last executing test programs: 1m43.727457253s ago: executing program 3 (id=5334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x8010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r4], 0x64}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010101, 0x4e20, 0x4, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r10, 0x20, &(0x7f00000002c0)={&(0x7f0000000280)=""/56, 0x38, 0x0, &(0x7f00000003c0)=""/215, 0xd7}}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x8010) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'hsr0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r4], 0x64}}, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010101, 0x4e20, 0x4, 0xa, 0x80012d58, 0x12d5c}}, 0x44) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r10, 0x20, &(0x7f00000002c0)={&(0x7f0000000280)=""/56, 0x38, 0x0, &(0x7f00000003c0)=""/215, 0xd7}}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) (async) 1m43.527238926s ago: executing program 3 (id=5338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xffffffff, 0x0}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x8, 0xffffffffffff88e2, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) 1m43.45893655s ago: executing program 3 (id=5340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7fffffff}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x45) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7fffffff}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x45) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) (async) 1m43.302804699s ago: executing program 3 (id=5345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xa, 0xfff5}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x63}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x44}}, 0x20008050) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056128ff16b2a141a", 0x28) sendmmsg$inet6(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="5c679d560fff2036cfdf6c45c1aae2695e2c062eaae2d57ead49cff47cbc48328bf91af664b07e25e3c794814797bce5cdddc2bdbf4cbc16832f4b4984b2f163e15d68d6e894c157e518b8bba6bb9b4887373fa56ea4d5845cdf204a1ed954574aae7461ee4bb245bb4d237c5da1f2f5298496a292775b8a3f52a5bdc6ab23214824e4421eeb56854ae5386e5509d18624d70d14697e3d52", 0x98}, {&(0x7f0000000280)="51e2e27748cd85daa1d6c15a00a16ea4076bd3bad29517612dddc4654f69c2d0dac428cb15bddde058f2cbf632881c55b0ff816f7da274c916a3d12b1417d7d5dbd2b3c2bc2446a1cbc0a50b981ac86695edc2d7b7cfa56b19948ef4c805c61532f5340684a5f398957a2e568f20f89b6cde964b1063f23e3310c45bcd971ead", 0x80}, {&(0x7f0000000480)="78b1b7c0cb3f57b49ce2cdf9ae5aece0659b37a99874c6dab30713e0c14950c1be13e61dd863e7d7218fbc2d46bbc38f30a6c623b77527ae1c25572c95e701737727c38c9499641fd27270deab540365041186ef802ae3672e11058eb4151b219ca5b292ba8850d973007193915bcbebac70a0ba3d6a6dad9d1b7ee3ade694bc9ffa1a4570f3ee84139214c4d1efb609df7834a7f7599790797c243fe38600de003ec764cc624aca97fa9eae3cb2723dd61f73db43bd54990ea9102100389e61249bddde2171996c906d194cbf49871045375defa1148d8763fcbfd25ff126e2f49cdf3497de2d638ba0d9b3428cd959cdc216ff825094", 0xf7}, {&(0x7f0000000600)="ef4a918b7dd6fe4a03397a5bd728a2c5b36220f451d6e7af4a644a771e7d71c56e32d690e98435cc6b9d800229dda477490bcc718e835bc019d48e974cb451239b80ccf1fdcb278c0e647ac77548e5ec05c3725691e4ddd554cabb3f7c3a9d7fbc3fd228114c97900ba1e5e4da618c11d8990ffbadd8066a8374507ad40ceff62fbcdc150ebc4e8ece089126ff2f048334369f53a22f05273259ebdf97c4096f72350eefc80b602927a808e5a44ad535ca48bb4028f2d42ac25d065edaa655d74c446b035d965f1f44581d62a8aa1f598e488f55416fe74972ebf28bf0d7bf58269a9da12bfe5912bd389077d5e888056a64da", 0xf3}, {&(0x7f0000000700)="b589b3406274a292b3f462aa8e06b4a56e8aa0f658741c8b337b0f44fa910ced53a1bfcc4f1e2d023dba9c893ef3a714930cf6ec2f0b1c29158b8ed5c8c353c13b0471d6b614911ea5a93d5e3ec2a6950801b3b16908c5a244721b37edaa8748dc8b7f4c978a8cd0167d0bb20b594e0a9694951f0a12f4181d6b786b9abf0977e7cf39a315abbf8e699ff29ae35fbd6bebed885bd83752f69cac247577a0a53e6315b1857eb8d41b545bafc91ea0c61957c9b4c6f350fe6937794d1e891255cd1ce718a7d3ec4dd25bdbc37e5ed762c49886bc7de657384ea6c66adea037ee0a", 0xe0}, {&(0x7f0000000800)="81c38a0f46c69d3c3b2f2412e16a018fe3dee10f036ad31df88954aa0a778eb9b49128074e65ac444eebdaa9c51e7dee7fa3ac3f3a8d52a29f5c00448bc4e265e3b3ac0d2b35439c107d98f23188307fe13ee98bbd6f56065bd2c604ed4cf1fb9700bd938026d55eedc6efa6475d1b3909b5e4781cbe7f5c80eb181b73571e013501fe09b89633bcadc36b818692dfc4faa86eb32e96c9e02ba65d2f35bae1f8e097299065de8b9d4ffb84433e44536cb9a63f886405b2abbe0c71e3192b04c116f224eca319372df167746ccccb71792c4df300ba08591f21", 0xd9}, {&(0x7f0000000900)="a4efab946f06708b9ce9f3b920469b5fec5d2788fd8cad4ed9e43475d37a0baf682e1bfb0cf7ba632744d58347f4aef33d98d4086aa8c2b914c9fbd3db8fd15317099c5b7bc276a51872dc082ce7525f0b349f36c29a3673dd842ff5008e14cd7defe1dbf4de7e539511d9960ea3b996a3aa083b82465b572c84c48c2b65be08da7bfb1c72", 0x85}, {&(0x7f00000009c0)="4a1696f1a3fdfec45dff0a298b0ed6a61b85913a38b88ccf5bd1115c9b7e57772b112129eb869fbd8afef81459aa1d8a3d33a578b63ed058d42752ab1418d571f0e832521e1f4e72c341b0cd28ecb352a5f16d6066124f457f43b62a23cd375e2d0d4311e980b207eb1adfb62b1eb8c73015356f1a9cefbd48584bbe11b7d9c41637130c2b7b6eba1b3885cb9e82fa88a807625e54e04f1247bb97ca9ea94c3bb779d6cf583337779b56b677d34449b1ffd4694bfbe799ed57524a5a86237dde", 0xc0}, {&(0x7f00000003c0)="c4f27c56ebabe1bd634ecbc1dfdc92c0fa923f3d207bf24c4709aee709ceb848ad53d7f1d86604ac5ec14c16ccf95b7cb8364591c39da2848afe0d55a21ecac1ffbb4f78a073dc0adefa537b322a1e338e7bf7a8093cebb9bebbb416240bc8cadf25136251eed8bf910048be91047eb3c085ebca2a816d63db", 0x79}, {&(0x7f0000000a80)="48bf81cfb5f54f3001e005a633eafda393e047ef8d25e4233cbeb43d47cee57f34787b4f5b2755b897a39b7cbfdf0746531dad6ac3fc019c255f091c15b72928715d64d1e233851d7550271c4566806b085ae0173fb388aaa474fc316662c712606733a5b15ad8238e579a275070dd31b0416a2494dbca1651a3a017cc69f830ecca37015ab2705366b9c9cc76a87a2337e666909be5a202fadb57752c69be575ec9d04ce1402d9e297ea37b4ad4b7fcc1ed032e1b275e87", 0xb8}], 0xa, &(0x7f0000000c00)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x62}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x30}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0x7, @mcast1, 0x2c}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7f9b53a3de14c2633f826ed58aa8e621235de5cd830dfb1bb3580b7cdb21189f19bdeea97639928a23a9803cc8ddc956a48b9bb909b58814b3251468b4f8173e367e71643ed6554a9cbe2624571d75bfd5b465a503dc882003ddf19ca2d3305d3cf15bf18d32365e01fa6ee625ca5952", 0x70}], 0x1, &(0x7f0000001140)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @dstopts={{0x28, 0x29, 0x37, {0x32, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r4}}}, @dstopts={{0xb0, 0x29, 0x37, {0x67, 0x12, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x10}, @calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x3, [0x401, 0x4, 0x44]}}, @generic={0x81, 0x25, "a9df5c6d75c32073fd07bcc9e1a3156b2e8dc6436c6a04199ffb09d696e3e207fdd1cf556e"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0x3ff, [0x8, 0x8, 0x6, 0x9]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x1ff}, @generic={0x7}]}}}], 0x130}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000d80)="7b0e158ed2026c835642eb22bf6002ffa71bf6a12d9cbe0487de2d813f3a6ffa72bb16545c1d32602314af6447ff652c2fa0c19040e6e5156d19f320f3b43ac3d2874f5fd623afbdf9d3fda02daf127a1adaab46d19022a6cc3112afa0d4dae6de901ae5794f71667485516350d6276501b99fb3edd2a68a232c2a40faf6acf1e810a25f", 0x84}, {&(0x7f0000001300)="ed2e7500874b94af1f964b08f5031f105a14a7f377c57baf8e83c84a9453cce787ba1b6c1b4be70ddc04b48a322ce66cf587987d6dc9976384e9db9b760514ec2846f85ffcc883f018ff5c4115c640938733e47a781d73e675b9d1d75104bef642d5bd2d01cfd2a3e01b571b813eb822236d993fd24a9332a130bc617c40c13f4ecca45264fc580d2848780fb1b4310b88980e6c13931cc4d3e2daa113167dc3db49ee5f988a9a1a86392543c1f8d11a64c785dbc1c4ae330bdd8979e51e97810d65def625d1351e5f57ae5266b079c3c78a63cc2e8cf7e614d4cc4bffac8b59ef1c74ab36e6863b6b81c3321cdf54a6e693de43a8c11aa6734742e73ddc6c7621d4f7e32702e7fadb0d106f2ab919c9e5a685f1b0c65c638ee3433042c55f91bb494768bae232944d2c1256ee24fddc1e0d5b8c66b0f0ee343c7a81e1e66ac28f71e08aa56173d2214f57157c5746e4a0dcb677fb4f6c6104db639bc3839ccb3c6e5508d85debf7f370d485305c819a175b75d6ebf07848dc73a67bc4027a81ffecc43ecb6d049ce82944708690a97637660adbd1d66197e37e9214ced8d88929fd58e320783820a15b02dd7f05b21f970ba72b50f47b274dbd97273e2fdef7e5be199cf6791583c716a1339789f0a44658838632858fb99a6e6d3c24681cfc1a0a75858b8f8ff78d2fcb6e789b6a8fe1cd4af6eb705580ae2698178f3a11b5c9fa42428aa82746d61409d22723c181e43ac718d7dc3daacd625c70454d68d7c2b8a4251e5fd9d77e698f8a02d3e7055eec5bf6088fbd1873de46f7cf3d956350a45fbedd3cd856f0eedb2d6fb48df4e5bb9c21849b0e64bb32f1b627c43c341316dd3ec390ff8cf850e4599fe294f6dfe362cdce540c7a7abcbb69d9fc43095533c79122d3fd554d90fdd9a8aa6f7008986a310862d18885c3c5bb759a7dd1bc30c607a354c67a973fbfa8db0f6c5fbc0e78d001945faed9723354e23dfbf4f55439a8fa22985b43a5d81965f75102647efdebe689acb7b484771e7459c83e71eaaae8828b92b802137e1ff05674a49429768919a85462da68d1df84f65f46d8cf2ce380858bdcbad4695a106154757c4fd6040639db3224608deff1bfa5cfe7c231edea0cfb9c027bb4c220bf1130622685d3b21645edab4bb48f368d2cd622d39892dd8fca2899361162d624e37cf72ee70780f8e34b9e32d5190adb2aaec8dd9fc3236c95e971cba11c6f418d21db98078d0420f48d703c80261efe744f40264c1daf00e85aa68d12a98dd6d86216b0c02d4112c13292c712dfbf126cfee1e9220f927b35f3d8ddd94112bc7f1eae73a7c15710b6cb55fada822b77daa8ce1116502dec8b521eaef763b164d8134f6b2b2498736b74cfe9209d1be07851ee28bcc959eb2694e1f8f4feae1dd000a47cc57bbee423753695274cf8c8df9da1ed0c970252c8f5bedd4550e43716f65280fa7dd8fbadd89951fba789ef58393496ebcd7d1cbda349c5932578e264eb276a49647279c6950b6fb8d92b3dbb2c3ad8ab1062410ed31c77b92d2aa11c0ea36dc983023310784e324ea09ce8d9ad773a7072afa73eb95fa705fd3dcc5d0ee98ff5769f6016624cce3be769d81950da80bd26ecddf772f7ffc682f90504d23c9b1d54ac6c185c39ed84e2e7233a2906756f9d6a1969b2206ef582934d0652b97e0aa7aaa0e0f025ca9401064ff192348bb16a51569cae1b3a537a65bf6eba8c30dee4a43a66060fda17d160f56d2d4717fc4df796c9b805cdc2c8488b5081ea5859c52c2b74ac58a6b36a982cef8d306a8469cf855ebab5f53d025c64289bac1abd0e2b6100a167f131288ee02c0c4a8b28f5a07057f07e726a619edbf1bcb83181d25629d37127c1e3087f4120d6d5d153ccef0432c8a8898ea82f9fe15055b161c5b9b6a3e83bed563d2389e7f5ddd0504a098e10ca4cb88c5f01f15e55fc4e3e77ac8bd96219ed96f7bde29b44d11b7ddf829afd18de00905ca67b097b765f536f3d32caa3bdab8ffd0f26db27a5d52efae47694b1924a4f5b06cba03257ee7def954e6507e5f687ff5dbefbce2f58422d13408a51bcc6e604429371cc2b3c18b68b45e40ceb9b607178d90faee0d84d8de48d950d942184a4a7395784de07453e60b9c85b8017ac82dbb589326a0d68ec40611e4c8931e8c626174a9d00d72cdb798650b3b49078687a360df6adc36aebfbb7b31f4f5f55e28c66f37c7776b0c1690ce427d99e0f8641172de0e475fbdbbd7cbeb46a1bbf92254f41c5529b4d12b0137a685dd0d687710e3d833d6248631782ab61c5813d3a75397f3975d84e2846b666a91c4860164e592b92ebe71bbb946a2e2328ad130fd921cdc2af1a7fef594930088896d9bc9961a743532270b5b04b06e71a76d9b99e2c347f946f58312df4efe3e3e1eaec43df78176cc8612d96d408c5aeeaf3c5cbbacce55e25cfe18e2aa3d620f7ae4fdc5ce34b4ce862059382b8db0cb21d5a767dab4b4afe2dfafafce9cefa18046bc8e2625ef94da5b058c96ce9c9759940cfe10743b074b4128d205143161e32ee1517aa7e29b2427d3116356ced080add28e8f09a278ba70f2562bdc3f96730b5d7fa943b9374c3a85832c4eaf49c675712929817393e3a27063229165b1d8658be15dc7230d6051d970ecd2f5e9bd232eb9aaae99dfb7074c417231353f7a9cc1aa145cac59ecdee989ea6e41c86aafff14016e4c46db971e568dc55e40bb59251faf7a39302e76ff48b11d991173f085b7bb2fcf4b5e7296b543441d470b4fc4386211250e4b961bf3dbf3c9b7040ecdea2357465ab400db8703722b345e1b0a766ff9d00db05527c8b4381d7b15454cbe5d75aab9f589f375d2575879caf2d8152a4512178f811708fae7c184a740a366814ba4c773d3bfebed051df5174f7fecbb0379cf2a2c85317720d0afd22758186e4d5ba4168cdc3162320074e7982b73797d17275198c9cba6f51e57d0bd8ef2f7e7342d9b32462218e4501a01f420c9cc40224a12b7a88257fb34743e3ad7008b2dd4a5cb17ea3e7c282c0d6034d68f99157ac08e66c2b78377373a8da36320e1dbd40765f36fa7dc580832c0dec161f20fb59bf4977eea31c4671a39edbe192c04a3ee11497826ef46fa9679eb11799fff05e3d18feac17b6fac312ab2936c2bf97ea9e0cff1726e7db84fb868e450a34215c8166d478e7935fcfc655bbd27528aeb87fcb5e9bad94cb18b16dedb672292b7c1c5409eb3d4540ec60554d59b5d238c079a926056072925d0237b8e9ae808083ada4d41006847f3cd3173fb2cab00e5c6bd431f2f7ee9205b84dfed165d230be1d46fc507bf130d225a9f0006383e1cfa06f148986896a6ae9e8d4ba518d78c1e8890cedce0a58ba9be1ef2414df7577d9b4b89bd96896d17a31f9c51a87db908cdae395d854b08acab42c365993b8e354170ccee93b30daa45eb230c749b132041eb769bf67b91deb841f7eae365a3994e650a918b97864f8fb5cf0be05f02044feaba64f9e520a7c998a4bc1839debcfb2dd16cf2b0af26ddfc6cb7c8d8535b88da59ebe0b04612ffa77ce5ceef88f16f34c3c543d786b8558a6b5c919bcb09feebfeaac8625e358bac869696e1ee06346c05e207f1ab0a15d98d37bc8221d7adb6964c49c0e029def155a1f23e62bc3bb5d45472937c51e83bea6b168b0ea61bd51bc3578c543590d18e4a8c07ecf17bc7d5a76f179cc81522a43a4b4a55ac8b1e0a33702a1b4dff31f3cce0cdaeffe2388cbbe1feaa92e93dfbad44b7b671aa108d00de77293f3efb37fa9f0411df95a9ef9b9f85bfe044d6b64cd2a062efde1b4c73e3b20aee67c4de1ae3a8c8ae52980d9f704695a3c2e91bb43b15bfb650f6e7528cb01bb48a56b64a39c4f4dd2c3a19368d15f290eca0283dd1830a5d23bdd564d439eb3cca411d4e839cefb95ef8822633e8f306f1b1197ef5747b7d88ee2ef599aaf1c09613a387513589dc536702edf1c308d8109d1616859cd5bf962f2d8141b422d5bcb935b9312b3c1297af38f4c9f210a882c351f8e40806792983344d8a6f9fd1ad95534cf5f202fb5c058fe50019177b047c38a0ed43c9a2420a8bb9fb6ddd922cfacdf16dd741e04eeb74016ca60a4eb97ddcebc4f8f8794d2338e4f3e5cbdc06e45aa6be3a8e73b4b94ffbea0ed2be0f2c01951d9ae5f64f5aa19ebe9cb81a8f54dcee8aff9a69e116a3b50a8a60a97ba369f6f26fb7413f2164fe34fbe053b2b52a59bb82935b01eaa48ddbe9c7ced416a86ec7f2cdb28b65879e7185c29dd3a005b1696fb84bdde0ac7917e1e43117ed4d91e996cd2194d58478a1d5b7ab48f9ac0ce4a91dc9d2838faa8d1ffa7186551f83e66349c9c70dcc0cd3127ad270b5592e505459d0dd778c2031f0db00c21960fe819486b4ecf18b19b5001500500fb910e87cf975aded4878251127e55c08f1f4d8b10bf1e75ab058576e4e93179b02df92cb5a0e0e57fc93ab9677e37baa327a838faeffa6d527cdc24ccfd9301f1fcf1a37a5243f2177ab886047a407f14f7121bce09a48d08ca7784e34738f8d769dacfa9c51ce24f200a64b64dd4d239f2828d09c1577eb5a23df25c85fdb6f705ab4916fa989bbdd56fcdf9ed981be626f1172044d6b8eeb8305052906ba1c013762e9d2536c6b0117243176077489fce851cc4f96571a54803b22c05bf5f608314ab2452fb9a26504cf37798a8454bde722946f6eb0c9e61c6aa8d474c84caf5958db4075f3d0445912c5b3577298e32ab15ab17d9eb2dc605a2d2d9541df67f49b614dd5bd6f17bf02a80716c1697eae8553ea8253dcd2e22316d1bdf90f90533a529d5f68ea38a22b50465f302db1986c788ae03d2bd93e47de6c349ca1637395bfa2469edfd9e1cfd2e552ac821803d720a0dea7637f021b1841e5396b4e456334b83cafd8b59cb09fb948efc83e53e166acee6c49deed7e83ed81c80b24fcff7ac0eb00fbecb6c9e96481dda84b4543ad1aacccb2a0d14cb8aba5cddc5510a99fe5c906bb7ad581d7c32822cbb12ed258d011be1e09bfb3dc5bf56c417877d7fc3620ad0acf6f0a9bcc4c0f6ffcfaa101f384412ea0a9f0bf8b3c4fbebe6969b5ef61495547b2062267b88b70ab775c269dcbdb7b7ec5ded5638707784a5c9a79a68f5e3b3bf4424e5e35829f71518b5892e2bb41e7b984ca5350006d765357931dcd05d38760021d885813189376b6741c546d34f71bc49632b714995c01fcb6496867b94c0b2f22df2e4e0dafe5081c748f3819f98ef1e4d3455255a2f070c0965ebbffeb941332fdadee2b5016f67f369f9750210d0b0f32c0d3f297d11f3b74ab3658ed8a83e677592c0a75a87cae6a67b028b9bf0389c2a4a0fd77657cf8d149ce446e2931845cb3a71d5d86dd8a3a2e998352f323c64b42b599695e297eba9e36a02ea00b18a99918fb79a1487411ae0c072eae84c2fba7ab7fcaa18c00ab7d302e85ad799f890ceaa22dcfdb6e035ae034d85cc72f3921d49ca81e512e79fa26dc92930754ecd810f450ac28da0ffd99b2bb6727129a443b9ac0bc03d0885c951046a6f10e44d7b4be5498f7b701de96fbefe218e6825094c271ec41f6ea0034a18e09d177eda54007c40d5cae33d82b3429a6284cc8210db5f24b5645f231ee5fd8fc2708fba4aed10428546b42fa2b9ee20eaaf4f0f6ad8e7e9a7993ce9f89dff24c6d416e72fe859b0449aa2ba1d70f972558e01b03fa8f7e1b582ee509378a1a7981f8dc6f36b9014e961dc", 0x1000}, {&(0x7f0000000e40)="d5679418369962ee552b0bb95c6da074f201392ed0f3b1af3fd4ac4c66d16e8159d9d33e89a71a44de8791c095f1299f8cdf897e954c95ff6b50e5e96ad783fe0ffd256253556e94fc2c75fc1270a166b0a6a248a575bed85bb8a6721403808209c467f535a4919996c38a85f0abd086911b5f2f35e99b4288561bdf754c98b35ba47568c4a94966327be5ee7184b23deadf614709f1dc14039ce02dfc2c58ba3776cef350ee52d9a645e76f32d920357387be476824ab07f078da3e928ad73d6196dc68a590c1225345bcb723858cda30ee42", 0xd3}], 0x3, &(0x7f0000000f80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}], 0x18}}], 0x3, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1m43.116447202s ago: executing program 3 (id=5350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000080008000540000000020900020073797a310000000008000a40fffffffc9c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000700003806c0000800400018064000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000010000340001800a0001006c696d6974000000240002800c00024000000000800000000c00014000000068"], 0x100}, 0x1, 0x0, 0x0, 0x4008851}, 0x40) 1m42.977738391s ago: executing program 3 (id=5353): syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600b8070000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x11, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@ldst={0x0, 0x2, 0x6, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r7], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4}}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x2}]}, @enum64={0xd, 0x7, 0x0, 0x13, 0x0, 0xa, [{0x4, 0x4, 0x7dfeecda}, {0xe, 0x10001, 0x7}, {0xf, 0x10000, 0x8}, {0x10, 0x5, 0x4}, {0x7, 0x6, 0xeef9}, {0x9, 0x7, 0x7}, {0x10, 0x6, 0x6}]}, @typedef={0xc}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x6}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @volatile={0x8}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/187, 0xeb, 0xbb, 0x1, 0x6, 0x10000}, 0x28) 10.990531937s ago: executing program 32 (id=5353): syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600b8070000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x11, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@ldst={0x0, 0x2, 0x6, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r7], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4}}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x2}]}, @enum64={0xd, 0x7, 0x0, 0x13, 0x0, 0xa, [{0x4, 0x4, 0x7dfeecda}, {0xe, 0x10001, 0x7}, {0xf, 0x10000, 0x8}, {0x10, 0x5, 0x4}, {0x7, 0x6, 0xeef9}, {0x9, 0x7, 0x7}, {0x10, 0x6, 0x6}]}, @typedef={0xc}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x6}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @volatile={0x8}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/187, 0xeb, 0xbb, 0x1, 0x6, 0x10000}, 0x28) 6.174844151s ago: executing program 0 (id=5527): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000e0fffffdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) close(r4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r8, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000010000442e15e9360cab922d2d0000000c00050000010000000000000c00020003000000001c00000c000200ff7f000000000000"], 0x44}}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) 5.951920867s ago: executing program 0 (id=5533): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x0, 0x2, {0xa, 0x4e23, 0x3f55, @private2, 0xfffffff9}}}, 0x32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r5, 0x100000af5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x80000000) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xfffffd59}], 0x1, 0x1) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) write$tun(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="000088a8000019000700010103006234086500140600fe80000000000000000000000000001dfe80000000000000000000000000002d4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5140000290780013144850b49a6b98ddf5f8c96c912ab825ca0a70e1b4cfaaad818bf7895dc67f1c43b354783871198769d0c095535f46d53e27f65c3b379f46be64ef761e6b36d00e21a27e317c00a4fc42e0bc27ef427e1ab05015eb928be20c2981be219bb79d87f4f43b9dd2fb7bc4e41e6cb34457569027a98ad2d3d3963741ae99d843a099ac"], 0x4a) close(r4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) 4.971632837s