files+0x2a/0x420 [ 655.409108][T23909] ? __fget_files+0x3a0/0x420 [ 655.409124][T23909] ? __fget_files+0x2a/0x420 [ 655.409151][T23909] ksys_read+0x145/0x250 [ 655.409177][T23909] ? __pfx_ksys_read+0x10/0x10 [ 655.409204][T23909] ? do_syscall_64+0xbe/0xfa0 [ 655.409229][T23909] do_syscall_64+0xfa/0xfa0 [ 655.409248][T23909] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.409268][T23909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.409292][T23909] ? clear_bhb_loop+0x60/0xb0 [ 655.409314][T23909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.409331][T23909] RIP: 0033:0x7f7d5d38e15c [ 655.409348][T23909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 655.409364][T23909] RSP: 002b:00007f7d5e2b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 655.409385][T23909] RAX: ffffffffffffffda RBX: 00007f7d5d5e5fa0 RCX: 00007f7d5d38e15c [ 655.409398][T23909] RDX: 000000000000000f RSI: 00007f7d5e2b20a0 RDI: 0000000000000007 [ 655.409411][T23909] RBP: 00007f7d5e2b2090 R08: 0000000000000000 R09: 0000000000000000 [ 655.409422][T23909] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 655.409434][T23909] R13: 00007f7d5d5e6038 R14: 00007f7d5d5e5fa0 R15: 00007ffcb1960ad8 [ 655.409468][T23909] [ 655.489152][T23919] xt_l2tp: missing protocol rule (udp|l2tpip) [ 655.555276][T23914] xfrm0 speed is unknown, defaulting to 1000 [ 655.647002][T23924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4625'. [ 655.700329][T23924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4625'. [ 655.825793][T23931] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 655.834996][T23931] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 656.126403][T23949] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4630'. [ 656.129875][T23946] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 656.179691][T23949] openvswitch: netlink: Missing key (keys=40, expected=100) [ 656.300191][T23956] Bluetooth: MGMT ver 1.23 [ 656.346810][T23955] ip6gre1: entered promiscuous mode [ 656.355184][T23914] wg1 speed is unknown, defaulting to 1000 [ 656.385931][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 656.395101][T23914] ip6_vti0 speed is unknown, defaulting to 1000 [ 656.398242][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 656.427968][T23961] xfrm0 speed is unknown, defaulting to 1000 [ 656.529464][T23968] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4635'. [ 656.553533][T23968] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 656.759908][T23974] dummy0: entered promiscuous mode [ 656.766038][T23974] macsec1: entered promiscuous mode [ 656.771574][T23974] macsec1: entered allmulticast mode [ 656.781441][T23974] dummy0: entered allmulticast mode [ 656.791509][T23974] dummy0: left allmulticast mode [ 656.804348][T23974] dummy0: left promiscuous mode [ 656.845927][ T5834] Bluetooth: hci3: link tx timeout [ 656.853743][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.873600][T23961] wg1 speed is unknown, defaulting to 1000 [ 656.976911][T23961] ip6_vti0 speed is unknown, defaulting to 1000 [ 657.171345][T23994] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4641'. [ 657.453214][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4644'. [ 657.564955][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 657.602759][T24006] bond8: entered promiscuous mode [ 657.608626][T24006] 8021q: adding VLAN 0 to HW filter on device bond8 [ 657.757362][T24016] netlink: 'syz.4.4646': attribute type 1 has an invalid length. [ 657.774594][T24009] 8021q: adding VLAN 0 to HW filter on device bond8 [ 657.789916][T24009] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 657.807546][T24009] bond8: (slave wireguard0): Error -95 calling set_mac_address [ 658.001084][T24016] tunl0: Caught tx_queue_len zero misconfig [ 658.119306][T24025] xfrm0 speed is unknown, defaulting to 1000 [ 658.282868][T24034] netlink: 'syz.1.4652': attribute type 1 has an invalid length. [ 658.564259][T24034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.634530][T24042] bond0: (slave gretap2): making interface the new active one [ 658.660536][T24042] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 658.674802][T24056] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 658.758382][T24059] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 658.807918][T24025] wg1 speed is unknown, defaulting to 1000 [ 658.808931][T24057] xfrm0 speed is unknown, defaulting to 1000 [ 658.846925][T24025] ip6_vti0 speed is unknown, defaulting to 1000 [ 658.943094][ T5840] Bluetooth: hci3: command 0x0419 tx timeout [ 659.398472][T24076] geneve2: entered promiscuous mode [ 659.411190][T18210] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.428012][T18210] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.492256][T24057] wg1 speed is unknown, defaulting to 1000 [ 659.542916][T18210] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.552708][T18210] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.610703][T24057] ip6_vti0 speed is unknown, defaulting to 1000 [ 660.180359][T24095] netlink: 'syz.2.4666': attribute type 1 has an invalid length. [ 660.189080][T24095] netlink: 'syz.2.4666': attribute type 4 has an invalid length. [ 660.198578][T24095] __nla_validate_parse: 4 callbacks suppressed [ 660.198597][T24095] netlink: 14370 bytes leftover after parsing attributes in process `syz.2.4666'. [ 660.546364][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4668'. [ 660.564043][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4668'. [ 660.575280][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4668'. [ 660.609146][T24100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4668'. [ 660.804619][T24105] dummy0: mtu less than device minimum [ 660.810522][T24104] SET target dimension over the limit! [ 661.239756][T24113] syzkaller1: entered promiscuous mode [ 661.255065][T24113] syzkaller1: entered allmulticast mode [ 661.406349][T24120] macsec0: entered promiscuous mode [ 661.419912][T24120] macsec0: left promiscuous mode [ 662.398934][T24138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4678'. [ 662.567974][T24139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.610897][T24128] netlink: 'syz.2.4675': attribute type 3 has an invalid length. [ 662.626745][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4675'. [ 662.647705][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4680'. [ 662.670709][T24146] netlink: 'syz.3.4680': attribute type 1 has an invalid length. [ 662.679543][T24146] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4680'. [ 662.843414][T24158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4683'. [ 663.160495][T24178] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 663.177837][T24172] xfrm0 speed is unknown, defaulting to 1000 [ 663.829265][T24192] vetè0_virt_wif: renamed from lo [ 663.843815][T24172] wg1 speed is unknown, defaulting to 1000 [ 663.843881][ T6900] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.870712][ T6900] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.886017][ T6900] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.895912][ T6900] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.924379][T24172] ip6_vti0 speed is unknown, defaulting to 1000 [ 663.999320][T24209] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 664.174727][T24219] tipc: Enabling of bearer rejected, failed to enable media [ 664.535774][T24224] netlink: 'syz.0.4699': attribute type 2 has an invalid length. [ 664.956199][T24263] xfrm0 speed is unknown, defaulting to 1000 [ 665.234215][T24266] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 665.788662][T24263] wg1 speed is unknown, defaulting to 1000 [ 665.799262][T24263] ip6_vti0 speed is unknown, defaulting to 1000 [ 665.845348][T24261] xfrm0 speed is unknown, defaulting to 1000 acpid: input device has been disconnected, fd 3 [ 666.206601][T24283] __nla_validate_parse: 6 callbacks suppressed [ 666.206620][T24283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4711'. [ 666.354174][T24287] netlink: 'syz.1.4713': attribute type 1 has an invalid length. [ 666.397408][T24261] wg1 speed is unknown, defaulting to 1000 [ 666.443194][T24261] ip6_vti0 speed is unknown, defaulting to 1000 [ 666.694969][T24304] IPVS: length: 153 != 24 [ 666.923412][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4716'. [ 667.021069][T24310] netlink: 'syz.4.4717': attribute type 2 has an invalid length. [ 667.030680][T24310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4717'. [ 667.485867][T24316] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 668.017201][T24336] xfrm0 speed is unknown, defaulting to 1000 [ 668.324976][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4728'. [ 668.459849][T24358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4730'. [ 668.509758][T24360] netlink: 'syz.0.4731': attribute type 3 has an invalid length. [ 668.519225][T24360] netlink: 'syz.0.4731': attribute type 1 has an invalid length. [ 668.535452][T24360] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4731'. [ 668.686162][T24358] xfrm0 speed is unknown, defaulting to 1000 [ 668.694326][T24336] wg1 speed is unknown, defaulting to 1000 [ 668.712962][T24336] ip6_vti0 speed is unknown, defaulting to 1000 [ 668.782494][T24360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4731'. [ 668.791392][T24360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4731'. [ 668.920440][T24368] xt_CONNSECMARK: invalid mode: 66 [ 668.959397][T24370] netlink: 'syz.2.4732': attribute type 11 has an invalid length. [ 668.992502][T24370] netlink: 'syz.2.4732': attribute type 4 has an invalid length. [ 669.000269][T24370] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.4732'. [ 669.053366][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4732'. [ 669.341397][T24384] ip6gre3: entered promiscuous mode [ 669.347603][T24384] ip6gre3: entered allmulticast mode [ 669.355822][T24373] xfrm0 speed is unknown, defaulting to 1000 [ 669.356004][T24358] wg1 speed is unknown, defaulting to 1000 [ 669.409454][T24358] ip6_vti0 speed is unknown, defaulting to 1000 [ 669.783348][T24392] netlink: 'syz.2.4741': attribute type 1 has an invalid length. [ 669.872407][T24373] wg1 speed is unknown, defaulting to 1000 [ 669.939217][T24395] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 669.965257][T24395] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 669.984457][ T5840] Bluetooth: hci3: command 0x0419 tx timeout [ 670.040242][T24373] ip6_vti0 speed is unknown, defaulting to 1000 [ 670.859134][T24409] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 670.957406][T24409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.386594][T24416] __nla_validate_parse: 1 callbacks suppressed [ 671.386612][T24416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4746'. [ 671.651053][T24429] bond10 (unregistering): Released all slaves [ 671.692891][T24435] ªªªªªª: renamed from wg2 [ 671.832849][T24441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4752'. [ 671.900045][T24444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4752'. [ 671.918153][T24444] nbd: device at index 64 is going down [ 672.003290][T24449] sctp: [Deprecated]: syz.1.4754 (pid 24449) Use of int in maxseg socket option. [ 672.003290][T24449] Use struct sctp_assoc_value instead [ 672.120054][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4756'. [ 672.474859][T24474] xfrm0 speed is unknown, defaulting to 1000 [ 672.793136][T24491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4768'. [ 672.938638][T24495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4770'. [ 673.004272][T24502] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4771'. [ 673.028554][T24499] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4771'. [ 673.131647][T24506] tipc: Enabling of bearer rejected, failed to enable media [ 673.305666][T24474] wg1 speed is unknown, defaulting to 1000 [ 673.337578][T24474] ip6_vti0 speed is unknown, defaulting to 1000 [ 673.440853][T24528] vxcan1: Caught tx_queue_len zero misconfig [ 673.570686][T24532] netlink: 'syz.0.4778': attribute type 13 has an invalid length. [ 673.579686][T24532] netlink: 'syz.0.4778': attribute type 17 has an invalid length. [ 673.613259][T24532] gre0: left promiscuous mode [ 673.617987][T24532] gre0: left allmulticast mode [ 673.683036][T24536] netlink: 'syz.1.4779': attribute type 15 has an invalid length. [ 673.711576][T24532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.727798][T24532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.810737][T24536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4779'. [ 673.849798][T24536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4779'. [ 673.874805][T24542] netlink: 'syz.3.4781': attribute type 11 has an invalid length. [ 673.886641][T24542] netlink: 'syz.3.4781': attribute type 11 has an invalid length. [ 673.945041][T24545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.474211][T24563] syzkaller0: create flow: hash 1795678120 index 1 [ 674.511440][ T6911] syzkaller0: tun_net_xmit 76 [ 674.520174][ T6911] syzkaller0: tun_net_xmit 48 [ 674.532569][T16175] syzkaller0: tun_net_xmit 76 [ 674.614359][ T6338] syzkaller0: tun_net_xmit 76 [ 674.730151][T24560] syzkaller0: delete flow: hash 1795678120 index 1 [ 677.618965][T24577] xfrm0 speed is unknown, defaulting to 1000 [ 677.831697][T24596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.065910][T24577] wg1 speed is unknown, defaulting to 1000 [ 678.085434][T24577] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.125282][T24609] __nla_validate_parse: 2 callbacks suppressed [ 678.125536][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.153472][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.162645][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.173604][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.184213][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.197312][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.226613][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.261715][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.299418][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.313452][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 