ago: executing program 0 (id=5555): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x3e, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r0}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 4.939121357s ago: executing program 0 (id=5557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) recvfrom$inet(r4, &(0x7f0000000780)=""/58, 0x3a, 0x21, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="634d2bfc31dbbc5d0e9194eb68060d88a01f917b4a12883192155a86cb5a532f80a716c813719065da70a192336a64cc0cda9c0591dc61652b609709810e7d35dd06d0c7e7ae", @ANYRES64=0x0], 0x20) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x23, 0xb1, [@private=0xa010102, @remote, @broadcast, @multicast2, @empty, @empty, @multicast1, @rand_addr=0x64010100]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x0, 0xb, "960000000000000000"}, {0x2, 0x6, '}(\'#'}, {0x1, 0x4, "e23e"}, {0x0, 0x9, "17b1021cc5dacd"}, {0x6, 0x4, "26b3"}, {0x7, 0xc, "228d7ee088d1065b1d9a"}]}]}}}], 0x98}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000040)="37a8a6c4", 0x4}, {&(0x7f0000000280)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e528", 0x1e}], 0x4) 3.941090062s ago: executing program 0 (id=5573): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) unshare(0x24020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x50}}, 0x0) (async) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x400c812, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) (async, rerun: 64) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) (async, rerun: 32) recvfrom(r2, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020447, 0x0, 0x0) (async, rerun: 32) close(0x4) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000380)={0x0, 0xffffffffffffff07, &(0x7f0000000340)={&(0x7f0000000000)={0x34, 0x5, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x0, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}}, 0x4000010) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x1, 0x8, 0xb, 0x2}]}, 0x10) (async, rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (rerun: 32) 3.719704122s ago: executing program 0 (id=5577): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071129c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0xb9, 0xdf60}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f00000000c0)="7febe13e2436470ed4a52173798b6919c56821f21f4bbec5048b86a6fc04ade2eac75c9e724d05a47dfe39a1f6f454bbc0dec79cfce606", &(0x7f0000000500)=""/4096}, 0x20) accept(r1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000001008510000006000000180000000000000000000000000000003f00000000000000180000000000000000000000000000009500000000000000370300000100000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 2.851335798s ago: executing program 1 (id=5585): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x801) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x90}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="d613a3b953c78010cf72acf16748be1783ef563a971e9a956bf6131ee4d71daae8858f38e48df7617d3824eb7ba06b27b91dc2228011c478002ad44f0b3dd52f504cce36f175b8f584a1", @ANYRESDEC=r2, @ANYBLOB="c8bf312c73cfa63442432875423972da331928c61b52af79502752669b4a2567e225", @ANYRES8=r0, @ANYBLOB="57baa1f7108e2cee2f5ad4a30d6c7d3508d0", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRESHEX=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x6132}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r9}, 0x10) r10 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe3a) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000040)={0x1, 0xa, [@local, @multicast, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @multicast, @empty, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}]}) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2.728489007s ago: executing program 1 (id=5587): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) write(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0xfce) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffd000) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) connect$pppoe(r3, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYRESDEC], 0x10b8}, 0x0) shutdown(r4, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 2.021484898s ago: executing program 1 (id=5590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r4, 0x0, 0x4, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r8, 0x1, 0xd, 0x0, 0x0) (async) connect$bt_l2cap(r8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784020000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.93563882s ago: executing program 5 (id=5591): unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r0 = gettid() (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) (async) unshare(0x10000000) (async) gettid() (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) (rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) (async) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x6c}}, 0x48014) (async, rerun: 32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7731d3b6e9ae37406803bbbd704bd5c3cd22cdace5b017e6cafb7e9b042d1e32d8c56ac753d5ba512edb8521ebc9734cb6a27480ca69e1b24ead6153d7cbc6671c3618703dcb47"], 0x0) sendmsg$inet(r4, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x90}}, 0x0) (async, rerun: 32) unshare(0x68040200) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x100010, 0xffffffffffffffff, 0xfffff000) (rerun: 32) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) syz_init_net_socket$ax25(0x3, 0x5, 0xc1) socket$phonet_pipe(0x23, 0x5, 0x2) (async) close(0x3) 1.344263796s ago: executing program 5 (id=5596): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x7fffffff, 0x7, 0x7, 0x4, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x64, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) shutdown(r2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000400)=""/101, 0x65}], 0x8}, 0x5}], 0x1, 0x2000, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fbdbdf25050000000c00098008000200030000000c000280080001"], 0x2c}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x200, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x226}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080)) 1.33744044s ago: executing program 1 (id=5597): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(r2, 0x0, 0x8044) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000400)="b0a56aebc1342bbe86ad159eac6597327dc33e98195f3a1de0caeda3b33b", 0x1e}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) writev(r2, &(0x7f00000000c0), 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1.038401451s ago: executing program 5 (id=5599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0x0, 0x0, 0x400000000000}, {}, 0x200000, 0x0, 0x2, 0x7, 0x0, 0xaf}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x13c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r11, 0x4}, 0x38) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000000d0a010073797a31000000000900010073797a3100000000100003800c0000800800018004000100"], 0x3c}}, 0x48000) 970.894288ms ago: executing program 4 (id=5600): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fc"], 0x50) vmsplice(r1, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_proto_private(r9, 0x89e2, &(0x7f0000000040)="bf6367ff144cdbc2cec9142f06040601c4b34d3514dc617e53cc6f9ee1d849b2abceefeabff8dadf238ab4f6fcd842adc8e528f8bda63305") r10 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r2, 0x0, 0xb5, 0x1, &(0x7f0000000a80)="12604c9965734c0dc8fae4c5e80ca8eb73bdae89501daae9414572f9281aae43b1db7161fcaa07dc3aa1c30e613b49d3ab76b4effca65bea13d7821e04cef0366c6ee6ba7c2e98cdbfd4270cc4bc495a447641e9480a69f7398006ae1096dcfc6a8705419d7a01a30739da32f68396456fb6efabf83d49460c259718e8b812c2f7cb5e8b7bb236b5d25fa16bce25e173285762e53bfd2027300c6ac2252fe464343a05c72b9d9023e6089811afb3f910bdc3dbb433", &(0x7f0000000900)=""/1, 0x9, 0x0, 0xed, 0x52, &(0x7f0000000b40)="231b8a1657ddbe6d3a83e00a67daa1ba15a8d2089e28ec4f7b09d198c774fe2b3caf5a91f65736d32a29aa00b963debff7e5e29d20c2aa823ce7f1920b326e32e5540061596d8c875b9009377b70defc55b73c37618835321fed5d30da031a3b96f08ac82aff847f1b8af6146c9a6d24be06358978675f301c0e8e5d16c5908e52de1444ec9fc7fa79af0d43907476c17e5ee264440814504068ae0a11b1588aa633f3551c03f18aafede5702b37e10d122dde8781d4c5c60426018d921c67032e2fc3fb4b67e98318cb7ace021773877b0091264ce201543ec95fc1081a478869d37c889a3ba00fecb7dee9fb", &(0x7f0000000c40)="7696db3caf024d6311bfee62036f8de06b3c9ebbf0eb25ba262629025dceb899991878dc0a503888ff4653465c60082586f2103f32f3813497d9dcdbeec47af53572da1761c710d325e57f04d5d286167e5a", 0x1, 0x0, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4, 0x0, 0xfe, 0x0, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x13}}}}}) 820.255476ms ago: executing program 2 (id=5601): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe37, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001340)=@ethtool_per_queue_op={0x4b, 0x1, [0x7, 0xffff7fff, 0x6, 0x200fff, 0x8, 0x10001, 0x1, 0x28000, 0x8, 0x5, 0x9, 0x1ff, 0x1, 0xfffff001, 0x0, 0x5, 0x9, 0x6, 0x5, 0x1, 0x401, 0x1000, 0x4, 0xfffffff8, 0x0, 0x6cb, 0x2, 0x9, 0x4, 0xffffffff, 0x6, 0x50, 0x5, 0x0, 0x2, 0x5, 0xfffff001, 0x5, 0x8, 0x3, 0x2f2, 0x2, 0x9c, 0x7, 0x6, 0x4, 0x10, 0x1, 0x10001, 0x7, 0x75f, 0x10000, 0x1000, 0x0, 0x33, 0xb, 0xae4, 0x8, 0x5, 0x3, 0x7f, 0x88, 0x7, 0xffff7fff, 0x80, 0x6, 0x5, 0x8, 0x8, 0x28d, 0xdbae, 0x8, 0x7f, 0x9, 0x3, 0x1, 0x6f44, 0x2, 0x3, 0x9, 0x0, 0x40, 0x1, 0x6, 0x8, 0x5, 0xfff, 0x8, 0x7ff, 0xe5, 0x0, 0xf, 0x80b, 0x9, 0x8001, 0x7, 0x8, 0x8, 0x8, 0x5, 0x1, 0x9, 0x6, 0xa, 0x80000001, 0xfffffff8, 0x7fff, 0x3, 0x8001, 0x8001, 0x9398, 0x4, 0xf1, 0x4, 0x5, 0xfffffff9, 0x5, 0x7, 0x3, 0x1, 0x8, 0x0, 0x0, 0x400, 0x2, 0x2, 0x9de, 0xd534]}}) unshare(0x20000400) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010025bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="ff0000000000000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_getroute={0xd8, 0x1a, 0x400, 0x70bd2d, 0x25dfdbff, {0xa, 0x80, 0x80, 0x3, 0xfd, 0x1, 0xfd, 0xa, 0xa00}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_METRICS={0x71, 0x8, 0x0, 0x1, "45e302a81d7a473f715de2045ba92fa491e98cc5ac2ea6111032cdc29664b4f8cb932a2d9634b3506784072aa1333f0699ab90b3b58c0308998de21623ec0ef40398ab65312d88a5080376c0419a695bcd0115cbad671e56ec7f9f2c33b64445b193158e0ed036414b093835e5"}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_UID={0x8, 0x19, r9}, @RTA_MARK={0x8, 0x10, 0x80000001}]}, 0xd8}, 0x1, 0x0, 0x0, 0x884}, 0x20002840) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000e00004017000e401c0400"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x56, "53f47e507a6fee1f3457997cafdcd52af7aefd59be3e69c45b230cc3bfbca9a76f3672d3c9cc05fb625df9b95b000ff9e6cf0fdfdce7d18e634f094615712902e1b94ca55e4b763eac8d1b0e7575eacb189697eaa3dd"}, &(0x7f0000000000)=0x5e) bind$netlink(r12, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) unshare(0x10050000) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 695.643808ms ago: executing program 4 (id=5602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 695.043523ms ago: executing program 2 (id=5603): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000000)=0x8, 0x12) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) r3 = socket$rds(0x15, 0x5, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3d4}], 0x1, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) sendmsg$rds(r3, &(0x7f0000001c40)={&(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000740)=""/185, 0xb9}, {&(0x7f0000000800)=""/38, 0x26}], 0x9, &(0x7f0000002d00)=[@fadd={0x58, 0x114, 0x6, {{0xb4, 0x3}, &(0x7f0000000900)=0x348e, &(0x7f0000000940)=0x7, 0xffffffff80000000, 0x9, 0xffffffffffff6a5b, 0xf, 0x15, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {&(0x7f0000000980)=""/153, 0x99}, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/252, 0xfc}], 0x1, 0x5, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x9}, &(0x7f0000000b80)=0x5, &(0x7f0000000bc0)=0x6, 0x101, 0x5, 0x4, 0x4, 0x50, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000c00)=""/4096, 0x1000}, &(0x7f0000001c00), 0x1}}], 0x128, 0x800}, 0x40408c1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300766574680100000063767461700000000800014000000005"], 0xe8}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0xfe7e, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="05072bbd7000ffdbdf2501000000680002801c0001800800010006000000080001000300000008000100060023002c000180080001000400000008000100060000000800010005000000080001000800000008000100000000001c00018008000100030000000800010001000000080001000100000018000180140002006c6f"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40014) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 684.728544ms ago: executing program 5 (id=5604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000002c0)=""/139) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) accept4$llc(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a0000f0160280050017"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) getpeername$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x81) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x8, '\x00', r8, r9, 0x3, 0x4, 0x3}, 0x50) 645.658161ms ago: executing program 2 (id=5605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000080)={{r2}, 0x6, &(0x7f0000000040)=[0x5, 0x3, 0x1000, 0x6, 0x7, 0x7], 0xa, 0x8, 0x1}) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000180)=0x7) accept4(r3, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05"], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 483.693623ms ago: executing program 2 (id=5606): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000100)=0xfffffffb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) sendmsg$tipc(r2, &(0x7f0000001700)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x34, r5, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) sendto$packet(r0, &(0x7f00000002c0)="1c102c2800"/17, 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) 481.411576ms ago: executing program 4 (id=5607): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4}}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @val=@perf_event={0x9}}, 0x18) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4018, r1}, 0x18) mmap(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x2, 0x2010, r2, 0x8b638000) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x800, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x400d450) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) shutdown(r3, 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@remote, 0x63}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0xe, 0x0, 0xfffffffe, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r7, r2, 0x3, 0x3c, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r5}, 0x20) getsockname$packet(r7, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8, 0x5, 0x36, 0x1000, r4, 0x2, '\x00', r8, r6, 0x2, 0x3, 0x5, 0x4}, 0x50) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000580)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffffffffffff, "a6da9dbd2bdf16e7b2b14d3848d73df46febadb3e279e1967e3bf2598012fe76", 0xa, 0x10000, 0x2, 0xd}, 0x3c) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000600)={{0x67, @private=0xa010100, 0x4e23, 0x2, 'sed\x00', 0x5, 0xf, 0x6d}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e22, 0x0, 0x4, 0x4, 0x80000000}}, 0x44) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0xc854) close(r6) ioctl$SIOCGETNODEID(r9, 0x89e1, &(0x7f0000000780)={0x3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup=r6, 0x2, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0]}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) pwrite64(r9, &(0x7f0000000900)="9902a4919e8ad86c524e1ecde36277199880fa4564fabe1e74f4400599f434d67e2fdb114f5927974e7ed570d0d129b39fec4b3ba984dc7ec7f6ca394abf9487432508076cb734fd480e4546966cde4d2aec032e23ab82e81731598f6758ae", 0x5f, 0x9) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x4, '\x00', r8, r7, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r10, 0x58, &(0x7f0000000a00)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000ac0)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x18, 0x9}}) getpeername$packet(r6, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000bc0)={'hsr0\x00', {0x2, 0x0, @private}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)) 447.35214ms ago: executing program 1 (id=5608): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) 446.83638ms ago: executing program 4 (id=5609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x800) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfc}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42004100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000001a00c11f2dbd7000ffdbdf2580805400fe00008600270000d35b00954ab7c646690a92b7a6fbc5f489875294eec4c08ebdf81df0e94bbbcc182e6b62a390cd6d51b51f20e18a28b3e30640d6308c4c51850c4605b97e23716d3cb8c0d13126a61440f6266ea79de8a8a959a00656119be79277f82888b8c1f60276fb493a24dde78e4bc5355e5c9d7c03b02abac91e7f9bc73b6b45ba6f762e7093bac765493355270f6da80237fee943acd06dc6b3eef597bb1eef50c84e75ae0046724c3658203dba92b10e15c5b7292754b4679128da6cab5fb90a45c1b8a054aec42b5e3d22470f3c02a32600985c8b11db07b7b691d45cf5e78ca7b242819c44109c8fa1416cbd03e62a1f158f9bc17a2182de71ac425a967a19542224e2d88b1e933d2d93a3f3338e5627b685a2dc58e2fb5bae06"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 401.208884ms ago: executing program 2 (id=5610): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000200)=""/208, 0x32, 0xd0, 0x1}, 0x28) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4000) 303.578525ms ago: executing program 1 (id=5611): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a802000018014000300000006000600020001000700010005000500040036"], 0x40}}, 0x0) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) 236.310489ms ago: executing program 5 (id=5612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x150}}, 0x4000010) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x4c}}, 0x28000000) 109.219946ms ago: executing program 5 (id=5613): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x20004000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x30, 0x0, 0xa3}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES32=r4], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='task_rename\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 59.646714ms ago: executing program 2 (id=5614): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000000)=0x8, 0x12) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) r3 = socket$rds(0x15, 0x5, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0", 0x3d4}], 0x1, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) sendmsg$rds(r3, &(0x7f0000001c40)={&(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000740)=""/185, 0xb9}, {&(0x7f0000000800)=""/38, 0x26}], 0x9, &(0x7f0000002d00)=[@fadd={0x58, 0x114, 0x6, {{0xb4, 0x3}, &(0x7f0000000900)=0x348e, &(0x7f0000000940)=0x7, 0xffffffff80000000, 0x9, 0xffffffffffff6a5b, 0xf, 0x15, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {&(0x7f0000000980)=""/153, 0x99}, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/252, 0xfc}], 0x1, 0x5, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x9}, &(0x7f0000000b80)=0x5, &(0x7f0000000bc0)=0x6, 0x101, 0x5, 0x4, 0x4, 0x50, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000c00)=""/4096, 0x1000}, &(0x7f0000001c00), 0x1}}], 0x128, 0x800}, 0x40408c1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300766574680100000063767461700000000800014000000005"], 0xe8}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0xfe7e, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="05072bbd7000ffdbdf2501000000680002801c0001800800010006000000080001000300000008000100060023002c000180080001000400000008000100060000000800010005000000080001000800000008000100000000001c00018008000100030000000800010001000000080001000100000018000180140002006c6f"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40014) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 34.45664ms ago: executing program 4 (id=5615): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000840)) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001c80)={'wlan0\x00', 0x0}) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback}) (async) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010031bd70000200000000000000080003001519569df01ef72d1eaa", @ANYRES32=r8, @ANYBLOB="40007a800c000300b819ef41b86502d2140001005bb94ede0ca255436b442c31b8f4ed131c0002005a32b15512fd9f9c6c9524ce1401a0b731592374844529a4"], 0x5c}}, 0x200000c0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r9, &(0x7f0000000680)={0xa, 0x4e21, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}, 0x1c) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r10 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="a38fff", 0x3}], 0x1}], 0x1, 0x40800) (async) splice(r4, 0x0, r3, 0x0, 0x200000a, 0x1200000000000008) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x5}, {0xb}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r12, 0x8180}, {r3, 0x80}], 0x2, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={[0xfc8]}, 0x8) (async) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 0s ago: executing program 4 (id=5616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r1 = socket(0x23, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x10000008}) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115100000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) kernel console output (not intermixed with test programs): slaves [ 281.784492][ T49] bond5 (unregistering): Released all slaves [ 281.794215][ T49] bond6 (unregistering): Released all slaves [ 281.838922][ T49] `: left promiscuous mode [ 281.886600][ T49] : left promiscuous mode [ 281.937747][ T49] tipc: Left network mode [ 282.031320][ T49] batadv_slave_1: left promiscuous mode [ 282.038896][ T49] batadv0: left promiscuous mode [ 282.044245][ T49] batadv_slave_0: left promiscuous mode [ 282.051316][ T49] hsr_slave_0: left promiscuous mode [ 282.057641][ T49] hsr_slave_1: left promiscuous mode [ 282.072073][ T49] pimreg (unregistering): left allmulticast mode [ 282.166421][T10842] lo speed is unknown, defaulting to 1000 [ 282.172172][T10842] syz2: Port: 1 Link DOWN [ 329.416191][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 339.656343][ T5864] Bluetooth: hci3: command 0x0419 tx timeout [ 344.777392][ T5864] Bluetooth: hci5: command 0x0406 tx timeout [ 357.696822][T18798] netlink: 'syz.2.3553': attribute type 1 has an invalid length. [ 357.745564][ T6607] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 357.760260][ T5872] Bluetooth: hci1: link tx timeout [ 357.765469][ T5872] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 357.773579][ T5872] Bluetooth: hci1: link tx timeout [ 357.778972][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 357.786746][ T5872] Bluetooth: hci1: link tx timeout [ 357.791881][ T5872] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 357.799679][ T5872] Bluetooth: hci1: link tx timeout [ 357.804799][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 357.865084][T18812] __nla_validate_parse: 3 callbacks suppressed [ 357.865103][T18812] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3557'. [ 357.993326][T18818] netlink: 'syz.2.3558': attribute type 5 has an invalid length. [ 358.591219][T18838] netlink: 'syz.3.3564': attribute type 12 has an invalid length. [ 358.691889][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'. [ 358.724511][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3567'. [ 358.737428][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.745260][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.838208][T18853] dvmrp1: entered allmulticast mode [ 358.858889][T18853] dvmrp1: left allmulticast mode [ 358.893569][T18867] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 358.989805][T18872] bridge0: entered promiscuous mode [ 359.003951][T18872] macvtap1: entered allmulticast mode [ 359.014830][T18872] bridge0: entered allmulticast mode [ 359.023361][T18872] bridge0: port 1(macvtap1) entered blocking state [ 359.031324][T18872] bridge0: port 1(macvtap1) entered disabled state [ 359.041664][T18872] bridge0: left allmulticast mode [ 359.047677][T18872] bridge0: left promiscuous mode [ 359.059654][T18871] netlink: 'syz.0.3573': attribute type 8 has an invalid length. [ 359.213350][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3580'. [ 359.224550][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3580'. [ 359.368741][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3585'. [ 359.400129][T18913] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.419136][T18913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.570531][T18928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3589'. [ 359.582342][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3589'. [ 359.779243][T18951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3597'. [ 359.818522][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 359.952529][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'. [ 360.133420][T18969] bond5: entered promiscuous mode [ 360.140429][T18969] bond5: entered allmulticast mode [ 360.594187][T19003] netlink: 'syz.0.3612': attribute type 7 has an invalid length. [ 360.622494][T19012] netlink: 'syz.2.3615': attribute type 12 has an invalid length. [ 360.781915][T19032] sctp: [Deprecated]: syz.0.3619 (pid 19032) Use of int in max_burst socket option. [ 360.781915][T19032] Use struct sctp_assoc_value instead [ 360.815742][T19033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.824124][T19033] team0: Port device bond6 added [ 361.542814][T19068] netlink: 'syz.4.3628': attribute type 19 has an invalid length. [ 361.557887][ T2970] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.557987][T19068] netlink: 'syz.4.3628': attribute type 19 has an invalid length. [ 361.574502][ T2970] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.583505][ T2970] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.592841][ T2970] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.659390][T19072] tipc: Enabled bearer , priority 0 [ 361.669321][T19072] syzkaller0: entered promiscuous mode [ 361.674809][T19072] syzkaller0: entered allmulticast mode [ 361.685681][T19072] tipc: Resetting bearer [ 361.695647][T19071] tipc: Resetting bearer [ 361.703020][T19071] tipc: Disabling bearer [ 361.884594][T19089] bridge0: entered allmulticast mode [ 361.896424][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 362.036277][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 362.387007][T19119] vti0: entered promiscuous mode [ 362.392833][T19119] vti0: entered allmulticast mode [ 362.776319][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 362.866938][T19138] __nla_validate_parse: 13 callbacks suppressed [ 362.866956][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3649'. [ 362.968342][T19152] syzkaller1: entered promiscuous mode [ 362.973959][T19152] syzkaller1: entered allmulticast mode [ 363.411402][T19184] sctp: [Deprecated]: syz.2.3661 (pid 19184) Use of int in max_burst socket option deprecated. [ 363.411402][T19184] Use struct sctp_assoc_value instead [ 363.432195][T19183] netlink: 'syz.4.3663': attribute type 21 has an invalid length. [ 363.445069][T19183] ipvlan2: entered promiscuous mode [ 363.451548][T19183] bridge0: port 3(ipvlan2) entered blocking state [ 363.458245][T19183] bridge0: port 3(ipvlan2) entered disabled state [ 363.465011][T19183] ipvlan2: entered allmulticast mode [ 363.470345][T19183] gretap0: entered allmulticast mode [ 363.477138][T19183] ipvlan2: left allmulticast mode [ 363.482171][T19183] gretap0: left allmulticast mode [ 363.691664][T19191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3666'. [ 363.701088][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3666'. [ 363.775115][T19197] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3668'. [ 364.125717][T19225] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3675'. [ 364.162540][T19227] dvmrp0: entered allmulticast mode [ 364.257170][T19240] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3680'. [ 364.272145][T19240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3680'. [ 364.311894][T19243] mac80211_hwsim hwsim59 ": renamed from wlan0 (while UP) [ 364.475383][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3685'. [ 364.667778][ T30] audit: type=1800 audit(1756053389.375:9): pid=19255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3687" name="cgroup.controllers" dev="tmpfs" ino=604 res=0 errno=0 [ 364.711801][T19273] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3690'. [ 364.775109][T19273] batadv1: entered promiscuous mode [ 364.780848][T19273] batadv1: entered allmulticast mode [ 364.823757][T19279] netlink: 'syz.3.3692': attribute type 142 has an invalid length. [ 364.901676][T19286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3693'. [ 365.363091][T19329] netlink: 'syz.4.3707': attribute type 11 has an invalid length. [ 365.699905][T19349] bond2: entered promiscuous mode [ 365.704960][T19349] bond2: entered allmulticast mode [ 365.748543][T19349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.037914][T19362] dvmrp0: left allmulticast mode [ 366.114947][T19362] tipc: Enabling of bearer rejected, failed to enable media [ 366.235282][T19368] team0: Port device sit1 removed [ 366.613877][T19404] IPVS: set_ctl: invalid protocol: 94 100.1.1.3:20000 [ 367.150908][T19456] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 367.166060][T19456] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 367.214501][T19470] netlink: 'syz.2.3740': attribute type 3 has an invalid length. [ 367.223042][T19471] tipc: Enabled bearer , priority 0 [ 367.279650][T19456] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 367.290826][T19456] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 367.321631][T19475] syzkaller0: entered promiscuous mode [ 367.336172][T19475] syzkaller0: entered allmulticast mode [ 367.355592][T19471] tipc: Resetting bearer [ 367.365527][T19469] tipc: Resetting bearer [ 367.375541][T19469] tipc: Disabling bearer [ 367.390172][T19456] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 367.410705][T19456] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 367.492779][T19456] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 367.575613][T19456] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 367.692298][T19497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.709356][ T6610] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.726147][ T6610] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 367.765394][ T6610] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.784803][ T6610] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 367.803971][ T6610] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.822564][ T6610] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 367.836604][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.852534][ T49] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 367.983813][T19515] netlink: 'syz.4.3759': attribute type 3 has an invalid length. [ 367.994227][T19511] netlink: 'syz.4.3759': attribute type 20 has an invalid length. [ 368.168090][T19529] __nla_validate_parse: 10 callbacks suppressed [ 368.168107][T19529] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3764'. [ 368.314986][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3768'. [ 368.343276][T19540] netlink: 'syz.1.3769': attribute type 1 has an invalid length. [ 368.356846][T19537] macvtap2: entered promiscuous mode [ 368.362167][T19537] erspan0: entered promiscuous mode [ 368.429251][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 368.440473][T19537] macvtap2: entered allmulticast mode [ 368.445944][T19537] erspan0: entered allmulticast mode [ 368.461343][T19540] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 368.485026][T19542] veth5: entered promiscuous mode [ 368.490629][T19548] netlink: 'syz.3.3770': attribute type 10 has an invalid length. [ 368.525141][T19548] team0: Port device 0! added [ 368.534514][T19548] netlink: 'syz.3.3770': attribute type 10 has an invalid length. [ 368.548909][T19548] team0: Port device 0! removed [ 368.557590][T19548] bond0: (slave 0!): Enslaving as an active interface with an up link [ 368.652520][T19550] netlink: 'syz.0.3771': attribute type 1 has an invalid length. [ 368.680805][T19550] bond3: entered promiscuous mode [ 368.688711][T19550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.697533][T19550] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3771'. [ 368.771444][T19553] bond3: (slave bridge1): making interface the new active one [ 368.782928][T19553] bridge1: entered promiscuous mode [ 368.794477][T19553] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 368.863709][T19563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3775'. [ 368.891360][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3775'. [ 368.962938][T19566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3777'. [ 369.173298][T19576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3780'. [ 369.216225][T19583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3783'. [ 369.483790][T19606] veth0_vlan: entered allmulticast mode [ 369.496529][T19607] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3790'. [ 369.594029][T19617] netlink: 'syz.0.3794': attribute type 1 has an invalid length. [ 369.625557][T19617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.634455][T19610] netlink: 'syz.1.3792': attribute type 1 has an invalid length. [ 369.673448][T19617] bond4: (slave bridge2): making interface the new active one [ 369.684610][T19617] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 369.818379][T19626] team0: No ports can be present during mode change [ 370.934885][T19671] netlink: 'syz.2.3808': attribute type 8 has an invalid length. [ 371.514562][T19711] batman_adv: batadv0: Adding interface: dummy0 [ 371.532544][T19711] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.562480][T19711] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 371.715600][T19731] "syz.1.3826" (19731) uses obsolete ecb(arc4) skcipher [ 371.802180][T19725] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.809696][T19725] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.904803][T19725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.927959][T19725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.022568][T19725] bond1: left promiscuous mode [ 372.027470][T19725] bridge2: left promiscuous mode [ 372.032942][T19725] bond1: left allmulticast mode [ 372.038645][T19725] bridge2: left allmulticast mode [ 372.285892][T19762] bridge0: port 3(macvlan2) entered disabled state [ 372.328544][T19762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.351680][T19762] bond0: left promiscuous mode [ 372.358566][T19762] bond_slave_0: left promiscuous mode [ 372.364188][T19762] bond_slave_1: left promiscuous mode [ 372.370720][T19762] mac80211_hwsim hwsim34 wlan1: left promiscuous mode [ 372.394062][T19782] netlink: 'syz.0.3835': attribute type 4 has an invalid length. [ 372.416586][ T6607] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.425705][ T6607] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.452601][T19784] netlink: 'syz.0.3835': attribute type 4 has an invalid length. [ 372.512912][ T6607] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.527839][ T6607] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.554924][ T6607] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 372.563543][ T6607] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 372.574243][ T6607] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 372.583337][ T6607] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 372.603637][T19792] macsec1: entered promiscuous mode [ 372.619129][T19792] batadv0: entered promiscuous mode [ 372.628438][T19792] macsec1: entered allmulticast mode [ 372.633956][T19792] batadv0: entered allmulticast mode [ 372.642583][T19792] batadv0: left allmulticast mode [ 372.647915][T19792] batadv0: left promiscuous mode [ 372.659206][ T6607] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 372.668373][ T6607] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 372.678801][ T6607] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 372.688410][ T6607] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 372.706388][T19801] batadv1: entered promiscuous mode [ 372.711619][T19801] batadv1: entered allmulticast mode [ 373.210210][T19834] __nla_validate_parse: 15 callbacks suppressed [ 373.210229][T19834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3851'. [ 373.285981][T19835] netlink: 'syz.0.3851': attribute type 11 has an invalid length. [ 373.578326][T19854] tipc: Enabling of bearer rejected, failed to enable media [ 373.624453][T19856] !: renamed from dummy0 [ 373.690519][T19861] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.123868][T19894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3864'. [ 374.868045][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3873'. [ 374.878576][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3873'. [ 374.945305][T19934] tipc: Enabled bearer , priority 0 [ 374.957528][T19934] syzkaller0: entered promiscuous mode [ 374.969039][T19934] syzkaller0: entered allmulticast mode [ 375.041980][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.062800][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.081740][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.091175][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.099829][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.112005][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.121895][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.132324][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.140798][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.149478][T19944] netlink: 'syz.4.3877': attribute type 5 has an invalid length. [ 375.233689][T19947] ipvlan3: entered promiscuous mode [ 375.244801][T19947] bridge0: port 3(ipvlan3) entered blocking state [ 375.251968][T19947] bridge0: port 3(ipvlan3) entered disabled state [ 375.261377][T19947] ipvlan3: entered allmulticast mode [ 375.266881][T19947] erspan0: entered allmulticast mode [ 375.273365][T19947] ipvlan3: left allmulticast mode [ 375.279076][T19947] erspan0: left allmulticast mode [ 375.377289][T19958] gtp0: entered promiscuous mode [ 375.385219][T19958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3881'. [ 375.443385][T19959] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3882'. [ 375.453293][T19961] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3882'. [ 375.464306][T19958] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3881'. [ 375.473517][T19960] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3881'. [ 375.509774][T19965] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3883'. [ 375.520868][T19965] netlink: zone id is out of range [ 375.527793][T19965] netlink: zone id is out of range [ 375.544133][T19965] netlink: get zone limit has 8 unknown bytes [ 375.563232][T19965] tipc: Enabled bearer , priority 0 [ 375.572084][T19965] syzkaller0: entered promiscuous mode [ 375.578274][T19965] syzkaller0: entered allmulticast mode [ 375.590180][T19965] tipc: Resetting bearer [ 375.612103][T19964] tipc: Resetting bearer [ 375.638979][T19964] tipc: Disabling bearer [ 375.777568][T19933] tipc: Resetting bearer [ 375.799794][T19933] tipc: Disabling bearer [ 375.909913][T19990] hsr_slave_1 (unregistering): left promiscuous mode [ 375.955000][T19995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.513659][T20029] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 376.683308][T20043] syzkaller0: entered promiscuous mode [ 376.690928][T20043] syzkaller0: entered allmulticast mode [ 377.134917][T20090] "syz.0.3919" (20090) uses obsolete ecb(arc4) skcipher [ 377.230393][T20100] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 377.247378][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 377.260005][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 377.272835][T20099] bridge_slave_1: left allmulticast mode [ 377.282345][T20099] bridge_slave_1: left promiscuous mode [ 377.298433][T20099] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.311624][T20099] bridge_slave_0: left allmulticast mode [ 377.317530][T20099] bridge_slave_0: left promiscuous mode [ 377.323225][T20099] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.344475][T20099] bond0: (slave bridge0): Releasing backup interface [ 377.351861][T20099] bridge0 (unregistering): left allmulticast mode [ 377.390604][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 377.400088][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 377.416854][T20106] pim6reg1: entered promiscuous mode [ 377.422211][T20106] pim6reg1: entered allmulticast mode [ 377.773374][T20127] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 378.082867][T20164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.270989][T20184] __nla_validate_parse: 28 callbacks suppressed [ 378.271006][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3942'. [ 378.305644][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3942'. [ 378.583475][T20216] netlink: 182068 bytes leftover after parsing attributes in process `syz.0.3951'. [ 378.759304][T20239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3959'. [ 378.799468][T20244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3959'. [ 378.809044][T20244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3959'. [ 378.818132][T20244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3959'. [ 378.827543][T20240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3959'. [ 378.838893][T20240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3959'. [ 378.848027][T20240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3959'. [ 378.999710][T20257] team0: entered promiscuous mode [ 379.004840][T20257] team_slave_0: entered promiscuous mode [ 379.010741][T20257] team_slave_1: entered promiscuous mode [ 379.017464][T20257] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.024252][T20257] bridge0: port 3(team0) entered blocking state [ 379.031809][T20257] bridge0: port 3(team0) entered disabled state [ 379.038598][T20257] team0: entered allmulticast mode [ 379.043700][T20257] team_slave_0: entered allmulticast mode [ 379.049451][T20257] team_slave_1: entered allmulticast mode [ 379.549242][T20273] veth9: entered allmulticast mode [ 379.732595][T20282] Unsupported ieee802154 address type: 0 [ 379.795232][T20282] A link change request failed with some changes committed already. Interface bridge3 may have been left with an inconsistent configuration, please check. [ 379.849288][T18060] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.946505][T18060] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.967574][T18060] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.975790][T18060] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.115045][T20306] validate_nla: 67 callbacks suppressed [ 380.115063][T20306] netlink: 'syz.3.3973': attribute type 1 has an invalid length. [ 380.161765][T20306] netlink: 'syz.3.3973': attribute type 2 has an invalid length. [ 380.188807][T20306] netlink: 'syz.3.3973': attribute type 1 has an invalid length. [ 380.201209][T20310] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 380.209775][T20306] netlink: 'syz.3.3973': attribute type 2 has an invalid length. [ 380.216562][T20310] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 380.242798][T20310] block nbd3: shutting down sockets [ 380.296207][T20309] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 380.304182][T20309] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 380.317398][T20309] block nbd3: shutting down sockets [ 380.917810][T20358] netlink: 'syz.1.3994': attribute type 10 has an invalid length. [ 380.928405][T20358] bond0: (slave wlan1): Opening slave failed [ 381.405862][T20392] macvlan2: left allmulticast mode [ 381.412192][T20392] macvlan2: left promiscuous mode [ 381.418135][T20392] bridge0: port 3(macvlan2) entered disabled state [ 381.426668][T20392] bridge_slave_1: left allmulticast mode [ 381.433037][T20392] bridge_slave_1: left promiscuous mode [ 381.439039][T20392] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.448761][T20392] bridge_slave_0: left allmulticast mode [ 381.454396][T20392] bridge_slave_0: left promiscuous mode [ 381.460284][T20392] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.033991][T20414] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 382.119054][T20424] tipc: Enabled bearer , priority 0 [ 382.127297][T20424] syzkaller0: entered promiscuous mode [ 382.132800][T20424] syzkaller0: entered allmulticast mode [ 382.148028][T20424] tipc: Resetting bearer [ 382.155840][T20423] tipc: Resetting bearer [ 382.170569][T20423] tipc: Disabling bearer [ 382.230626][T20426] sctp: [Deprecated]: syz.0.4018 (pid 20426) Use of int in max_burst socket option deprecated. [ 382.230626][T20426] Use struct sctp_assoc_value instead [ 382.587185][T20458] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 382.613168][T20454] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 382.782485][T20465] netlink: 'syz.4.4028': attribute type 12 has an invalid length. [ 383.035952][T20484] ip6tnl2: entered promiscuous mode [ 383.048108][T20484] ip6tnl2: entered allmulticast mode [ 383.089046][T20491] syz_tun: entered promiscuous mode [ 383.126602][T20491] syz_tun: entered allmulticast mode [ 383.150635][T20491] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 383.223326][T10842] IPVS: starting estimator thread 0... [ 383.316943][T20506] IPVS: using max 42 ests per chain, 100800 per kthread [ 383.381563][T20522] bond0: (slave syz_tun): Releasing backup interface [ 383.399651][T20522] syz_tun: left allmulticast mode [ 383.413387][T20522] bond0: (slave bond_slave_0): Releasing backup interface [ 383.430488][T20522] bond_slave_0: left allmulticast mode [ 383.450936][T20522] bond0: (slave bond_slave_1): Releasing backup interface [ 383.463439][T20522] bond_slave_1: left allmulticast mode [ 383.472405][T20522] team0: Port device team_slave_0 removed [ 383.480402][T20522] team0: Port device team_slave_1 removed [ 383.481775][T20530] __nla_validate_parse: 23 callbacks suppressed [ 383.481788][T20530] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4045'. [ 383.486636][T20522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.510316][T20522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.521858][T20522] bond0: (slave wlan1): Releasing backup interface [ 383.530406][T20522] mac80211_hwsim hwsim34 wlan1: left allmulticast mode [ 383.541551][T20522] bond3: (slave geneve3): Releasing backup interface [ 383.550751][T20522] team0: Port device bond6 removed [ 383.556767][T20531] IPVS: Error connecting to the multicast addr [ 383.585867][T20531] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4044'. [ 384.055264][T20566] syzkaller1: entered promiscuous mode [ 384.064906][T20566] syzkaller1: entered allmulticast mode [ 384.481509][T20589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4064'. [ 384.631975][T20594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4065'. [ 384.767613][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4069'. [ 384.813171][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4069'. [ 384.964620][T20615] syz_tun: entered allmulticast mode [ 384.994947][T20614] syz_tun: left allmulticast mode [ 385.094635][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4072'. [ 385.200388][T20633] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4075'. [ 385.216985][T20633] openvswitch: netlink: Flow key attr not present in new flow. [ 385.237412][T20635] validate_nla: 65 callbacks suppressed [ 385.237430][T20635] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 385.310303][T20635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.331684][T20635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.339325][T20635] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 385.352052][T20635] bond5: (slave vcan1): Error -95 calling set_mac_address [ 385.388825][T20642] gretap2: entered promiscuous mode [ 385.405349][T20642] bond5: (slave gretap2): making interface the new active one [ 385.415873][T20642] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 385.554856][T20649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4081'. [ 385.580946][T20648] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4079'. [ 385.651765][T20657] : renamed from bond_slave_0 (while UP) [ 385.759666][T20670] netlink: 'syz.4.4086': attribute type 4 has an invalid length. [ 385.855957][T20670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.916119][T10832] syz1: Port: 1 Link DOWN [ 385.920624][ T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.929991][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.939056][ T49] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.948513][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.957601][ T49] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.977412][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.997245][ T49] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.017223][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.101257][T20696] netlink: 'syz.0.4093': attribute type 1 has an invalid length. [ 386.330800][T20716] tipc: Enabled bearer , priority 0 [ 386.340297][T20715] tipc: Enabling of bearer rejected, already enabled [ 386.372988][T20716] syzkaller0: entered promiscuous mode [ 386.380800][T20716] syzkaller0: entered allmulticast mode [ 386.642330][T20715] tipc: Resetting bearer [ 386.654907][T20715] tipc: Disabling bearer [ 386.849131][T20764] netlink: 'syz.0.4113': attribute type 1 has an invalid length. [ 386.872516][T20764] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.893293][T20768] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 387.363685][T20803] macsec0: entered promiscuous mode [ 387.371025][T20803] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 387.380746][T20803] macsec0: entered allmulticast mode [ 387.386334][T20803] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 387.979523][T20831] 8021q: VLANs not supported on vxcan0 [ 388.338014][T20835] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 388.393824][T20863] batadv1: entered promiscuous mode [ 388.664545][T20887] tipc: Enabled bearer , priority 0 [ 388.674922][T20887] syzkaller0: entered promiscuous mode [ 388.681367][T20887] syzkaller0: entered allmulticast mode [ 388.692537][T20888] tipc: Resetting bearer [ 388.699282][T20886] tipc: Resetting bearer [ 388.711223][T20886] tipc: Disabling bearer [ 388.893961][T20897] __nla_validate_parse: 16 callbacks suppressed [ 388.893981][T20897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4145'. [ 388.923148][T20897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4145'. [ 389.029821][T20904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.191540][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4151'. [ 389.218905][T20915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.229016][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4151'. [ 389.240744][T20915] macsec1: entered promiscuous mode [ 389.245945][T20915] bond2: entered promiscuous mode [ 389.251304][T20915] macsec1: entered allmulticast mode [ 389.256734][T20915] bond2: entered allmulticast mode [ 389.262780][T20915] bond2: left allmulticast mode [ 389.267986][T20915] bond2: left promiscuous mode [ 389.359559][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4153'. [ 389.370825][T20922] netlink: 'syz.1.4153': attribute type 4 has an invalid length. [ 389.382611][T20922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4153'. [ 389.395298][T20922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.406891][T20922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.461559][T20922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.472045][T20922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.535512][T20922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.546721][T20922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.605378][T20922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.616745][T20922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.691814][T20930] syz_tun: left promiscuous mode [ 389.712009][T20930] geneve2: left allmulticast mode [ 389.718452][T20930] bond5: left promiscuous mode [ 389.723326][T20930] bond5: left allmulticast mode [ 389.734255][T20930] veth9: left allmulticast mode [ 389.746895][T20930] mac80211_hwsim hwsim33 wlan0: left allmulticast mode [ 389.755038][T20930] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 389.762438][T20930] macsec0: left promiscuous mode [ 389.767833][T20930] macsec0: left allmulticast mode [ 389.783010][ T6607] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.799625][ T6607] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.816705][T20930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4155'. [ 389.834826][ T3606] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.843529][ T3606] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.855740][T20930] hsr_slave_0: left promiscuous mode [ 389.866260][T20930] hsr_slave_1: left promiscuous mode [ 389.883683][ T3606] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 389.892552][ T3606] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 389.921082][ T6609] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 389.932576][ T6609] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 389.949693][ T6609] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 389.982336][ T6609] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 389.999533][ T6609] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 390.013806][ T6609] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 390.127729][T20965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4164'. [ 390.195705][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4166'. [ 390.414792][T20992] IPVS: set_ctl: invalid protocol: 44137 172.20.20.45:20000 [ 390.520845][T20996] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 390.854327][T21005] pim6reg1: entered promiscuous mode [ 390.877974][T21005] pim6reg1: entered allmulticast mode [ 390.940653][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 390.952835][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 390.954550][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 390.976577][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 390.980169][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 390.984700][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 391.001353][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 391.012833][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 391.021017][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021047][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021067][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021085][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021104][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021123][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021142][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021160][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021177][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021196][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021214][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021229][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021246][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021264][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021282][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021299][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021325][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021343][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021361][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021378][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021396][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021415][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021433][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021452][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.021490][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.061581][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 391.185726][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.192740][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.199688][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 391.207590][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.213766][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.222225][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 391.249562][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.259310][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.265898][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 391.274184][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.284301][T21009] netlink: 'syz.2.4175': attribute type 29 has an invalid length. [ 391.295155][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.301883][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.308501][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.314687][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.321427][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.374056][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.409243][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.417054][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.424677][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.431938][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.440301][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.446850][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.453268][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.459687][T20992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.925657][T21035] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 392.402513][T21067] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 392.543746][T21096] : entered promiscuous mode [ 392.669916][T21107] gretap1: left promiscuous mode [ 392.675297][T21107] gretap1: left allmulticast mode [ 392.683608][T21107] vlan2: left allmulticast mode [ 392.688854][T21107] veth1: left allmulticast mode [ 392.694461][T21107] bond2: left promiscuous mode [ 392.701933][T21107] bond2: left allmulticast mode [ 392.707821][T21107] ip6tnl2: left promiscuous mode [ 392.713576][T21107] ip6tnl2: left allmulticast mode [ 392.833860][T21119] IPVS: Unknown mcast interface: veth1_macvtap [ 392.976836][T21139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.007657][T21144] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 393.957461][T21225] __nla_validate_parse: 9 callbacks suppressed [ 393.957475][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4238'. [ 393.966527][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4237'. [ 