678.406122][T24617] wg1: entered promiscuous mode [ 678.411245][T24617] wg1: entered allmulticast mode [ 678.892769][ T6911] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.901003][ T6911] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.909786][ T6911] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.918424][ T6911] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.006082][T24656] netlink: 'syz.0.4810': attribute type 12 has an invalid length. [ 679.384919][T24665] bond2: option ad_select: invalid value (34) [ 679.396538][T24665] bond2 (unregistering): Released all slaves [ 680.152732][T24703] vlan0: entered promiscuous mode [ 680.158036][T24703] vlan0: entered allmulticast mode [ 680.194081][T24710] tipc: Invalid UDP bearer configuration [ 680.194135][T24710] tipc: Enabling of bearer rejected, failed to enable media [ 680.434506][T24705] xfrm0 speed is unknown, defaulting to 1000 [ 680.647591][T24705] wg1 speed is unknown, defaulting to 1000 [ 680.657613][T24705] ip6_vti0 speed is unknown, defaulting to 1000 [ 680.839103][T24722] xfrm0 speed is unknown, defaulting to 1000 [ 681.462893][T24722] wg1 speed is unknown, defaulting to 1000 [ 681.486805][T24722] ip6_vti0 speed is unknown, defaulting to 1000 [ 682.148186][T24761] pimreg: entered allmulticast mode [ 682.746866][T18212] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.757496][T18212] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.777686][T18212] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.787476][T18212] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.899385][T24783] tipc: Failed to remove unknown binding: 66,1,1/843297103:1693373939/1693373941 [ 682.911128][T24783] tipc: Failed to remove unknown binding: 66,1,1/843297103:1693373939/1693373941 [ 682.920913][T24783] tipc: Failed to remove unknown binding: 66,1,1/843297103:1693373939/1693373941 [ 683.064121][T24794] bond6: entered promiscuous mode [ 683.109506][T24794] bond6: entered allmulticast mode [ 683.119270][T24794] 8021q: adding VLAN 0 to HW filter on device bond6 [ 683.247710][T24794] bond6 (unregistering): Released all slaves [ 683.475819][T24819] __nla_validate_parse: 17 callbacks suppressed [ 683.475838][T24819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4850'. [ 683.589296][T24819] nbd: socks must be embedded in a SOCK_ITEM attr [ 685.717222][T24812] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4850'. [ 685.839359][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.889032][T24847] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4853'. [ 685.942738][T24850] tipc: New replicast peer: 255.255.255.255 [ 685.949506][T24850] tipc: Enabled bearer , priority 10 [ 686.090971][T24859] netlink: 'syz.4.4857': attribute type 1 has an invalid length. [ 686.196578][T24859] bond8: entered promiscuous mode [ 686.210102][T24859] 8021q: adding VLAN 0 to HW filter on device bond8 [ 686.233751][T24863] ip6tnl0: Caught tx_queue_len zero misconfig [ 686.576875][T24892] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65532 [ 686.609309][T24892] xfrm0 speed is unknown, defaulting to 1000 [ 686.913413][T24893] xfrm0 speed is unknown, defaulting to 1000 [ 686.915215][T24892] wg1 speed is unknown, defaulting to 1000 [ 686.976065][T24892] ip6_vti0 speed is unknown, defaulting to 1000 [ 687.060462][T24896] bond6: (slave veth5): Enslaving as an active interface with a down link [ 687.140236][T24896] bond6: (slave ip6gretap1): making interface the new active one [ 687.158654][T24896] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 687.355198][T24904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4869'. [ 687.413454][T24902] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4870'. [ 687.605898][T24918] team0: No ports can be present during mode change [ 687.663875][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4873'. [ 687.717455][T24893] wg1 speed is unknown, defaulting to 1000 [ 687.737514][T24921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4875'. [ 687.749713][T24921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4875'. [ 687.765642][T24893] ip6_vti0 speed is unknown, defaulting to 1000 [ 688.462985][ T5834] Bluetooth: hci3: command 0x0419 tx timeout [ 688.912753][T24938] netlink: 'syz.3.4880': attribute type 4 has an invalid length. [ 689.199850][ T30] audit: type=1800 audit(1764663858.420:13): pid=24948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4884" name="memory.events" dev="tmpfs" ino=2256 res=0 errno=0 [ 689.620805][T24956] tipc: Enabled bearer , priority 0 [ 689.628907][T24959] syzkaller0: entered promiscuous mode [ 689.638714][T24959] syzkaller0: entered allmulticast mode [ 689.897894][T24959] tipc: Resetting bearer [ 689.946336][T24959] tipc: Disabling bearer [ 690.949989][T24989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4892'. [ 691.129110][T24992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4892'. [ 692.272691][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4893'. [ 692.653277][T25025] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4901'. [ 692.665117][T25025] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4901'. [ 692.683370][T25027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4902'. [ 692.699386][T25025] netlink: 75 bytes leftover after parsing attributes in process `syz.2.4901'. [ 692.743814][T25030] sctp: [Deprecated]: syz.4.4904 (pid 25030) Use of int in maxseg socket option. [ 692.743814][T25030] Use struct sctp_assoc_value instead [ 692.848209][T25032] xfrm0 speed is unknown, defaulting to 1000 [ 692.961319][T25036] bridge3: entered promiscuous mode [ 692.985986][T25036] bridge3: entered allmulticast mode [ 693.010597][T25036] netlink: 'syz.1.4903': attribute type 4 has an invalid length. [ 693.258748][T25054] xt_policy: output policy not valid in PREROUTING and INPUT [ 693.278685][T25032] wg1 speed is unknown, defaulting to 1000 [ 693.288705][T25054] netlink: 'syz.0.4907': attribute type 21 has an invalid length. [ 693.298873][T25032] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.313286][T25054] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4907'. [ 693.323605][T25054] netlink: 'syz.0.4907': attribute type 5 has an invalid length. [ 693.337575][T25054] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4907'. [ 693.395195][T25059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4909'. [ 694.029655][T25076] xfrm0 speed is unknown, defaulting to 1000 [ 694.464276][T25076] wg1 speed is unknown, defaulting to 1000 [ 694.474614][T25076] ip6_vti0 speed is unknown, defaulting to 1000 [ 694.711016][T25108] netlink: 'syz.0.4922': attribute type 5 has an invalid length. [ 695.029743][T25112] x_tables: ip_tables: osf match: only valid for protocol 6 [ 695.150174][T25117] xfrm0 speed is unknown, defaulting to 1000 [ 695.236595][T18210] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe6 [ 695.440801][T25126] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 695.807350][T25129] xfrm0 speed is unknown, defaulting to 1000 [ 696.056304][T25139] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 696.077696][T25129] wg1 speed is unknown, defaulting to 1000 [ 696.112850][T25117] wg1 speed is unknown, defaulting to 1000 [ 696.120636][T25129] ip6_vti0 speed is unknown, defaulting to 1000 [ 696.165443][T25141] __nla_validate_parse: 2 callbacks suppressed [ 696.165460][T25141] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4931'. [ 696.759086][T25159] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4937'. [ 696.770004][T25157] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4936'. [ 696.887680][T25117] ip6_vti0 speed is unknown, defaulting to 1000 [ 697.046137][T25161] xfrm0 speed is unknown, defaulting to 1000 [ 697.068735][T25168] netlink: 'syz.1.4938': attribute type 8 has an invalid length. [ 697.553291][T25185] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4944'. [ 697.635950][T25161] wg1 speed is unknown, defaulting to 1000 [ 697.696063][T25168] xfrm0 speed is unknown, defaulting to 1000 [ 697.742788][T25161] ip6_vti0 speed is unknown, defaulting to 1000 [ 697.895145][T25196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4948'. [ 698.071258][T25205] sit0: entered promiscuous mode [ 698.093134][T25205] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4949'. [ 698.145330][T25205] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4949'. [ 698.221262][T25208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4950'. [ 698.252639][T25208] tipc: Invalid UDP bearer configuration [ 698.252701][T25208] tipc: Enabling of bearer rejected, failed to enable media [ 698.355584][T25216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.507382][T25224] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4953'. [ 698.759926][T25168] wg1 speed is unknown, defaulting to 1000 [ 698.826478][T25168] ip6_vti0 speed is unknown, defaulting to 1000 [ 698.988669][T25238] xfrm0 speed is unknown, defaulting to 1000 [ 699.004666][T25242] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 699.319900][T25260] netlink: 'syz.2.4964': attribute type 1 has an invalid length. [ 699.495104][T25261] veth5: entered promiscuous mode [ 699.544235][T25268] Cannot find map_set index 135 as target [ 699.554967][T25260] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 699.807028][T25238] wg1 speed is unknown, defaulting to 1000 [ 699.837083][T25238] ip6_vti0 speed is unknown, defaulting to 1000 [ 699.889575][T25277] tap1: tun_chr_ioctl cmd 1074025677 [ 699.896118][T25277] tap1: linktype set to 773 [ 699.906637][T25277] netlink: 'syz.3.4967': attribute type 10 has an invalid length. [ 700.325322][T25289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4970'. [ 700.809680][T25295] xfrm0 speed is unknown, defaulting to 1000 [ 701.705875][T25324] __nla_validate_parse: 2 callbacks suppressed [ 701.705893][T25324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4979'. [ 701.787378][T25297] xfrm0 speed is unknown, defaulting to 1000 [ 701.947857][T25327] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 701.977947][T25297] wg1 speed is unknown, defaulting to 1000 [ 701.986147][T25327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4980'. [ 702.010320][T25295] wg1 speed is unknown, defaulting to 1000 [ 702.018169][T25297] ip6_vti0 speed is unknown, defaulting to 1000 [ 702.467692][T25295] ip6_vti0 speed is unknown, defaulting to 1000 [ 703.900514][T25369] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 704.070348][T25374] netlink: 'syz.1.4989': attribute type 1 has an invalid length. [ 704.148145][T25376] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4989'. [ 704.200829][T25377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4989'. [ 704.416929][T25385] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4992'. [ 704.772960][T25392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4994'. [ 704.800441][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4994'. [ 704.958250][T25400] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 704.998346][T25407] FAULT_INJECTION: forcing a failure. [ 704.998346][T25407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.023581][T25407] CPU: 0 UID: 0 PID: 25407 Comm: syz.1.4999 Not tainted syzkaller #0 PREEMPT(full) [ 705.023631][T25407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.023655][T25407] Call Trace: [ 705.023662][T25407] [ 705.023672][T25407] dump_stack_lvl+0x189/0x250 [ 705.023705][T25407] ? __pfx____ratelimit+0x10/0x10 [ 705.023727][T25407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.023750][T25407] ? __pfx__printk+0x10/0x10 [ 705.023769][T25407] ? __might_fault+0xb0/0x130 [ 705.023805][T25407] should_fail_ex+0x414/0x560 [ 705.023835][T25407] _copy_from_iter+0x404/0x1790 [ 705.023854][T25407] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 705.023894][T25407] ? __pfx__copy_from_iter+0x10/0x10 [ 705.023911][T25407] ? __alloc_skb+0x2f1/0x430 [ 705.023933][T25407] ? __pfx___alloc_skb+0x10/0x10 [ 705.023955][T25407] ? netlink_sendmsg+0x642/0xb30 [ 705.023975][T25407] ? skb_put+0x11b/0x210 [ 705.023999][T25407] netlink_sendmsg+0x6b2/0xb30 [ 705.024031][T25407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.024056][T25407] ? aa_sock_msg_perm+0xf1/0x1d0 [ 705.024083][T25407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 705.024101][T25407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.024124][T25407] __sock_sendmsg+0x21c/0x270 [ 705.024153][T25407] ____sys_sendmsg+0x505/0x830 [ 705.024181][T25407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.024212][T25407] ? import_iovec+0x74/0xa0 [ 705.024238][T25407] ___sys_sendmsg+0x21f/0x2a0 [ 705.024262][T25407] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.024323][T25407] ? __fget_files+0x2a/0x420 [ 705.024340][T25407] ? __fget_files+0x3a0/0x420 [ 705.024369][T25407] __x64_sys_sendmsg+0x19b/0x260 [ 705.024394][T25407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.024426][T25407] ? __pfx_ksys_write+0x10/0x10 [ 705.024453][T25407] ? do_syscall_64+0xbe/0xfa0 [ 705.024478][T25407] do_syscall_64+0xfa/0xfa0 [ 705.024506][T25407] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.024526][T25407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.024544][T25407] ? clear_bhb_loop+0x60/0xb0 [ 705.024566][T25407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.024584][T25407] RIP: 0033:0x7f7d5d38f749 [ 705.024602][T25407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.024618][T25407] RSP: 002b:00007f7d5e2b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.024639][T25407] RAX: ffffffffffffffda RBX: 00007f7d5d5e5fa0 RCX: 00007f7d5d38f749 [ 705.024653][T25407] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 705.024665][T25407] RBP: 00007f7d5e2b2090 R08: 0000000000000000 R09: 0000000000000000 [ 705.024676][T25407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.024687][T25407] R13: 00007f7d5d5e6038 R14: 00007f7d5d5e5fa0 R15: 00007ffcb1960ad8 [ 705.024720][T25407] [ 705.615327][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5003'. [ 