393.973989][T21225] syzkaller1: entered promiscuous mode [ 393.997155][T21225] syzkaller1: entered allmulticast mode [ 394.007352][T21225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4238'. [ 394.025794][T21225] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4238'. [ 394.273981][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4242'. [ 394.459391][T21254] syzkaller1: entered promiscuous mode [ 394.465022][T21254] syzkaller1: entered allmulticast mode [ 394.476829][T21254] ip6gre1: entered allmulticast mode [ 394.585252][T21258] openvswitch: netlink: Duplicate or invalid key (type 0). [ 394.595098][T21258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.681071][T21209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 394.775446][T21280] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 394.797974][T21284] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 394.804958][T21284] tipc: Enabled bearer , priority 10 [ 394.858229][T21268] tipc: Enabling of bearer rejected, media not registered [ 394.887127][T21293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.908852][T21294] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4259'. [ 394.936239][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 394.996589][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4260'. [ 395.076153][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.115374][T21309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4263'. [ 395.148646][T21310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4264'. [ 395.213935][T21316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4266'. [ 395.223151][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.319525][T21329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.354684][T21330] bond2: (slave ip6gretap1): making interface the new active one [ 395.371744][T21330] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 395.623861][T21365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.649703][T21365] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 395.712384][T21365] batadv0: entered promiscuous mode [ 395.726051][T21365] batadv0: entered allmulticast mode [ 395.754268][T21365] bond0: (slave batadv0): Releasing backup interface [ 395.763454][T21365] bridge0: port 4(batadv0) entered blocking state [ 395.777960][T21365] bridge0: port 4(batadv0) entered disabled state [ 395.916140][T10842] tipc: Node number set to 2687169849 [ 396.004455][T21393] validate_nla: 33 callbacks suppressed [ 396.004473][T21393] netlink: 'syz.4.4287': attribute type 10 has an invalid length. [ 396.021618][T21393] netlink: 'syz.4.4287': attribute type 10 has an invalid length. [ 396.035263][T21394] netlink: 'syz.4.4287': attribute type 21 has an invalid length. [ 396.240705][T18060] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 396.250043][T18060] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 396.318510][T21418] syzkaller1: entered promiscuous mode [ 396.324675][T21418] syzkaller1: entered allmulticast mode [ 396.802443][ T5967] IPVS: starting estimator thread 0... [ 396.906263][T21457] IPVS: using max 45 ests per chain, 108000 per kthread [ 397.008913][T21472] net_ratelimit: 9 callbacks suppressed [ 397.008923][T21472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.033748][T10842] syz1: Port: 1 Link ACTIVE [ 397.410294][T21486] Bluetooth: MGMT ver 1.23 [ 397.598959][ T6610] IPVS: stop unused estimator thread 0... [ 397.896133][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 397.972168][T21522] netlink: 'syz.4.4315': attribute type 1 has an invalid length. [ 398.092703][T21522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 398.132839][T21527] bond4: (slave veth3): Enslaving as an active interface with a down link [ 398.289768][T21544] netlink: 'syz.4.4320': attribute type 12 has an invalid length. [ 398.526817][T21569] veth1: entered promiscuous mode [ 398.533623][T21569] bridge5: entered promiscuous mode [ 398.545105][T21569] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 398.561419][T21569] hsr1: entered promiscuous mode [ 398.886415][T21609] tap0: tun_chr_ioctl cmd 1074025675 [ 398.896872][T21609] tap0: persist disabled [ 398.897357][T21603] netlink: 'syz.4.4338': attribute type 2 has an invalid length. [ 398.903197][T21609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.916826][T21610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.936118][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 399.029435][T21622] __nla_validate_parse: 22 callbacks suppressed [ 399.029452][T21622] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4342'. [ 399.056764][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4342'. [ 399.203319][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'. [ 399.272764][T21635] syzkaller0: entered promiscuous mode [ 399.279928][T21635] syzkaller0: entered allmulticast mode [ 399.289454][T21635] tipc: Enabled bearer , priority 0 [ 399.299160][T21635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4347'. [ 399.318286][T21634] tipc: Resetting bearer [ 399.347970][T21634] tipc: Disabling bearer [ 399.496381][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 399.496790][ T5864] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 399.718644][T21652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4352'. [ 399.840940][T21663] macvtap1: entered allmulticast mode [ 399.855448][T21663] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 399.883109][T21663] batman_adv: batadv0: Adding interface: macvtap1 [ 399.893407][T21663] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.919702][T21663] batman_adv: batadv0: Interface activated: macvtap1 [ 399.976147][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 400.015609][T21674] bridge0: port 5(erspan0) entered blocking state [ 400.023671][T21674] bridge0: port 5(erspan0) entered disabled state [ 400.030862][T21674] erspan0: entered allmulticast mode [ 400.037527][T21674] erspan0: entered promiscuous mode [ 400.110723][T21674] erspan0: left allmulticast mode [ 400.115873][T21674] erspan0: left promiscuous mode [ 400.124026][T21674] bridge0: port 5(erspan0) entered disabled state [ 400.198413][T21681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'. [ 400.280933][T21681] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 400.338597][ T3606] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.398676][ T3606] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.425050][ T3606] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.444572][ T3606] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.887076][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4372'. [ 400.992851][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4372'. [ 401.016228][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.037998][T21741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4376'. [ 401.056627][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4372'. [ 401.305672][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.334256][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.357581][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.389023][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.477310][T21762] macvtap1: entered promiscuous mode [ 401.482971][T21762] mac80211_hwsim hwsim60 wlan1: entered promiscuous mode [ 401.513784][T21762] mac80211_hwsim hwsim60 wlan1: left promiscuous mode [ 401.676523][T21787] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 401.744860][T21792] netlink: 'syz.1.4391': attribute type 1 has an invalid length. [ 402.056211][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 402.761793][T21845] netlink: 'syz.1.4409': attribute type 11 has an invalid length. [ 403.096122][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 403.529992][T21878] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.896527][T18060] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 403.925736][T18060] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 403.958425][T18060] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 404.012979][T18060] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 404.042720][T18060] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 404.074041][T18060] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 404.136148][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 404.139155][T18060] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 404.205713][T18060] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 404.259582][T21918] __nla_validate_parse: 15 callbacks suppressed [ 404.259598][T21918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4428'. [ 404.302559][T21914] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4426'. [ 404.312527][T21914] netlink: 'syz.2.4426': attribute type 10 has an invalid length. [ 404.322226][T21914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4426'. [ 404.351468][T21914] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 404.409220][T21926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4429'. [ 404.883286][T21972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.085109][T21987] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4440'. [ 405.127374][T21989] bridge0: port 5(erspan0) entered blocking state [ 405.141722][T21989] bridge0: port 5(erspan0) entered disabled state [ 405.155807][T21989] erspan0: entered allmulticast mode [ 405.176222][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 405.185745][T21989] erspan0: entered promiscuous mode [ 405.192478][T21991] erspan0: left allmulticast mode [ 405.215025][T21991] erspan0: left promiscuous mode [ 405.220405][T21991] bridge0: port 5(erspan0) entered disabled state [ 405.363559][T22008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4446'. [ 405.411876][T22010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4445'. [ 405.475157][T22016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4446'. [ 405.486808][T22008] 8021q: adding VLAN 0 to HW filter on device bond7 [ 405.494744][T22008] bond6: (slave bond7): Enslaving as an active interface with an up link [ 405.541959][T22018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4447'. [ 405.565567][T22016] 8021q: adding VLAN 0 to HW filter on device bond6 [ 405.588507][T22025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4447'. [ 405.667265][T22028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.795436][T22042] netlink: 'syz.3.4453': attribute type 1 has an invalid length. [ 405.820717][T22047] netlink: 'syz.1.4455': attribute type 3 has an invalid length. [ 405.863749][T22050] tipc: Enabled bearer , priority 0 [ 405.883313][T22050] syzkaller0: entered promiscuous mode [ 405.893532][T22054] netlink: 'syz.0.4454': attribute type 10 has an invalid length. [ 405.899922][T22050] syzkaller0: entered allmulticast mode [ 405.912456][T22054] batman_adv: batadv0: Removing interface: dummy0 [ 405.945293][T22054] team0: Port device dummy0 added [ 405.969431][T22059] netlink: 'syz.0.4454': attribute type 10 has an invalid length. [ 405.995793][T22059] team0: Port device dummy0 removed [ 406.019455][T22059] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 406.033802][T22050] tipc: Resetting bearer [ 406.064889][T22048] tipc: Resetting bearer [ 406.096062][T22048] tipc: Disabling bearer [ 406.216171][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 406.997276][T22135] syzkaller1: entered promiscuous mode [ 407.002913][T22135] syzkaller1: entered allmulticast mode [ 407.050566][T10841] IPVS: starting estimator thread 0... [ 407.146158][T22137] IPVS: using max 49 ests per chain, 117600 per kthread [ 407.256214][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 407.267719][ T6610] IPVS: stop unused estimator thread 0... [ 407.423317][T22161] netlink: 'syz.4.4480': attribute type 9 has an invalid length. [ 407.565856][T22175] netlink: 'syz.4.4485': attribute type 1 has an invalid length. [ 407.600243][T22175] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.604710][T22164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.615180][T22164] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 407.628975][T22175] veth5: entered promiscuous mode [ 407.638199][T22175] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 407.647157][T22164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.658543][T22164] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 407.693770][T22164] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 407.702364][T22164] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 407.744456][T22164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.760693][T22164] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 407.804004][T22194] syzkaller0: entered promiscuous mode [ 407.834493][T22194] syzkaller0: entered allmulticast mode [ 407.954888][T22214] ip6gre1: entered promiscuous mode [ 408.256289][T22237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.263752][T22248] netlink: 'syz.0.4507': attribute type 96 has an invalid length. [ 408.296198][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 408.523192][T22273] netlink: 'syz.1.4513': attribute type 1 has an invalid length. [ 408.570621][T22273] bond4: entered promiscuous mode [ 408.579467][T22273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.635690][T22290] netlink: 'syz.2.4518': attribute type 11 has an invalid length. [ 409.270544][T22309] __nla_validate_parse: 17 callbacks suppressed [ 409.270562][T22309] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4523'. [ 409.335280][T22331] mpoa:mpoad_close: () going down [ 409.450460][T22356] netlink: 'syz.3.4533': attribute type 13 has an invalid length. [ 409.462852][T22356] netlink: 'syz.3.4533': attribute type 17 has an invalid length. [ 409.658373][T22356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.671596][T22356] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.675142][T22380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.691363][T22356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.715397][T22368] tipc: Enabling of bearer rejected, failed to enable media [ 409.853856][T22381] netlink: 'syz.4.4537': attribute type 10 has an invalid length. [ 409.954303][T22381] syz_tun: entered promiscuous mode [ 409.964696][T22368] netlink: 'syz.4.4537': attribute type 22 has an invalid length. [ 409.964979][T22381] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 410.135022][T22405] netlink: 'syz.1.4544': attribute type 9 has an invalid length. [ 411.025232][T22446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4557'. [ 411.045494][T22446] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4557'. [ 411.063234][T22449] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4557'. [ 411.092179][T22449] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4557'. [ 411.355232][T22448] syz_tun: left promiscuous mode [ 411.382131][T22467] netlink: 'syz.1.4561': attribute type 5 has an invalid length. [ 411.392561][T22467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4561'. [ 411.417179][T22448] hsr1: left promiscuous mode [ 411.430082][T22448] batman_adv: batadv0: Interface deactivated: macvtap1 [ 411.437362][T22448] mac80211_hwsim hwsim37 wlan0: left allmulticast mode [ 411.444384][T22448] macvtap1: left allmulticast mode [ 411.468305][T22448] veth5: left promiscuous mode [ 411.581844][T22476] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4563'. [ 411.597375][T22479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4563'. [ 411.609432][T22473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 411.618932][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'. [ 411.676338][T22473] nbd: socks must be embedded in a SOCK_ITEM attr [ 411.686377][T22473] block nbd3: shutting down sockets [ 412.232954][T22538] macsec1: entered promiscuous mode [ 412.250778][T22538] macsec1: entered allmulticast mode [ 412.423091][T22543] bridge0: port 1(batadv1) entered blocking state [ 412.439488][T22543] bridge0: port 1(batadv1) entered disabled state [ 412.452617][T22543] batadv1: entered allmulticast mode [ 412.463100][T22543] batadv1: entered promiscuous mode [ 412.794961][T22561] bridge_slave_0: default FDB implementation only supports local addresses [ 412.887067][T22566] validate_nla: 3 callbacks suppressed [ 412.887083][T22566] netlink: 'syz.0.4590': attribute type 1 has an invalid length. [ 412.929492][T18060] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 412.938926][T18060] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 413.031109][T22566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 413.042052][T22579] syzkaller1: entered promiscuous mode [ 413.049066][T22579] syzkaller1: entered allmulticast mode [ 413.125543][T22595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.355923][T22612] sctp: [Deprecated]: syz.1.4600 (pid 22612) Use of int in max_burst socket option. [ 413.355923][T22612] Use struct sctp_assoc_value instead [ 413.753157][T22644] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 413.769785][T22643] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 414.624965][T22685] team0: Device macvlan4 is already an upper device of the team interface [ 414.642078][T22680] macsec0: entered allmulticast mode [ 414.779017][T22691] tipc: Enabled bearer , priority 0 [ 414.787039][T22691] syzkaller0: entered promiscuous mode [ 414.792617][T22691] syzkaller0: entered allmulticast mode [ 414.801255][T22691] __nla_validate_parse: 15 callbacks suppressed [ 414.801272][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4624'. [ 414.818981][T22691] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 414.832037][T22691] tipc: Resetting bearer [ 414.902456][T22695] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4627'. [ 414.988394][T22702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4628'. [ 414.997849][T22702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4628'. [ 415.326448][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4634'. [ 415.620408][T22758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4642'. [ 415.662572][T22761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.734832][T22774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4646'. [ 415.751882][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4645'. [ 415.816697][ T1209] tipc: Node number set to 1580697488 [ 415.834401][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'. [ 415.962022][T10843] IPVS: starting estimator thread 0... [ 416.057477][T22799] IPVS: using max 41 ests per chain, 98400 per kthread [ 416.261045][ T6609] IPVS: stop unused estimator thread 0... [ 416.381528][T22814] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4656'. [ 416.670775][T22830] macsec1: entered promiscuous mode [ 416.706495][T22830] mac80211_hwsim hwsim60 wlan1: entered promiscuous mode [ 416.742652][T22830] mac80211_hwsim hwsim60 wlan1: left promiscuous mode [ 416.898950][T22844] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 416.971414][T22850] bridge0: port 2(vlan2) entered blocking state [ 416.996482][T22850] bridge0: port 2(vlan2) entered disabled state [ 417.033444][T22850] vlan2: entered allmulticast mode [ 417.054625][T22850] bridge0: entered allmulticast mode [ 417.074294][T22850] vlan2: left allmulticast mode [ 417.093489][T22850] bridge0: left allmulticast mode [ 417.322764][T22861] netlink: 'syz.0.4666': attribute type 1 has an invalid length. [ 417.351913][T22861] netlink: 'syz.0.4666': attribute type 4 has an invalid length. [ 417.695252][T22877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.702540][T22877] IPv6: NLM_F_CREATE should be set when creating new route [ 417.709792][T22877] IPv6: NLM_F_CREATE should be set when creating new route [ 417.735115][T22877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.142975][T22889] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 418.432217][T22904] tipc: Enabled bearer , priority 0 [ 418.439644][T22904] syzkaller0: entered promiscuous mode [ 418.445134][T22904] syzkaller0: entered allmulticast mode [ 418.468240][T22904] tipc: Resetting bearer [ 418.506621][T22903] tipc: Resetting bearer [ 418.539808][T22903] tipc: Disabling bearer [ 418.579628][T22909] netlink: 'syz.4.4680': attribute type 1 has an invalid length. [ 418.690085][T22925] siw: device registration error -23 [ 418.739628][T22928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.757662][T22928] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 418.796435][T22928] team0: Failed to send options change via netlink (err -105) [ 418.816663][T22928] team0: Port device batadv0 added [ 419.384110][T22964] netlink: 'syz.0.4694': attribute type 1 has an invalid length. [ 419.569910][T22976] netlink: 'syz.3.4696': attribute type 13 has an invalid length. [ 419.737205][T22987] delete_channel: no stack [ 419.809199][ T30] audit: type=1800 audit(1756053444.515:10): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4697" name="memory.events" dev="tmpfs" ino=1412 res=0 errno=0 [ 420.128205][T23010] __nla_validate_parse: 20 callbacks suppressed [ 420.128217][T23010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4704'. [ 420.303836][T23019] vxcan1: entered allmulticast mode [ 420.348526][T23027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4710'. [ 420.363436][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4710'. [ 420.365594][T23025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4711'. [ 420.374846][T23027] netlink: 'syz.3.4710': attribute type 11 has an invalid length. [ 420.417120][T23025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4711'. [ 420.427767][T23025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4711'. [ 420.431673][T23029] geneve4: entered promiscuous mode [ 420.443515][T23029] geneve4: entered allmulticast mode [ 420.524086][T23031] netlink: 'syz.0.4713': attribute type 2 has an invalid length. [ 420.666985][T23055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.731346][T23052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4721'. [ 420.854221][T23081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4727'. [ 420.912307][T23081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4727'. [ 420.952027][T23081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4727'. [ 421.296264][T23111] netlink: 'syz.3.4736': attribute type 5 has an invalid length. [ 421.413767][T23121] bond_slave_1: entered promiscuous mode [ 421.421495][T23122] netlink: 'syz.4.4738': attribute type 1 has an invalid length. [ 421.469125][T23122] bond9 (unregistering): Released all slaves [ 421.619535][T23132] netlink: 'syz.2.4740': attribute type 10 has an invalid length. [ 421.634180][T23132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.647749][T23132] batadv0: entered allmulticast mode [ 421.653398][T23132] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 422.644436][T23209] macvlan2: entered allmulticast mode [ 422.655874][T23209] veth1_vlan: entered allmulticast mode [ 422.671901][T23209] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 422.902234][T23241] netlink: 'syz.4.4767': attribute type 5 has an invalid length. [ 423.205673][T23290] netlink: 'syz.0.4777': attribute type 1 has an invalid length. [ 423.251724][T23296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.385409][T23307] erspan0: entered promiscuous mode [ 423.413016][T23307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.431806][T23307] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.441999][T23307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.577370][T23331] IPv6: Can't replace route, no match found [ 424.006975][T23366] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 424.062447][T23367] batadv_slave_1: entered promiscuous mode [ 424.246151][T23379] tipc: Enabled bearer , priority 0 [ 424.255098][T23379] syzkaller0: entered promiscuous mode [ 424.283188][T23379] syzkaller0: entered allmulticast mode [ 424.322321][T23379] tipc: Resetting bearer [ 424.343766][T23378] tipc: Resetting bearer [ 424.363775][T23378] tipc: Disabling bearer [ 424.383014][T23385] bridge0: port 1(vlan0) entered blocking state [ 424.390021][T23385] bridge0: port 1(vlan0) entered disabled state [ 424.400456][T23385] vlan0: entered allmulticast mode [ 424.405667][T23385] bridge0: entered allmulticast mode [ 424.412418][T23385] vlan0: left allmulticast mode [ 424.433442][T23385] bridge0: left allmulticast mode [ 424.835978][T23404] validate_nla: 65 callbacks suppressed [ 424.864919][T23404] netlink: 'syz.4.4810': attribute type 10 has an invalid length. [ 424.905874][T23411] netlink: 'syz.0.4812': attribute type 1 has an invalid length. [ 424.914810][T23408] IPVS: length: 49 != 24 [ 425.340134][T23447] netlink: 'syz.3.4821': attribute type 10 has an invalid length. [ 425.363384][T23447] __nla_validate_parse: 90 callbacks suppressed [ 425.363402][T23447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4821'. [ 425.384931][T23447] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4821'. [ 425.394232][T23447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4821'. [ 425.403501][T23447] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4821'. [ 425.412989][T23450] netlink: 'syz.2.4822': attribute type 2 has an invalid length. [ 425.421166][T23450] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4822'. [ 425.838927][T23462] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4826'. [ 426.057194][T23478] netlink: 'syz.1.4827': attribute type 1 has an invalid length. [ 426.111294][T23478] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.414454][T23489] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4834'. [ 426.431475][T23489] batadv2: entered promiscuous mode [ 426.443780][T23491] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.4835'. [ 426.468829][T23489] batadv2: entered allmulticast mode [ 426.731963][T23508] bond0: (slave syz_tun): Releasing backup interface [ 426.774716][T23508] bond0: (slave 5): Releasing backup interface [ 426.792374][T23508] bond0: (slave bond_slave_1): Releasing backup interface [ 426.817119][T23508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.844222][T23508] bond1: (slave vlan2): Releasing active interface [ 426.884424][T23508] bond4: (slave veth3): Releasing active interface [ 426.905134][T23508] batman_adv: batadv0: Removing interface: macvtap1 [ 426.925612][T23508] bond6: (slave bond7): Releasing backup interface [ 426.945742][T15830] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 426.961769][T23508] bond8: (slave veth5): Releasing backup interface [ 426.965434][T15830] CPU: 0 UID: 0 PID: 15830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 426.965459][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.965476][T15830] Call Trace: [ 426.965483][T15830] [ 426.965490][T15830] dump_stack_lvl+0x189/0x250 [ 426.965518][T15830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.965537][T15830] ? __pfx__printk+0x10/0x10 [ 426.965561][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.965581][T15830] dump_header+0xd3/0x480 [ 426.965605][T15830] oom_kill_process+0x387/0x920 [ 426.965624][T15830] out_of_memory+0xf09/0x12a0 [ 426.965643][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.965660][T15830] ? __pfx_out_of_memory+0x10/0x10 [ 426.965674][T15830] ? percpu_ref_put+0x19/0x180 [ 426.965696][T15830] ? lock_release+0x4b/0x3e0 [ 426.965722][T15830] mem_cgroup_out_of_memory+0x145/0x240 [ 426.965739][T15830] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 426.965761][T15830] ? _raw_spin_unlock+0x28/0x50 [ 426.965781][T15830] ? memcg1_oom_prepare+0x37f/0x450 [ 426.965802][T15830] try_charge_memcg+0xdff/0x1290 [ 426.965823][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.965846][T15830] ? __pfx_try_charge_memcg+0x10/0x10 [ 426.965866][T15830] ? rcu_needs_cpu+0xa1/0xb0 [ 426.965880][T15830] ? xa_load+0x60/0x210 [ 426.965897][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.965914][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.965930][T15830] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 426.965952][T15830] charge_memcg+0x9f/0x180 [ 426.965973][T15830] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 426.965998][T15830] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 426.966022][T15830] __read_swap_cache_async+0x28c/0x510 [ 426.966053][T15830] swap_cluster_readahead+0x305/0x5f0 [ 426.966073][T15830] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 426.966095][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.966110][T15830] ? filemap_get_entry+0xad/0x2f0 [ 426.966126][T15830] ? get_vma_policy+0x27c/0x3c0 [ 426.966149][T15830] swapin_readahead+0x17d/0xb50 [ 426.966166][T15830] ? __pfx_filemap_get_entry+0x10/0x10 [ 426.966184][T15830] ? get_swap_device_info+0x1c/0x2b0 [ 426.966201][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.966216][T15830] ? __pfx_swapin_readahead+0x10/0x10 [ 426.966241][T15830] ? __filemap_get_folio+0x9a6/0xaf0 [ 426.966260][T15830] ? swap_cache_get_folio+0xae/0x3b0 [ 426.966278][T15830] do_swap_page+0x525/0x5ac0 [ 426.966297][T15830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.966323][T15830] ? debug_object_activate+0x2e2/0x420 [ 426.966343][T15830] ? ___pte_offset_map+0x29/0x250 [ 426.966364][T15830] ? lock_acquire+0x5f/0x360 [ 426.966385][T15830] ? do_swap_page+0x184/0x5ac0 [ 426.966403][T15830] ? __pfx_do_swap_page+0x10/0x10 [ 426.966421][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.966436][T15830] ? __pfx_default_wake_function+0x10/0x10 [ 426.966459][T15830] ? ___pte_offset_map+0x45/0x250 [ 426.966477][T15830] ? ___pte_offset_map+0x1cf/0x250 [ 426.966498][T15830] ? pte_offset_map_rw_nolock+0xea/0x160 [ 426.966520][T15830] __handle_mm_fault+0xe55/0x5440 [ 426.966548][T15830] ? __pfx___handle_mm_fault+0x10/0x10 [ 426.966568][T15830] ? lock_release+0x4b/0x3e0 [ 426.966594][T15830] ? lock_vma_under_rcu+0xdf/0x3d0 [ 426.966615][T15830] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 426.966640][T15830] handle_mm_fault+0x40a/0x8e0 [ 426.966664][T15830] do_user_addr_fault+0xa81/0x1390 [ 426.966691][T15830] ? rcu_is_watching+0x15/0xb0 [ 426.966707][T15830] ? trace_page_fault_user+0x84/0x1e0 [ 426.966730][T15830] exc_page_fault+0x76/0xf0 [ 426.966753][T15830] asm_exc_page_fault+0x26/0x30 [ 426.966773][T15830] RIP: 0033:0x7f32d31c14a8 [ 426.966789][T15830] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 426.966802][T15830] RSP: 002b:00007ffd9b6d62b0 EFLAGS: 00010293 [ 426.966818][T15830] RAX: 0000000000000000 RBX: 0000000000000594 RCX: 00007f32d31c14a5 [ 426.966829][T15830] RDX: 00007ffd9b6d62f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.966839][T15830] RBP: 00007ffd9b6d635c R08: 0000000000000000 R09: 0000000000000000 [ 426.966850][T15830] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 426.966860][T15830] R13: 00000000000927c0 R14: 0000000000067fc5 R15: 00007ffd9b6d63b0 [ 426.966879][T15830] [ 426.967313][T15830] memory: usage 307200kB, limit 307200kB, failcnt 520 [ 427.396536][T15830] memory+swap: usage 190676kB, limit 9007199254740988kB, failcnt 0 [ 427.404464][T15830] kmem: usage 190356kB, limit 9007199254740988kB, failcnt 0 [ 427.404542][T10843] syz1: Port: 1 Link DOWN [ 427.412884][T15830] Memory cgroup stats for /syz0: [ 427.473493][T15830] cache 0 [ 427.502453][T23540] tipc: Cannot configure node identity twice [ 427.509082][T15830] rss 0 [ 427.509095][T15830] rss_huge 0 [ 427.509101][T15830] shmem 0 [ 427.509107][T15830] mapped_file 0 [ 427.509113][T15830] dirty 0 [ 427.509119][T15830] writeback 0 [ 427.656177][T15830] workingset_refault_anon 0 [ 427.686969][T23557] dvmrp8: entered allmulticast mode [ 427.688352][T15830] workingset_refault_file 0 [ 427.736185][T15830] swap 28672 [ 427.749567][T15830] swapcached 0 [ 427.757676][T15830] pgpgin 139009 [ 427.762400][T23558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.770095][T15830] pgpgout 139009 [ 427.792794][T15830] pgfault 212795 [ 427.797705][T15830] pgmajfault 3 [ 427.801303][T15830] inactive_anon 0 [ 427.805053][T15830] active_anon 0 [ 427.811700][T15830] inactive_file 0 [ 427.815443][T15830] active_file 0 [ 427.839523][T15830] unevictable 0 [ 427.849238][T23556] dvmrp8: left allmulticast mode [ 427.887482][T15830] hierarchical_memory_limit 314572800 [ 427.915363][T15830] hierarchical_memsw_limit 9223372036854771712 [ 427.941823][T15830] total_cache 0 [ 427.945401][T15830] total_rss 0 [ 427.949108][T15830] total_rss_huge 0 [ 427.952839][T15830] total_shmem 0 [ 427.956817][T15830] total_mapped_file 0 [ 427.960854][T15830] total_dirty 0 [ 427.964310][T15830] total_writeback 0 [ 427.969037][T15830] total_workingset_refault_anon 0 [ 427.974149][T15830] total_workingset_refault_file 0 [ 427.979925][T15830] total_swap 221184 [ 427.983788][T15830] total_swapcached 0 [ 427.993136][T15830] total_pgpgin 172504 [ 427.998103][T15830] total_pgpgout 172504 [ 428.002494][T15830] total_pgfault 278273 [ 428.008979][T15830] total_pgmajfault 3 [ 428.013035][T15830] total_inactive_anon 0 [ 428.017941][T15830] total_active_anon 0 [ 428.022632][T23576] tipc: Enabled bearer , priority 0 [ 428.103853][T15830] total_inactive_file 0 [ 428.115387][T15830] total_active_file 0 [ 428.133175][T23588] IPVS: Error connecting to the multicast addr [ 428.145220][T15830] total_unevictable 0 [ 428.157062][T15830] anon_cost 0 [ 428.164979][T15830] file_cost 0 [ 428.200988][T15830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0/syz0,task=syz.0.4817,pid=23430,uid=0 [ 428.240481][T15830] Memory cgroup out of memory: Killed process 23434 (syz.0.4817) total-vm:101960kB, anon-rss:924kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 428.240865][T23591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4863'. [ 428.395524][T23597] tipc: Enabled bearer , priority 0 [ 428.418535][T23599] syzkaller0: entered promiscuous mode [ 428.424031][T23599] syzkaller0: entered allmulticast mode [ 428.500504][T23599] tipc: Resetting bearer [ 428.561493][T23599] tipc: Disabling bearer [ 428.563521][T23606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4866'. [ 428.791427][ T30] audit: type=1800 audit(1756053453.495:11): pid=23610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4867" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2147 res=0 errno=0 [ 429.259457][T23635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.346469][T10844] tipc: Node number set to 1874132448 [ 429.449366][T23645] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 429.471780][T23645] openvswitch: netlink: Message has 1 unknown bytes. [ 429.549805][T23645] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 429.603430][T23659] bridge6: entered promiscuous mode [ 430.082973][T23675] netlink: 'syz.3.4885': attribute type 1 has an invalid length. [ 430.740045][T23730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.770985][T23730] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 430.785198][T23730] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 431.012732][T23758] __nla_validate_parse: 11 callbacks suppressed [ 431.012749][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4903'. [ 431.353839][T23777] netlink: 'syz.3.4909': attribute type 12 has an invalid length. [ 431.367141][T23771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.374454][T23771] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 431.402211][T23780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4911'. [ 431.403393][T23774] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4908'. [ 431.429961][T23780] netlink: 'syz.1.4911': attribute type 1 has an invalid length. [ 431.445739][T23780] netlink: 'syz.1.4911': attribute type 2 has an invalid length. [ 431.461502][T23780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4911'. [ 431.514099][T23789] gretap1: entered promiscuous mode [ 431.542831][T23789] gretap1: entered allmulticast mode [ 431.572726][T23796] netlink: 'syz.4.4916': attribute type 1 has an invalid length. [ 431.603740][T23798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4917'. [ 431.612330][T23796] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4916'. [ 431.952703][T23828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4926'. [ 432.095475][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4930'. [ 432.115110][T23840] bond_slave_1: left promiscuous mode [ 432.122605][T23840] vlan2: left promiscuous mode [ 432.127566][T23840] syz_tun: left promiscuous mode [ 432.132997][T23840] vti0: left promiscuous mode [ 432.138112][T23840] vti0: left allmulticast mode [ 432.143147][T23840] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 432.150460][T23840] tipc: Resetting bearer [ 432.162212][T23840] syzkaller0: left promiscuous mode [ 432.169290][T23840] syzkaller0: left allmulticast mode [ 432.187137][T23840] bond4: left promiscuous mode [ 432.245876][T23851] netlink: 'syz.2.4935': attribute type 4 has an invalid length. [ 432.247261][T23847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4933'. [ 432.272939][T23851] netlink: 'syz.2.4935': attribute type 4 has an invalid length. [ 432.317679][T23847] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.329115][T23847] tipc: Enabled bearer , priority 10 [ 432.339895][T23847] tipc: Enabling of bearer rejected, failed to enable media [ 432.383816][T23859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4937'. [ 432.456255][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.562088][T23879] bridge_slave_1: left allmulticast mode [ 432.591532][T23879] bridge_slave_1: left promiscuous mode [ 432.610615][T23879] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.686649][T23879] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 432.726254][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.154576][T18060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.173042][T18060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.256431][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.605975][T23949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.664132][T23949] pim6reg: entered allmulticast mode [ 433.671398][T23950] pim6reg: left allmulticast mode [ 434.296164][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.462929][T23977] netlink: 'syz.1.4965': attribute type 1 has an invalid length. [ 434.675220][T23979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.046145][T24032] nbd4: detected capacity change from 0 to 63 [ 435.054282][ T5864] block nbd4: Receive control failed (result -32) [ 435.200338][T24022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.211699][T24022] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.227714][T24022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.251625][T24044] validate_nla: 4 callbacks suppressed [ 435.251641][T24044] netlink: 'syz.2.4978': attribute type 2 has an invalid length. [ 435.336348][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.609437][T24060] bridge0: entered allmulticast mode [ 436.219649][T24058] netlink: 'syz.0.4979': attribute type 1 has an invalid length. [ 436.232743][T24058] __nla_validate_parse: 11 callbacks suppressed [ 436.232760][T24058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4979'. [ 436.313557][T24085] netlink: 'syz.2.4985': attribute type 1 has an invalid length. [ 436.376096][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 436.402986][T24088] tipc: Enabled bearer , priority 0 [ 436.443762][T24087] tipc: Disabling bearer [ 436.560075][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4992'. [ 