705.624999][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5003'. [ 705.643615][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5003'. [ 705.938301][T25426] xfrm0 speed is unknown, defaulting to 1000 [ 706.223961][T25426] wg1 speed is unknown, defaulting to 1000 [ 706.233142][T25426] ip6_vti0 speed is unknown, defaulting to 1000 [ 706.521053][T25449] bond7: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 706.536407][T25449] bond7 (unregistering): Released all slaves [ 707.487347][T25477] veth0: entered allmulticast mode [ 707.496384][T25480] netlink: 'syz.1.5016': attribute type 1 has an invalid length. [ 707.510567][T25480] IPVS: set_ctl: invalid protocol: 43 172.20.20.17:20001 [ 707.579584][T25478] xfrm0 speed is unknown, defaulting to 1000 [ 707.729711][T25487] __nla_validate_parse: 4 callbacks suppressed [ 707.729731][T25487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5017'. [ 707.753727][T25487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5017'. [ 707.777200][T25491] xt_HMARK: spi-set and port-set can't be combined [ 708.071318][T25499] netlink: 'syz.3.5020': attribute type 2 has an invalid length. [ 708.088701][T25478] wg1 speed is unknown, defaulting to 1000 [ 708.090337][T25499] netlink: 'syz.3.5020': attribute type 1 has an invalid length. [ 708.121360][T25478] ip6_vti0 speed is unknown, defaulting to 1000 [ 708.134048][T25504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.142888][T25499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5020'. [ 708.203940][T25508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5023'. [ 708.254258][T25513] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5024'. [ 708.265893][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5024'. [ 708.638020][T25524] netlink: 'syz.4.5027': attribute type 21 has an invalid length. [ 708.964613][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5031'. [ 708.993596][T25534] openvswitch: netlink: Flow actions attr not present in new flow. [ 709.336682][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5033'. [ 709.610541][T25540] xfrm0 speed is unknown, defaulting to 1000 [ 709.818311][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5038'. [ 709.840066][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5038'. [ 709.869174][T25563] tipc: Enabled bearer , priority 10 [ 709.960064][T25567] macsec1: entered promiscuous mode [ 709.987640][T25567] macsec1: entered allmulticast mode [ 710.328409][T25540] wg1 speed is unknown, defaulting to 1000 [ 710.351578][T25540] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.463316][T25596] netlink: 'syz.0.5048': attribute type 1 has an invalid length. [ 710.518570][T25596] 8021q: adding VLAN 0 to HW filter on device bond9 [ 711.713135][T25616] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 711.725443][T25616] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 712.154265][T25634] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 712.276665][T25637] xfrm0 speed is unknown, defaulting to 1000 [ 712.832860][T25647] xfrm0 speed is unknown, defaulting to 1000 [ 712.834059][T25637] wg1 speed is unknown, defaulting to 1000 [ 712.867037][T25637] ip6_vti0 speed is unknown, defaulting to 1000 [ 713.395402][T25647] wg1 speed is unknown, defaulting to 1000 [ 713.457502][T25647] ip6_vti0 speed is unknown, defaulting to 1000 [ 713.567497][T25681] __nla_validate_parse: 7 callbacks suppressed [ 713.567516][T25681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5071'. [ 713.584971][T25681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5071'. [ 713.709266][T18210] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 713.720606][T18210] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 713.732951][T16503] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 713.912725][T16503] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 714.038564][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5075'. [ 714.117846][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5076'. [ 714.128120][T25695] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode [ 714.136810][T25695] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 714.269041][T25701] tipc: Enabled bearer , priority 0 [ 714.279337][T16503] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 714.296664][T25695] bond0: Caught tx_queue_len zero misconfig [ 714.454913][T25707] netlink: 'syz.2.5080': attribute type 10 has an invalid length. [ 714.535515][T25704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5078'. [ 714.679898][T25704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5078'. [ 714.705328][T25711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5080'. [ 715.119490][T25731] tipc: Enabling of bearer rejected, failed to enable media [ 715.136278][T25731] tipc: Enabled bearer , priority 0 [ 715.311439][T25731] syzkaller0: entered promiscuous mode [ 715.317554][T25731] syzkaller0: entered allmulticast mode [ 715.324802][T25731] tipc: Resetting bearer [ 715.380059][T25731] tipc: Resetting bearer [ 715.530086][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5087'. [ 717.275801][T25731] tipc: Disabling bearer [ 717.284762][T16503] tipc: Node number set to 392419261 [ 717.291324][T25737] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 717.337337][T25749] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 717.367651][T25749] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 717.395569][T25749] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 717.493483][T25758] syzkaller1: entered promiscuous mode [ 717.499014][T25758] syzkaller1: entered allmulticast mode [ 717.510710][T25758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5091'. [ 717.581993][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 717.649147][T25761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5093'. [ 717.684162][T25770] netlink: 'syz.4.5095': attribute type 1 has an invalid length. [ 717.703482][T25769] tipc: Enabling of bearer rejected, failed to enable media [ 718.046853][T25789] tipc: Enabled bearer , priority 0 [ 718.135320][T25795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.147341][T25797] netlink: 'syz.1.5099': attribute type 14 has an invalid length. [ 718.156614][T25797] netlink: 'syz.1.5099': attribute type 13 has an invalid length. [ 718.398346][T25806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 718.435391][T25803] xfrm0 speed is unknown, defaulting to 1000 [ 718.674671][T25811] __nla_validate_parse: 4 callbacks suppressed [ 718.674687][T25811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5105'. [ 718.837771][T25803] wg1 speed is unknown, defaulting to 1000 [ 718.839496][T25819] xfrm0 speed is unknown, defaulting to 1000 [ 718.847396][T25803] ip6_vti0 speed is unknown, defaulting to 1000 [ 718.916247][T25823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5107'. [ 719.306864][T25837] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5109'. [ 719.398883][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5114'. [ 719.512692][T25845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5113'. [ 719.517740][T25813] xfrm0 speed is unknown, defaulting to 1000 [ 719.533403][T25845] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5113'. [ 719.568673][T25845] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5113'. [ 719.607132][T25819] wg1 speed is unknown, defaulting to 1000 [ 719.762456][T25819] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.615315][T25863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5119'. [ 720.632452][T25863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5119'. [ 720.675814][T25863] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 720.699950][T25866] netlink: 'syz.1.5120': attribute type 20 has an invalid length. [ 720.702730][T25851] xfrm0 speed is unknown, defaulting to 1000 [ 720.715536][T25866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5120'. [ 720.745811][T25863] Unknown options in mask b7f2 [ 721.044672][ T30] audit: type=1800 audit(1764663890.270:14): pid=25875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5122" name="memory.events" dev="tmpfs" ino=2183 res=0 errno=0 [ 721.072693][T25878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 721.087987][T25878] sctp: [Deprecated]: syz.0.5124 (pid 25878) Use of int in max_burst socket option. [ 721.087987][T25878] Use struct sctp_assoc_value instead [ 721.130584][T25813] wg1 speed is unknown, defaulting to 1000 [ 721.139287][T25813] ip6_vti0 speed is unknown, defaulting to 1000 [ 721.259116][T25887] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 721.727273][T25893] xfrm0 speed is unknown, defaulting to 1000 [ 721.741997][T25851] wg1 speed is unknown, defaulting to 1000 [ 721.764588][T25851] ip6_vti0 speed is unknown, defaulting to 1000 [ 721.923579][T25905] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 722.258276][T25909] netlink: 'syz.0.5131': attribute type 1 has an invalid length. [ 722.337719][T25910] vxcan2: entered allmulticast mode [ 722.597547][T25893] wg1 speed is unknown, defaulting to 1000 [ 722.640486][T25893] ip6_vti0 speed is unknown, defaulting to 1000 [ 722.954314][T25916] syzkaller1: entered promiscuous mode [ 722.959831][T25916] syzkaller1: entered allmulticast mode [ 723.075850][T25923] netlink: 'syz.4.5134': attribute type 11 has an invalid length. [ 723.268903][T25932] netlink: 'syz.3.5137': attribute type 21 has an invalid length. [ 723.867220][T25944] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.898654][T25944] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.958087][T25950] __nla_validate_parse: 7 callbacks suppressed [ 723.958105][T25950] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5139'. [ 724.080159][T25960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5144'. [ 724.175089][T25944] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.195709][T25944] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.244263][T25960] syzkaller1: entered promiscuous mode [ 724.254219][T25960] syzkaller1: entered allmulticast mode [ 724.396565][T25944] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.413264][T25944] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.465381][T25964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5146'. [ 724.476120][T25966] syz_tun: entered allmulticast mode [ 724.504532][T25962] dvmrp8: entered allmulticast mode [ 724.520575][T25961] syz_tun: left allmulticast mode [ 724.538669][T25944] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.569593][T25944] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.828554][ T6917] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.844495][ T6917] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.875165][T25981] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5148'. [ 724.887323][ T6900] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.910036][ T6900] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.965472][T18208] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.990605][T18208] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.029555][T18208] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.043919][T18208] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.159323][T25994] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5151'. [ 725.285718][T26006] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5153'. [ 725.368767][T26009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5155'. [ 725.389469][T26007] xfrm0 speed is unknown, defaulting to 1000 [ 725.501960][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 725.843621][T26025] tipc: Started in network mode [ 725.851205][T26025] tipc: Node identity 76e6edc283df, cluster identity 4711 [ 725.874932][T26025] tipc: Enabled bearer , priority 0 [ 725.916335][T26028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5157'. [ 725.926457][T26007] wg1 speed is unknown, defaulting to 1000 [ 725.929103][T26007] ip6_vti0 speed is unknown, defaulting to 1000 [ 725.935295][T26021] xfrm0 speed is unknown, defaulting to 1000 [ 725.958141][T26025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5160'. [ 725.989611][T26025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5160'. [ 726.588601][T26022] tipc: Resetting bearer [ 726.609945][T26022] tipc: Disabling bearer [ 726.629196][T26024] xfrm0 speed is unknown, defaulting to 1000 [ 726.644672][T26021] wg1 speed is unknown, defaulting to 1000 [ 726.672529][T26021] ip6_vti0 speed is unknown, defaulting to 1000 acpid: input device has been disconnected, fd 3 [ 727.336100][T26077] tipc: Invalid UDP bearer configuration [ 727.336155][T26077] tipc: Enabling of bearer rejected, failed to enable media [ 727.493953][T26055] xfrm0 speed is unknown, defaulting to 1000 [ 727.656426][T26082] 8021q: adding VLAN 0 to HW filter on device bond10 [ 727.733417][T26068] xfrm0 speed is unknown, defaulting to 1000 [ 727.740382][T26024] wg1 speed is unknown, defaulting to 1000 [ 727.755517][T26055] wg1 speed is unknown, defaulting to 1000 [ 727.770542][T26024] ip6_vti0 speed is unknown, defaulting to 1000 [ 727.891114][T26090] team_slave_1: Caught tx_queue_len zero misconfig [ 728.315345][T26100] 8021q: adding VLAN 0 to HW filter on device bond11 [ 728.386444][T26105] veth0: entered promiscuous mode [ 728.394824][T26105] batadv_slave_0: entered promiscuous mode [ 728.424436][T26055] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.425975][T26068] wg1 speed is unknown, defaulting to 1000 [ 728.851432][T26068] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.896128][T26105] batadv_slave_0: left promiscuous mode [ 728.940739][T26105] veth0: left promiscuous mode [ 729.141145][T26121] tipc: Enabling of bearer rejected, already enabled [ 729.156394][T26121] wg1: Caught tx_queue_len zero misconfig [ 729.162701][T26121] netlink: 'syz.4.5181': attribute type 10 has an invalid length. [ 729.173966][T26121] netem: change failed [ 729.187056][T26121] tipc: Resetting bearer [ 729.921107][T26139] netlink: 'syz.2.5185': attribute type 1 has an invalid length. [ 729.954950][T26141] __nla_validate_parse: 6 callbacks suppressed [ 