436.621129][T24099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4991'. [ 436.716305][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4992'. [ 436.730179][T24115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4993'. [ 436.825171][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4994'. [ 436.975605][T24134] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4996'. [ 437.144823][T24144] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.168823][T24149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5000'. [ 437.204704][T24151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5001'. [ 437.282110][T24163] netlink: 264 bytes leftover after parsing attributes in process `syz.2.5001'. [ 437.334696][T24162] syzkaller1: entered promiscuous mode [ 437.343601][T24162] syzkaller1: entered allmulticast mode [ 437.417094][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 437.532789][T24173] 8021q: VLANs not supported on vxcan1 [ 437.729346][T24185] siw: device registration error -23 [ 437.794717][T24192] netlink: 'syz.4.5014': attribute type 21 has an invalid length. [ 438.088561][T24221] netlink: 'syz.3.5022': attribute type 2 has an invalid length. [ 438.111766][T24221] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 438.150351][T24221] gretap2: entered promiscuous mode [ 438.155586][T24221] gretap2: entered allmulticast mode [ 438.456171][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 438.685214][T18059] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.702351][T18059] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.714722][T18059] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.739010][T18059] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.747897][T24277] tun0: tun_chr_ioctl cmd 1074025673 [ 438.756844][T24278] tun0: tun_chr_ioctl cmd 1074025672 [ 438.767603][T24278] tun0: ignored: set checksum disabled [ 439.214755][T24327] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 439.230020][T24327] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 439.241124][T24327] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 439.438763][T24341] syzkaller0: entered promiscuous mode [ 439.444424][T24341] syzkaller0: entered allmulticast mode [ 439.496266][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.744427][T24346] netlink: 'syz.3.5059': attribute type 1 has an invalid length. [ 439.765029][T24348] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 439.777069][T24348] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 439.791782][T24346] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 439.803291][T24346] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 440.109694][T24358] netlink: 'syz.1.5064': attribute type 12 has an invalid length. [ 440.290058][T24381] tipc: Enabled bearer , priority 0 [ 440.300561][T24381] veth1_to_hsr: entered allmulticast mode [ 440.324140][T24379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 440.341914][T24381] tipc: Resetting bearer [ 440.383653][T24380] tipc: Disabling bearer [ 440.536148][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 440.691013][T24416] openvswitch: netlink: Flow key attr not present in new flow. [ 440.940365][T24440] netlink: 'syz.1.5084': attribute type 10 has an invalid length. [ 440.955299][T24441] lo speed is unknown, defaulting to 1000 [ 440.977086][T24441] lo speed is unknown, defaulting to 1000 [ 440.986496][T24441] lo speed is unknown, defaulting to 1000 [ 441.046754][T24441] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 441.072882][T24441] lo speed is unknown, defaulting to 1000 [ 441.088294][T24441] lo speed is unknown, defaulting to 1000 [ 441.122650][T24441] lo speed is unknown, defaulting to 1000 [ 441.156529][T24441] lo speed is unknown, defaulting to 1000 [ 441.164851][T24441] lo speed is unknown, defaulting to 1000 [ 441.180800][T24441] lo speed is unknown, defaulting to 1000 [ 441.235070][T24441] lo speed is unknown, defaulting to 1000 [ 441.263439][T24458] syzkaller0: create flow: hash 1109185370 index 1 [ 441.280352][ T6609] syzkaller0: tun_net_xmit 76 [ 441.293836][ T6609] syzkaller0: tun_net_xmit 48 [ 441.302421][T24457] syzkaller0: delete flow: hash 1109185370 index 1 [ 441.479721][T24486] netlink: 'syz.0.5096': attribute type 9 has an invalid length. [ 441.557035][T24490] __nla_validate_parse: 26 callbacks suppressed [ 441.557053][T24490] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5098'. [ 441.576259][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 441.719437][T24503] lo speed is unknown, defaulting to 1000 [ 441.884656][T24515] syzkaller0: entered promiscuous mode [ 441.909828][T24515] syzkaller0: entered allmulticast mode [ 442.014003][T24523] tipc: Enabling of bearer rejected, already enabled [ 442.024170][T24523] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 442.032192][T24523] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 442.041299][T24523] tipc: Resetting bearer [ 442.200952][T24537] netlink: 'syz.4.5111': attribute type 8 has an invalid length. [ 442.218557][T18047] tipc: Resetting bearer [ 442.359383][T24549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5115'. [ 442.369344][T24549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5115'. [ 442.598930][T24569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5118'. [ 442.610228][T24569] netlink: 'syz.2.5118': attribute type 6 has an invalid length. [ 442.616192][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.618185][T24569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5118'. [ 442.635571][T24564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.653234][T24568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.667118][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5118'. [ 442.676431][T24569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5118'. [ 442.706871][T24570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5119'. [ 442.813453][T24579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5121'. [ 442.922661][ T30] audit: type=1800 audit(1756053467.625:12): pid=24577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5119" name="cgroup.controllers" dev="tmpfs" ino=1931 res=0 errno=0 [ 442.963730][T24588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5124'. [ 443.029364][T24588] 8021q: adding VLAN 0 to HW filter on device bond13 [ 443.038082][T24588] bond12: (slave bond13): Enslaving as an active interface with an up link [ 443.057855][T24594] 8021q: adding VLAN 0 to HW filter on device bond12 [ 443.239429][T24602] block nbd3: server does not support multiple connections per device. [ 443.248205][T24602] block nbd3: shutting down sockets [ 443.467609][T24619] lo speed is unknown, defaulting to 1000 [ 443.574954][T24622] lo speed is unknown, defaulting to 1000 [ 443.582296][ T30] audit: type=1107 audit(1756053468.285:13): pid=24610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Q򰖃Dj7$qQ1@rH{2xҢS=cVGA|ZOIeMPU' [ 443.656263][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.971509][T24653] lo speed is unknown, defaulting to 1000 [ 444.004257][T24653] netlink: 'syz.4.5142': attribute type 13 has an invalid length. [ 444.012218][T24653] netlink: 'syz.4.5142': attribute type 17 has an invalid length. [ 444.022931][T24653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.059544][T24657] lo speed is unknown, defaulting to 1000 [ 444.132690][T24660] syzkaller0: left promiscuous mode [ 444.139433][T24660] syzkaller0: left allmulticast mode [ 444.240908][T24667] bond9: entered promiscuous mode [ 444.246100][T24667] bond9: entered allmulticast mode [ 444.251751][T24667] 8021q: adding VLAN 0 to HW filter on device bond9 [ 444.340540][T24667] bond10: entered promiscuous mode [ 444.345798][T24667] bond10: entered allmulticast mode [ 444.354437][T24667] 8021q: adding VLAN 0 to HW filter on device bond10 [ 444.696115][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 444.717371][T24709] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 444.962760][T24727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.113685][T24745] syzkaller0: entered promiscuous mode [ 445.125866][T24745] syzkaller0: entered allmulticast mode [ 445.183465][T24739] lo speed is unknown, defaulting to 1000 [ 445.599312][T24786] netlink: 'syz.4.5177': attribute type 1 has an invalid length. [ 445.736644][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.193702][T24836] netlink: 'syz.1.5193': attribute type 1 has an invalid length. [ 446.323476][T24837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.349399][T24856] delete_channel: no stack [ 446.764844][T24894] __nla_validate_parse: 19 callbacks suppressed [ 446.764862][T24894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5205'. [ 446.786202][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.903914][T24894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5205'. [ 446.959954][T24901] lo speed is unknown, defaulting to 1000 [ 447.052916][T24912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5207'. [ 447.188383][T24912] 8021q: adding VLAN 0 to HW filter on device bond9 [ 447.262331][T24912] bond8: (slave bond9): Enslaving as an active interface with an up link [ 447.307343][T24920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5210'. [ 447.355934][T24923] netlink: 'syz.4.5211': attribute type 1 has an invalid length. [ 447.440898][T24917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5210'. [ 447.658570][T24950] lo speed is unknown, defaulting to 1000 [ 447.789932][T24970] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5216'. [ 447.816270][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.947293][T24981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5225'. [ 447.967389][T24981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5225'. [ 447.985752][T24977] lo speed is unknown, defaulting to 1000 [ 447.998588][T24981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5225'. [ 448.017085][T24981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5225'. [ 448.049805][T24987] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 448.065582][T24985] lo speed is unknown, defaulting to 1000 [ 448.455046][T25028] openvswitch: netlink: Missing valid actions attribute. [ 448.462632][T25028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.551044][T25035] macsec0: entered promiscuous mode [ 448.558316][T25035] hsr0: entered promiscuous mode [ 448.563485][T25035] macsec0: entered allmulticast mode [ 448.568854][T25035] hsr0: entered allmulticast mode [ 448.573972][T25035] hsr_slave_0: entered allmulticast mode [ 448.618397][T25042] netlink: 'syz.3.5242': attribute type 4 has an invalid length. [ 448.633621][T25044] netlink: 'syz.1.5243': attribute type 1 has an invalid length. [ 448.649697][T25042] netlink: 'syz.3.5242': attribute type 4 has an invalid length. [ 448.658643][ T5912] lo speed is unknown, defaulting to 1000 [ 448.664392][ T5912] syz2: Port: 1 Link DOWN [ 448.693589][ T5912] lo speed is unknown, defaulting to 1000 [ 448.702929][ T5912] syz2: Port: 1 Link ACTIVE [ 448.783472][T25055] lo speed is unknown, defaulting to 1000 [ 448.856170][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 449.115396][T25084] netlink: 'syz.2.5251': attribute type 2 has an invalid length. [ 449.165487][T25092] "syz.1.5254" (25092) uses obsolete ecb(arc4) skcipher [ 449.235145][T25092] pim6reg1: entered allmulticast mode [ 449.634792][T25161] nbd: socks must be embedded in a SOCK_ITEM attr [ 449.896243][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.065174][T25194] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 450.125646][T25200] netlink: 'syz.1.5281': attribute type 1 has an invalid length. [ 450.170915][T25200] bond6: (slave vti1): The slave device specified does not support setting the MAC address [ 450.181468][T25200] bond6: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 450.196301][T25200] bond6: (slave vti1): making interface the new active one [ 450.204304][T25200] bond6: (slave vti1): Enslaving as an active interface with an up link [ 450.572962][T25232] tipc: Enabling of bearer rejected, already enabled [ 450.583768][T25232] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 450.638960][T25232] tipc: Resetting bearer [ 450.697907][ T5864] block nbd3: Receive control failed (result -107) [ 450.725142][T25250] 8021q: adding VLAN 0 to HW filter on device bond8 [ 450.732801][T25250] bond7: (slave bond8): Enslaving as an active interface with an up link [ 450.746532][T25242] nbd3: detected capacity change from 0 to 32 [ 450.936166][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.110864][T25277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.227764][T25301] netlink: 'syz.1.5309': attribute type 11 has an invalid length. [ 451.244190][T25302] IPVS: length: 49 != 24 [ 451.353831][T25310] netlink: 'syz.3.5313': attribute type 1 has an invalid length. [ 451.377134][T25310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.422283][T25310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.430069][T25310] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 451.441478][T25310] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 451.455447][T25317] wireguard1: entered promiscuous mode [ 451.460995][T25317] wireguard1: entered allmulticast mode [ 451.580690][T25321] tipc: Enabling of bearer rejected, already enabled [ 451.590469][T25322] tipc: Enabling of bearer rejected, already enabled [ 451.601711][T25322] tipc: Enabling of bearer rejected, already enabled [ 451.610291][T25321] tipc: Enabling of bearer rejected, already enabled [ 451.945805][T25329] __nla_validate_parse: 25 callbacks suppressed [ 451.945822][T25329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5317'. [ 451.962062][T25329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5317'. [ 451.976360][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.983753][T25329] bridge0: port 2(vlan2) entered blocking state [ 451.990755][T25329] bridge0: port 2(vlan2) entered disabled state [ 451.998650][T25329] vlan2: entered allmulticast mode [ 452.004001][T25329] bridge0: entered allmulticast mode [ 452.052510][T25329] vlan2: left allmulticast mode [ 452.064796][T25329] bridge0: left allmulticast mode [ 452.290862][T25341] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5320'. [ 452.549705][T25355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5323'. [ 452.626772][T25367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5326'. [ 452.775318][T25378] IPVS: Error connecting to the multicast addr [ 452.860584][T25387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5331'. [ 453.016101][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.030845][T25404] netlink: 'syz.3.5334': attribute type 9 has an invalid length. [ 453.041506][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5334'. [ 453.063900][T25404] macvlan4: entered promiscuous mode [ 453.072249][T25404] macvlan4: entered allmulticast mode [ 453.074278][T25409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5335'. [ 453.084164][T25404] hsr0: entered allmulticast mode [ 453.092038][T25404] hsr_slave_0: entered allmulticast mode [ 453.102455][T25404] hsr_slave_1: entered allmulticast mode [ 453.264109][T25429] vlan0: entered promiscuous mode [ 453.421233][T25442] netlink: 'syz.3.5345': attribute type 10 has an invalid length. [ 453.433836][T25442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'. [ 453.443309][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5345'. [ 453.465829][T25442] netlink: 'syz.3.5345': attribute type 12 has an invalid length. [ 453.475385][T25442] netlink: 'syz.3.5345': attribute type 11 has an invalid length. [ 453.720159][T25472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.748734][T25473] dummy0: entered promiscuous mode [ 453.753943][T25473] vlan2: entered promiscuous mode [ 453.759454][T25473] bond0: entered promiscuous mode [ 453.777217][T25474] IPv6: Can't replace route, no match found [ 453.999126][T25498] syzkaller0: entered promiscuous mode [ 454.004804][T25498] syzkaller0: entered allmulticast mode [ 454.280794][T25517] pim6reg1: entered promiscuous mode [ 454.286380][T25517] pim6reg1: entered allmulticast mode [ 454.445475][T25525] netlink: 'syz.0.5365': attribute type 10 has an invalid length. [ 454.454114][T25525] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 454.962978][T25571] lo speed is unknown, defaulting to 1000 [ 455.276499][T25589] block nbd5: server does not support multiple connections per device. [ 455.285568][T25589] block nbd5: shutting down sockets [ 455.311264][T25594] netlink: 'syz.1.5385': attribute type 1 has an invalid length. [ 455.453084][T25601] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 456.481954][T25658] lo speed is unknown, defaulting to 1000 [ 456.955563][T25681] __nla_validate_parse: 15 callbacks suppressed [ 456.955581][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 456.998710][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 457.038029][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 457.082587][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 457.088013][T25692] tipc: Resetting bearer [ 457.119963][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 457.158905][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 457.191125][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 457.230901][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 457.263882][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5406'. [ 457.293071][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5410'. [ 458.097408][T25772] netlink: 'syz.1.5422': attribute type 2 has an invalid length. [ 458.974996][T25858] netlink: 'syz.0.5448': attribute type 1 has an invalid length. [ 458.983229][T25858] netlink: 'syz.0.5448': attribute type 1 has an invalid length. [ 459.059593][T25871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.085075][T25869] lo speed is unknown, defaulting to 1000 [ 459.105522][T25857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.291633][T25887] netlink: 'syz.0.5455': attribute type 2 has an invalid length. [ 459.301199][T25881] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 459.359116][T25890] netlink: 'syz.0.5457': attribute type 1 has an invalid length. [ 459.368898][T25892] batadv2: entered promiscuous mode [ 459.404417][T25894] netlink: 'syz.2.5459': attribute type 1 has an invalid length. [ 459.423732][T25894] 8021q: adding VLAN 0 to HW filter on device bond10 [ 545.706588][T25902] netlink: 'syz.1.5461': attribute type 1 has an invalid length. [ 545.753157][T25901] __nla_validate_parse: 25 callbacks suppressed [ 545.753176][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5464'. [ 545.794023][T25902] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 545.824335][T25902] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 545.857318][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.864619][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.872424][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.880727][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.888587][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.918371][T25913] gretap1: entered promiscuous mode [ 545.939120][T25913] bond9: (slave gretap1): making interface the new active one [ 545.952883][T25924] netlink: 'syz.4.5467': attribute type 1 has an invalid length. [ 545.953364][T25913] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 545.973635][T25917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5461'. [ 545.992753][T25924] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 545.998703][T25927] syzkaller1: entered promiscuous mode [ 546.012710][T25927] syzkaller1: entered allmulticast mode [ 546.072319][T25914] lo speed is unknown, defaulting to 1000 [ 546.074237][T25933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 546.138811][T25937] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 546.254794][T25943] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.280554][T25937] lo speed is unknown, defaulting to 1000 [ 546.295682][T25914] chnl_net:caif_netlink_parms(): no params data found [ 546.327896][T25948] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5473'. [ 546.332853][T25940] lo speed is unknown, defaulting to 1000 [ 546.337495][T25948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5473'. [ 546.353470][T25943] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.452034][T25943] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.521944][T25943] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.621072][T25960] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 546.635646][T25960] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 546.686589][T25914] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.693750][T25914] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.706133][T25914] bridge_slave_0: entered allmulticast mode [ 546.713408][T25914] bridge_slave_0: entered promiscuous mode [ 546.713786][T25966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5477'. [ 546.725020][T25914] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.743105][T25914] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.750572][T25914] bridge_slave_1: entered allmulticast mode [ 546.761877][T25914] bridge_slave_1: entered promiscuous mode [ 546.772743][T25966] bridge0 (unregistering): left allmulticast mode [ 546.854064][T18058] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.873751][T18058] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.951800][T25914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.006627][T25914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.056747][T18047] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.070656][T18047] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.140529][T25914] team0: Port device team_slave_0 added [ 547.179500][T25914] team0: Port device team_slave_1 added [ 547.346471][T25977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5479'. [ 547.408034][T25914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.451315][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5480'. [ 547.452200][T25914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.489230][T25914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.561958][T25914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.592780][T25914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.624891][T25914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.653609][T25989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5483'. [ 547.690342][T25986] macvtap0: entered promiscuous mode [ 547.733919][T25985] tipc: Enabling of bearer rejected, already enabled [ 547.794108][T25914] hsr_slave_0: entered promiscuous mode [ 547.801828][T25914] hsr_slave_1: entered promiscuous mode [ 547.808211][T25914] debugfs: 'hsr0' already exists in 'hsr' [ 547.822559][T25994] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5484'. [ 547.832323][T25914] Cannot create hsr debugfs directory [ 547.898679][T25988] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:0 [ 547.922879][T25998] tipc: Enabled bearer , priority 0 [ 547.952058][T25999] syzkaller0: entered promiscuous mode [ 547.962385][T25999] syzkaller0: entered allmulticast mode [ 547.977525][ T5872] Bluetooth: hci4: command tx timeout [ 547.996387][T25998] tipc: Resetting bearer [ 548.005087][T25998] tipc: Disabling bearer [ 548.141170][T25914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 548.159362][T25914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 548.168865][T25914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 548.186452][T25914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 548.201702][T26021] "syz.2.5490" (26021) uses obsolete ecb(arc4) skcipher [ 548.220816][T26015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5489'. [ 548.260650][T26015] netlink: 'syz.1.5489': attribute type 21 has an invalid length. [ 548.269033][T26015] netlink: 'syz.1.5489': attribute type 4 has an invalid length. [ 548.279699][T26015] netlink: 'syz.1.5489': attribute type 3 has an invalid length. [ 548.298073][T25914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.317177][T25914] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.332451][T18045] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.339596][T18045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.351764][T26032] netlink: 'syz.1.5491': attribute type 4 has an invalid length. [ 548.366682][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.373789][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.612623][T25914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.684214][T26051] lo speed is unknown, defaulting to 1000 [ 549.004779][T25914] veth0_vlan: entered promiscuous mode [ 549.017723][T25914] veth1_vlan: entered promiscuous mode [ 549.060407][T25914] veth0_macvtap: entered promiscuous mode [ 549.088169][T25914] veth1_macvtap: entered promiscuous mode [ 549.160776][T25914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.187587][T25914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.209492][ T6608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.224628][ T6608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.242479][ T6608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.264775][ T6608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.312829][T26101] netlink: 'syz.2.5506': attribute type 6 has an invalid length. [ 549.491417][ T6609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.512780][ T6609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.575690][T18054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.602336][T18054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.733799][T26122] netlink: 'syz.5.5463': attribute type 1 has an invalid length. [ 549.804766][T26124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.868558][ T979] infiniband syz1: ib_query_port failed (-19) [ 550.044762][T26140] bond0 (unregistering): Released all slaves [ 550.056464][ T5872] Bluetooth: hci4: command tx timeout [ 550.088946][T26144] netlink: 'syz.5.5513': attribute type 6 has an invalid length. [ 550.130454][T26144] netlink: 'syz.5.5513': attribute type 6 has an invalid length. [ 550.131226][T18045] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.159881][T18045] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.181413][T18045] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.207609][T18045] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.609725][T26180] nbd: must specify at least one socket [ 550.622268][T26180] nbd: nbd0 already in use [ 550.721575][T26193] lo speed is unknown, defaulting to 1000 [ 550.841340][T26205] __nla_validate_parse: 22 callbacks suppressed [ 550.841359][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5534'. [ 550.886871][T26205] bridge: RTM_NEWNEIGH with invalid ether address [ 550.895507][T26201] lo speed is unknown, defaulting to 1000 [ 551.180146][T26239] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5540'. [ 551.291507][T26245] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5542'. [ 551.291878][T26244] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5542'. [ 551.306760][T26245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5542'. [ 551.321819][T26244] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5542'. [ 551.325666][T26245] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5542'. [ 551.351098][T26248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5544'. [ 551.628258][T26278] tipc: Enabling of bearer rejected, already enabled [ 551.717896][T26285] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 551.823414][T26297] netlink: 'syz.4.5559': attribute type 2 has an invalid length. [ 551.894202][T26311] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 551.924422][T26302] delete_channel: no stack [ 551.971627][T26315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5563'. [ 551.987386][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5563'. [ 552.135950][T26324] netlink: 'syz.4.5566': attribute type 1 has an invalid length. [ 552.144103][ T5872] Bluetooth: hci4: command tx timeout [ 552.164486][T26324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.250446][ T6609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.268637][ T6609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.009401][T26363] bond0: (slave gretap0): Opening slave failed [ 553.027814][T26363] bond0: (slave gretap0): Opening slave failed [ 553.069163][T26363] bond0: (slave gretap0): Opening slave failed [ 553.137796][T26363] bond0: (slave gretap0): Opening slave failed [ 553.159157][T26363] bond0: (slave gretap0): Opening slave failed [ 553.178033][T26363] bond0: (slave gretap0): Opening slave failed [ 553.197215][T26363] bond0: (slave gretap0): Opening slave failed [ 553.230525][T26363] bond0: (slave gretap0): Opening slave failed [ 553.251125][T26363] bond0: (slave gretap0): Opening slave failed [ 553.268609][T26363] bond0: (slave gretap0): Opening slave failed [ 553.312301][T26363] bond0: (slave gretap0): Opening slave failed [ 553.353487][T26363] bond0: (slave gretap0): Opening slave failed [ 553.387531][T26363] bond0: (slave gretap0): Opening slave failed [ 553.415237][T26363] bond0: (slave gretap0): Opening slave failed [ 553.448457][T26363] bond0: (slave gretap0): Opening slave failed [ 553.455786][T26363] bond0: (slave gretap0): Opening slave failed [ 553.512724][T26363] bond0: (slave gretap0): Opening slave failed [ 553.548350][T26363] bond0: (slave gretap0): Opening slave failed [ 553.575359][T26363] bond0: (slave gretap0): Opening slave failed [ 553.608906][T26363] bond0: (slave gretap0): Opening slave failed [ 553.635538][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.643898][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.651235][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.652347][T26363] bond0: (slave gretap0): Opening slave failed [ 553.669005][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.677640][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.692295][T26363] bond0: (slave gretap0): Opening slave failed [ 553.716924][T26398] lo speed is unknown, defaulting to 1000 [ 553.731634][T26399] lo speed is unknown, defaulting to 1000 [ 553.741804][T26363] bond0: (slave gretap0): Opening slave failed [ 554.025442][T26412] lo speed is unknown, defaulting to 1000 [ 554.089774][T26399] chnl_net:caif_netlink_parms(): no params data found [ 554.216602][ T5864] Bluetooth: hci4: command tx timeout [ 554.289305][T26399] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.309980][T26399] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.334194][T26399] bridge_slave_0: entered allmulticast mode [ 554.355148][T26399] bridge_slave_0: entered promiscuous mode [ 554.411132][T26399] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.437524][T26399] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.444781][T26399] bridge_slave_1: entered allmulticast mode [ 554.497926][T26399] bridge_slave_1: entered promiscuous mode [ 554.531575][T26434] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 554.553689][T26434] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 554.583086][T26399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.605312][T26399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.670031][T26434] lo speed is unknown, defaulting to 1000 [ 554.671981][T26399] team0: Port device team_slave_0 added [ 554.700572][T26399] team0: Port device team_slave_1 added [ 554.787984][T26399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.799810][T26399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.826644][T26399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.844148][T26399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.851448][T26399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.882014][T26399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.918394][T26439] lo speed is unknown, defaulting to 1000 [ 554.975788][T26399] hsr_slave_0: entered promiscuous mode [ 554.990714][T26399] hsr_slave_1: entered promiscuous mode [ 555.000459][T26455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.009423][T26399] debugfs: 'hsr0' already exists in 'hsr' [ 555.015147][T26399] Cannot create hsr debugfs directory [ 555.499600][T26474] netlink: 'syz.5.5596': attribute type 1 has an invalid length. [ 555.590253][T26468] lo speed is unknown, defaulting to 1000 [ 555.645559][T26477] tipc: Started in network mode [ 555.651701][T26477] tipc: Node identity 6e7523cbc0f6, cluster identity 4711 [ 555.659609][T26477] tipc: Enabled bearer , priority 0 [ 555.672621][T26477] syzkaller0: entered promiscuous mode [ 555.683370][T26480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.696320][T26480] tipc: Failed to remove unknown binding: 66,1,1/2687169849:2941974719/2941974721 [ 555.707608][T26480] tipc: Failed to remove unknown binding: 66,1,1/2687169849:2941974719/2941974721 [ 555.717266][T26480] tipc: Failed to remove unknown binding: 66,1,1/2687169849:2941974719/2941974721 [ 555.717768][T26477] syzkaller0: entered allmulticast mode [ 555.736230][ T5864] Bluetooth: hci2: command tx timeout [ 555.804072][T26477] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 555.814751][T26477] tipc: Resetting bearer [ 555.828874][T26476] tipc: Resetting bearer [ 555.854681][T26476] tipc: Disabling bearer [ 555.939768][T26491] __nla_validate_parse: 11 callbacks suppressed [ 555.939786][T26491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5602'. [ 556.024046][T26491] veth13: entered promiscuous mode [ 556.042629][T26399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 556.057437][T26399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 556.079014][T26491] erspan0: entered allmulticast mode [ 556.084648][T26399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 556.098837][T26399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 556.190002][T26506] tipc: Enabled bearer , priority 10 [ 556.323987][T26399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.346756][T26517] netlink: 'syz.2.5610': attribute type 9 has an invalid length. [ 556.359746][T26399] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.484696][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.491815][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.515116][T26524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.527716][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.534811][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.684656][T18047] batadv1: left allmulticast mode [ 556.691260][T18047] batadv1: left promiscuous mode [ 556.709006][T18047] bridge0: port 1(batadv1) entered disabled state [ 556.784076][T18047] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 556.795976][T18047] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 556.805520][T18047] CPU: 1 UID: 0 PID: 18047 Comm: kworker/u8:43 Not tainted syzkaller #0 PREEMPT(full) [ 556.815154][T18047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.825212][T18047] Workqueue: netns cleanup_net [ 556.829970][T18047] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 556.835591][T18047] Code: ff ff ff e8 ed 2b 41 01 89 c5 31 ff 89 c6 e8 62 00 87 f7 85 ed 74 40 e8 19 fc 86 f7 eb 05 e8 12 fc 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 cc 67 ea f7 4d 8b 27 49 8d 7f 30 [ 556.855180][T18047] RSP: 0018:ffffc900035b74b0 EFLAGS: 00010206 [ 556.861249][T18047] RAX: 000000001fffe000 RBX: ffff888054eeb538 RCX: ffff888044d80000 [ 556.869230][T18047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.877194][T18047] RBP: 0000000000000000 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 556.885187][T18047] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffff88803351d028 [ 556.893221][T18047] R13: dffffc0000000000 R14: ffff88803351d000 R15: 00000000ffff0000 [ 556.901201][T18047] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 556.910136][T18047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.916734][T18047] CR2: 000055558eb6b808 CR3: 0000000032cc0000 CR4: 00000000003526f0 [ 556.924714][T18047] Call Trace: [ 556.927997][T18047] [ 556.930934][T18047] ipv6_mc_destroy_dev+0x45/0x5a0 [ 556.935971][T18047] addrconf_ifdown+0x139e/0x1880 [ 556.940922][T18047] ? tls_dev_event+0x717/0xec0 [ 556.945690][T18047] ? __pfx_addrconf_ifdown+0x10/0x10 [ 556.950987][T18047] ? lock_release+0x4b/0x3e0 [ 556.955588][T18047] ? net_generic+0x1e/0x240 [ 556.960100][T18047] ? __pfx_tls_dev_event+0x10/0x10 [ 556.965228][T18047] addrconf_notify+0x1bc/0x1010 [ 556.970104][T18047] notifier_call_chain+0x1b3/0x3e0 [ 556.975224][T18047] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 556.981658][T18047] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 556.988430][T18047] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 556.994680][T18047] ? sysfs_remove_group+0x236/0x2c0 [ 556.999887][T18047] ? net_generic+0x1e/0x240 [ 557.004400][T18047] ops_undo_list+0x3dc/0x990 [ 557.008997][T18047] ? __pfx_ops_undo_list+0x10/0x10 [ 557.014119][T18047] ? do_raw_spin_unlock+0x122/0x240 [ 557.019330][T18047] cleanup_net+0x4c5/0x800 [ 557.023753][T18047] ? __pfx_cleanup_net+0x10/0x10 [ 557.028698][T18047] ? rcu_is_watching+0x15/0xb0 [ 557.033469][T18047] ? process_scheduled_works+0x9ef/0x17b0 [ 557.039193][T18047] ? process_scheduled_works+0x9ef/0x17b0 [ 557.044921][T18047] process_scheduled_works+0xae1/0x17b0 [ 557.050512][T18047] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.056511][T18047] worker_thread+0x8a0/0xda0 [ 557.061135][T18047] kthread+0x70e/0x8a0 [ 557.065226][T18047] ? __pfx_worker_thread+0x10/0x10 [ 557.070372][T18047] ? __pfx_kthread+0x10/0x10 [ 557.074951][T18047] ? rcu_is_watching+0x15/0xb0 [ 557.079703][T18047] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 557.084282][T18047] ret_from_fork+0x3f9/0x770 [ 557.088864][T18047] ? __pfx_ret_from_fork+0x10/0x10 [ 557.094009][T18047] ? __switch_to_asm+0x39/0x70 [ 557.098936][T18047] ? __switch_to_asm+0x33/0x70 [ 557.103684][T18047] ? __pfx_kthread+0x10/0x10 [ 557.108256][T18047] ret_from_fork_asm+0x1a/0x30 [ 557.113010][T18047] [ 557.116028][T18047] Modules linked in: [ 557.122008][T18047] ---[ end trace 0000000000000000 ]--- [ 557.129234][T18047] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 557.134896][T18047] Code: ff ff ff e8 ed 2b 41 01 89 c5 31 ff 89 c6 e8 62 00 87 f7 85 ed 74 40 e8 19 fc 86 f7 eb 05 e8 12 fc 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 cc 67 ea f7 4d 8b 27 49 8d 7f 30 [ 557.154649][T18047] RSP: 0018:ffffc900035b74b0 EFLAGS: 00010206 [ 557.160916][T18047] RAX: 000000001fffe000 RBX: ffff888054eeb538 RCX: ffff888044d80000 [ 557.169006][T18047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.177122][T18047] RBP: 0000000000000000 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 557.185105][T18047] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffff88803351d028 [ 557.195581][T18047] R13: dffffc0000000000 R14: ffff88803351d000 R15: 00000000ffff0000 [ 557.203675][T18047] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 557.229030][T18047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.235651][T18047] CR2: 000055558eb6b808 CR3: 0000000032cc0000 CR4: 00000000003526f0 [ 557.252558][T18047] Kernel panic - not syncing: Fatal exception [ 557.258994][T18047] Kernel Offset: disabled [ 557.263313][T18047] Rebooting in 86400 seconds..