729.954967][T26141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5186'. [ 729.977432][T26141] netlink: 'syz.4.5186': attribute type 7 has an invalid length. [ 729.995704][T26141] netlink: 'syz.4.5186': attribute type 8 has an invalid length. [ 730.004741][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5186'. [ 730.137032][T26139] 8021q: adding VLAN 0 to HW filter on device bond10 [ 730.273390][T26144] bond10: (slave veth5): Enslaving as an active interface with a down link [ 730.430544][T26150] netlink: 'syz.4.5187': attribute type 2 has an invalid length. [ 730.491719][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5189'. [ 730.799595][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5189'. [ 731.218279][T26171] xfrm0 speed is unknown, defaulting to 1000 [ 731.563836][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'. [ 731.845431][T26200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5200'. [ 731.925569][T26178] xfrm0 speed is unknown, defaulting to 1000 [ 731.934810][T26171] wg1 speed is unknown, defaulting to 1000 [ 731.992975][T26171] ip6_vti0 speed is unknown, defaulting to 1000 [ 732.048588][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5203'. [ 732.374811][T26178] wg1 speed is unknown, defaulting to 1000 [ 732.435961][T26178] ip6_vti0 speed is unknown, defaulting to 1000 [ 732.978886][T26226] netlink: 'syz.3.5207': attribute type 1 has an invalid length. [ 733.084780][T26226] bond7: entered promiscuous mode [ 733.090870][T26226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 733.207030][T26237] bond7: (slave veth7): making interface the new active one [ 733.216561][T26237] veth7: entered promiscuous mode [ 733.228463][T26237] bond7: (slave veth7): Enslaving as an active interface with an up link [ 733.726298][ T30] audit: type=1800 audit(1764663902.950:15): pid=26245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5211" name="memory.events" dev="tmpfs" ino=1976 res=0 errno=0 [ 734.098542][T26260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5216'. [ 734.248909][T26270] FAULT_INJECTION: forcing a failure. [ 734.248909][T26270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.262608][T26270] CPU: 1 UID: 0 PID: 26270 Comm: syz.4.5218 Not tainted syzkaller #0 PREEMPT(full) [ 734.262633][T26270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 734.262644][T26270] Call Trace: [ 734.262651][T26270] [ 734.262658][T26270] dump_stack_lvl+0x189/0x250 [ 734.262677][T26270] ? __pfx____ratelimit+0x10/0x10 [ 734.262690][T26270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.262703][T26270] ? __pfx__printk+0x10/0x10 [ 734.262721][T26270] should_fail_ex+0x414/0x560 [ 734.262739][T26270] _copy_to_user+0x31/0xb0 [ 734.262753][T26270] sk_getsockopt+0x1a75/0x2530 [ 734.262768][T26270] ? __pfx_sk_getsockopt+0x10/0x10 [ 734.262779][T26270] ? do_syscall_64+0xa0/0xfa0 [ 734.262797][T26270] ? __lock_acquire+0xab9/0xd20 [ 734.262828][T26270] do_sock_getsockopt+0x237/0x450 [ 734.262839][T26270] ? do_syscall_64+0xa0/0xfa0 [ 734.262852][T26270] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 734.262863][T26270] ? do_syscall_64+0xa0/0xfa0 [ 734.262874][T26270] ? __fget_files+0x2a/0x420 [ 734.262883][T26270] ? __fget_files+0x3a0/0x420 [ 734.262892][T26270] ? __fget_files+0x2a/0x420 [ 734.262905][T26270] __x64_sys_getsockopt+0x1a5/0x250 [ 734.262917][T26270] ? do_syscall_64+0xa0/0xfa0 [ 734.262928][T26270] ? do_syscall_64+0xa0/0xfa0 [ 734.262941][T26270] do_syscall_64+0xfa/0xfa0 [ 734.262952][T26270] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.262963][T26270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.262973][T26270] ? clear_bhb_loop+0x60/0xb0 [ 734.262985][T26270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.262995][T26270] RIP: 0033:0x7f3352b8f749 [ 734.263005][T26270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.263014][T26270] RSP: 002b:00007f3353998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 734.263026][T26270] RAX: ffffffffffffffda RBX: 00007f3352de6090 RCX: 00007f3352b8f749 [ 734.263034][T26270] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000004 [ 734.263040][T26270] RBP: 00007f3353998090 R08: 0000200000000200 R09: 0000000000000000 [ 734.263047][T26270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.263053][T26270] R13: 00007f3352de6128 R14: 00007f3352de6090 R15: 00007ffc4bf89f28 [ 734.263070][T26270] [ 734.648991][T26265] xfrm0 speed is unknown, defaulting to 1000 [ 734.906048][ T30] audit: type=1800 audit(1764663904.130:16): pid=26289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5222" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1988 res=0 errno=0 [ 734.949579][T26265] wg1 speed is unknown, defaulting to 1000 [ 734.958837][T26265] ip6_vti0 speed is unknown, defaulting to 1000 [ 735.029112][ T30] audit: type=1804 audit(1764663904.130:17): pid=26289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5222" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1988 res=1 errno=0 [ 735.135885][T16172] IPVS: starting estimator thread 0... [ 735.178085][T26300] erspan0: left allmulticast mode [ 735.179274][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5226'. [ 735.194214][T26300] erspan0: left promiscuous mode [ 735.199546][T26300] bridge0: port 3(erspan0) entered disabled state [ 735.222080][T26302] IPVS: using max 28 ests per chain, 67200 per kthread [ 735.245690][T26300] bond0: (slave team0): Releasing backup interface [ 735.268382][T26300] bond0: (slave dummy0): Releasing backup interface [ 735.305354][T26300] bridge_slave_0: left allmulticast mode [ 735.330827][T26300] bridge_slave_0: left promiscuous mode [ 735.356107][T26300] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.367517][T26300] bridge_slave_1: left allmulticast mode [ 735.393805][T26300] bridge_slave_1: left promiscuous mode [ 735.414208][T26300] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.428001][T26300] bond0: (slave bond_slave_0): Releasing backup interface [ 735.438032][T26300] bond0: (slave bond_slave_1): Releasing backup interface [ 735.449166][T26300] team0: Port device team_slave_0 removed [ 735.456947][T26300] team0: Port device team_slave_1 removed [ 735.464435][T26300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 735.490242][T26305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5225'. [ 735.499810][T26305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5225'. [ 735.520407][T26304] geneve4: entered promiscuous mode [ 735.526432][T26304] geneve4: entered allmulticast mode [ 735.556729][T18213] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 35841 - 0 [ 735.566406][T18213] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 35841 - 0 [ 735.632856][T26311] xfrm0 speed is unknown, defaulting to 1000 [ 735.650529][T18213] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 35841 - 0 [ 735.676335][T18213] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 35841 - 0 [ 735.846057][T26322] FAULT_INJECTION: forcing a failure. [ 735.846057][T26322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.878625][T26322] CPU: 0 UID: 0 PID: 26322 Comm: syz.0.5230 Not tainted syzkaller #0 PREEMPT(full) [ 735.878651][T26322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.878663][T26322] Call Trace: [ 735.878671][T26322] [ 735.878679][T26322] dump_stack_lvl+0x189/0x250 [ 735.878708][T26322] ? __pfx____ratelimit+0x10/0x10 [ 735.878729][T26322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.878752][T26322] ? __pfx__printk+0x10/0x10 [ 735.878784][T26322] should_fail_ex+0x414/0x560 [ 735.878815][T26322] _copy_to_user+0x31/0xb0 [ 735.878841][T26322] simple_read_from_buffer+0xe1/0x170 [ 735.878871][T26322] proc_fail_nth_read+0x1b3/0x220 [ 735.878897][T26322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.878921][T26322] ? rw_verify_area+0x2a6/0x4d0 [ 735.878943][T26322] ? __lock_acquire+0xab9/0xd20 [ 735.878959][T26322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.878983][T26322] vfs_read+0x200/0xa30 [ 735.879004][T26322] ? fdget_pos+0x247/0x320 [ 735.879031][T26322] ? __pfx___mutex_lock+0x10/0x10 [ 735.879053][T26322] ? __pfx_vfs_read+0x10/0x10 [ 735.879078][T26322] ? __fget_files+0x2a/0x420 [ 735.879100][T26322] ? __fget_files+0x3a0/0x420 [ 735.879116][T26322] ? __fget_files+0x2a/0x420 [ 735.879143][T26322] ksys_read+0x145/0x250 [ 735.879169][T26322] ? __pfx_ksys_read+0x10/0x10 [ 735.879196][T26322] ? do_syscall_64+0xbe/0xfa0 [ 735.879221][T26322] do_syscall_64+0xfa/0xfa0 [ 735.879240][T26322] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.879267][T26322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.879285][T26322] ? clear_bhb_loop+0x60/0xb0 [ 735.879306][T26322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.879323][T26322] RIP: 0033:0x7f81d7d8e15c [ 735.879340][T26322] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 735.879355][T26322] RSP: 002b:00007f81d8bd1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 735.879375][T26322] RAX: ffffffffffffffda RBX: 00007f81d7fe6090 RCX: 00007f81d7d8e15c [ 735.879389][T26322] RDX: 000000000000000f RSI: 00007f81d8bd10a0 RDI: 0000000000000005 [ 735.879401][T26322] RBP: 00007f81d8bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 735.879412][T26322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.879423][T26322] R13: 00007f81d7fe6128 R14: 00007f81d7fe6090 R15: 00007fff85097458 [ 735.879456][T26322] [ 735.889443][T26324] bond12: option arp_interval: invalid value (18446744073709551615) [ 736.131088][T26324] bond12: option arp_interval: allowed values 0 - 2147483647 [ 736.141119][T26324] bond12 (unregistering): Released all slaves [ 736.192570][T26311] wg1 speed is unknown, defaulting to 1000 [ 736.313486][T26311] ip6_vti0 speed is unknown, defaulting to 1000 [ 736.319992][T26334] xfrm0 speed is unknown, defaulting to 1000 [ 736.557048][T26347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5236'. [ 736.615242][T26350] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.5237'. [ 736.626946][ T5840] Bluetooth: hci3: command 0x0419 tx timeout [ 737.378406][T26378] bridge0: port 1(veth0_to_bridge) entered blocking state [ 737.396733][T26378] bridge0: port 1(veth0_to_bridge) entered disabled state [ 737.404962][T26378] veth0_to_bridge: entered allmulticast mode [ 737.449174][T26378] veth0_to_bridge: entered promiscuous mode [ 737.456649][T26377] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5244'. [ 737.468001][T26334] wg1 speed is unknown, defaulting to 1000 [ 737.468048][T26379] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5243'. [ 737.485818][T26380] syzkaller1: entered promiscuous mode [ 737.494571][T26380] syzkaller1: entered allmulticast mode [ 737.545279][T26334] ip6_vti0 speed is unknown, defaulting to 1000 [ 737.856299][T26388] netlink: 'syz.4.5247': attribute type 2 has an invalid length. [ 737.961709][T26393] netlink: 'syz.4.5247': attribute type 2 has an invalid length. [ 738.012628][T26395] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 738.326960][T26402] mac80211_hwsim hwsim42 syzkaller0: left promiscuous mode [ 738.335377][T26402] mac80211_hwsim hwsim42 syzkaller0: left allmulticast mode [ 738.950166][T26426] bridge3: left promiscuous mode [ 738.959008][T26426] bridge3: left allmulticast mode [ 738.987254][T26426] macsec1: left promiscuous mode [ 739.002791][T26426] macsec1: left allmulticast mode [ 739.306451][T26452] pim6reg1: entered promiscuous mode [ 739.312095][T26452] pim6reg1: entered allmulticast mode [ 739.386807][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.400836][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.424901][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.482268][T26457] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 739.524765][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.534756][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.544103][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.552994][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.561354][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.570000][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.578494][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.587620][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.596119][T26457] wg1 speed is unknown, defaulting to 1000 [ 739.691489][T26469] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode [ 739.714488][T26469] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 739.724476][ T30] audit: type=1107 audit(1764663908.950:18): pid=26468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 739.771223][T26477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5271'. [ 739.784993][T26473] tipc: Enabled bearer , priority 0 [ 739.790921][T26478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5269'. [ 739.793294][T26473] syzkaller0: entered promiscuous mode [ 739.803063][T26478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5269'. [ 739.806860][T26473] syzkaller0: entered allmulticast mode [ 739.847205][T26480] pim6reg1: entered promiscuous mode [ 739.853319][T26480] pim6reg1: entered allmulticast mode [ 739.905788][T26484] netlink: 'syz.1.5273': attribute type 1 has an invalid length. [ 739.914637][T26485] netlink: 'syz.1.5273': attribute type 1 has an invalid length. [ 740.033721][T26473] tipc: Resetting bearer [ 740.057218][T26493] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 740.091301][T26493] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 740.334582][T26471] tipc: Resetting bearer [ 740.419558][T26516] __nla_validate_parse: 4 callbacks suppressed [ 740.419574][T26516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5279'. [ 740.436365][T26471] tipc: Disabling bearer [ 740.481337][T26515] netlink: 'syz.1.5281': attribute type 13 has an invalid length. [ 740.575086][T26523] netlink: 'syz.4.5283': attribute type 2 has an invalid length. [ 740.583981][T26523] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5283'. [ 740.599520][T26524] xfrm0 speed is unknown, defaulting to 1000 [ 741.111509][T26548] netlink: 'syz.1.5292': attribute type 4 has an invalid length. [ 741.130978][T26548] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5292'. [ 741.349020][T26532] xfrm0 speed is unknown, defaulting to 1000 [ 741.382796][T26524] wg1 speed is unknown, defaulting to 1000 [ 741.410234][T26557] netlink: 'syz.2.5293': attribute type 10 has an invalid length. [ 741.445810][T26524] ip6_vti0 speed is unknown, defaulting to 1000 [ 741.502004][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 741.849217][T26532] wg1 speed is unknown, defaulting to 1000 [ 741.849440][T26554] xfrm0 speed is unknown, defaulting to 1000 [ 741.936867][T26532] ip6_vti0 speed is unknown, defaulting to 1000 [ 741.944819][T26524] wg1 speed is unknown, defaulting to 1000 [ 741.995240][T26578] netlink: 'syz.1.5299': attribute type 1 has an invalid length. [ 742.096243][T26578] bond5: entered promiscuous mode [ 742.115503][T26578] bond5: entered allmulticast mode [ 742.125897][T26578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 742.187877][T26581] erspan1: entered allmulticast mode [ 742.225692][T26581] bond5: (slave erspan1): making interface the new active one [ 742.242483][T26581] erspan1: entered promiscuous mode [ 742.264772][T26581] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 742.410285][T26554] wg1 speed is unknown, defaulting to 1000 [ 742.497073][T26554] ip6_vti0 speed is unknown, defaulting to 1000 [ 742.517878][T26532] wg1 speed is unknown, defaulting to 1000 [ 742.669903][T26591] netlink: 'syz.3.5302': attribute type 6 has an invalid length. [ 743.213267][T26554] wg1 speed is unknown, defaulting to 1000 [ 743.278042][T26598] xfrm0 speed is unknown, defaulting to 1000 [ 743.621650][T26609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5306'. [ 744.048078][T26598] wg1 speed is unknown, defaulting to 1000 [ 744.085528][T26598] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.136769][T26622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5310'. [ 744.832498][T26598] wg1 speed is unknown, defaulting to 1000 [ 745.124021][T26637] netlink: 'syz.0.5313': attribute type 2 has an invalid length. [ 745.133075][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5313'. [ 745.516307][T26636] xfrm0 speed is unknown, defaulting to 1000 [ 745.756547][T26636] wg1 speed is unknown, defaulting to 1000 [ 745.764636][T26636] ip6_vti0 speed is unknown, defaulting to 1000 [ 745.998773][T26636] wg1 speed is unknown, defaulting to 1000 [ 746.006396][T26642] siw: device registration error -23 [ 746.192623][T26647] netlink: 'syz.0.5317': attribute type 1 has an invalid length. [ 746.832488][T26660] netlink: 'syz.0.5320': attribute type 12 has an invalid length. [ 746.923979][T26660] netlink: 'syz.0.5320': attribute type 4 has an invalid length. [ 747.129783][T26664] bridge0: entered allmulticast mode [ 747.168811][T26664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5322'. [ 747.204219][T26664] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.5322'. [ 747.265442][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.273627][T26667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5323'. [ 747.284304][T26666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5323'. [ 747.353165][T26664] block nbd3: server does not support multiple connections per device. [ 747.362796][T26664] block nbd3: shutting down sockets [ 747.457455][T26681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5326'. [ 747.498818][T26684] dvmrp0: entered allmulticast mode [ 747.518524][T26671] IPVS: Scheduler module ip_vs_sip not found [ 747.530831][T26679] IPVS: length: 8 != 368449065824 [ 747.548552][T26686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5327'. [ 747.630041][T26689] x_tables: duplicate underflow at hook 1 [ 747.856907][T26704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5331'. [ 747.888640][T26704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5331'. [ 748.003629][T26711] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5333'. [ 748.257444][T26716] netlink: 'syz.0.5335': attribute type 1 has an invalid length. [ 748.289672][T26716] bond11: entered promiscuous mode [ 748.295081][T26716] bond11: entered allmulticast mode [ 748.300885][T26716] 8021q: adding VLAN 0 to HW filter on device bond11 [ 748.324556][T26716] Cannot find add_set index 0 as target [ 748.454045][T26727] xfrm0 speed is unknown, defaulting to 1000 [ 748.573887][T26735] batadv_slave_1: entered promiscuous mode [ 748.928763][T26727] wg1 speed is unknown, defaulting to 1000 [ 748.937027][T26727] ip6_vti0 speed is unknown, defaulting to 1000 [ 748.938955][T26753] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.5345'. [ 749.357681][T26759] syzkaller0: entered promiscuous mode [ 749.388097][T26759] syzkaller0: entered allmulticast mode [ 749.427366][T26734] batadv_slave_1: left promiscuous mode [ 749.485838][T26727] wg1 speed is unknown, defaulting to 1000 [ 749.785018][T26769] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 750.121330][T26783] siw: device registration error -23 [ 750.176569][T26783] lo: Caught tx_queue_len zero misconfig [ 750.433572][T26785] nbd3: detected capacity change from 0 to 63 [ 750.456100][T26789] block nbd3: NBD_DISCONNECT [ 750.462315][T26789] block nbd3: Disconnected due to user request. [ 750.482495][T26789] block nbd3: shutting down sockets [ 751.217374][T26825] veth0: entered promiscuous mode [ 751.289002][T26830] veth0: left promiscuous mode [ 751.457544][T26830] xfrm0 speed is unknown, defaulting to 1000 [ 751.495947][T26835] netlink: 'syz.1.5371': attribute type 10 has an invalid length. [ 751.507087][T26834] netlink: 'syz.2.5372': attribute type 1 has an invalid length. [ 751.508767][T26835] veth1_macvtap: left promiscuous mode [ 751.528112][T26835] team0: Device veth1_macvtap failed to register rx_handler [ 751.704805][T26834] 8021q: adding VLAN 0 to HW filter on device bond11 [ 751.761381][T26843] bond11: entered promiscuous mode [ 751.815623][T26853] xt_CONNSECMARK: invalid mode: 66 [ 751.823987][T26830] wg1 speed is unknown, defaulting to 1000 [ 751.831621][T26830] ip6_vti0 speed is unknown, defaulting to 1000 [ 751.881046][T26834] bond11: (slave dummy0): making interface the new active one [ 751.910157][T26834] dummy0: entered promiscuous mode [ 751.930011][T26834] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 752.190321][T26830] wg1 speed is unknown, defaulting to 1000 [ 752.241689][T26877] veth10: entered allmulticast mode [ 752.459282][T26887] syzkaller0: entered promiscuous mode [ 752.470936][T26887] syzkaller0: entered allmulticast mode [ 752.591185][T26888] xfrm0 speed is unknown, defaulting to 1000 [ 752.751629][T26888] wg1 speed is unknown, defaulting to 1000 [ 752.774442][T26888] ip6_vti0 speed is unknown, defaulting to 1000 [ 753.014409][T26903] __nla_validate_parse: 6 callbacks suppressed [ 753.014428][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5389'. [ 753.196526][T26888] wg1 speed is unknown, defaulting to 1000 [ 753.428829][T26910] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5392'. [ 753.756495][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 754.081404][T26938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.099342][T26947] mac80211_hwsim hwsim42 wlan1: Caught tx_queue_len zero misconfig [ 754.109626][T26947] xt_hashlimit: size too large, truncated to 1048576 [ 754.142671][ T5840] Bluetooth: hci3: command 0x0419 tx timeout [ 754.339941][T26956] netlink: 'syz.2.5402': attribute type 7 has an invalid length. [ 754.396217][T26959] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 754.485014][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5403'. [ 754.626335][T26976] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5406'. [ 755.167770][T26986] xfrm0 speed is unknown, defaulting to 1000 [ 755.507283][T26986] wg1 speed is unknown, defaulting to 1000 [ 755.507301][T26999] xfrm0 speed is unknown, defaulting to 1000 [ 755.522866][T26986] ip6_vti0 speed is unknown, defaulting to 1000 [ 755.785769][T27011] netlink: 'syz.2.5416': attribute type 4 has an invalid length. [ 755.871559][T27013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5417'. [ 756.209655][T27020] netlink: 'syz.0.5418': attribute type 13 has an invalid length. [ 756.424788][T26986] wg1 speed is unknown, defaulting to 1000 [ 756.428003][T26999] wg1 speed is unknown, defaulting to 1000 [ 756.446857][T26999] ip6_vti0 speed is unknown, defaulting to 1000 [ 756.783502][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5421'. [ 756.852615][T27035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5421'. [ 757.222829][T26999] wg1 speed is unknown, defaulting to 1000 [ 757.346845][T27056] netlink: 'syz.0.5427': attribute type 21 has an invalid length. [ 757.356345][T27056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5427'. [ 757.367612][T27056] netlink: 'syz.0.5427': attribute type 21 has an invalid length. [ 757.424538][T27056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5427'. [ 757.481235][T27062] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 758.486434][T27079] xfrm0 speed is unknown, defaulting to 1000 [ 758.553676][T27092] __nla_validate_parse: 2 callbacks suppressed [ 758.553694][T27092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5435'. [ 758.614896][T27096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5435'. [ 759.521204][T27080] xfrm0 speed is unknown, defaulting to 1000 [ 759.548626][T27079] wg1 speed is unknown, defaulting to 1000 [ 759.587493][T27079] ip6_vti0 speed is unknown, defaulting to 1000 [ 759.790350][T27110] xt_TCPMSS: Only works on TCP SYN packets [ 760.293875][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5444'. [ 760.323623][T27132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5444'. [ 760.486242][T27136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5446'. [ 760.505945][T27079] wg1 speed is unknown, defaulting to 1000 [ 760.761368][T27080] wg1 speed is unknown, defaulting to 1000 [ 760.848240][T27080] ip6_vti0 speed is unknown, defaulting to 1000 [ 761.417246][T27080] wg1 speed is unknown, defaulting to 1000 [ 761.695855][T27119] xfrm0 speed is unknown, defaulting to 1000 [ 761.916838][T27159] netlink: 'syz.1.5451': attribute type 10 has an invalid length. [ 761.977078][T27160] netlink: 'syz.1.5451': attribute type 10 has an invalid length. [ 762.030342][T27159] team0: Port device dummy0 added [ 762.073619][T27160] team0: Port device dummy0 removed [ 762.637492][T27119] wg1 speed is unknown, defaulting to 1000 [ 762.655182][T27119] ip6_vti0 speed is unknown, defaulting to 1000 [ 763.113611][T27119] wg1 speed is unknown, defaulting to 1000 [ 763.120444][T27147] siw: device registration error -23 [ 763.139153][T27116] infiniband !yz!: set down [ 763.161825][T27116] infiniband !yz!: added team_slave_0 [ 763.173770][T27116] !yz!: rxe_create_cq: returned err = -12 [ 763.199943][T27116] infiniband !yz!: Couldn't create ib_mad CQ [ 763.235159][T27116] infiniband !yz!: Couldn't open port 1 [ 763.341387][T27169] openvswitch: netlink: Key type 31 is not supported [ 763.434528][T27116] RDS/IB: !yz!: added [ 763.445634][T27116] smc: adding ib device !yz! with port count 1 [ 763.482920][T27116] smc: ib device !yz! port 1 has no pnetid [ 764.349545][T27191] netlink: 'syz.2.5459': attribute type 8 has an invalid length. [ 764.367316][T27191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5459'. [ 764.440221][T27191] geneve0: entered promiscuous mode [ 764.461580][T27191] team_slave_0: entered promiscuous mode [ 764.512157][T27191] debugfs: 'hsr1' already exists in 'hsr' [ 764.532384][T27191] Cannot create hsr debugfs directory [ 764.552236][T27191] hsr1: entered promiscuous mode [ 765.548565][T27215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5464'. [ 765.772624][T27215] hsr_slave_1 (unregistering): left promiscuous mode [ 765.961378][T27226] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 765.978943][T27226] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 766.001613][T27226] syzkaller0: linktype set to 780 [ 766.331559][T27229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5468'. [ 767.343550][T27255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5473'. [ 767.376712][T27253] erspan0: entered allmulticast mode [ 768.243312][T27264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5477'. [ 768.296790][T27264] 8021q: adding VLAN 0 to HW filter on device bond12 [ 768.329587][T27266] bond12: (slave vlan0): Opening slave failed [ 768.824247][T27264] bond12 (unregistering): Released all slaves [ 770.943920][T27280] netlink: 'syz.0.5481': attribute type 1 has an invalid length. [ 771.199618][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5483'. [ 771.236827][T27288] bond12: (slave bridge9): making interface the new active one [ 771.265840][T27288] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 771.302963][T27292] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 771.753871][T27294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.802942][T27207] xfrm0 speed is unknown, defaulting to 1000 [ 771.927067][T27296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5485'. [ 772.009278][T27296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5485'. [ 772.356365][T27302] xt_CT: No such helper "snmp" [ 772.527342][T27207] wg1 speed is unknown, defaulting to 1000 [ 772.534822][T27286] xfrm0 speed is unknown, defaulting to 1000 [ 772.574311][T27207] ip6_vti0 speed is unknown, defaulting to 1000 [ 772.847437][T27307] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5487'. [ 773.191252][T27203] xfrm0 speed is unknown, defaulting to 1000 [ 773.204001][T27286] wg1 speed is unknown, defaulting to 1000 [ 773.249893][T27286] ip6_vti0 speed is unknown, defaulting to 1000 [ 773.258131][T27207] wg1 speed is unknown, defaulting to 1000 [ 773.501947][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.718342][T27306] xfrm0 speed is unknown, defaulting to 1000 [ 774.331635][T27306] wg1 speed is unknown, defaulting to 1000 [ 774.376310][T27203] wg1 speed is unknown, defaulting to 1000 [ 774.403447][T27306] ip6_vti0 speed is unknown, defaulting to 1000 [ 774.406333][T27286] wg1 speed is unknown, defaulting to 1000 [ 775.275613][T27203] ip6_vti0 speed is unknown, defaulting to 1000 [ 775.282583][T27306] wg1 speed is unknown, defaulting to 1000 [ 775.807813][T27313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 775.832635][T27313] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 775.842510][T27313] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 775.860754][T27313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 775.873892][T27313] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 776.071898][T27311] xfrm0 speed is unknown, defaulting to 1000 [ 776.078960][T27203] wg1 speed is unknown, defaulting to 1000 [ 776.880259][T27311] wg1 speed is unknown, defaulting to 1000 [ 776.893398][T27311] ip6_vti0 speed is unknown, defaulting to 1000 [ 776.959694][T18213] veth0_to_bridge: left allmulticast mode [ 776.966070][T18213] veth0_to_bridge: left promiscuous mode [ 776.974297][T18213] bridge0: port 1(veth0_to_bridge) entered disabled state [ 777.490413][T18213] dvmrp0 (unregistering): left allmulticast mode [ 777.525246][T18213] bond2 (unregistering): (slave geneve3): Releasing active interface [ 777.546952][T18213] bond1 (unregistering): (slave geneve2): Releasing active interface [ 777.764027][T18213] bond6 (unregistering): (slave bridge3): Releasing active interface [ 777.902568][ T5834] Bluetooth: hci0: command tx timeout [ 777.924372][T18213] bond0 (unregistering): Released all slaves [ 778.052532][T18213] bond1 (unregistering): Released all slaves [ 778.175564][T18213] bond2 (unregistering): Released all slaves [ 778.300638][T18213] bond3 (unregistering): Released all slaves [ 778.423746][T18213] bond4 (unregistering): Released all slaves [ 778.544150][T18213] bond5 (unregistering): Released all slaves [ 778.557046][T18213] bond6 (unregistering): Released all slaves [ 778.569633][T18213] bond7 (unregistering): Released all slaves [ 778.691152][T18213] bond8 (unregistering): Released all slaves [ 778.704716][T18213] bond9 (unregistering): Released all slaves [ 778.823787][T18213] bond10 (unregistering): Released all slaves [ 778.941626][T18213] bond11 (unregistering): Released all slaves [ 778.954890][T16498] ip6_vti0 speed is unknown, defaulting to 1000 [ 778.961207][T27311] wg1 speed is unknown, defaulting to 1000 [ 778.967893][T16498] syz2: Port: 1 Link DOWN [ 778.972806][T16503] ip6_vti0 speed is unknown, defaulting to 1000 [ 779.126721][T18210] smc: removing ib device syz2 [ 779.991350][ T5834] Bluetooth: hci0: command tx timeout [ 780.001523][T27311] chnl_net:caif_netlink_parms(): no params data found [ 780.628532][T27311] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.644197][T27311] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.652441][T27311] bridge_slave_0: entered allmulticast mode [ 780.670708][T27313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.686693][T27311] bridge_slave_0: entered promiscuous mode [ 780.695588][T27313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.695895][T27311] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.709954][T27313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.727231][T27313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.732180][T27311] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.742549][T27313] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 780.742785][T27311] bridge_slave_1: entered allmulticast mode [ 780.776200][T27311] bridge_slave_1: entered promiscuous mode [ 780.803453][T27348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5494'. [ 780.939250][T27311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.026283][T27311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.164193][T27311] team0: Port device team_slave_0 added [ 781.239698][T27354] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5497'. [ 781.294901][T27311] team0: Port device team_slave_1 added [ 781.365655][T27357] netlink: 'syz.1.5497': attribute type 15 has an invalid length. [ 781.380182][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5497'. [ 781.395993][T27345] xfrm0 speed is unknown, defaulting to 1000 [ 781.516734][T27311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.550433][T27311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.611942][T27311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.735322][T27311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.752394][T27311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.832338][T27311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.972381][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5499'. [ 782.018723][T27311] hsr_slave_0: entered promiscuous mode [ 782.053362][T27311] hsr_slave_1: entered promiscuous mode [ 782.063222][T27313] Bluetooth: hci0: command tx timeout [ 782.069912][T27311] debugfs: 'hsr0' already exists in 'hsr' [ 782.088090][T27311] Cannot create hsr debugfs directory [ 782.267347][T27345] wg1 speed is unknown, defaulting to 1000 [ 782.425774][T27345] wg1 speed is unknown, defaulting to 1000 [ 782.840527][T27387] netlink: 'syz.1.5503': attribute type 10 has an invalid length. [ 782.851508][T27387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5503'. [ 782.873439][T27313] Bluetooth: hci4: command tx timeout [ 782.884874][T18213] : left promiscuous mode [ 782.944370][T27387] dummy0: entered promiscuous mode [ 782.955611][T27387] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 782.975092][T27389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5504'. [ 782.985959][T27389] openvswitch: netlink: Flow actions attr not present in new flow. [ 782.997592][T27389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5504'. [ 783.130197][T18213] tipc: Disabling bearer [ 783.177639][T18213] tipc: Left network mode [ 783.615633][T27397] syzkaller0: entered promiscuous mode [ 783.622512][T27397] syzkaller0: entered allmulticast mode [ 784.142711][T27313] Bluetooth: hci0: command tx timeout [ 784.952651][T27313] Bluetooth: hci4: command tx timeout [ 785.635568][T27311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 785.681374][T27311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 785.701194][T27311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 785.850754][T27420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5511'. [ 785.861072][T27311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 785.974400][T27420] 8021q: adding VLAN 0 to HW filter on device bond12 [ 786.287267][T27419] macvlan2: entered promiscuous mode [ 786.293074][T27419] macvlan2: entered allmulticast mode [ 786.299492][T27419] bond12: (slave macvlan2): Opening slave failed [ 786.480650][T27345] chnl_net:caif_netlink_parms(): no params data found [ 786.557194][T27445] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5513'. [ 786.592150][T27445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.934769][T27456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5516'. [ 786.980577][T27461] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5518'. [ 787.022911][T27313] Bluetooth: hci4: command tx timeout [ 787.238082][T27461] sock: sock_timestamping_bind_phc: sock not bind to device [ 787.321408][T18213] hsr_slave_0: left promiscuous mode [ 787.329509][T18213] hsr_slave_1: left promiscuous mode [ 787.364027][T18213] pimreg (unregistering): left allmulticast mode [ 787.443274][T27480] netlink: 'syz.2.5521': attribute type 26 has an invalid length. [ 787.952858][ T6900] smc: removing ib device !yz! [ 788.448471][T27345] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.468434][T27345] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.483091][T27345] bridge_slave_0: entered allmulticast mode [ 788.495445][T27345] bridge_slave_0: entered promiscuous mode [ 788.502773][T27488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5524'. [ 788.520441][T27345] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.529621][T27345] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.537558][T27345] bridge_slave_1: entered allmulticast mode [ 788.547819][T27345] bridge_slave_1: entered promiscuous mode [ 788.641476][T27488] team0: No ports can be present during mode change [ 788.921296][T27345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.048052][T27345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.102930][T27313] Bluetooth: hci4: command tx timeout [ 789.237044][T27508] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5527'. [ 789.266297][T27505] IPVS: persistence engine module ip_vs_pe_ not found [ 789.317009][T27345] team0: Port device team_slave_0 added [ 789.357296][T27345] team0: Port device team_slave_1 added [ 789.593661][T27345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.600648][T27345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.600799][T27525] netlink: 'syz.1.5530': attribute type 1 has an invalid length. [ 789.634024][T27345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.728505][T27527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5532'. [ 789.799161][T27345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.824521][T27345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.877980][T27345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.988470][T27311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.029630][T27532] xfrm0 speed is unknown, defaulting to 1000 [ 790.256123][T27345] hsr_slave_0: entered promiscuous mode [ 790.283575][T27345] hsr_slave_1: entered promiscuous mode [ 790.300404][T27345] debugfs: 'hsr0' already exists in 'hsr' [ 790.318075][T27345] Cannot create hsr debugfs directory [ 790.364337][T27311] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.638773][T18208] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.646003][T18208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.657147][T27532] wg1 speed is unknown, defaulting to 1000 [ 790.679089][T27532] wg1 speed is unknown, defaulting to 1000 [ 790.711481][T18210] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.718692][T18210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.269877][T27549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5538'. [ 791.279328][T27549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5538'. [ 791.323435][T27549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5538'. [ 791.339530][T27549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5538'. [ 791.358514][T27545] xfrm0 speed is unknown, defaulting to 1000 [ 791.788516][T27345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 791.812773][T27345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 791.863021][T27311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.870148][T27345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 791.886269][T27345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 791.930651][T18213] IPVS: stop unused estimator thread 0... [ 792.185584][T18213] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.207845][T18213] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.144866][T27545] wg1 speed is unknown, defaulting to 1000 [ 795.190722][T27545] wg1 speed is unknown, defaulting to 1000 [ 795.273735][T27573] netlink: 'syz.2.5540': attribute type 1 has an invalid length. [ 795.285329][T27573] netlink: 'syz.2.5540': attribute type 2 has an invalid length. [ 795.349048][T18213] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.368715][T18213] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.400405][T27345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.445586][T18213] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.489421][T18213] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.599873][T18213] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.618077][T18213] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.655739][T27581] tunl0: Caught tx_queue_len zero misconfig [ 795.709548][T27345] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.760486][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.767711][ T6911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.788085][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.795270][ T6917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.814876][T27311] veth0_vlan: entered promiscuous mode [ 795.852749][T27311] veth1_vlan: entered promiscuous mode [ 795.916765][T27583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5543'. [ 795.931707][T27583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5543'. [ 796.020904][T18213] hsr0: left allmulticast mode [ 796.031415][T18213] hsr_slave_0: left allmulticast mode [ 796.043322][T18213] hsr0: left promiscuous mode [ 796.054478][T18213] bridge0: port 3(hsr0) entered disabled state [ 796.073647][T27589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5543'. [ 796.087969][T18213] bridge_slave_1: left allmulticast mode [ 796.098529][T18213] bridge_slave_1: left promiscuous mode [ 796.105241][T18213] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.157061][T18213] bridge_slave_0: left allmulticast mode [ 796.163688][T18213] bridge_slave_0: left promiscuous mode [ 796.169673][T18213] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.190904][T27599] netlink: 'syz.0.5547': attribute type 1 has an invalid length. [ 796.199092][T27599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.296703][T18213] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 796.431706][T18213] bond3 (unregistering): (slave erspan1): Releasing active interface [ 796.441710][T18213] erspan1 (unregistering): left promiscuous mode [ 796.570025][T18213] dvmrp1 (unregistering): left allmulticast mode [ 797.019085][T18213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.031000][T18213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.040520][T18213] bond0 (unregistering): Released all slaves [ 797.171055][T18213] bond1 (unregistering): Released all slaves [ 797.302118][T18213] bond2 (unregistering): Released all slaves [ 797.427621][T18213] bond3 (unregistering): Released all slaves [ 797.559620][T18213] bond4 (unregistering): Released all slaves [ 797.574591][T18213] bond5 (unregistering): Released all slaves [ 797.590013][T18213] bond6 (unregistering): (slave veth5): Releasing active interface [ 797.599856][T18213] bond6 (unregistering): Released all slaves [ 797.731584][T18213] bond7 (unregistering): (slave veth7): Releasing backup interface [ 797.739624][T18213] veth7: left promiscuous mode [ 797.746422][T18213] bond7 (unregistering): Released all slaves [ 797.769817][T27311] veth0_macvtap: entered promiscuous mode [ 797.814706][T27311] veth1_macvtap: entered promiscuous mode [ 798.011347][T27311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.027357][T27607] siw: device registration error -23 [ 798.075768][T27311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.415862][T18213] : left promiscuous mode [ 798.549329][ T6917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.607190][T18213] tipc: Left network mode [ 798.650024][ T6917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.751627][T27345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.920946][ T6917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.943968][ T6917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.257768][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.267049][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.284897][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5552'. [ 799.370957][T27625] xt_recent: Unsupported userspace flags (000000b1) [ 799.451033][ T6917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.479131][ T6917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.755289][T27637] xfrm0 speed is unknown, defaulting to 1000 [ 799.966385][T27649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.981452][T27345] veth0_vlan: entered promiscuous mode [ 800.017459][T27647] pim6reg1: entered promiscuous mode [ 800.048142][T27647] pim6reg1: entered allmulticast mode [ 800.066412][T27345] veth1_vlan: entered promiscuous mode [ 800.194264][T27637] wg1 speed is unknown, defaulting to 1000 [ 800.206654][T27345] veth0_macvtap: entered promiscuous mode [ 800.221456][T27345] veth1_macvtap: entered promiscuous mode [ 800.239585][T27637] wg1 speed is unknown, defaulting to 1000 [ 800.261636][T27345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.311719][T27345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.455973][ T6917] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.476216][ T6917] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.542230][T27655] geneve5: entered promiscuous mode [ 800.548976][ T6917] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.558115][ T6917] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.595520][T18213] hsr_slave_0: left promiscuous mode [ 800.602469][T18213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.610275][T18213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.452884][T27660] tipc: New replicast peer: 255.255.255.255 [ 801.467271][T27660] tipc: Enabled bearer , priority 10 [ 801.486422][T27661] netlink: 'syz.0.5561': attribute type 11 has an invalid length. [ 801.498408][T27661] netlink: 'syz.0.5561': attribute type 11 has an invalid length. [ 801.508405][T27661] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5561'. [ 801.829924][T18209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.842521][T18209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.915945][T18209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.925062][T18209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.949546][T18213] IPVS: stop unused estimator thread 0... [ 802.248704][T27683] xfrm0 speed is unknown, defaulting to 1000 [ 802.516474][T27683] wg1 speed is unknown, defaulting to 1000 [ 802.908819][T27715] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 802.919808][T27716] IPv6: NLM_F_REPLACE set, but no existing node found! [ 802.954960][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5569'. [ 802.960017][T27720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5571'. [ 802.965274][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5569'. [ 802.988019][T27716] netlink: 'syz.6.5569': attribute type 1 has an invalid length. [ 803.033879][T27720] macsec1: entered promiscuous mode [ 803.051522][T27720] macsec1: entered allmulticast mode [ 803.093324][T27711] xfrm0 speed is unknown, defaulting to 1000 [ 803.140430][T27728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5572'. [ 803.178554][T27728] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5572'. [ 803.194470][T27728] netlink: 540 bytes leftover after parsing attributes in process `syz.6.5572'. [ 803.227887][T27731] openvswitch: netlink: Missing valid actions attribute. [ 803.248917][T27731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.854451][T27748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5580'. [ 803.913492][T27748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5580'. [ 803.949203][T27748] Cannot find del_set index 4 as target [ 804.086156][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 804.102902][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 804.112371][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 804.126562][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 804.130462][T27711] wg1 speed is unknown, defaulting to 1000 [ 804.174266][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 804.541706][T27769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5586'. [ 804.559640][T27755] xfrm0 speed is unknown, defaulting to 1000 [ 804.566509][T27769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5586'. [ 804.582259][T27769] netlink: 58 bytes leftover after parsing attributes in process `syz.0.5586'. [ 804.851625][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5588'. [ 804.879362][T27773] netlink: 'syz.5.5588': attribute type 11 has an invalid length. [ 804.909125][T27775] xt_socket: unknown flags 0x50 [ 804.923694][T18211] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.942974][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5588'. [ 804.952947][T18211] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.967261][T27776] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 804.973491][T27773] netlink: 'syz.5.5588': attribute type 11 has an invalid length. [ 805.005603][T27778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5589'. [ 805.023994][T18211] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.033413][T18211] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.043610][T27755] wg1 speed is unknown, defaulting to 1000 [ 805.176828][T27783] netlink: 'syz.5.5591': attribute type 1 has an invalid length. [ 805.204307][T27783] netlink: 'syz.5.5591': attribute type 1 has an invalid length. [ 805.236867][T27786] netlink: 'syz.0.5593': attribute type 13 has an invalid length. [ 805.390031][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5591'. [ 805.453521][T27783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5591'. [ 805.687828][T27783] team0 (unregistering): Port device team_slave_0 removed [ 805.699346][T27783] team0 (unregistering): Port device team_slave_1 removed [ 805.735899][T27802] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 805.904299][T27808] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5598'. [ 806.006112][T27814] geneve0: entered promiscuous mode [ 806.027486][T27755] chnl_net:caif_netlink_parms(): no params data found [ 806.043319][T18211] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.051570][T18211] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.070267][T27818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5601'. [ 806.105595][ T6911] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.121884][ T6911] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.223461][ T5834] Bluetooth: hci3: command tx timeout [ 806.321671][T27828] bond1: entered promiscuous mode [ 806.328956][T27828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 806.332879][T27832] svc: failed to register nfsdv3 RPC service (errno 111). [ 806.379810][T27832] svc: failed to register nfsaclv3 RPC service (errno 111). [ 806.422971][T27755] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.443293][T27755] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.450781][T27755] bridge_slave_0: entered allmulticast mode [ 806.503265][T27755] bridge_slave_0: entered promiscuous mode [ 806.535490][T27755] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.544591][T27755] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.555210][T27755] bridge_slave_1: entered allmulticast mode [ 806.564373][T27755] bridge_slave_1: entered promiscuous mode [ 806.609221][T27825] xfrm0 speed is unknown, defaulting to 1000 [ 806.806688][T27755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.840090][T27755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.971162][T27755] team0: Port device team_slave_0 added [ 807.025005][T27856] syzkaller0: entered promiscuous mode [ 807.031482][T27856] syzkaller0: entered allmulticast mode [ 807.045784][T27755] team0: Port device team_slave_1 added [ 807.182782][T27755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.199984][T27755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.240229][T27755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.251979][T27825] wg1 speed is unknown, defaulting to 1000 [ 807.441640][T27755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.449047][T27755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.476806][T27755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.685249][T27755] hsr_slave_0: entered promiscuous mode [ 807.692218][T27755] hsr_slave_1: entered promiscuous mode [ 807.698818][T27755] debugfs: 'hsr0' already exists in 'hsr' [ 807.705073][T27755] Cannot create hsr debugfs directory [ 807.734818][T27872] batadv_slave_1: entered promiscuous mode [ 807.879068][T27881] netlink: 'syz.0.5617': attribute type 15 has an invalid length. [ 807.928072][T27881] netlink: 'syz.0.5617': attribute type 15 has an invalid length. [ 807.928310][T27887] netlink: 'syz.5.5618': attribute type 2 has an invalid length. [ 807.947143][T27872] netlink: 'syz.1.5614': attribute type 3 has an invalid length. [ 807.962996][T27887] xfrm1: entered promiscuous mode [ 807.968040][T27887] xfrm1: entered allmulticast mode [ 807.978789][T18211] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 807.988297][T18211] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 808.002287][T27871] batadv_slave_1: left promiscuous mode [ 808.110302][T18211] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 808.235977][T27890] bridge11: entered promiscuous mode [ 808.278449][T18211] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 808.302328][ T5834] Bluetooth: hci3: command tx timeout [ 808.504459][T27755] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.525440][T27755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.535892][T27755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35841 - 0 [ 808.651359][T27755] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.661679][T27926] IPVS: set_ctl: invalid protocol: 126 172.20.20.187:20003 [ 808.671528][T27755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.708575][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.742111][T27755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35841 - 0 [ 808.767839][T27930] netlink: 'syz.1.5627': attribute type 10 has an invalid length. [ 808.846962][T27755] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.882422][T27755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.896219][T27755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35841 - 0 [ 809.008391][T27755] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.031537][T27755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.052596][T27755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35841 - 0 [ 809.300674][T27963] xfrm0 speed is unknown, defaulting to 1000 [ 809.588607][T27755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 809.620488][T27755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 809.666336][T27755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 809.691394][T27755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 810.041101][T27755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.056766][T27963] wg1 speed is unknown, defaulting to 1000 [ 810.056780][T27967] xfrm0 speed is unknown, defaulting to 1000 [ 810.183619][T27755] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.276360][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.283549][ T6917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.297034][T27989] xfrm0 speed is unknown, defaulting to 1000 [ 810.305650][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.312938][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.328363][T27967] wg1 speed is unknown, defaulting to 1000 [ 810.382378][ T5834] Bluetooth: hci3: command tx timeout [ 810.666728][T27989] wg1 speed is unknown, defaulting to 1000 [ 810.934208][T27755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.122443][T27755] veth0_vlan: entered promiscuous mode [ 811.159196][T27755] veth1_vlan: entered promiscuous mode [ 811.254558][T27755] veth0_macvtap: entered promiscuous mode [ 811.290877][T27755] veth1_macvtap: entered promiscuous mode acpid: input device has been disconnected, fd 3 [ 811.345373][T28007] __nla_validate_parse: 81 callbacks suppressed [ 811.345390][T28007] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.5645'. [ 811.375080][T27755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.418586][T27755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.448613][T18211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.451116][T28012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5647'. [ 811.474499][T18211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.488038][T18211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.527404][T18211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.764979][T18209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.788222][T18209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.843583][ T6917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.871914][ T6917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.424955][T28059] xfrm0 speed is unknown, defaulting to 1000 [ 812.464871][ T5834] Bluetooth: hci3: command tx timeout [ 812.717408][T28073] xfrm0 speed is unknown, defaulting to 1000 [ 812.724751][T28059] wg1 speed is unknown, defaulting to 1000 [ 813.049260][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5664'. [ 813.062777][T28085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5664'. [ 813.071685][T28085] netlink: 'syz.0.5664': attribute type 7 has an invalid length. [ 813.209120][T28092] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5667'. [ 813.228911][T28073] wg1 speed is unknown, defaulting to 1000 [ 813.229017][T28087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5665'. [ 813.248745][T28090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5665'. [ 813.249307][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5666'. [ 813.274932][T28092] netlink: 'syz.6.5667': attribute type 1 has an invalid length. [ 813.436336][T28096] bridge0: port 3(bond0) entered blocking state [ 813.447182][T28096] bridge0: port 3(bond0) entered disabled state [ 813.491344][T28096] bond0: entered allmulticast mode [ 813.505673][T28096] bond_slave_0: entered allmulticast mode [ 813.521602][T28096] bond_slave_1: entered allmulticast mode [ 813.568978][T28096] bond0: entered promiscuous mode [ 813.582175][T28096] bond_slave_0: entered promiscuous mode [ 813.596675][T28096] bond_slave_1: entered promiscuous mode [ 813.623243][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5666'. [ 813.643848][T28101] bond0: left allmulticast mode [ 813.648753][T28101] bond_slave_0: left allmulticast mode [ 813.664670][T28101] bond_slave_1: left allmulticast mode [ 813.682305][T28101] bond0: left promiscuous mode [ 813.687235][T28101] bond_slave_0: left promiscuous mode [ 813.712309][T28101] bond_slave_1: left promiscuous mode [ 813.723478][T28101] bridge0: port 3(bond0) entered disabled state [ 813.828086][T28101] bridge_slave_1: left allmulticast mode [ 813.840583][T28101] bridge_slave_1: left promiscuous mode [ 813.861371][T28101] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.890126][T28101] bridge_slave_0: left allmulticast mode [ 813.896519][T28101] bridge_slave_0: left promiscuous mode [ 813.903413][T28101] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.977805][T28107] gre1: entered allmulticast mode [ 814.102594][T28115] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 814.186740][T28115] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 814.230666][T28125] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5672'. [ 814.302675][T28125] veth0_macvtap: left promiscuous mode [ 814.604843][T28117] xfrm0 speed is unknown, defaulting to 1000 [ 814.628297][T28115] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 814.739342][T28115] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 814.949257][ T1100] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 814.958313][ T1100] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 815.054209][T18210] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 815.103509][T18210] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 815.158173][T28152] wg2: entered promiscuous mode [ 815.164037][T28152] wg2: entered allmulticast mode [ 815.250876][T28155] netlink: 'syz.2.5680': attribute type 10 has an invalid length. [ 815.296109][T28117] wg1 speed is unknown, defaulting to 1000 [ 815.316339][T28155] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 815.400312][T28164] veth0_to_bridge: entered promiscuous mode [ 815.711140][T28165] veth0_to_bridge: left promiscuous mode [ 815.930439][T28182] syzkaller0: entered promiscuous mode [ 815.936325][T28184] netlink: 'syz.2.5688': attribute type 3 has an invalid length. [ 815.960288][T28182] syzkaller0: entered allmulticast mode [ 816.086991][T28194] xfrm0 speed is unknown, defaulting to 1000 [ 816.299915][T28205] netlink: 'syz.0.5693': attribute type 1 has an invalid length. [ 816.462180][T28215] __nla_validate_parse: 6 callbacks suppressed [ 816.462199][T28215] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5695'. [ 816.470422][T28219] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5696'. [ 816.619290][T28194] wg1 speed is unknown, defaulting to 1000 [ 816.627522][T28202] xfrm0 speed is unknown, defaulting to 1000 [ 816.962707][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5700'. [ 817.171944][T28236] bond_slave_1: entered promiscuous mode [ 817.186940][T28236] bond_slave_1: entered allmulticast mode [ 817.195790][T28212] xfrm0 speed is unknown, defaulting to 1000 [ 817.202717][T28202] wg1 speed is unknown, defaulting to 1000 [ 817.693655][T28256] xfrm0 speed is unknown, defaulting to 1000 [ 817.737918][T28212] wg1 speed is unknown, defaulting to 1000 [ 817.879317][T28272] tipc: Started in network mode [ 817.884763][T28272] tipc: Node identity d28d99784a59, cluster identity 4711 [ 817.892299][T28272] tipc: Enabled bearer , priority 0 [ 817.921670][T28272] syzkaller0: entered promiscuous mode [ 817.937099][T28272] syzkaller0: entered allmulticast mode [ 818.110125][T28274] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 818.118148][T28274] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 818.311818][T28256] wg1 speed is unknown, defaulting to 1000 [ 818.527724][T28265] tipc: Resetting bearer [ 818.586996][T28265] tipc: Disabling bearer [ 818.662820][T28292] netlink: 'syz.1.5713': attribute type 66 has an invalid length. [ 818.905311][T28288] syzkaller1: entered promiscuous mode [ 818.911058][T28288] syzkaller1: entered allmulticast mode [ 819.418685][T28308] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5717'. [ 819.512979][T28308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5717'. [ 819.547041][T28308] hsr_slave_0: left promiscuous mode [ 819.616814][T28319] netlink: 'syz.0.5720': attribute type 12 has an invalid length. [ 819.766119][T28329] netlink: 'syz.5.5723': attribute type 1 has an invalid length. [ 819.774305][T28329] netlink: 'syz.5.5723': attribute type 1 has an invalid length. [ 819.927998][T28340] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5726'. [ 820.004971][T28345] pim6reg: entered allmulticast mode [ 820.089585][T28342] pim6reg: left allmulticast mode [ 820.259858][T28361] netlink: 'syz.5.5732': attribute type 10 has an invalid length. [ 820.303875][T28363] netlink: 'syz.5.5732': attribute type 10 has an invalid length. [ 820.626490][T28379] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 820.722586][T28383] bridge0: entered allmulticast mode [ 820.750734][T28385] bridge0: entered promiscuous mode [ 820.758868][T28385] bridge0: port 3(vlan2) entered blocking state [ 820.765910][T28385] bridge0: port 3(vlan2) entered disabled state [ 820.773156][T28385] vlan2: entered allmulticast mode [ 820.778425][T28385] bridge0: entered allmulticast mode [ 820.788063][T28385] vlan2: left allmulticast mode [ 820.795371][T28385] bridge0: left allmulticast mode [ 820.800447][T28387] netlink: 'syz.6.5738': attribute type 1 has an invalid length. [ 820.803429][T28385] bridge0: left promiscuous mode [ 821.018034][T28397] xfrm0 speed is unknown, defaulting to 1000 [ 821.173881][T28411] netlink: 364 bytes leftover after parsing attributes in process `syz.5.5744'. [ 821.225561][T28414] openvswitch: netlink: IPv4 tun info is not correct [ 821.394592][T28418] xt_hashlimit: max too large, truncated to 1048576 [ 821.422814][T28418] xt_bpf: check failed: parse error [ 821.626927][T28397] wg1 speed is unknown, defaulting to 1000 [ 821.797497][T28431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5749'. [ 821.816030][T28435] openvswitch: netlink: Flow actions attr not present in new flow. [ 822.419799][T28466] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5758'. [ 822.775088][T28460] xfrm0 speed is unknown, defaulting to 1000 [ 823.029581][T28460] wg1 speed is unknown, defaulting to 1000 [ 823.042435][T28408] infiniband !yz!: set active [ 823.047159][T28408] infiniband !yz!: added team_slave_0 [ 823.060928][T28408] !yz!: rxe_create_cq: returned err = -12 [ 823.072389][T28408] infiniband !yz!: Couldn't create ib_mad CQ [ 823.098805][T28408] infiniband !yz!: Couldn't open port 1 [ 823.139972][T28482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5764'. [ 823.144873][T28408] RDS/IB: !yz!: added [ 823.157910][T28408] smc: adding ib device !yz! with port count 1 [ 823.166822][T28408] smc: ib device !yz! port 1 has no pnetid [ 823.205187][T28482] IPVS: Error connecting to the multicast addr [ 823.233469][T28487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5764'. [ 823.465189][T28488] xfrm0 speed is unknown, defaulting to 1000 [ 823.505223][T28500] dummy0: left promiscuous mode [ 823.742830][T28500] wg2: left promiscuous mode [ 823.757730][T28500] wg2: left allmulticast mode [ 823.784701][T28500] mac80211_hwsim hwsim48 wlan0: left promiscuous mode [ 823.847592][T28500] bond5: left promiscuous mode [ 823.931654][T28500] erspan1: left promiscuous mode [ 823.959844][T28500] bond5: left allmulticast mode [ 824.046843][T28500] erspan1: left allmulticast mode [ 824.107445][T28500] geneve0: left promiscuous mode [ 824.252242][T18209] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.266804][T18209] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.291920][T18209] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.371515][T18209] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.382508][T27313] Bluetooth: hci3: command 0x0405 tx timeout [ 824.458683][T28505] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 824.526529][T28505] bond13 (unregistering): Released all slaves [ 825.255407][T28520] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 825.265000][T28521] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 825.434749][T28529] bond13: entered promiscuous mode [ 825.440000][T28529] bond13: entered allmulticast mode [ 825.448681][T28529] 8021q: adding VLAN 0 to HW filter on device bond13 [ 825.604117][T28529] bond13 (unregistering): Released all slaves [ 825.737773][T28532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5774'. [ 825.961144][T28519] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 825.973076][T28519] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 825.981510][T28519] CPU: 1 UID: 0 PID: 28519 Comm: syz.1.5771 Not tainted syzkaller #0 PREEMPT(full) [ 825.990885][T28519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 826.000947][T28519] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 826.006685][T28519] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 dd a1 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 b5 a1 ab f7 4d 8b 75 00 4d 8d a7 30 [ 826.026310][T28519] RSP: 0018:ffffc900053c7be8 EFLAGS: 00010046 [ 826.032389][T28519] RAX: 0000000000000000 RBX: ffff88805581b000 RCX: dffffc0000000000 [ 826.040365][T28519] RDX: 0000000000000000 RSI: ffffffff8bbf08c0 RDI: ffff88805581b000 [ 826.048438][T28519] RBP: ffff88807e6ba000 R08: 000000007780ebbc R09: 00000000cdfbc03e [ 826.056421][T28519] R10: 000000000000000c R11: ffffffff81ac2e10 R12: ffff88807a419650 [ 826.064409][T28519] R13: 0000000000000000 R14: ffff88805581b030 R15: ffff88807a419000 [ 826.072391][T28519] FS: 000055556e063500(0000) GS:ffff888126231000(0000) knlGS:0000000000000000 [ 826.081409][T28519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 826.087984][T28519] CR2: 0000001b32e24224 CR3: 0000000029260000 CR4: 00000000003526f0 [ 826.095957][T28519] Call Trace: [ 826.099281][T28519] [ 826.102212][T28519] lec_push+0x3cb/0x1860 [ 826.106461][T28519] ? __pfx_lec_push+0x10/0x10 [ 826.111126][T28519] vcc_release+0x15f/0x580 [ 826.115540][T28519] sock_close+0xc3/0x240 [ 826.119776][T28519] ? __pfx_sock_close+0x10/0x10 [ 826.124615][T28519] __fput+0x44c/0xa70 [ 826.128679][T28519] task_work_run+0x1d4/0x260 [ 826.133270][T28519] ? __pfx_task_work_run+0x10/0x10 [ 826.138373][T28519] ? exit_to_user_mode_loop+0x40/0x130 [ 826.143824][T28519] exit_to_user_mode_loop+0xe9/0x130 [ 826.149096][T28519] do_syscall_64+0x2bd/0xfa0 [ 826.153675][T28519] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.158870][T28519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.164928][T28519] ? clear_bhb_loop+0x60/0xb0 [ 826.169598][T28519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.175527][T28519] RIP: 0033:0x7f7d5d38f749 [ 826.179938][T28519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.199620][T28519] RSP: 002b:00007ffcb1960c38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 826.208025][T28519] RAX: 0000000000000000 RBX: 00007f7d5d5e7da0 RCX: 00007f7d5d38f749 [ 826.215983][T28519] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 826.223942][T28519] RBP: 00007f7d5d5e7da0 R08: 0000000000000000 R09: 00000011b1960f2f [ 826.231906][T28519] R10: 00007f7d5d5e7cb0 R11: 0000000000000246 R12: 00000000000c9a47 [ 826.239964][T28519] R13: 00007f7d5d5e6090 R14: ffffffffffffffff R15: 00007ffcb1960d50 [ 826.247935][T28519] [ 826.250952][T28519] Modules linked in: [ 826.254841][T28519] ---[ end trace 0000000000000000 ]--- [ 826.260279][T28519] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 826.265996][T28519] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 dd a1 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 b5 a1 ab f7 4d 8b 75 00 4d 8d a7 30 [ 826.285598][T28519] RSP: 0018:ffffc900053c7be8 EFLAGS: 00010046 [ 826.291660][T28519] RAX: 0000000000000000 RBX: ffff88805581b000 RCX: dffffc0000000000 [ 826.299639][T28519] RDX: 0000000000000000 RSI: ffffffff8bbf08c0 RDI: ffff88805581b000 [ 826.307618][T28519] RBP: ffff88807e6ba000 R08: 000000007780ebbc R09: 00000000cdfbc03e [ 826.315587][T28519] R10: 000000000000000c R11: ffffffff81ac2e10 R12: ffff88807a419650 [ 826.323550][T28519] R13: 0000000000000000 R14: ffff88805581b030 R15: ffff88807a419000 [ 826.331515][T28519] FS: 000055556e063500(0000) GS:ffff888126231000(0000) knlGS:0000000000000000 [ 826.340439][T28519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 826.347028][T28519] CR2: 0000001b32e24224 CR3: 0000000029260000 CR4: 00000000003526f0 [ 826.354999][T28519] Kernel panic - not syncing: Fatal exception [ 826.361409][T28519] Kernel Offset: disabled [ 826.365719][T28519] Rebooting in 86400 seconds..